Trojaner-Board - Win 8.1, Mozilla Firefox Startseite wird immer wieder zurückgesetzt

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Win 8.1, Mozilla Firefox Startseite wird immer wieder zurückgesetzt (https://www.trojaner-board.de/175682-win-8-1-mozilla-firefox-startseite-immer-zurueckgesetzt.html)

Win 8.1, Mozilla Firefox Startseite wird immer wieder zurückgesetzt

Hallo,
seit heute will Firefox nicht mehr so wie ich will. Egal ob ich im Firefox selber oder in den Internetoptionen die Startseite ändere, wird sie immer auf "https://www.google.de/?hl=de&gl=de&gws_rd=ssl" zurückgesetzt.
Habe zuerst mal den Virenscanner drüber geschickt. Norton Schnellscan hat nichts gefunden. Dann hab ich etwas gegoogelt und hab noch eine Art Tiefenscan von Norton gemacht. Der hat zwei Probleme gefunden, war aber nicht im Stande die Dateien zu löschen oder in die Quarantäne zu verschieben.
Dann hab ich Malwarebytes Anti-Malware installiert und suchen lassen. Das hat einiges gefunden und dann wurden die Bedrohungen entfernt. Die darauffolgende Suche brachte dann keine Ergebnisse mehr. Das Problem besteht aber weiterhin.
In Vorbereitung hab ich jetzt noch FRST installiert und durchlaufen lassen.

MBAM erster Scan

Code:

<?xml version="1.0" encoding="UTF-16" ?>

<mbam-log>

<header>

<date>2016/02/03 14:39:19 +0100</date>

<logfile>mbam-log-2016-02-03 (14-39-16).xml</logfile>

<isadmin>yes</isadmin>

</header>

<engine>

<version>2.2.0.1024</version>

<malware-database>v2016.02.03.03</malware-database>

<rootkit-database>v2016.01.20.01</rootkit-database>

<license>free</license>

<file-protection>disabled</file-protection>

<web-protection>disabled</web-protection>

<self-protection>disabled</self-protection>

</engine>

<system>

<hostname>MROST</hostname>

<ip>192.168.2.100</ip>

<osversion>Windows 8.1</osversion>

<arch>x64</arch>

<username>Michael</username>

<filesys>NTFS</filesys>

</system>

<summary>

<type>threat</type>

<result>completed</result>

<objects>517882</objects>

<time>2184</time>

<processes>1</processes>

<modules>0</modules>

<keys>31</keys>

<values>5</values>

<datas>0</datas>

<folders>5</folders>

<files>18</files>

<sectors>0</sectors>

</summary>

<options>

<memory>enabled</memory>

<startup>enabled</startup>

<filesystem>enabled</filesystem>

<archives>enabled</archives>

<rootkits>disabled</rootkits>

<deeprootkit>disabled</deeprootkit>

<heuristics>enabled</heuristics>

<pup>enabled</pup>

<pum>enabled</pum>

</options>

<items>

<process><path>C:\Windows\System32\DnsBlockUpdateSvc.exe</path><vendor>PUP.Optional.DNSBlock.BrwsrFlsh</vendor><action>delete-on-reboot</action><pid>2532</pid><hash>4609b6a62e6b3105395a8b58c33e926e</hash></process>

<key><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\DnsBlockUpdateSvc</path><vendor>PUP.Optional.DNSBlock.BrwsrFlsh</vendor><action>success</action><hash>4609b6a62e6b3105395a8b58c33e926e</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect.1</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\DPBHO.DownloadProtect</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\DPBHO.DownloadProtect</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\DPBHO.DownloadProtect.1</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\DPBHO.DownloadProtect.1</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}\INPROCSERVER32</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\APPID\DPBHO.DLL</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>75da0755b6e3e94d4c28dc66e91b0af6</hash></key>

<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\DPBHO.DLL</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>202f025a1c7dbf77e58f0b379b69de22</hash></key>

<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\DPBHO.DLL</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>65eaafadc8d10b2b5b19ed5540c4fd03</hash></key>

<key><path>HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\SmartSaver+ 15</path><vendor>PUP.Optional.SmartSaver</vendor><action>success</action><hash>044bbca07a1f74c2401e19dab251db25</hash></key>

<key><path>HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>d9761a42f9a0072f28355b726c9707f9</hash></key>

<key><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>7ed1bd9fb4e51c1a5a035e6f996ac33d</hash></key>

<key><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY</path><vendor>PUP.Optional.GlobalUpdate</vendor><action>success</action><hash>8fc05dff475296a06b9040968f74e917</hash></key>

<key><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\MICROSOFT\FFHELPER\SmootherWeb</path><vendor>PUP.Optional.SmootherWeb</vendor><action>success</action><hash>69e6c29ab8e191a51988b43f22e19967</hash></key>

<key><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4377A9A0-62AA-47EC-A8FD-C5E1C364E5D2}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>f35c63f9405900366904d3fbec170000</hash></key>

<key><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{897AF8BD-8A44-4176-86CB-58BBF61DF364}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>3c1392ca9801f442ce9f86484bb849b7</hash></key>

<key><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFD79D32-127A-4201-8C37-E832DCE01BCC}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>d17e7ddf41588bab7eef8549946f8779</hash></key>

<key><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>a1ae4715d2c7b1856a11e5540df78779</hash></key>

<value><path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path><valuename>{98061C88-1849-4433-B251-A56FB6856055}</valuename><vendor>PUP.Optional.DownloadProtectExtension</vendor><action>success</action><valuedata>C:\WINDOWS\Installer\{F8FBA45D-2789-4DAA-8E18-FDB0A559B0CD}\{98061C88-1849-4433-B251-A56FB6856055}.xpi</valuedata><hash>72ddc3992772db5b6ab62aa7e12226da</hash></value>

<value><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY</path><valuename>source</valuename><vendor>PUP.Optional.GlobalUpdate</vendor><action>success</action><valuedata>Firefox</valuedata><hash>8fc05dff475296a06b9040968f74e917</hash></value>

<value><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4377A9A0-62AA-47EC-A8FD-C5E1C364E5D2}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>e34e2d9c-4069-4852-b92d-9b43435e2191-2.exe-buttonutil.exe</valuedata><hash>f35c63f9405900366904d3fbec170000</hash></value>

<value><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{897AF8BD-8A44-4176-86CB-58BBF61DF364}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>e34e2d9c-4069-4852-b92d-9b43435e2191-2.exe-buttonutil.exe</valuedata><hash>3c1392ca9801f442ce9f86484bb849b7</hash></value>

<value><path>HKU\S-1-5-21-3695500385-1387106-2215658511-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EFD79D32-127A-4201-8C37-E832DCE01BCC}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>e34e2d9c-4069-4852-b92d-9b43435e2191-2.exe-buttonutil.exe</valuedata><hash>d17e7ddf41588bab7eef8549946f8779</hash></value>

<folder><path>C:\Windows\Installer\{A054FB0B-6A0F-4925-BA8F-A14876E1E889}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>242bb1ab683104327a92874a60a324dc</hash></folder>

<folder><path>C:\Windows\Installer\{F8FBA45D-2789-4DAA-8E18-FDB0A559B0CD}</path><vendor>PUP.Optional.DownloadProtect.ChrPRST</vendor><action>success</action><hash>d37c14486435251184affc4a36ced927</hash></folder>

<folder><path>C:\Users\Michael\AppData\Local\DnsBlock</path><vendor>PUP.Optional.DNSBlock.BrwsrFlsh</vendor><action>success</action><hash>410e520a4455201615d5ad0535cdb24e</hash></folder>

<folder><path>C:\Program Files (x86)\{513904E0-FEA3-4CF0-8799-3D773D9C898D}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>63ec213be4b5ee4830db996649bbe21e</hash></folder>

<folder><path>C:\Program Files\{C9295C4B-5313-4998-B8C6-5284B2BA66C1}</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>5df2d18b6930b2840902609f986c8e72</hash></folder>

<file><path>C:\Windows\System32\DnsBlockUpdateSvc.exe</path><vendor>PUP.Optional.DNSBlock.BrwsrFlsh</vendor><action>delete-on-reboot</action><hash>4609b6a62e6b3105395a8b58c33e926e</hash></file>

<file><path>C:\Program Files\{C9295C4B-5313-4998-B8C6-5284B2BA66C1}\{FE5DD34C-10CE-4342-9F34-C52159997049}.bin</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></file>

<file><path>C:\Program Files (x86)\{513904E0-FEA3-4CF0-8799-3D773D9C898D}\{D1979E1E-943F-4BAE-BCB3-1BCAAA041D39}.bin</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>d17e5903445552e4e1bf53d9f40cd12f</hash></file>

<file><path>C:\Users\Michael\AppData\Local\Temp\nsb5C2A.tmp</path><vendor>PUP.Optional.Somoto</vendor><action>success</action><hash>b897f765bddc0c2ac47139be897bb749</hash></file>

<file><path>C:\Users\Michael\AppData\Local\Temp\bitool.dll</path><vendor>PUP.Optional.Somoto</vendor><action>success</action><hash>d37c570575241620dc8862bbe71b4cb4</hash></file>

<file><path>C:\Users\Michael\AppData\Local\Temp\setup.exe</path><vendor>PUP.Optional.DNSBlock.BrwsrFlsh</vendor><action>success</action><hash>a2ad0f4d2277290d7f329d9453aeb14f</hash></file>

<file><path>C:\Windows\System32\dns.block</path><vendor>PUP.Optional.DNSBlocker.BrwsrFlsh</vendor><action>success</action><hash>a7a892ca7f1a6cca9e459c21d2317b85</hash></file>

<file><path>C:\Windows\SysWOW64\dns.block</path><vendor>PUP.Optional.DNSBlocker.BrwsrFlsh</vendor><action>success</action><hash>cb84312b0d8cac8aeef50ab334cfde22</hash></file>

<file><path>C:\Windows\Tasks\temp_e34e2d9c-4069-4852-b92d-9b43435e2191-2.job</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>62ed4c10cbce52e4bc85b815ed163ec2</hash></file>

<file><path>C:\Windows\Installer\{A054FB0B-6A0F-4925-BA8F-A14876E1E889}\ccmdibcbjbnnheeokencimnofpmhhhailrx</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>242bb1ab683104327a92874a60a324dc</hash></file>

<file><path>C:\Windows\Installer\{A054FB0B-6A0F-4925-BA8F-A14876E1E889}\xcmdibcbjbnnheeokencimnofpmhhhailml</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>242bb1ab683104327a92874a60a324dc</hash></file>

<file><path>C:\Windows\Installer\{F8FBA45D-2789-4DAA-8E18-FDB0A559B0CD}\{98061C88-1849-4433-B251-A56FB6856055}.xpi</path><vendor>PUP.Optional.DownloadProtect.ChrPRST</vendor><action>success</action><hash>d37c14486435251184affc4a36ced927</hash></file>

<file><path>C:\Program Files (x86)\{513904E0-FEA3-4CF0-8799-3D773D9C898D}\config.json</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>63ec213be4b5ee4830db996649bbe21e</hash></file>

<file><path>C:\Program Files (x86)\{513904E0-FEA3-4CF0-8799-3D773D9C898D}\def.bin</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>63ec213be4b5ee4830db996649bbe21e</hash></file>

<file><path>C:\Program Files\{C9295C4B-5313-4998-B8C6-5284B2BA66C1}\config.json</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>5df2d18b6930b2840902609f986c8e72</hash></file>

<file><path>C:\Program Files\{C9295C4B-5313-4998-B8C6-5284B2BA66C1}\def.bin</path><vendor>PUP.Optional.DownloadProtect</vendor><action>success</action><hash>5df2d18b6930b2840902609f986c8e72</hash></file>

<file><path>C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\prefs.js</path><vendor>PUP.Optional.CrossRider</vendor><action>replaced</action><baddata>user_pref(&quot;extensions.crossrider.bic&quot;, &quot;1491a4ed22b74ae62bbff68ebe160f61&quot;);</baddata><gooddata></gooddata><hash>331c55079cfd3ef8dc1b5c9c0103669a</hash></file>

<file><path>C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\prefs.js</path><vendor>PUP.Optional.Trovi</vendor><action>replaced</action><baddata>user_pref(&quot;searchreset.backup.browser.newtab.url&quot;, &quot;hxxp://www.trovi.com/?gd=&amp;ctid=CT3330189&amp;octid=EB_ORIGINAL_CTID&amp;ISID=M8A41461E-65F2-48FA-B33D-E8FFA489B141&amp;SearchSource=69&amp;CUI=&amp;SSPV=&amp;Lay=1&amp;UM=8&amp;UP=SP9322786B-3572-47BF-A0AC-F372804C7DDC&amp;D=040615&quot;);</baddata><gooddata></gooddata><hash>0c4361fb5a3f7fb7022a56a445bfbc44</hash></file>

</items>

</mbam-log>

MBAM zweiter Scan

Code:

<?xml version="1.0" encoding="UTF-16" ?>

<mbam-log>

<header>

<date>2016/02/03 15:29:37 +0100</date>

<logfile>mbam-log-2016-02-03 (15-28-34).xml</logfile>

<isadmin>yes</isadmin>

</header>

<engine>

<version>2.2.0.1024</version>

<malware-database>v2016.02.03.03</malware-database>

<rootkit-database>v2016.01.20.01</rootkit-database>

<license>free</license>

<file-protection>disabled</file-protection>

<web-protection>disabled</web-protection>

<self-protection>disabled</self-protection>

</engine>

<system>

<hostname>MROST</hostname>

<ip>192.168.2.100</ip>

<osversion>Windows 8.1</osversion>

<arch>x64</arch>

<username>Michael</username>

<filesys>NTFS</filesys>

</system>

<summary>

<type>threat</type>

<result>completed</result>

<objects>515388</objects>

<time>2493</time>

<processes>0</processes>

<modules>0</modules>

<keys>0</keys>

<values>0</values>

<datas>0</datas>

<folders>0</folders>

<files>0</files>

<sectors>0</sectors>

</summary>

<options>

<memory>enabled</memory>

<startup>enabled</startup>

<filesystem>enabled</filesystem>

<archives>enabled</archives>

<rootkits>disabled</rootkits>

<deeprootkit>disabled</deeprootkit>

<heuristics>enabled</heuristics>

<pup>enabled</pup>

<pum>enabled</pum>

</options>

<items>

</items>

</mbam-log>

Die logfiles FRST.txt und Addition.txt würde ich jetzt nach Bedarf reinstellen. Das Board sagt mir nämlich, dass es sonst zu groß wird.

Wie ich logfiles aus Norton rausbekomme hab ich noch nicht rausgefunden.
Hoffe ihr könnt mir helfen.

Danke und Grüße

rosti

Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Der einzige Log mit Funden ist der erste von MBAM. Und wie schon geschrieben weiß ich nicht wie ich ne Logdatei aus Norton rausziehe. Das ist scheinbar nicht gewollt.
Die Scans mit FRST sind halt gemacht nachdem MBAM gescannt und entfernt hat. Ich poste es trotzdem mal.

FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016

durchgeführt von Michael (Administrator) auf MROST (03-02-2016 20:42:09)

Gestartet von C:\Users\Michael\Downloads\Programme install

Geladene Profile: Michael (Verfügbare Profile: UpdatusUser & Michael & Administrator)

Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe

(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe

(MKS Software Inc.) C:\Windows\System32\nutsrv4.exe

(PTC Inc.) C:\Program Files\PTC\PTC Portmapper\i486_nt\obj\portmap.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe

(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe

(Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

() C:\Windows\System32\igfxTray.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Lenovo.) C:\Windows\System32\TpShocks.exe

(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe

(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe

(Akamai Technologies, Inc.) C:\Users\Michael\AppData\Local\Akamai\netsession_win.exe

(Akamai Technologies, Inc.) C:\Users\Michael\AppData\Local\Akamai\netsession_win.exe

(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\sldworks_fs.exe

(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe

(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe

(Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe

() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe

(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\n360.exe

konnte nicht auf den Prozess zugreifen -> n360.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\n360.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [140872 2013-03-21] (Realtek Semiconductor Corp.)

HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [404376 2015-08-09] ()

HKLM\...\Run: [HotKeysCmds] => "C:\WINDOWS\system32\hkcmd.exe"

HKLM\...\Run: [Persistence] => "C:\WINDOWS\system32\igfxpers.exe"

HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp

HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [382248 2013-06-20] (Lenovo.)

HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937976 2013-06-25] (Lenovo)

HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [593408 2013-07-04] (Lenovo Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2986224 2013-07-09] (Synaptics Incorporated)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [571192 2014-08-14] (Acronis)

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1804616 2015-09-06] (NVIDIA Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-05-16] (Intel Corporation)

HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [740232 2013-10-30] (Lenovo)

HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-08-19] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-07-25] (Samsung Electronics Co., Ltd.)

HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.1\bin\EpmNews.exe

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-12] (Geek Software GmbH)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5270504 2014-10-22] (Acronis)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [606096 2014-10-17] (Acronis International GmbH)

HKLM-x32\...\Run: [PinnacleDriverCheck] => C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg

HKLM-x32\...\Run: [NuTCSetupEnviron] => C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37248 2012-10-12] (MKS Software Inc.)

HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [522784 2015-11-17] (Autodesk Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [RemoTerm.exe] => C:\Program Files (x86)\Common Files\PCTV Systems\RemoTerm\RemoTerm.exe

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Michael\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Policies\Explorer: [] 

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {50461f0a-b823-11e5-bebb-0c8bfd4aea97} - "F:\setup_vmc_lite.exe" /checkApplicationPresence

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {50461f44-b823-11e5-bebb-0c8bfd4aea97} - "F:\setup_vmc_lite.exe" /checkApplicationPresence

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {504620f6-b823-11e5-bebb-0c8bfd4aea97} - "F:\startme.exe" 

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {504623c8-b823-11e5-bebb-0c8bfd4aea97} - "F:\setup_vmc_lite.exe" /checkApplicationPresence

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Corporation)

HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [187152 2015-09-06] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [165712 2015-09-06] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)

ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)

ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)

ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2015 Schnellstart.lnk [2015-08-18]

ShortcutTarget: SOLIDWORKS 2015 Schnellstart.lnk -> C:\Windows\Installer\{F8093877-4F2C-40ED-9BA7-2F9F48F5176F}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC)

Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2015-06-18]

ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <======= ACHTUNG (Beschränkung - ProxySettings)

Winsock: Catalog9 12 C:\WINDOWS\SysWOW64\nutafun4.dll [164232 2012-10-12] (MKS Software Inc.)

Winsock: Catalog9 13 C:\WINDOWS\SysWOW64\nutafun4.dll [164232 2012-10-12] (MKS Software Inc.)

Winsock: Catalog9-x64 12 C:\Windows\system32\nutafun4.dll [205624 2012-10-12] (MKS Software Inc.)

Winsock: Catalog9-x64 13 C:\Windows\system32\nutafun4.dll [205624 2012-10-12] (MKS Software Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{16F85749-052E-48D8-AEAB-873D5A6AB89D}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{19642B95-DF84-4C27-A244-E3D048137149}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{514FECEC-336F-4DCE-B40D-0DFE911B60B9}: [DhcpNameServer] 139.7.30.125 139.7.30.126

Tcpip\..\Interfaces\{90CC83EC-4517-4723-BDA1-FAE7E3BAF19F}: [DhcpNameServer] 139.7.30.125 139.7.30.126
 

Internet Explorer:

==================

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com/?pc=LNJB

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad

SearchScopes: HKLM -> DefaultScope {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKLM -> {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKU\S-1-5-21-3695500385-1387106-2215658511-1002 -> DefaultScope {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKU\S-1-5-21-3695500385-1387106-2215658511-1002 -> {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25] (Oracle Corporation)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25] (Oracle Corporation)

BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL => Keine Datei

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default

FF DefaultSearchEngine: google

FF DefaultSearchUrl: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF SelectedSearchEngine: Google

FF SelectedSearchEngine: google

FF Homepage: hxxp://www.google.de?hl=de&gl=de

FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=

FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-13] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-13] ()

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-16] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-16] (Intel Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @ptc.com/ProductViewLite -> C:\Program Files (x86)\Common Files\PTC\np6_pvapplite9.dll [2013-04-04] (PTC)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-3695500385-1387106-2215658511-1002: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2013-03-25] (Intel)

FF Plugin HKU\S-1-5-21-3695500385-1387106-2215658511-1002: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2013-03-25] (Intel)

FF user.js: detected! => C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\user.js [2016-02-03]

FF SearchPlugin: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\searchplugins\wettercom.xml [2015-08-15]

FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\extensions\2020Player_IKEA@2020Technologies.com [2015-12-01]

FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.4.24\coFFAddon

FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.4.24\coFFAddon [2016-02-03]

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-03-21] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.4.24\coFFAddon
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\Exts\Chrome.crx [2016-02-03]

CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\Exts\Chrome.crx [2016-02-03]

CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1139744 2015-11-17] (Autodesk Inc.)

S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)

S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [565760 2013-07-04] (Lenovo Corporation) [Datei ist nicht signiert]

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-04-11] (Intel)

R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [144416 2013-10-30] (Lenovo)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156616 2013-06-26] (Intel Corporation)

S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-04-10] (Intel Corporation)

S2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182760 2013-04-15] ()

S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-16] (Intel Corporation)

R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2044408 2013-07-17] (Lenovo Group Limited)

R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)

S3 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\cammute.exe [504320 2013-07-04] (Lenovo Corporation) [Datei ist nicht signiert]

S3 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe [504320 2013-07-04] (Lenovo Group Limited) [Datei ist nicht signiert]

S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [687104 2013-07-04] (Lenovo Corporation) [Datei ist nicht signiert]

R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)

S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [468984 2013-06-25] (Lenovo)

R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [465912 2013-06-21] ()

S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272864 2015-12-10] (Lenovo)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-11-19] ()

R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\N360.exe [282016 2015-11-20] (Symantec Corporation)

R2 NuTCRACKERService; C:\WINDOWS\system32\nutsrv4.exe [574776 2012-10-12] (MKS Software Inc.)

R2 PortmapperService; C:\Program Files\PTC/PTC Portmapper/i486_nt/obj/portmap.exe [499712 2015-03-24] (PTC Inc.) [Datei ist nicht signiert]

R2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [59384 2013-07-16] (Lenovo Group Limited)

R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [138232 2013-07-16] (Lenovo Group Limited)

S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2015-08-18] (SolidWorks) [Datei ist nicht signiert]

S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2015-11-11] ()

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)

R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [22872 2014-07-21] (Validity Sensors, Inc.)

R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-03-03] (Synaptics Incorporated)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-11-19] (Intel® Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 azvusb; C:\Windows\System32\drivers\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)

R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [1665608 2016-01-25] (Symantec Corporation)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385272 2013-04-23] (Motorola Solutions, Inc.)

R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1605050.00F\ccSetx64.sys [173808 2015-09-23] (Symantec Corporation)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-16] (Disc Soft Ltd)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-12] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-12] (Symantec Corporation)

S3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)

S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [68128 2013-10-30] (Windows (R) Win 7 DDK provider)

R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2014-11-23] (Acronis International GmbH)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-03] (Intel Corporation)

R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\IPSDefs\20160202.001\IDSvia64.sys [767224 2016-02-02] (Symantec Corporation)

R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-04-15] ()

R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-04-15] ()

R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [101976 2013-04-24] (Intel Corporation)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\VirusDefs\20160203.009\ENG64.SYS [138488 2015-10-16] (Symantec Corporation)

R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\VirusDefs\20160203.009\EX64.SYS [2148080 2015-10-16] (Symantec Corporation)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3494680 2015-03-09] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew02.sys [3648480 2013-10-08] (Intel Corporation)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [418008 2013-06-24] (Realsil Semiconductor Corporation)

R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-03-21] (Realtek Semiconductor Corp.)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-07-09] (Synaptics Incorporated)

R1 SMIDriver; C:\Windows\System32\drivers\smi.sys [19656 2015-03-03] (Windows (R) Win 7 DDK provider)

R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1605050.00F\SRTSP64.SYS [928496 2015-11-12] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1605050.00F\SRTSPX64.SYS [50936 2015-09-23] (Symantec Corporation)

S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [34976 2015-06-29] (Lenovo Group Limited)

R0 SymEFASI; C:\Windows\System32\drivers\N360x64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-12] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\N360x64\1605050.00F\SymELAM.sys [24192 2015-09-23] (Symantec Corporation)

R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [111344 2016-02-03] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\N360x64\1605050.00F\Ironx64.SYS [297720 2015-09-23] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1605050.00F\SYMNETS.SYS [577768 2015-11-12] (Symantec Corporation)

R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1328928 2014-11-23] (Acronis International GmbH)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [234784 2014-11-23] (Acronis International GmbH)

S3 USB28xxBGA; C:\Windows\system32\DRIVERS\emBDA64.sys [654720 2010-09-01] (eMPIA Technology, Inc.) [Datei ist nicht signiert]

S3 USB28xxOEM; C:\Windows\system32\DRIVERS\emOEM64.sys [944256 2010-09-01] (eMPIA Technology, Inc.) [Datei ist nicht signiert]

R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-04-11] (Windows (R) Win 7 DDK provider)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-02-03 20:41 - 2016-02-03 20:42 - 00000000 ____D C:\FRST

2016-02-03 20:24 - 2016-02-03 16:11 - 00002580 _____ C:\Users\Michael\Desktop\mbam-log-2016-02-03 (15-28-34).xml

2016-02-03 20:24 - 2016-02-03 15:16 - 00030966 _____ C:\Users\Michael\Desktop\mbam-log-2016-02-03 (14-39-16).xml

2016-02-03 19:21 - 2016-02-03 19:21 - 00000000 ____D C:\Users\Michael\AppData\Local\NVIDIA

2016-02-03 19:17 - 2016-02-03 19:17 - 00000000 ____D C:\WINDOWS\SysWOW64\NV

2016-02-03 19:17 - 2016-02-03 19:17 - 00000000 ____D C:\WINDOWS\system32\NV

2016-02-03 18:53 - 2015-07-30 15:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2016-02-03 18:53 - 2015-07-30 14:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2016-02-03 18:14 - 2015-12-11 05:38 - 25837568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-02-03 18:14 - 2015-12-11 05:00 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2016-02-03 18:14 - 2015-12-11 04:55 - 06051328 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-02-03 18:14 - 2015-12-11 04:50 - 20367360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-02-03 18:14 - 2015-12-11 04:45 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2016-02-03 18:14 - 2015-12-11 04:21 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2016-02-03 18:14 - 2015-12-11 04:18 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2016-02-03 18:14 - 2015-12-11 04:09 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2016-02-03 18:14 - 2015-12-11 04:09 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2016-02-03 18:14 - 2015-12-11 04:03 - 14456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-02-03 18:14 - 2015-12-11 03:59 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-02-03 18:14 - 2015-12-11 03:43 - 04610560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-02-03 18:14 - 2015-12-11 03:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2016-02-03 18:14 - 2015-12-11 03:38 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-02-03 18:14 - 2015-12-11 03:37 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-02-03 18:14 - 2015-12-11 03:35 - 12856320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-02-03 18:14 - 2015-12-11 03:26 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-02-03 18:14 - 2015-12-11 03:14 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2016-02-03 18:14 - 2015-12-11 03:12 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-02-03 18:14 - 2015-12-11 03:08 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-02-03 18:14 - 2015-12-11 03:07 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2016-02-03 18:14 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2016-02-03 18:14 - 2015-11-11 16:44 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2016-02-03 18:14 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2016-02-03 18:14 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-02-03 18:14 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll

2016-02-03 18:14 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2016-02-03 18:14 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2016-02-03 18:14 - 2015-11-10 00:36 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2016-02-03 18:14 - 2015-11-10 00:25 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2016-02-03 18:14 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-02-03 18:14 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2016-02-03 18:14 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2016-02-03 18:14 - 2015-11-08 22:32 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2016-02-03 18:14 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2016-02-03 18:14 - 2015-11-08 22:16 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2016-02-03 18:14 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2016-02-03 18:14 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2016-02-03 18:14 - 2015-11-08 21:53 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2016-02-03 18:14 - 2015-09-10 18:18 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2016-02-03 18:14 - 2015-09-10 17:51 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2016-02-03 18:14 - 2015-09-10 17:17 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2016-02-03 18:14 - 2015-09-10 17:07 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2016-02-03 18:14 - 2015-07-16 21:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec

2016-02-03 18:14 - 2015-07-16 20:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec

2016-02-03 18:08 - 2015-12-16 18:11 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll

2016-02-03 18:08 - 2015-12-16 17:51 - 00868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll

2016-02-03 18:08 - 2015-11-21 17:59 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2016-02-03 18:08 - 2015-11-21 17:49 - 01344000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll

2016-02-03 18:08 - 2015-11-21 17:47 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll

2016-02-03 18:08 - 2015-11-21 17:40 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL

2016-02-03 18:08 - 2015-10-22 17:21 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll

2016-02-03 18:08 - 2015-10-22 16:58 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll

2016-02-03 18:08 - 2015-10-22 15:08 - 00513456 _____ C:\WINDOWS\SysWOW64\locale.nls

2016-02-03 18:08 - 2015-10-22 15:08 - 00513456 _____ C:\WINDOWS\system32\locale.nls

2016-02-03 18:07 - 2015-08-27 03:43 - 22372152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-02-03 18:07 - 2015-08-27 03:42 - 19795904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-02-03 18:06 - 2015-12-30 20:32 - 07453016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-02-03 18:06 - 2015-12-30 20:32 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2016-02-03 18:06 - 2015-12-30 20:32 - 01499912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 02745184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02528784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02450240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02447136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02334104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 02324744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01877504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01798480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01484888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01288128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01210200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 01150232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 01115640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01037680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00914672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00850680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00735496 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00700360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00629600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00557856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00498472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00492736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00463776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00299080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00275312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00274280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00248432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00246856 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00244296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00229272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00203016 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00184912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00183856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00110544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00099136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00090904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00090392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00081032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00076936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll

2016-02-03 18:06 - 2015-12-03 19:07 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll

2016-02-03 18:06 - 2015-12-03 19:07 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax

2016-02-03 18:06 - 2015-12-03 19:05 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL

2016-02-03 18:06 - 2015-12-03 19:02 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL

2016-02-03 18:06 - 2015-12-03 19:00 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL

2016-02-03 18:06 - 2015-12-03 18:58 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll

2016-02-03 18:06 - 2015-12-03 18:36 - 01697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll

2016-02-03 18:06 - 2015-12-03 18:30 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL

2016-02-03 18:06 - 2015-12-03 18:28 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll

2016-02-03 18:06 - 2015-12-03 18:28 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax

2016-02-03 18:06 - 2015-12-03 18:27 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL

2016-02-03 18:06 - 2015-12-03 18:24 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL

2016-02-03 18:06 - 2015-12-03 18:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL

2016-02-03 18:06 - 2015-12-03 18:06 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll

2016-02-03 18:06 - 2015-12-03 18:01 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL

2016-02-03 18:06 - 2015-12-03 17:40 - 01010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL

2016-02-03 18:06 - 2015-12-03 17:29 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL

2016-02-03 18:06 - 2015-11-22 07:59 - 01659568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2016-02-03 18:06 - 2015-11-22 07:59 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2016-02-03 18:06 - 2015-11-22 07:59 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2016-02-03 18:06 - 2015-11-22 07:59 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2016-02-03 18:06 - 2015-11-21 19:32 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll

2016-02-03 18:06 - 2015-11-21 18:50 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll

2016-02-03 18:06 - 2015-06-12 18:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-02-03 18:06 - 2015-06-12 17:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-02-03 18:05 - 2015-12-03 20:42 - 00561952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-02-03 18:05 - 2015-12-03 20:42 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2016-02-03 18:05 - 2015-12-03 20:42 - 00137968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll

2016-02-03 18:05 - 2015-12-03 20:42 - 00106960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll

2016-02-03 18:05 - 2015-12-03 20:41 - 00177488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-02-03 18:05 - 2015-12-03 19:52 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2016-02-03 18:05 - 2015-12-03 19:52 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll

2016-02-03 18:05 - 2015-12-03 19:52 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll

2016-02-03 18:05 - 2015-12-03 19:28 - 00401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2016-02-03 18:05 - 2015-12-03 19:28 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2016-02-03 18:05 - 2015-12-03 18:51 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2016-02-03 18:05 - 2015-12-03 18:16 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2016-02-03 18:05 - 2015-12-03 18:13 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-02-03 18:05 - 2015-12-03 18:07 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2016-02-03 18:05 - 2015-12-03 17:45 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2016-02-03 18:05 - 2015-12-02 16:04 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll

2016-02-03 18:05 - 2015-12-02 16:01 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll

2016-02-03 18:05 - 2015-11-20 23:47 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2016-02-03 18:05 - 2015-11-20 19:18 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2016-02-03 18:05 - 2015-11-20 17:58 - 03706880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-02-03 18:05 - 2015-11-20 17:47 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe

2016-02-03 18:05 - 2015-11-20 17:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll

2016-02-03 18:05 - 2015-11-20 17:44 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll

2016-02-03 18:05 - 2015-11-20 17:44 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2016-02-03 18:05 - 2015-11-20 17:43 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2016-02-03 18:05 - 2015-11-20 17:42 - 02243584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll

2016-02-03 18:05 - 2015-11-20 17:30 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe

2016-02-03 18:05 - 2015-11-20 17:29 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll

2016-02-03 18:05 - 2015-11-20 17:28 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2016-02-03 18:05 - 2015-11-20 17:27 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2016-02-03 18:05 - 2015-11-09 01:41 - 01540728 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2016-02-03 18:05 - 2015-11-08 23:30 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2016-02-03 18:05 - 2015-11-08 22:23 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2016-02-03 18:05 - 2015-11-08 22:13 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2016-02-03 18:05 - 2015-11-08 22:01 - 01753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2016-02-03 18:05 - 2015-11-08 21:52 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2016-02-03 18:05 - 2015-11-08 21:48 - 01376256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2016-02-03 18:05 - 2015-11-08 21:42 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2016-02-03 18:05 - 2015-11-05 09:59 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys

2016-02-03 18:05 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2016-02-03 18:05 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys

2016-02-03 18:05 - 2015-10-10 18:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2016-02-03 18:05 - 2015-09-24 17:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll

2016-02-03 18:05 - 2015-09-24 17:40 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2016-02-03 18:05 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys

2016-02-03 18:05 - 2015-09-03 03:18 - 02531400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2016-02-03 18:05 - 2015-09-03 03:17 - 01903848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2016-02-03 18:05 - 2015-09-02 19:48 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2016-02-03 18:05 - 2015-09-02 18:09 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2016-02-03 18:05 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe

2016-02-03 18:05 - 2015-08-07 22:40 - 01134752 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2016-02-03 18:05 - 2015-08-07 15:13 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2016-02-03 18:05 - 2015-08-06 17:47 - 04710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2016-02-03 18:05 - 2015-08-06 17:18 - 04068352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2016-02-03 18:05 - 2015-07-30 18:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll

2016-02-03 18:05 - 2015-07-30 17:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll

2016-02-03 18:05 - 2015-07-22 15:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll

2016-02-03 18:05 - 2015-07-22 14:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2016-02-03 18:05 - 2015-07-17 15:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2016-02-03 18:05 - 2015-07-17 15:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2016-02-03 18:05 - 2015-07-16 01:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys

2016-02-03 18:05 - 2015-07-10 18:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll

2016-02-03 18:04 - 2015-09-29 13:24 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys

2016-02-03 18:04 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll

2016-02-03 18:04 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll

2016-02-03 18:04 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2016-02-03 18:04 - 2015-07-07 10:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys

2016-02-03 18:04 - 2015-07-07 10:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys

2016-02-03 18:04 - 2015-07-07 10:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys

2016-02-03 18:04 - 2015-06-27 12:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2016-02-03 18:04 - 2015-05-01 02:13 - 06521800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2016-02-03 18:04 - 2015-05-01 02:13 - 01488000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2016-02-03 18:04 - 2015-05-01 02:13 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2016-02-03 18:03 - 2015-11-17 22:07 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2016-02-03 18:02 - 2015-12-10 01:40 - 00033456 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-02-03 18:02 - 2015-12-07 11:56 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2016-02-03 18:02 - 2015-12-04 16:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00705024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-02-03 18:02 - 2015-10-28 16:49 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2016-02-03 18:02 - 2015-10-28 16:29 - 02462720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2016-02-03 18:02 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2016-02-03 18:02 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2016-02-03 18:02 - 2015-10-11 07:34 - 00468824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2016-02-03 18:02 - 2015-10-11 07:34 - 00462168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2016-02-03 18:02 - 2015-10-11 07:34 - 00443224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys

2016-02-03 18:02 - 2015-10-11 07:34 - 00092504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys

2016-02-03 18:02 - 2015-10-11 07:34 - 00027992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys

2016-02-03 18:02 - 2015-10-10 19:41 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys

2016-02-03 18:02 - 2015-10-10 19:41 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys

2016-02-03 18:02 - 2015-10-10 19:40 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusb.sys

2016-02-03 18:02 - 2015-10-08 17:11 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2016-02-03 18:02 - 2015-10-08 16:50 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2016-02-03 18:02 - 2015-10-03 20:41 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2016-02-03 18:02 - 2015-10-03 20:41 - 01124384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2016-02-03 18:02 - 2015-09-12 14:47 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml

2016-02-03 18:02 - 2015-09-02 03:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2016-02-03 18:02 - 2015-09-02 03:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2016-02-03 18:02 - 2015-09-02 03:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2016-02-03 18:02 - 2015-09-02 03:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2016-02-03 18:02 - 2015-08-06 18:05 - 00669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx

2016-02-03 18:02 - 2015-08-06 17:37 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx

2016-02-03 18:02 - 2015-07-22 15:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2016-02-03 18:02 - 2015-07-22 15:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2016-02-03 18:02 - 2015-07-18 19:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll

2016-02-03 18:02 - 2015-07-18 19:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll

2016-02-03 18:02 - 2015-07-18 19:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll

2016-02-03 18:02 - 2015-07-18 19:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll

2016-02-03 18:02 - 2015-07-13 20:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll

2016-02-03 18:02 - 2015-07-13 20:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll

2016-02-03 18:02 - 2015-07-01 23:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll

2016-02-03 18:02 - 2015-07-01 23:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll

2016-02-03 18:02 - 2015-07-01 22:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll

2016-02-03 18:02 - 2015-07-01 22:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll

2016-02-03 18:02 - 2015-06-19 18:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll

2016-02-03 18:01 - 2015-08-01 04:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe

2016-02-03 18:01 - 2015-08-01 04:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

2016-02-03 18:01 - 2015-08-01 04:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2016-02-03 18:01 - 2015-08-01 04:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe

2016-02-03 18:01 - 2015-08-01 04:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe

2016-02-03 18:01 - 2015-07-14 22:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2016-02-03 18:01 - 2015-07-14 22:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll

2016-02-03 18:01 - 2015-07-14 22:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll

2016-02-03 18:01 - 2015-07-10 19:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll

2016-02-03 18:01 - 2015-07-10 18:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll

2016-02-03 18:01 - 2015-07-10 18:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2016-02-03 18:01 - 2015-07-10 17:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2016-02-03 18:01 - 2015-06-11 21:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2016-02-03 18:01 - 2015-06-11 21:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2016-02-03 18:00 - 2015-10-05 19:28 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe

2016-02-03 18:00 - 2015-10-05 19:25 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2016-02-03 18:00 - 2015-08-22 14:42 - 00901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00063840 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll

2016-02-03 18:00 - 2015-08-03 22:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll

2016-02-03 18:00 - 2015-08-03 22:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll

2016-02-03 18:00 - 2015-08-01 15:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll

2016-02-03 18:00 - 2015-07-09 18:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe

2016-02-03 18:00 - 2015-07-09 18:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe

2016-02-03 18:00 - 2015-07-09 17:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe

2016-02-03 18:00 - 2015-07-09 17:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2016-02-03 17:59 - 2015-12-08 20:08 - 00685432 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll

2016-02-03 17:59 - 2015-12-08 20:07 - 00507176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll

2016-02-03 17:59 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL

2016-02-03 17:59 - 2015-08-10 19:15 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2016-02-03 17:59 - 2015-08-10 19:06 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL

2016-02-03 17:59 - 2015-08-10 18:49 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2016-02-03 17:59 - 2015-08-10 17:56 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL

2016-02-03 17:59 - 2015-08-10 17:46 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2016-02-03 17:59 - 2015-07-16 19:58 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll

2016-02-03 17:59 - 2015-07-14 04:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe

2016-02-03 17:59 - 2015-07-10 20:06 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

2016-02-03 17:59 - 2015-06-09 23:39 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2016-02-03 17:59 - 2015-06-09 23:39 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2016-02-03 17:59 - 2015-06-09 23:38 - 01201664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-02-03 14:38 - 2016-02-03 19:22 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2016-02-03 14:37 - 2016-02-03 14:37 - 00001121 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2016-02-03 14:37 - 2016-02-03 14:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2016-02-03 14:37 - 2016-02-03 14:37 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-02-03 14:37 - 2016-02-03 14:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2016-02-03 14:37 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2016-02-03 14:37 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2016-02-03 14:37 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2016-02-03 13:33 - 2016-02-03 13:30 - 02003974 _____ C:\WINDOWS\ntbtlog.txt

2016-02-03 13:29 - 2016-02-03 13:29 - 00003206 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration

2016-02-03 13:29 - 2016-02-03 13:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton 360

2016-02-03 12:53 - 2016-02-03 13:29 - 00002284 _____ C:\Users\Public\Desktop\Norton 360 Premier.LNK

2016-02-03 12:53 - 2016-02-03 12:53 - 00111344 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS

2016-02-03 12:53 - 2016-02-03 12:53 - 00008214 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT

2016-02-03 12:53 - 2016-02-03 12:53 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared

2016-02-03 12:51 - 2016-02-03 13:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360

2016-02-03 12:51 - 2016-02-03 13:29 - 00000000 ____D C:\WINDOWS\system32\Drivers\N360x64

2016-02-03 12:51 - 2016-02-03 12:51 - 00000000 ____D C:\Program Files (x86)\Norton 360

2016-02-03 12:43 - 2016-02-03 12:43 - 00000000 ____D C:\WINDOWS\%LOCALAPPDATA%

2016-02-03 12:32 - 2016-02-03 12:32 - 00000000 ____D C:\ProgramData\PCSettings

2016-02-03 12:27 - 2016-02-03 12:49 - 00001351 _____ C:\Users\Michael\Desktop\Norton-Installationsdateien.lnk

2016-02-02 13:38 - 2016-02-02 16:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2016-02-02 11:57 - 2016-02-02 11:57 - 00000000 ____D C:\Users\Michael\AppData\Local\ElevatedDiagnostics

2016-01-27 22:36 - 2016-01-27 22:36 - 00280335 ____T C:\Users\Michael\Desktop\SemestergebührenSS2016.oxps

2016-01-26 22:45 - 2016-01-26 22:44 - 00189023 _____ C:\Users\Michael\Desktop\Vodafone-KD-Widerruf.M.Rost.pdf

2016-01-26 22:43 - 2016-01-26 22:44 - 00189023 _____ C:\Users\Michael\Desktop\KabelDeutschlandWiderrufUnterschrieben.pdf

2016-01-25 03:45 - 2016-01-25 03:45 - 00170696 _____ (Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe

2016-01-25 03:45 - 2016-01-25 03:45 - 00081096 _____ (Lenovo.) C:\WINDOWS\system32\ibmpmctl.exe

2016-01-25 03:45 - 2016-01-25 03:45 - 00072808 _____ (Lenovo.) C:\WINDOWS\system32\Drivers\ibmpmdrv.sys

2016-01-25 03:45 - 2016-01-25 03:45 - 00050888 _____ (Lenovo.) C:\WINDOWS\system32\tpinspm.dll

2016-01-19 23:09 - 2016-01-19 23:09 - 00165907 _____ C:\Users\Michael\Desktop\auftrag.pdf

2016-01-19 21:41 - 2016-02-01 13:39 - 00861909 _____ C:\Users\Michael\Desktop\antrag_beihilfe_lang.pdf

2016-01-15 18:04 - 2016-01-15 18:04 - 00002121 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk

2016-01-15 18:04 - 2016-01-15 18:04 - 00000000 ____D C:\ProgramData\Sony

2016-01-15 18:04 - 2016-01-15 18:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2016-01-15 18:04 - 2016-01-15 18:04 - 00000000 ____D C:\Program Files (x86)\Sony

2016-01-15 18:01 - 2016-01-15 18:04 - 29511952 _____ (Sony Mobile Communications ) C:\Users\Michael\AppData\Local\pcc.exe

2016-01-14 20:24 - 2016-01-14 20:25 - 00000513 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics

2016-01-14 20:11 - 2016-01-14 20:11 - 00043872 _____ (Connectify) C:\WINDOWS\system32\Drivers\cnnctfy3.sys

2016-01-14 20:11 - 2016-01-14 20:11 - 00036736 _____ (Connectify) C:\WINDOWS\system32\Drivers\cfywlan1.sys

2016-01-14 20:05 - 2016-02-03 15:25 - 00000306 __RSH C:\ProgramData\ntuser.pol

2016-01-14 20:04 - 2016-01-14 20:04 - 00000000 ____D C:\Users\Michael\AppData\Local\DanuSoft

2016-01-14 20:03 - 2016-01-14 20:03 - 00000000 ____D C:\Program Files (x86)\WiFi HotSpot Creator

2016-01-14 19:37 - 2016-01-14 19:37 - 00000000 ____D C:\Users\Michael\AppData\Roaming\FLEXnet

2016-01-14 19:24 - 2016-01-14 19:24 - 00000000 ____D C:\ProgramData\Vodafone

2016-01-12 23:53 - 2016-01-12 23:53 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Vodafone

2016-01-12 23:53 - 2009-06-29 18:00 - 00132608 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbnet.sys

2016-01-12 23:53 - 2009-06-29 18:00 - 00116096 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbfake.sys

2016-01-12 23:53 - 2009-04-09 13:38 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbmdm.sys

2016-01-12 23:52 - 2016-01-12 23:52 - 00008464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpOrder.dll

2016-01-12 23:52 - 2016-01-12 23:52 - 00000000 ____D C:\Users\Michael\AppData\Local\{86DD38A2-C8BD-404A-A1BD-907F6B69C913}
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-02-03 20:42 - 2014-10-14 21:40 - 00000000 ____D C:\Users\Michael\Downloads\Programme install

2016-02-03 20:23 - 2015-07-31 12:02 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation

2016-02-03 20:23 - 2015-06-11 21:58 - 00000000 ____D C:\Program Files\Common Files\AV

2016-02-03 20:11 - 2014-10-16 22:14 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-02-03 19:25 - 2015-05-17 12:11 - 01812820 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-02-03 19:25 - 2014-10-14 19:31 - 00003592 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3695500385-1387106-2215658511-1002

2016-02-03 19:25 - 2014-09-24 06:43 - 00779098 _____ C:\WINDOWS\system32\perfh007.dat

2016-02-03 19:25 - 2014-09-24 06:43 - 00164784 _____ C:\WINDOWS\system32\perfc007.dat

2016-02-03 19:25 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf

2016-02-03 19:20 - 2014-10-16 22:14 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-02-03 19:20 - 2014-10-16 17:32 - 00000000 __SHD C:\Users\Michael\IntelGraphicsProfiles

2016-02-03 19:20 - 2014-10-16 17:31 - 00000401 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat

2016-02-03 19:17 - 2014-10-16 06:22 - 00000000 ____D C:\ProgramData\Validity

2016-02-03 19:17 - 2014-10-16 06:22 - 00000000 ____D C:\ProgramData\NVIDIA

2016-02-03 19:17 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-02-03 19:17 - 2013-08-22 15:44 - 00596200 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-02-03 19:16 - 2015-06-02 22:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-02-03 19:16 - 2015-05-17 09:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2016-02-03 19:16 - 2015-05-17 09:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2016-02-03 19:16 - 2014-10-16 06:21 - 00000000 ____D C:\Program Files\CONEXANT

2016-02-03 19:16 - 2014-10-14 21:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-02-03 19:02 - 2015-05-16 12:13 - 00000000 ___SD C:\WINDOWS\system32\GWX

2016-02-03 19:02 - 2015-05-16 12:13 - 00000000 ____D C:\WINDOWS\SysWOW64\GWX

2016-02-03 19:02 - 2015-05-16 10:26 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-02-03 19:02 - 2014-09-24 08:43 - 00000000 ___SD C:\WINDOWS\system32\CompatTel

2016-02-03 19:02 - 2014-09-24 07:00 - 00000000 ____D C:\Program Files\Windows Journal

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2016-02-03 18:58 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-02-03 18:56 - 2015-05-17 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2016-02-03 18:41 - 2014-10-20 20:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2016-02-03 18:39 - 2014-10-16 06:21 - 00000000 ____D C:\ProgramData\Conexant

2016-02-03 18:37 - 2014-10-16 06:21 - 00000000 ____D C:\Temp

2016-02-03 18:37 - 2014-10-16 06:21 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-02-03 18:37 - 2014-10-16 06:21 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-02-03 18:33 - 2014-10-14 21:26 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-02-03 18:29 - 2014-10-14 21:26 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-02-03 17:27 - 2015-05-01 16:40 - 00000000 ____D C:\Users\Michael\AppData\Local\Akamai

2016-02-03 16:07 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2016-02-03 15:07 - 2014-10-17 11:55 - 00000000 ____D C:\Users\Michael\AppData\Local\NPE

2016-02-03 13:36 - 2014-10-17 12:01 - 00000000 ____D C:\NPE

2016-02-03 13:33 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP

2016-02-03 13:16 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM

2016-02-03 13:06 - 2014-10-16 22:14 - 00004102 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2016-02-03 13:06 - 2014-10-16 22:14 - 00003866 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2016-02-03 12:56 - 2013-10-30 13:10 - 00000000 ____D C:\ProgramData\Norton

2016-02-03 12:50 - 2013-10-30 13:10 - 00000000 ____D C:\Program Files (x86)\NortonInstaller

2016-02-03 12:49 - 2014-10-27 08:13 - 00926208 ___SH C:\Users\Michael\Desktop\Thumbs.db

2016-02-03 12:46 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2016-02-03 12:32 - 2013-10-30 13:10 - 00000000 ____D C:\ProgramData\NortonInstaller

2016-02-03 12:27 - 2014-10-30 19:13 - 00000000 ____D C:\Users\Public\Downloads\Norton

2016-02-03 11:13 - 2014-10-14 22:16 - 00000000 ____D C:\Users\Michael\AppData\Roaming\IrfanView

2016-02-03 11:10 - 2014-10-17 22:42 - 00000000 ____D C:\Users\Michael\Div

2016-02-03 10:57 - 2014-10-16 06:27 - 00000000 ____D C:\Users\Michael

2016-02-03 08:05 - 2014-10-17 15:59 - 00000000 ____D C:\Users\Michael\AppData\Roaming\vlc

2016-02-03 08:05 - 2014-10-16 21:15 - 00000000 ____D C:\Users\Michael\AppData\Local\CrashDumps

2016-02-02 11:48 - 2015-02-10 09:22 - 00000000 ____D C:\Users\Michael\AppData\Roaming\avidemux

2016-02-01 13:39 - 2015-12-10 21:18 - 00000000 ____D C:\Users\Michael\Desktop\TrailTrophy

2016-01-31 20:19 - 2014-10-17 19:44 - 00000000 ____D C:\Users\Michael\AppData\Roaming\calibre

2016-01-31 15:02 - 2014-10-17 23:05 - 00000738 _____ C:\Users\Michael\Desktop\Too Do Liste.txt

2016-01-30 22:35 - 2013-10-30 13:09 - 00000000 ____D C:\WINDOWS\System32\Tasks\Intel(R) Small Business Advantage

2016-01-22 21:37 - 2015-03-09 22:38 - 00000000 ____D C:\Users\Michael\AppData\Roaming\dvdcss

2016-01-16 23:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-01-15 22:16 - 2013-10-30 12:38 - 00000000 ____D C:\Intel

2016-01-15 18:05 - 2013-10-30 12:45 - 00000000 ____D C:\ProgramData\Package Cache

2016-01-15 18:04 - 2014-10-16 06:20 - 00000000 ____D C:\Program Files\Intel

2016-01-15 18:04 - 2013-10-30 12:44 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-01-14 20:32 - 2015-05-17 20:08 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2016-01-14 20:32 - 2014-10-15 19:47 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2016-01-14 20:05 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy

2016-01-14 19:28 - 2014-12-10 22:01 - 01833602 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2016-01-14 19:17 - 2015-03-21 09:32 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys

2016-01-12 23:53 - 2014-10-23 20:44 - 00000000 ____D C:\ProgramData\FLEXnet

2016-01-07 23:00 - 2014-10-17 14:16 - 00000000 ____D C:\Users\Michael\AppData\Local\JDownloader v2.0

2016-01-05 21:04 - 2014-09-24 08:46 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-01-05 21:04 - 2014-09-24 08:46 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2014-10-14 19:26 - 2014-10-18 22:25 - 0007514 _____ () C:\Users\Michael\AppData\Roaming\AbsoluteReminder.xml

2014-09-01 09:18 - 2015-07-05 17:58 - 0000365 _____ () C:\Users\Michael\AppData\Roaming\DSQHLNAB

2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Michael\AppData\Roaming\OYYSR

2014-12-10 22:02 - 2014-12-10 22:02 - 0000095 _____ () C:\Users\Michael\AppData\Local\fusioncache.dat

2014-10-17 14:35 - 2014-10-17 14:35 - 84160900 _____ () C:\Users\Michael\AppData\Local\JDownloader v2.0 - Kopie.rar

2016-01-15 18:01 - 2016-01-15 18:04 - 29511952 _____ (Sony Mobile Communications                                  ) C:\Users\Michael\AppData\Local\pcc.exe

2015-05-06 20:06 - 2015-05-06 20:06 - 0000831 _____ () C:\Users\Michael\AppData\Local\recently-used.xbel

2014-10-14 19:25 - 2014-10-16 21:15 - 0000280 _____ () C:\Users\Michael\AppData\Local\RegisteredPackageInformation.xml

2013-10-30 13:01 - 2013-10-30 13:01 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2014-10-23 19:53 - 2014-10-23 19:53 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

2013-10-30 13:05 - 2013-10-30 13:05 - 0000107 _____ () C:\ProgramData\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}.log

2013-10-30 13:03 - 2013-10-30 13:04 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log

2013-10-30 13:04 - 2013-10-30 13:05 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log

2013-10-30 13:05 - 2013-10-30 13:05 - 0000115 _____ () C:\ProgramData\{D6E853EC-8960-4D44-AF03-7361BB93227C}.log
 

Einige Dateien in TEMP:

====================

C:\Users\Michael\AppData\Local\Temp\ose00000.exe

C:\Users\Michael\AppData\Local\Temp\proxy_vole4083257817253690246.dll

C:\Users\Michael\AppData\Local\Temp\SpOrder.dll

C:\Users\Michael\AppData\Local\Temp\_unps.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-01-31 14:00
 

==================== Ende von FRST.txt ============================

Addition

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016

durchgeführt von Michael (2016-02-03 20:43:23)

Gestartet von C:\Users\Michael\Downloads\Programme install

Windows 8.1 (X64) (2014-10-16 16:31:40)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-3695500385-1387106-2215658511-500 - Administrator - Disabled) => C:\Users\Administrator

ASPNET (S-1-5-21-3695500385-1387106-2215658511-1007 - Limited - Enabled)

Gast (S-1-5-21-3695500385-1387106-2215658511-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3695500385-1387106-2215658511-1006 - Limited - Enabled)

Michael (S-1-5-21-3695500385-1387106-2215658511-1002 - Administrator - Enabled) => C:\Users\Michael

UpdatusUser (S-1-5-21-3695500385-1387106-2215658511-1001 - Limited - Enabled) => C:\Users\UpdatusUser
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Norton 360 Premier (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton 360 Premier (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}

FW: Norton 360 Premier (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

µTorrent (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.3.0.1 - Absolute Software)

Acronis True Image 2015 (HKLM-x32\...\{F2FEDE47-3088-49C1-AC91-B6F2F1056824}Visible) (Version: 18.0.6055 - Acronis)

Acronis True Image 2015 (x32 Version: 18.0.6055 - Acronis) Hidden

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.14) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)

Akamai NetSession Interface (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Akamai) (Version:  - Akamai Technologies, Inc)

Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 8.42.20 - )

ape@map (HKLM-x32\...\{93300680-2A38-4B1D-9B1D-B6A95296E3CA}) (Version: 3.3.5 - Onyx Technologie OG)

Arbortext IsoView 7.3 (HKLM-x32\...\{DE52A69A-978A-480A-82F7-E17C50F98EC6}) (Version: 7.3.10.22 - PTC)

AutoCAD Mechanical 2015 - Deutsch (German) (Version: 19.0.206.0 - Autodesk) Hidden

AutoCAD Mechanical 2015 - Deutsch (German) (Version: 19.0.48.0 - Autodesk) Hidden

AutoCAD Mechanical 2015 - Deutsch (German) SP2 (HKLM\...\AutoCAD Mechanical 2015 - Deutsch (German) SP2) (Version: 1 - Autodesk)

AutoCAD Mechanical 2015 Language Pack - Deutsch (German) (Version: 19.0.48.0 - Autodesk) Hidden

Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.2.3.1000 - Autodesk)

Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)

Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.9 - Autodesk)

Autodesk AutoCAD Mechanical 2015 - Deutsch (German) (HKLM\...\AutoCAD Mechanical 2015 - Deutsch (German)) (Version: 19.0.48.0 - Autodesk)

Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)

Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{C87C5BB3-1C3D-4291-A324-BAC130558081}) (Version: 4.35.8396 - Autodesk)

Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)

Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden

Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden

Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden

Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)

Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)

AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - )

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

Bandizip (HKLM\...\Bandizip) (Version: 5.06 - Bandisoft.com)

Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)

calibre 64bit (HKLM\...\{7A073C16-B3B5-4913-8457-262B6E17947A}) (Version: 2.5.0 - Kovid Goyal)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.5.5571 - CDBurnerXP)

Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.55.62 - Conexant)

Creo Direct Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Direct Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Layout Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Layout Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Parametric Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Parametric Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Platform 2.36 (HKLM-x32\...\{BB175478-4D65-42E7-AC13-60F8389E243B}) (Version: 2.36.0 - PTC)

Creo Simulate Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Simulate Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Thumbnail Viewer 2.0 (HKLM\...\{F22311A6-0C71-46EE-A501-4C5503CFEFCC}) (Version: 30.14.200 - PTC)

Creo View Express 2.0 (HKLM\...\{03F6002E-A32B-4C68-818F-DEE386463FBC}) (Version: 10.1.40.15 - PTC)

CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5428.52 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)

Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden

Dependency Package Update (Version: 1.6.36.00 - Lenovo Inc.) Hidden

Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden

DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.6.1 - DivX, Inc.)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.80 - DivX, LLC)

FARO LS 1.1.501.0 (64bit) (HKLM-x32\...\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Freemake Video Converter Version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)

FreeMat (HKLM-x32\...\FreeMat 4.2) (Version: 4.2 - Humanity)

Garmin BaseCamp (HKLM-x32\...\{11172DEF-77A3-418C-B980-EF0D097CA237}) (Version: 4.5.1 - Garmin Ltd or its subsidiaries)

Garmin USB Drivers (HKLM\...\{DC7720F2-98BE-41C1-B0A8-E391362E86B8}) (Version: 2.3.1.1 - Garmin Ltd or its subsidiaries)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden

HandBrake 0.10.1 (HKLM-x32\...\HandBrake) (Version: 0.10.1 - )

Integrated Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10224 - Realtek Semiconductor Corp.)

Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41900) (Version: 3.8.0.41900.72 - Intel)

Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1011 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.10.1372 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1306-148929CC1385}) (Version: 3.1.1306.0354 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)

Intel(R) Smart Connect Technology 4.1 x64 (HKLM\...\{6555226B-7295-4CFD-9D5B-9C8F394BE03A}) (Version: 4.1.41.2234 - Intel)

Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)

Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden

Intel(R) WiDi (HKLM\...\{AD5700DA-F9C5-432B-9927-F555204E38CE}) (Version: 4.1.52.0 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{313c06de-4aa7-4a1f-930a-f10f80380426}) (Version: 17.14.0 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)

Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.01 - )

Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.36.00 - Lenovo Group Limited)

Lenovo Fingerprint Manager (HKLM\...\{1E36FF16-8B0B-4399-99D6-A33EE7D48EDC}) (Version: 4.5.266.0 - Synaptics)

Lenovo Fingerprint Manager (HKLM\...\{F7AB2C19-6A27-4C75-A92A-8CC7C59E5FA2}) (Version: 4.5.266.0 - )

Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden

Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden

Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.11.08 - Lenovo)

Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 1.10 - Lenovo Group Limited)

Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.1.3.0 - Lenovo Corporation)

Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 1.2.5.8 - Lenovo Group Limited)

Lenovo Settings Mobile Hotspot (HKLM\...\{42603F7D-B08D-436B-B0D8-3E2DEF1AFD41}_is1) (Version: 1.2.0.80 - Lenovo)

Lenovo Solution Center (HKLM\...\{4386A5EF-BD23-49F4-9DAD-CD76B4F6A8BF}) (Version: 2.8.006.00 - Lenovo Group Limited)

Lenovo Solutions for Small Business (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.0.32.7350 - Intel(R) Corporation)

Lenovo Solutions for Small Business Customizations (HKLM-x32\...\{AFD7B869-3B70-40C7-8983-769256BA3BD2}) (Version: 2.0.0005.00 - Lenovo Group Limited)

Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0019 - Lenovo)

Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited)

Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo)

Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)

Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden

Metric Collection SDK 35 (x32 Version: 1.2.0001.00 - Lenovo Group Limited) Hidden

Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (HKLM-x32\...\{90120000-00B2-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version:  - Microsoft Corporation)

MKS Platform Components 9.x (HKLM\...\{30276636-0000-0905-9ABB-000BDB5CF35D}) (Version: 9.5.0000 - Mortice Kern Systems)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)

Mozilla Firefox 43.0.1 (x86 de) (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)

Mozilla Thunderbird 38.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.5.0 (x86 de)) (Version: 38.5.0 - Mozilla)

Mozilla Thunderbird 38.5.1 (x86 de) (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Mozilla Thunderbird 38.5.1 (x86 de)) (Version: 38.5.1 - Mozilla)

Norton 360 Premier (HKLM-x32\...\N360) (Version: 22.5.5.15 - Symantec Corporation)

NVIDIA Grafiktreiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.82 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)

NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

PDF24 Creator 6.9.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Pinnacle MediaCenter (HKLM-x32\...\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}) (Version:  - )

PTC Portmapper Version 2.0 Datecode [M120] (HKLM-x32\...\PTC Portmapper Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

PTC Quality Agent (HKLM-x32\...\{CE7DF7C9-82FC-4E33-9E1E-D5C024A0EECE}) (Version: 2.0.0.0 - PTC)

RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 2.1.1.0 - Lenovo)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21234 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)

SAM 6.1 (HKLM-x32\...\SAM 6.1_is1) (Version:  - ARTAS - Engineering Software)

Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14074.11 - Samsung Electronics Co., Ltd.)

Samsung Kies (x32 Version: 2.6.3.14074.11 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)

SOLIDWORKS 2015 x64 Edition SP02.1 (HKLM-x32\...\SolidWorks Installation Manager 20150-40201-1100-100) (Version: 23.2.1.1 - SolidWorks Corporation)

SOLIDWORKS 2015 x64 Edition SP02.1 (Version: 23.121.1 - Dassault Systemes SolidWorks Corp) Hidden

SOLIDWORKS 2015 x64 German Resources (Version: 23.121.1 - Dassault Systèmes SolidWorks Corp) Hidden

SOLIDWORKS Composer Player 2015 SP02.1 x64 Edition (Version: 23.21.1 - Dassault Systèmes SolidWorks Corp) Hidden

SOLIDWORKS eDrawings 2015 x64 Edition SP02.1 (Version: 15.2.0033 - Dassault Systèmes SolidWorks Corp) Hidden

Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony)

Startup TOOLS - SE Creo 2.0 M030 (HKLM-x32\...\Startup TOOLS - SE Creo 2.0) (Version: M030 - INNEO Solutions GmbH)

SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.80.99066 - SugarSync, Inc.)

Synaptics WBF DDK 5011 (HKLM\...\{4D70781C-36A9-4335-9568-565C6F61B5EB}) (Version: 4.5.289.0 - )

Synaptics WBF DDK 5011 (HKLM\...\{9062E143-DEDB-4F8C-B5B8-30AEC328400C}) (Version: 4.5.289.0 - Synaptics)

TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)

The Klub 17 (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Klub-7) (Version: 7.5.0 - Team WRK17)

ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.6.4.27 - )

ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.26 - Lenovo)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VSDC Free Video Editor Version 3.1.1.361 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 3.1.1.361 - Flash-Integro LLC)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (04/22/2013 12.6.0.1033) (HKLM\...\7C710827497AEB36701301B03C5D3CE34799DC28) (Version: 04/22/2013 12.6.0.1033 - Intel Corporation)

Windows-Treiberpaket - Lenovo 1.67.00.02 (04/17/2013 1.67.00.02) (HKLM\...\907DA143458FE258EFEB416B946DE8DF2B87A0BA) (Version: 04/17/2013 1.67.00.02 - Lenovo)

WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{5B69A6B4-393B-459C-8EBB-214237A9E7AC}\InprocServer32 -> C:\Program Files\Bandizip\bdzshl64.dll (Bandisoft.com)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe => Keine Datei

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\de-DE\acadficn.dll (Autodesk, Inc.)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {059AA132-6ECD-4063-9A0F-466110A041A8} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)

Task: {07ACEA6E-67DF-4A28-8426-E171A92894FA} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2015-08-17] (Lenovo)

Task: {13D69F84-9EBE-494E-818C-3352E61A062B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {178DF087-C431-4975-8E5F-CED760CA5461} - System32\Tasks\PMTask => C:\PROGRA~2\ThinkPad\UTILIT~1\PwmIdTsv.exe

Task: {2959C3F4-2B39-4671-A5D9-F38B3D18452A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

Task: {31B76DC0-BB5C-45AD-85BB-1DEF1160360A} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-12-10] (Lenovo)

Task: {38B16F6B-DC0F-474C-9EE7-8C6B04A42EDF} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2013-06-28] (CyberLink Corp.)

Task: {481973EF-4025-4A13-9FD9-CA9D30A97A36} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)

Task: {56A7539C-C2F2-465A-99C5-8E1923972BBC} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-12-10] (Lenovo)

Task: {5849A97B-84A3-48AE-A8FB-4EC2F97A4BA2} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe

Task: {6FCBBF2B-690A-4E24-B50D-C13F4E300C24} - System32\Tasks\{34C81C06-4869-4CDD-8785-06C7237A0B92} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\Setup.exe" -c UNINSTALL /l0x0007

Task: {769D748E-34D1-4CAA-854F-B646D7A00BFC} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-12-10] (Lenovo)

Task: {8415785E-A16A-4CA7-B02F-82711DDEB240} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2015-11-11] ()

Task: {841F8A99-BC07-4628-B268-9D679FFFE531} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-03] (Microsoft Corporation)

Task: {8F56A121-721E-4137-BDC8-32989660DFF9} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\WSCStub.exe [2016-01-06] (Symantec Corporation)

Task: {9CA1147E-B7F8-4480-873F-8ABD320B8673} - System32\Tasks\Intel(R) Small Business Advantage\Notifier => C:\Program Files\Intel\Intel(R) Small Business Advantage\UI\SBA_Notifier.exe [2013-04-10] (Intel Corporation)

Task: {A1C2B286-F6CA-4B79-9F09-232F45C3CEE9} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)

Task: {A2A6F834-1626-41A9-B2A4-3A58FD91AC94} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)

Task: {A558D31D-2561-4587-9B1D-8E70BD61D69E} - \CreateChoiceProcessTask -> Keine Datei <==== ACHTUNG

Task: {B75FB2CB-4C3D-4DCE-A52C-6FD86DE59DD3} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton 360 Premier\Upgrade.exe [2016-01-06] (Symantec Corporation)

Task: {B828D301-DC7C-4FC5-A78E-8E8D52733328} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2013-03-25] (Intel Corporation)

Task: {BA48FCCD-F364-42BF-B684-E7B4DCC4D3D1} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto

Task: {BCF78AEC-A75C-4304-AE65-FEEF4EFEDF58} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-03-06] ()

Task: {BE7FC032-8100-42FA-86AE-EE20647ADA97} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe [2015-12-10] (Lenovo)

Task: {C78AAB59-F9EA-47E3-B66A-15288F96422A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {C819B0CB-3578-4D52-AE54-E6272A3835D2} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe [2015-12-10] (Lenovo)

Task: {D4BAC466-4612-4E23-AB7D-15B23CAB4BBF} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-12-10] (Lenovo)

Task: {DAA05FA7-9E41-46F1-B871-7300732E5B04} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

Task: {E907FFEB-6DEE-4660-8925-C1E00003E8C8} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\Michael\Div\Neuer Ordner\Cryptload_1.1.8\router\FRITZ!Box\reconnect.bat - Verknüpfung.lnk -> C:\Users\Michael\Documents\Backup\Div\Neuer Ordner\Cryptload_1.1.8\router\FRITZ!Box\reconnect.bat (Keine Datei)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-10-16 06:22 - 2015-08-07 01:44 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2013-10-30 13:11 - 2013-08-01 07:42 - 00117248 _____ () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL

2011-04-14 01:41 - 2011-04-14 01:41 - 00034304 _____ () C:\WINDOWS\System32\ssb3ml6.dll

2011-04-14 01:40 - 2011-04-14 01:40 - 00968192 _____ () C:\WINDOWS\system32\spool\DRIVERS\x64\3\ssb3mdu.dll

2014-08-13 23:24 - 2015-08-09 04:50 - 00404376 _____ () C:\WINDOWS\system32\igfxTray.exe

2015-03-06 03:52 - 2015-03-06 03:52 - 00268280 _____ () C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\sldBodyDiffu.dll

2013-06-21 15:42 - 2013-06-21 15:42 - 00465912 _____ () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe

2013-06-21 15:42 - 2013-06-21 15:42 - 00014328 _____ () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe

2015-05-01 19:29 - 2015-11-17 03:33 - 00055328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll

2015-05-01 19:29 - 2015-11-17 03:33 - 00103968 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll

2013-10-30 13:02 - 2013-10-30 13:02 - 00033520 _____ () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll

2015-01-17 13:03 - 2015-01-17 13:03 - 00799232 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\86865ced79f3180ebdfa736d895e5edb\Windows.Networking.ni.dll

2015-01-17 13:03 - 2015-01-17 13:03 - 01282048 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Devices\4764145200fcd33a90ced1505892fce6\Windows.Devices.ni.dll

2015-01-17 13:03 - 2015-01-17 13:03 - 00228864 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\16c3eb7650767d95d002c998d0c73eb5\Windows.Foundation.ni.dll

2014-10-22 10:44 - 2014-10-22 10:44 - 00037696 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\qt_icontray_ex.dll

2014-10-22 10:45 - 2014-10-22 10:45 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll

2013-10-30 12:39 - 2013-05-16 09:05 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2014-10-22 10:53 - 2014-10-22 10:53 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll

2014-10-22 10:46 - 2014-10-22 10:46 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\apemap.com -> hxxp://apemap.com
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "DivXMediaServer"

HKLM\...\StartupApproved\Run32: => "DivXUpdate"

HKLM\...\StartupApproved\Run32: => "KiesTrayAgent"

HKLM\...\StartupApproved\Run32: => "PDFPrint"

HKLM\...\StartupApproved\Run32: => "ADSKAppManager"

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk"

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\StartupApproved\Run: => "DAEMON Tools Lite"

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\StartupApproved\Run: => "Autodesk Sync"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{F0667ADB-C7DD-461E-A751-CA8675D420BB}] => (Allow) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe

FirewallRules: [{87CDD91B-3C88-4725-A3C9-CAE9318E83CF}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe

FirewallRules: [{5CD5F1FE-3FAF-4453-AEF1-DD964C1165C5}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{1DED1EFF-4EBA-4B5F-B751-E3DA4C0F870C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{7B69F144-31A9-433A-A664-59691645B391}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe

FirewallRules: [{E24F5575-9071-4C24-8BF0-E47477904366}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe

FirewallRules: [{F58B3720-0A92-42B8-9284-A0F1C72F4A3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{0925BBA3-92A4-4B87-BF75-5BC0E5EB7663}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{8622E70C-3387-4939-B8DE-39135B64552C}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe

FirewallRules: [{FEB03F9F-0381-4849-AD33-3AA4A2684ACC}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{CF2D435E-2FF8-4E7E-B847-3F2F68BE1BDB}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{916C92F9-36CA-4870-9361-87046761F4FC}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{20DB91EA-7D48-4062-8209-EC9732994631}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{3271F7FB-050B-4F41-9DC0-92348438D113}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMC.exe

FirewallRules: [{C179976C-6057-4724-B62C-D092B3005CF5}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMC.exe

FirewallRules: [{6F5396F7-2358-4F0B-8298-00CA0135CCDF}] => (Allow) C:\Program Files (x86)\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe

FirewallRules: [{40B3EFB5-8E41-4C9D-94E3-30333109762B}] => (Allow) C:\Program Files (x86)\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe

FirewallRules: [{909F52B1-6270-4D69-BD3B-9939CE5A6693}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PSST.exe

FirewallRules: [{AA198A54-E16F-4B22-9A07-4724511F96EE}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PSST.exe

FirewallRules: [{2578A926-831B-4F7D-9E1C-56B5506968D6}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMSInstallInit.exe

FirewallRules: [{DD414C88-7220-4196-A7B3-9B804BDDCBF6}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMSInstallInit.exe

FirewallRules: [{D7117F87-8191-48AE-BCAC-2D2A3528DA8E}] => (Allow) LPort=1900

FirewallRules: [{20B8C29E-C343-4FDE-ACD9-F702DD1D6F28}] => (Allow) LPort=2869

FirewallRules: [{20295365-D8CB-49F6-83C9-ECA81D70EB22}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B9209D86-036F-4B2A-96C6-8D7247E7AC5D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{C50CB052-01AA-4B18-89B8-80D84346019F}] => (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe

FirewallRules: [{FAEECDE2-A68C-4FE7-AB27-F4171B2365FE}] => (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe

FirewallRules: [{CFCBCDC8-6163-48C1-8789-42899E309029}] => (Allow) C:\Program Files\PTC\Creo 2.0\View Express\i486_nt\obj\productview.exe

FirewallRules: [{E87F7DC8-2CC3-4E19-AEFF-418D65E51283}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{B766662C-8ABF-48C7-8192-EA5776FDD8B4}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{6D43DDE6-664D-45DC-8C91-EFC62456712A}] => (Allow) LPort=50248

FirewallRules: [TCP Query User{B83C8A7C-8530-494F-A254-F2423749CC4F}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{6094F45C-FC14-4193-96E8-7363B9280DFD}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [{85F69D71-14D9-44A5-A8BC-D54792329382}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{29FBD059-83D4-4F67-9713-70AA8ACE4C1B}] => (Allow) LPort=2869

FirewallRules: [{BEC51D66-5640-4D9A-ACBE-98B7D338FAE6}] => (Allow) LPort=1900

FirewallRules: [{D0D78A34-EAA2-4A73-ADE0-E919097084C8}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [TCP Query User{F21B6A95-6B89-49E0-A10A-58B53F65CBE2}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe

FirewallRules: [UDP Query User{B3ED1102-C41A-449D-AD85-64F762CE1AEB}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe

FirewallRules: [TCP Query User{25C5811C-D15E-477A-99E8-5BEFDFF16063}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe

FirewallRules: [UDP Query User{E7DED16E-ABCD-4B8C-88C0-68AEC00FDF78}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe

FirewallRules: [TCP Query User{B4D56A37-C34F-4BA1-BB1C-A28ADB147537}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe

FirewallRules: [UDP Query User{EA86D32D-0762-4B94-92D7-8D6647EB6577}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe

FirewallRules: [{E0DD0B4B-DC3B-481C-9AFF-7D2127D95E98}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{CD9A8D4A-BD9A-4478-9189-3E014F4C5220}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{6DA52323-296C-483F-90F1-59F9FC97F471}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{31AE6E20-6C30-4D5A-B483-853B84D1A802}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D4CE867D-EC9C-45C1-82A1-324556B6FCDD}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe

FirewallRules: [{F6D23606-7DA3-4424-9EBF-AC84AE86CDCE}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe

FirewallRules: [TCP Query User{9C240B87-FFA7-447A-AAD2-38C4AF965142}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{E5D85636-1F69-45A2-A628-25793F5DEC26}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [{4A001043-8D1E-4646-B82F-30795835C95A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{7711779A-5AAE-46EC-8AA5-F1B22D0127FA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{91FB9B88-D576-434E-875A-FC8531040812}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{B0D262F6-DD51-48F8-8092-DD374D6E4D48}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{8C09B769-8BD6-408C-A67A-01134F8202D8}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe

FirewallRules: [{DF677A84-688C-42AA-B876-EBD057423316}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe

FirewallRules: [{6A90D776-EE91-46F7-9B89-39C9D445DF3F}] => (Allow) C:\Program Files (x86)\DanuSoft\WiFi HotSpot Creator\WiFi HotSpot Creator.exe

FirewallRules: [{75D883BD-C133-40C5-9DF0-58FCBA8A9C7F}] => (Allow) C:\Program Files (x86)\DanuSoft\WiFi HotSpot Creator\WiFi HotSpot Creator.exe

FirewallRules: [TCP Query User{D09D5126-AC03-4267-8513-29CDB95C7C5F}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe

FirewallRules: [UDP Query User{1477614A-E26D-4E44-8390-1297A24D2030}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
 

==================== Wiederherstellungspunkte =========================
 

14-01-2016 19:23:14 Installed Vodafone Mobile Connect Lite.

24-01-2016 14:57:14 Geplanter Prüfpunkt

31-01-2016 15:41:29 Geplanter Prüfpunkt

03-02-2016 13:43:01 Norton_Power_Eraser_20160203134255305
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (02/03/2016 08:28:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: N360.exe, Version: 13.0.2.6, Zeitstempel: 0x55772924

Name des fehlerhaften Moduls: SYMHTML.DLL, Version: 10.0.3.1, Zeitstempel: 0x563d3a37

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00191754

ID des fehlerhaften Prozesses: 0xc74

Startzeit der fehlerhaften Anwendung: 0xN360.exe0

Pfad der fehlerhaften Anwendung: N360.exe1

Pfad des fehlerhaften Moduls: N360.exe2

Berichtskennung: N360.exe3

Vollständiger Name des fehlerhaften Pakets: N360.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: N360.exe5
 

Error: (02/03/2016 07:18:16 PM) (Source: Autodesk Content Service) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase

   bei Connect.MetaStore.MetaStorage.Initialize()

   bei Connect.IVault.IVault.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (02/03/2016 07:18:10 PM) (Source: ISCTAgent) (EventID: 1000) (User: )

Description: ISCT - CISCTPnpDriverApi::CreateInstance   *****Unable to open the ISCT device driver
 

Error: (02/03/2016 06:48:05 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x8898008d) festgestellt.
 

Error: (02/03/2016 06:32:42 PM) (Source: Perflib) (EventID: 1017) (User: )

Description: Outlook
 

Error: (02/03/2016 06:32:42 PM) (Source: Perflib) (EventID: 1021) (User: )

Description: Outlook8
 

Error: (02/03/2016 05:27:23 PM) (Source: MsiInstaller) (EventID: 11310) (User: MRost)

Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Michael\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
 

Error: (02/03/2016 05:26:35 PM) (Source: MsiInstaller) (EventID: 11310) (User: MRost)

Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Michael\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
 

Error: (02/03/2016 03:35:26 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: MsMpEng.exe, Version: 4.7.205.0, Zeitstempel: 0x54cb5aeb

Name des fehlerhaften Moduls: mpengine.dll, Version: 1.1.9700.0, Zeitstempel: 0x51d28fcb

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000005615b7

ID des fehlerhaften Prozesses: 0x1aec

Startzeit der fehlerhaften Anwendung: 0xMsMpEng.exe0

Pfad der fehlerhaften Anwendung: MsMpEng.exe1

Pfad des fehlerhaften Moduls: MsMpEng.exe2

Berichtskennung: MsMpEng.exe3

Vollständiger Name des fehlerhaften Pakets: MsMpEng.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MsMpEng.exe5
 

Error: (02/03/2016 03:27:26 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: MsMpEng.exe, Version: 4.7.205.0, Zeitstempel: 0x54cb5aeb

Name des fehlerhaften Moduls: mpengine.dll, Version: 1.1.9700.0, Zeitstempel: 0x51d28fcb

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000005615b7

ID des fehlerhaften Prozesses: 0x1510

Startzeit der fehlerhaften Anwendung: 0xMsMpEng.exe0

Pfad der fehlerhaften Anwendung: MsMpEng.exe1

Pfad des fehlerhaften Moduls: MsMpEng.exe2

Berichtskennung: MsMpEng.exe3

Vollständiger Name des fehlerhaften Pakets: MsMpEng.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MsMpEng.exe5
 
 

Systemfehler:

=============

Error: (02/03/2016 07:21:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (02/03/2016 07:21:51 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1326
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (02/03/2016 03:35:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Windows Defender-Dienst" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.
 

Error: (02/03/2016 03:27:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Defender-Dienst" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (02/03/2016 03:26:52 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Der Dienst "Acronis Sync Agent Service" wurde nicht richtig gestartet.
 

Error: (02/03/2016 03:24:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (02/03/2016 03:24:43 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1326
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (02/03/2016 03:22:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Defender-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (02/03/2016 03:18:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (02/03/2016 03:18:02 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst gpsvc erreicht.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz

Prozentuale Nutzung des RAM: 36%

Installierter physikalischer RAM: 8082.65 MB

Verfügbarer physikalischer RAM: 5132.03 MB

Summe virtueller Speicher: 9362.65 MB

Verfügbarer virtueller Speicher: 6416.66 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows8_OS) (Fixed) (Total:917.03 GB) (Free:401.27 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 682D57F9)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

Das war die Meldung von Norton.

Code:

Dateiname: efswrt32.dll

Name der Bedrohung: Trojan.GenVollständiger Pfad: c:\windows\syswow64\efswrt32.dll
 

____________________________
 

____________________________
 
 

Auf Computern ab 

03.02.2016 um 13:49:58
 

Zuletzt verwendet 

03.02.2016 um 13:49:58
 

Startelement 

Nein
 

Gestartet 

Nein
 

Art der Bedrohung: Virus. Programme, die andere Programme, Dateien oder Computerbereiche infizieren, indem sie sich einfügen oder anhängen.
 

____________________________
 
 

efswrt32.dll Name der Bedrohung: Trojan.Gen

Suchen
 
 

Viele Benutzer

Tausende Benutzer in der Norton Community haben diese Datei verwendet.
 

Schon länger bekannt

Diese Datei wurde vor 6 Monaten  veröffentlicht.
 

Hoch

Das Risiko dieser Datei ist hoch.
 
 

____________________________
 
 

Quelle: Externer Datenträger
 
 

____________________________
 
 

Dateiabdruck - SHA:

Nicht verfügbar

Dateiabdruck - MD5:

Nicht verfügbar

Und hier die "Logdatei"

Code:

Kategorie: Behobene Sicherheitsrisiken

Datum/Uhrzeit,Risiko,Aktivität,Status,Empfohlene Aktion,Aktivität

03.02.2016 13:49:58,Hoch,efswrt32.dll (Trojan.Gen) erkannt von Auto-Protect,Blockiert,Behoben - Keine Aktion erforderlich,Ausgeführte Bedrohungsaktionen: 0

03.02.2016 13:41:45,Hoch,efswrt32.dll (Trojan.Gen) erkannt von Auto-Protect,Blockiert,Behoben - Keine Aktion erforderlich,Ausgeführte Bedrohungsaktionen: 0

03.02.2016 13:06:59,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,Ausgeführte Bedrohungsaktionen: 11

03.02.2016 13:01:55,Hoch,efswrt32.dll (Trojan.Gen) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,Ausgeführte Bedrohungsaktionen: 1

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Gesagt, getan. Gefunden hat das Programm aber nichts.

Hier der Log.

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.02.05.01

  rootkit: v2016.01.20.01
 

Windows 8.1 x64 NTFS

Internet Explorer 11.0.9600.18161

Michael :: MROST [administrator]
 

05.02.2016 09:18:47

mbar-log-2016-02-05 (09-18-47).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 517601

Time elapsed: 49 minute(s), 57 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So,

AdwCleaner[C1]

Code:

# AdwCleaner v5.032 - Bericht erstellt am 05/02/2016 um 11:35:33

# Aktualisiert am 31/01/2016 von Xplode

# Datenbank : 2016-02-02.1 [Server]

# Betriebssystem : Windows 8.1  (x64)

# Benutzername : Michael - MROST

# Gestartet von : C:\Users\Michael\Desktop\AdwCleaner_5.032.exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 

[-] Ordner Gelöscht : C:\Users\Michael\AppData\Roaming\SmootherWeb
 

***** [ Dateien ] *****
 

[-] Datei Gelöscht : C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\ku3tdt1u.default\user.js

[-] Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\foxydeal.sqlite

[-] Datei Gelöscht : C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\user.js
 

***** [ DLLs ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Aufgabenplanung ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1C6F51F8-BCE6-4702-8952-6A8233359FBC}

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}]

[-] Schlüssel Gelöscht : HKCU\Software\GlobalUpdate

[-] Schlüssel Gelöscht : HKCU\Software\OCS

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate

[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_

[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\GlobalUpdate

[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\OCS
 

***** [ Internetbrowser ] *****
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Winsock Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1992 Bytes] ##########

JRT.txt

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.2 (01.06.2016)

Operating System: Windows 8.1 x64 

Ran by Michael (Administrator) on 05.02.2016 at 11:58:42,62

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 0 
 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 05.02.2016 at 12:02:17,62

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016

durchgeführt von Michael (Administrator) auf MROST (05-02-2016 12:04:17)

Gestartet von C:\Users\Michael\Desktop

Geladene Profile: Michael (Verfügbare Profile: UpdatusUser & Michael & Administrator)

Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe

(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\n360.exe

(MKS Software Inc.) C:\Windows\System32\nutsrv4.exe

(PTC Inc.) C:\Program Files\PTC\PTC Portmapper\i486_nt\obj\portmap.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe

(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Intel) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe

(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\n360.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe

() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\reader_sl.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [140872 2013-03-21] (Realtek Semiconductor Corp.)

HKLM\...\Run: [IgfxTray] => C:\WINDOWS\system32\igfxtray.exe [404376 2015-08-09] ()

HKLM\...\Run: [HotKeysCmds] => "C:\WINDOWS\system32\hkcmd.exe"

HKLM\...\Run: [Persistence] => "C:\WINDOWS\system32\igfxpers.exe"

HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-20] (Lenovo Group Limited)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp

HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [382248 2013-06-20] (Lenovo.)

HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937976 2013-06-25] (Lenovo)

HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [593408 2013-07-04] (Lenovo Corporation)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2986224 2013-07-09] (Synaptics Incorporated)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [571192 2014-08-14] (Acronis)

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1804616 2015-09-06] (NVIDIA Corporation)

HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-05-16] (Intel Corporation)

HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [740232 2013-10-30] (Lenovo)

HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-08-19] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2014-07-25] (Samsung Electronics Co., Ltd.)

HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.1\bin\EpmNews.exe

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-11-12] (Geek Software GmbH)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5270504 2014-10-22] (Acronis)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [606096 2014-10-17] (Acronis International GmbH)

HKLM-x32\...\Run: [PinnacleDriverCheck] => C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg

HKLM-x32\...\Run: [NuTCSetupEnviron] => C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37248 2012-10-12] (MKS Software Inc.)

HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [522784 2015-11-17] (Autodesk Inc.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-13] (Adobe Systems Incorporated)

Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [RemoTerm.exe] => C:\Program Files (x86)\Common Files\PCTV Systems\RemoTerm\RemoTerm.exe

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Michael\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Policies\Explorer: [] 

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {50461f0a-b823-11e5-bebb-0c8bfd4aea97} - "F:\setup_vmc_lite.exe" /checkApplicationPresence

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {50461f44-b823-11e5-bebb-0c8bfd4aea97} - "F:\setup_vmc_lite.exe" /checkApplicationPresence

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {504620f6-b823-11e5-bebb-0c8bfd4aea97} - "F:\startme.exe" 

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\MountPoints2: {504623c8-b823-11e5-bebb-0c8bfd4aea97} - "F:\setup_vmc_lite.exe" /checkApplicationPresence

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2014-10-29] (Microsoft Corporation)

HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1235336 2014-08-28] (Autodesk, Inc.)

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [187152 2015-09-06] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [165712 2015-09-06] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)

ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)

ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)

ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2015 Schnellstart.lnk [2015-08-18]

ShortcutTarget: SOLIDWORKS 2015 Schnellstart.lnk -> C:\Windows\Installer\{F8093877-4F2C-40ED-9BA7-2F9F48F5176F}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC)

Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2015-06-18]

ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{16F85749-052E-48D8-AEAB-873D5A6AB89D}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{19642B95-DF84-4C27-A244-E3D048137149}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{514FECEC-336F-4DCE-B40D-0DFE911B60B9}: [DhcpNameServer] 139.7.30.125 139.7.30.126

Tcpip\..\Interfaces\{90CC83EC-4517-4723-BDA1-FAE7E3BAF19F}: [DhcpNameServer] 139.7.30.125 139.7.30.126
 

Internet Explorer:

==================

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13-comm.msn.com/?pc=LNJB

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad

SearchScopes: HKLM -> DefaultScope {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKLM -> {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKU\S-1-5-21-3695500385-1387106-2215658511-1002 -> DefaultScope {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKU\S-1-5-21-3695500385-1387106-2215658511-1002 -> {97B41988-2202-4277-9AE0-3D853726E31A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25] (Oracle Corporation)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25] (Oracle Corporation)

BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\21.7.0.11\IPS\IPSBHO.DLL => Keine Datei

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default

FF DefaultSearchEngine: google

FF DefaultSearchUrl: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF SelectedSearchEngine: Google

FF SelectedSearchEngine: google

FF Homepage: hxxp://www.google.de?hl=de&gl=de

FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=

FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-13] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-13] ()

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-16] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-16] (Intel Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @ptc.com/ProductViewLite -> C:\Program Files (x86)\Common Files\PTC\np6_pvapplite9.dll [2013-04-04] (PTC)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-3695500385-1387106-2215658511-1002: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2013-03-25] (Intel)

FF Plugin HKU\S-1-5-21-3695500385-1387106-2215658511-1002: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2013-03-25] (Intel)

FF SearchPlugin: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\searchplugins\wettercom.xml [2015-08-15]

FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\extensions\2020Player_IKEA@2020Technologies.com [2015-12-01]

FF Extension: Adblock Plus - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\2wscxqt7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-03]

FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.4.24\coFFAddon

FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.4.24\coFFAddon [2016-02-03]

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-03-21] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.5.4.24\coFFAddon
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\Exts\Chrome.crx [2016-02-03]

CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\Exts\Chrome.crx [2016-02-03]

CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1139744 2015-11-17] (Autodesk Inc.)

S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)

S3 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [565760 2013-07-04] (Lenovo Corporation) [Datei ist nicht signiert]

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [101536 2013-04-11] (Intel)

R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [144416 2013-10-30] (Lenovo)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [156616 2013-06-26] (Intel Corporation)

S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [48832 2013-04-10] (Intel Corporation)

S2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [182760 2013-04-15] ()

S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-16] (Intel Corporation)

R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2044408 2013-07-17] (Lenovo Group Limited)

R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)

S3 LENOVO.CAMMUTE; C:\Program Files\Lenovo\Communications Utility\cammute.exe [504320 2013-07-04] (Lenovo Corporation) [Datei ist nicht signiert]

S3 LENOVO.TPKNRSVC; C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe [504320 2013-07-04] (Lenovo Group Limited) [Datei ist nicht signiert]

S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [687104 2013-07-04] (Lenovo Corporation) [Datei ist nicht signiert]

R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)

S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [468984 2013-06-25] (Lenovo)

R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [465912 2013-06-21] ()

S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272864 2015-12-10] (Lenovo)

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-11-19] ()

R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\N360.exe [282016 2015-11-20] (Symantec Corporation)

R2 NuTCRACKERService; C:\WINDOWS\system32\nutsrv4.exe [574776 2012-10-12] (MKS Software Inc.)

R2 PortmapperService; C:\Program Files\PTC/PTC Portmapper/i486_nt/obj/portmap.exe [499712 2015-03-24] (PTC Inc.) [Datei ist nicht signiert]

R2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [59384 2013-07-16] (Lenovo Group Limited)

R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [138232 2013-07-16] (Lenovo Group Limited)

S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2015-08-18] (SolidWorks) [Datei ist nicht signiert]

S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2015-11-11] ()

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)

R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [22872 2014-07-21] (Validity Sensors, Inc.)

R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-03-03] (Synaptics Incorporated)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-11-19] (Intel® Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 azvusb; C:\Windows\System32\drivers\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)

R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [1665608 2016-01-25] (Symantec Corporation)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1385272 2013-04-23] (Motorola Solutions, Inc.)

R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1605050.00F\ccSetx64.sys [173808 2015-09-23] (Symantec Corporation)

S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)

S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)

R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-10-16] (Disc Soft Ltd)

S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-12] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-12] (Symantec Corporation)

S3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [132608 2009-06-29] (Huawei Technologies Co., Ltd.)

S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [68128 2013-10-30] (Windows (R) Win 7 DDK provider)

R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2014-11-23] (Acronis International GmbH)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [115656 2013-06-03] (Intel Corporation)

R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\IPSDefs\20160204.001\IDSvia64.sys [767224 2016-02-02] (Symantec Corporation)

R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21048 2013-04-15] ()

R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21048 2013-04-15] ()

R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [101976 2013-04-24] (Intel Corporation)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

S3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\VirusDefs\20160204.035\ENG64.SYS [138488 2015-10-16] (Symantec Corporation)

S3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\22.5.4.24\Definitions\VirusDefs\20160204.035\EX64.SYS [2148080 2015-10-16] (Symantec Corporation)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3494680 2015-03-09] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\Netwew02.sys [3648480 2013-10-08] (Intel Corporation)

R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [418008 2013-06-24] (Realsil Semiconductor Corporation)

R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-03-21] (Realtek Semiconductor Corp.)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [33008 2013-07-09] (Synaptics Incorporated)

R1 SMIDriver; C:\Windows\System32\drivers\smi.sys [19656 2015-03-03] (Windows (R) Win 7 DDK provider)

S3 SRTSP; C:\Windows\System32\Drivers\N360x64\1605050.00F\SRTSP64.SYS [928496 2015-11-12] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1605050.00F\SRTSPX64.SYS [50936 2015-09-23] (Symantec Corporation)

S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [34976 2015-06-29] (Lenovo Group Limited)

R0 SymEFASI; C:\Windows\System32\drivers\N360x64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-12] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\N360x64\1605050.00F\SymELAM.sys [24192 2015-09-23] (Symantec Corporation)

R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [111344 2016-02-03] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\N360x64\1605050.00F\Ironx64.SYS [297720 2015-09-23] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1605050.00F\SYMNETS.SYS [577768 2015-11-12] (Symantec Corporation)

R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1328928 2014-11-23] (Acronis International GmbH)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [234784 2014-11-23] (Acronis International GmbH)

S3 USB28xxBGA; C:\Windows\system32\DRIVERS\emBDA64.sys [654720 2010-09-01] (eMPIA Technology, Inc.) [Datei ist nicht signiert]

S3 USB28xxOEM; C:\Windows\system32\DRIVERS\emOEM64.sys [944256 2010-09-01] (eMPIA Technology, Inc.) [Datei ist nicht signiert]

R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [207256 2013-04-11] (Windows (R) Win 7 DDK provider)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-02-05 12:02 - 2016-02-05 12:02 - 00000545 _____ C:\Users\Michael\Desktop\JRT.txt

2016-02-05 11:45 - 2016-02-05 11:45 - 01609032 _____ (Malwarebytes) C:\Users\Michael\Desktop\JRT.exe

2016-02-05 11:41 - 2016-02-05 11:55 - 00002190 _____ C:\Users\Michael\Desktop\AdwCleaner[C1].txt

2016-02-05 11:32 - 2016-02-05 11:48 - 00000000 ____D C:\AdwCleaner

2016-02-05 11:26 - 2016-02-05 11:26 - 01508352 _____ C:\Users\Michael\Desktop\AdwCleaner_5.032.exe

2016-02-05 09:18 - 2016-02-05 10:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2016-02-05 09:16 - 2016-02-05 10:26 - 00000000 ____D C:\Users\Michael\Desktop\mbar

2016-02-05 09:13 - 2016-02-05 09:13 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Michael\Desktop\mbar-1.09.3.1001.exe

2016-02-04 19:57 - 2016-02-04 19:57 - 00011724 _____ C:\Users\Michael\Desktop\Behobene Sicherheitsrisiken.txt

2016-02-04 11:33 - 2016-02-04 11:33 - 00508732 _____ C:\Users\Michael\Desktop\bookmarks-2016-02-04.json

2016-02-04 09:59 - 2016-02-05 11:35 - 02007726 _____ C:\WINDOWS\ntbtlog.txt

2016-02-03 20:43 - 2016-02-03 20:46 - 00052431 _____ C:\Users\Michael\Desktop\Addition.txt

2016-02-03 20:42 - 2016-02-05 12:04 - 00032060 _____ C:\Users\Michael\Desktop\FRST.txt

2016-02-03 20:41 - 2016-02-05 12:03 - 00000000 ____D C:\FRST

2016-02-03 20:41 - 2016-02-03 20:41 - 02370560 _____ (Farbar) C:\Users\Michael\Desktop\frst64.exe

2016-02-03 20:24 - 2016-02-03 16:11 - 00002580 _____ C:\Users\Michael\Desktop\mbam-log-2016-02-03 (15-28-34).xml

2016-02-03 20:24 - 2016-02-03 15:16 - 00030966 _____ C:\Users\Michael\Desktop\mbam-log-2016-02-03 (14-39-16).xml

2016-02-03 19:21 - 2016-02-03 19:21 - 00000000 ____D C:\Users\Michael\AppData\Local\NVIDIA

2016-02-03 19:17 - 2016-02-05 09:01 - 00000000 ____D C:\WINDOWS\SysWOW64\NV

2016-02-03 19:17 - 2016-02-05 09:01 - 00000000 ____D C:\WINDOWS\system32\NV

2016-02-03 18:53 - 2015-07-30 15:04 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll

2016-02-03 18:53 - 2015-07-30 14:48 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

2016-02-03 18:14 - 2015-12-11 05:38 - 25837568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-02-03 18:14 - 2015-12-11 05:00 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2016-02-03 18:14 - 2015-12-11 04:55 - 06051328 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-02-03 18:14 - 2015-12-11 04:50 - 20367360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-02-03 18:14 - 2015-12-11 04:45 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2016-02-03 18:14 - 2015-12-11 04:21 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2016-02-03 18:14 - 2015-12-11 04:18 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2016-02-03 18:14 - 2015-12-11 04:09 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll

2016-02-03 18:14 - 2015-12-11 04:09 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2016-02-03 18:14 - 2015-12-11 04:03 - 14456832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-02-03 18:14 - 2015-12-11 03:59 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-02-03 18:14 - 2015-12-11 03:43 - 04610560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-02-03 18:14 - 2015-12-11 03:43 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll

2016-02-03 18:14 - 2015-12-11 03:38 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-02-03 18:14 - 2015-12-11 03:37 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-02-03 18:14 - 2015-12-11 03:35 - 12856320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-02-03 18:14 - 2015-12-11 03:26 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-02-03 18:14 - 2015-12-11 03:14 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2016-02-03 18:14 - 2015-12-11 03:12 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-02-03 18:14 - 2015-12-11 03:08 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-02-03 18:14 - 2015-12-11 03:07 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2016-02-03 18:14 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2016-02-03 18:14 - 2015-11-11 16:44 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2016-02-03 18:14 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2016-02-03 18:14 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-02-03 18:14 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll

2016-02-03 18:14 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2016-02-03 18:14 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2016-02-03 18:14 - 2015-11-10 00:36 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2016-02-03 18:14 - 2015-11-10 00:25 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2016-02-03 18:14 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-02-03 18:14 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2016-02-03 18:14 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2016-02-03 18:14 - 2015-11-08 22:32 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2016-02-03 18:14 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2016-02-03 18:14 - 2015-11-08 22:16 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2016-02-03 18:14 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2016-02-03 18:14 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2016-02-03 18:14 - 2015-11-08 21:53 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2016-02-03 18:14 - 2015-09-10 18:18 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2016-02-03 18:14 - 2015-09-10 17:51 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll

2016-02-03 18:14 - 2015-09-10 17:17 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll

2016-02-03 18:14 - 2015-09-10 17:07 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2016-02-03 18:14 - 2015-07-16 21:36 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec

2016-02-03 18:14 - 2015-07-16 20:50 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec

2016-02-03 18:08 - 2015-12-16 18:11 - 01200128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll

2016-02-03 18:08 - 2015-12-16 17:51 - 00868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll

2016-02-03 18:08 - 2015-11-21 17:59 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2016-02-03 18:08 - 2015-11-21 17:49 - 01344000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll

2016-02-03 18:08 - 2015-11-21 17:47 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll

2016-02-03 18:08 - 2015-11-21 17:40 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL

2016-02-03 18:08 - 2015-10-22 18:43 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL

2016-02-03 18:08 - 2015-10-22 17:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL

2016-02-03 18:08 - 2015-10-22 17:21 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll

2016-02-03 18:08 - 2015-10-22 16:58 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll

2016-02-03 18:08 - 2015-10-22 15:08 - 00513456 _____ C:\WINDOWS\SysWOW64\locale.nls

2016-02-03 18:08 - 2015-10-22 15:08 - 00513456 _____ C:\WINDOWS\system32\locale.nls

2016-02-03 18:07 - 2015-08-27 03:43 - 22372152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-02-03 18:07 - 2015-08-27 03:42 - 19795904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-02-03 18:06 - 2015-12-30 20:32 - 07453016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-02-03 18:06 - 2015-12-30 20:32 - 01735000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2016-02-03 18:06 - 2015-12-30 20:32 - 01499912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 02745184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02528784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02450240 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVENCOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02447136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVENCOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 02334104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 02324744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01877504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01798480 ____C (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01484888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01288128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01210200 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 01150232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 01115640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 01037680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00914672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00850680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00735496 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00700360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00629600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00584656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00557856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00498472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00492736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00463776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00299080 _____ (Microsoft Corporation) C:\WINDOWS\system32\VIDRESZR.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00275312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MPG4DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00274280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP43DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00250520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPG4DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00248432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP43DECD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00246856 _____ (Microsoft Corporation) C:\WINDOWS\system32\RESAMPLEDMO.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00244296 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00229272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RESAMPLEDMO.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00203016 _____ (Microsoft Corporation) C:\WINDOWS\system32\COLORCNV.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00184912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COLORCNV.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00183856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VIDRESZR.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00110544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00099136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL

2016-02-03 18:06 - 2015-12-05 06:58 - 00090904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00090392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfvdsp.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00081032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll

2016-02-03 18:06 - 2015-12-05 06:58 - 00076936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfvdsp.dll

2016-02-03 18:06 - 2015-12-03 19:07 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll

2016-02-03 18:06 - 2015-12-03 19:07 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax

2016-02-03 18:06 - 2015-12-03 19:05 - 00644608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL

2016-02-03 18:06 - 2015-12-03 19:02 - 01664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL

2016-02-03 18:06 - 2015-12-03 19:00 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL

2016-02-03 18:06 - 2015-12-03 18:58 - 00378880 ____C (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll

2016-02-03 18:06 - 2015-12-03 18:36 - 01697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll

2016-02-03 18:06 - 2015-12-03 18:30 - 00468480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFWMAAEC.DLL

2016-02-03 18:06 - 2015-12-03 18:28 - 00519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll

2016-02-03 18:06 - 2015-12-03 18:28 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax

2016-02-03 18:06 - 2015-12-03 18:27 - 00736256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL

2016-02-03 18:06 - 2015-12-03 18:24 - 01411584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL

2016-02-03 18:06 - 2015-12-03 18:23 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL

2016-02-03 18:06 - 2015-12-03 18:06 - 01501184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll

2016-02-03 18:06 - 2015-12-03 18:01 - 00743936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFWMAAEC.DLL

2016-02-03 18:06 - 2015-12-03 17:40 - 01010688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL

2016-02-03 18:06 - 2015-12-03 17:29 - 00887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL

2016-02-03 18:06 - 2015-11-22 07:59 - 01659568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2016-02-03 18:06 - 2015-11-22 07:59 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2016-02-03 18:06 - 2015-11-22 07:59 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2016-02-03 18:06 - 2015-11-22 07:59 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2016-02-03 18:06 - 2015-11-21 19:32 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll

2016-02-03 18:06 - 2015-11-21 18:50 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll

2016-02-03 18:06 - 2015-06-12 18:03 - 18823680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-02-03 18:06 - 2015-06-12 17:36 - 15159296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-02-03 18:05 - 2015-12-03 20:42 - 00561952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-02-03 18:05 - 2015-12-03 20:42 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2016-02-03 18:05 - 2015-12-03 20:42 - 00137968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll

2016-02-03 18:05 - 2015-12-03 20:42 - 00106960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll

2016-02-03 18:05 - 2015-12-03 20:41 - 00177488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-02-03 18:05 - 2015-12-03 19:52 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2016-02-03 18:05 - 2015-12-03 19:52 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll

2016-02-03 18:05 - 2015-12-03 19:52 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll

2016-02-03 18:05 - 2015-12-03 19:28 - 00401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys

2016-02-03 18:05 - 2015-12-03 19:28 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2016-02-03 18:05 - 2015-12-03 18:51 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll

2016-02-03 18:05 - 2015-12-03 18:16 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll

2016-02-03 18:05 - 2015-12-03 18:13 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-02-03 18:05 - 2015-12-03 18:07 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2016-02-03 18:05 - 2015-12-03 17:45 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2016-02-03 18:05 - 2015-12-02 16:04 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll

2016-02-03 18:05 - 2015-12-02 16:01 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll

2016-02-03 18:05 - 2015-11-20 23:47 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2016-02-03 18:05 - 2015-11-20 19:18 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2016-02-03 18:05 - 2015-11-20 17:58 - 03706880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-02-03 18:05 - 2015-11-20 17:47 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe

2016-02-03 18:05 - 2015-11-20 17:46 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll

2016-02-03 18:05 - 2015-11-20 17:44 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll

2016-02-03 18:05 - 2015-11-20 17:44 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2016-02-03 18:05 - 2015-11-20 17:43 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2016-02-03 18:05 - 2015-11-20 17:42 - 02243584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll

2016-02-03 18:05 - 2015-11-20 17:30 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe

2016-02-03 18:05 - 2015-11-20 17:29 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll

2016-02-03 18:05 - 2015-11-20 17:28 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2016-02-03 18:05 - 2015-11-20 17:27 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2016-02-03 18:05 - 2015-11-09 01:41 - 01540728 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2016-02-03 18:05 - 2015-11-08 23:30 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2016-02-03 18:05 - 2015-11-08 22:23 - 01994752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll

2016-02-03 18:05 - 2015-11-08 22:13 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll

2016-02-03 18:05 - 2015-11-08 22:01 - 01753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2016-02-03 18:05 - 2015-11-08 21:52 - 01559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll

2016-02-03 18:05 - 2015-11-08 21:48 - 01376256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2016-02-03 18:05 - 2015-11-08 21:42 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2016-02-03 18:05 - 2015-11-05 09:59 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys

2016-02-03 18:05 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2016-02-03 18:05 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys

2016-02-03 18:05 - 2015-10-10 18:20 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2016-02-03 18:05 - 2015-09-24 17:42 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll

2016-02-03 18:05 - 2015-09-24 17:40 - 00737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2016-02-03 18:05 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys

2016-02-03 18:05 - 2015-09-03 03:18 - 02531400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2016-02-03 18:05 - 2015-09-03 03:17 - 01903848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2016-02-03 18:05 - 2015-09-02 19:48 - 02345472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2016-02-03 18:05 - 2015-09-02 18:09 - 01556992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2016-02-03 18:05 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe

2016-02-03 18:05 - 2015-08-07 22:40 - 01134752 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2016-02-03 18:05 - 2015-08-07 15:13 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2016-02-03 18:05 - 2015-08-06 17:47 - 04710400 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll

2016-02-03 18:05 - 2015-08-06 17:18 - 04068352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2016-02-03 18:05 - 2015-07-30 18:18 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll

2016-02-03 18:05 - 2015-07-30 17:22 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll

2016-02-03 18:05 - 2015-07-22 15:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll

2016-02-03 18:05 - 2015-07-22 14:52 - 01633792 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2016-02-03 18:05 - 2015-07-17 15:15 - 00951296 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2016-02-03 18:05 - 2015-07-17 15:10 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2016-02-03 18:05 - 2015-07-16 01:29 - 00101720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys

2016-02-03 18:05 - 2015-07-10 18:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll

2016-02-03 18:04 - 2015-09-29 13:24 - 00155480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys

2016-02-03 18:04 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll

2016-02-03 18:04 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll

2016-02-03 18:04 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2016-02-03 18:04 - 2015-07-07 10:40 - 00270168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys

2016-02-03 18:04 - 2015-07-07 10:40 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys

2016-02-03 18:04 - 2015-07-07 10:40 - 00044560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys

2016-02-03 18:04 - 2015-06-27 12:47 - 00118616 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe

2016-02-03 18:04 - 2015-05-01 02:13 - 06521800 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2016-02-03 18:04 - 2015-05-01 02:13 - 01488000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2016-02-03 18:04 - 2015-05-01 02:13 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2016-02-03 18:03 - 2015-11-17 22:07 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2016-02-03 18:02 - 2015-12-10 01:40 - 00033456 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-02-03 18:02 - 2015-12-07 11:56 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2016-02-03 18:02 - 2015-12-04 16:00 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00705024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2016-02-03 18:02 - 2015-11-17 22:07 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-02-03 18:02 - 2015-10-28 16:49 - 02775552 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2016-02-03 18:02 - 2015-10-28 16:29 - 02462720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2016-02-03 18:02 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2016-02-03 18:02 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2016-02-03 18:02 - 2015-10-11 07:34 - 00468824 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2016-02-03 18:02 - 2015-10-11 07:34 - 00462168 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys

2016-02-03 18:02 - 2015-10-11 07:34 - 00443224 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys

2016-02-03 18:02 - 2015-10-11 07:34 - 00092504 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys

2016-02-03 18:02 - 2015-10-11 07:34 - 00027992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys

2016-02-03 18:02 - 2015-10-10 19:41 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys

2016-02-03 18:02 - 2015-10-10 19:41 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys

2016-02-03 18:02 - 2015-10-10 19:40 - 00078848 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusb.sys

2016-02-03 18:02 - 2015-10-08 17:11 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2016-02-03 18:02 - 2015-10-08 16:50 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2016-02-03 18:02 - 2015-10-03 20:41 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2016-02-03 18:02 - 2015-10-03 20:41 - 01124384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2016-02-03 18:02 - 2015-09-12 14:47 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml

2016-02-03 18:02 - 2015-09-02 03:55 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2016-02-03 18:02 - 2015-09-02 03:50 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2016-02-03 18:02 - 2015-09-02 03:17 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2016-02-03 18:02 - 2015-09-02 03:13 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2016-02-03 18:02 - 2015-08-06 18:05 - 00669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx

2016-02-03 18:02 - 2015-08-06 17:37 - 00536576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx

2016-02-03 18:02 - 2015-07-22 15:33 - 01728000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2016-02-03 18:02 - 2015-07-22 15:25 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2016-02-03 18:02 - 2015-07-18 19:31 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll

2016-02-03 18:02 - 2015-07-18 19:29 - 00655872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll

2016-02-03 18:02 - 2015-07-18 19:29 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll

2016-02-03 18:02 - 2015-07-18 19:27 - 00520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll

2016-02-03 18:02 - 2015-07-13 20:46 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll

2016-02-03 18:02 - 2015-07-13 20:45 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll

2016-02-03 18:02 - 2015-07-01 23:19 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll

2016-02-03 18:02 - 2015-07-01 23:16 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll

2016-02-03 18:02 - 2015-07-01 22:37 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll

2016-02-03 18:02 - 2015-07-01 22:35 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll

2016-02-03 18:02 - 2015-06-19 18:07 - 02819072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll

2016-02-03 18:01 - 2015-08-01 04:47 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe

2016-02-03 18:01 - 2015-08-01 04:45 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

2016-02-03 18:01 - 2015-08-01 04:38 - 01265152 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2016-02-03 18:01 - 2015-08-01 04:37 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe

2016-02-03 18:01 - 2015-08-01 04:37 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe

2016-02-03 18:01 - 2015-07-14 22:59 - 01113944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2016-02-03 18:01 - 2015-07-14 22:59 - 00487256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll

2016-02-03 18:01 - 2015-07-14 22:59 - 00393560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll

2016-02-03 18:01 - 2015-07-10 19:19 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll

2016-02-03 18:01 - 2015-07-10 18:14 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll

2016-02-03 18:01 - 2015-07-10 18:13 - 07032320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2016-02-03 18:01 - 2015-07-10 17:31 - 06213120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2016-02-03 18:01 - 2015-06-11 21:12 - 02476376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2016-02-03 18:01 - 2015-06-11 21:12 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS

2016-02-03 18:00 - 2015-10-05 19:28 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe

2016-02-03 18:00 - 2015-10-05 19:25 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2016-02-03 18:00 - 2015-08-22 14:42 - 00901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00063840 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll

2016-02-03 18:00 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll

2016-02-03 18:00 - 2015-08-03 22:15 - 00074928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll

2016-02-03 18:00 - 2015-08-03 22:15 - 00065600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll

2016-02-03 18:00 - 2015-08-01 15:22 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll

2016-02-03 18:00 - 2015-07-09 18:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe

2016-02-03 18:00 - 2015-07-09 18:13 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe

2016-02-03 18:00 - 2015-07-09 17:30 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe

2016-02-03 18:00 - 2015-07-09 17:14 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2016-02-03 17:59 - 2015-12-08 20:08 - 00685432 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll

2016-02-03 17:59 - 2015-12-08 20:07 - 00507176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll

2016-02-03 17:59 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL

2016-02-03 17:59 - 2015-08-10 19:15 - 00845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2016-02-03 17:59 - 2015-08-10 19:06 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL

2016-02-03 17:59 - 2015-08-10 18:49 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2016-02-03 17:59 - 2015-08-10 17:56 - 00272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL

2016-02-03 17:59 - 2015-08-10 17:46 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2016-02-03 17:59 - 2015-07-16 19:58 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcdAutoSetup.dll

2016-02-03 17:59 - 2015-07-14 04:27 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzsync.exe

2016-02-03 17:59 - 2015-07-10 20:06 - 00118272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

2016-02-03 17:59 - 2015-06-09 23:39 - 00081920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2016-02-03 17:59 - 2015-06-09 23:39 - 00053248 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2016-02-03 17:59 - 2015-06-09 23:38 - 01201664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-02-03 14:38 - 2016-02-05 09:18 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2016-02-03 14:37 - 2016-02-05 09:17 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2016-02-03 14:37 - 2016-02-03 14:37 - 00001121 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2016-02-03 14:37 - 2016-02-03 14:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2016-02-03 14:37 - 2016-02-03 14:37 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-02-03 14:37 - 2016-02-03 14:37 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2016-02-03 14:37 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2016-02-03 14:37 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2016-02-03 13:29 - 2016-02-03 13:29 - 00003206 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration

2016-02-03 13:29 - 2016-02-03 13:29 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton 360

2016-02-03 12:53 - 2016-02-03 13:29 - 00002284 _____ C:\Users\Public\Desktop\Norton 360 Premier.LNK

2016-02-03 12:53 - 2016-02-03 12:53 - 00111344 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS

2016-02-03 12:53 - 2016-02-03 12:53 - 00008214 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT

2016-02-03 12:53 - 2016-02-03 12:53 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared

2016-02-03 12:51 - 2016-02-03 13:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360

2016-02-03 12:51 - 2016-02-03 13:29 - 00000000 ____D C:\WINDOWS\system32\Drivers\N360x64

2016-02-03 12:51 - 2016-02-03 12:51 - 00000000 ____D C:\Program Files (x86)\Norton 360

2016-02-03 12:43 - 2016-02-03 12:43 - 00000000 ____D C:\WINDOWS\%LOCALAPPDATA%

2016-02-03 12:32 - 2016-02-03 12:32 - 00000000 ____D C:\ProgramData\PCSettings

2016-02-03 12:27 - 2016-02-03 12:49 - 00001351 _____ C:\Users\Michael\Desktop\Norton-Installationsdateien.lnk

2016-02-02 13:38 - 2016-02-02 16:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2016-02-02 11:57 - 2016-02-02 11:57 - 00000000 ____D C:\Users\Michael\AppData\Local\ElevatedDiagnostics

2016-01-27 22:36 - 2016-01-27 22:36 - 00280335 ____T C:\Users\Michael\Desktop\SemestergebührenSS2016.oxps

2016-01-26 22:45 - 2016-01-26 22:44 - 00189023 _____ C:\Users\Michael\Desktop\Vodafone-KD-Widerruf.M.Rost.pdf

2016-01-26 22:43 - 2016-01-26 22:44 - 00189023 _____ C:\Users\Michael\Desktop\KabelDeutschlandWiderrufUnterschrieben.pdf

2016-01-25 03:45 - 2016-01-25 03:45 - 00170696 _____ (Lenovo.) C:\WINDOWS\system32\ibmpmsvc.exe

2016-01-25 03:45 - 2016-01-25 03:45 - 00081096 _____ (Lenovo.) C:\WINDOWS\system32\ibmpmctl.exe

2016-01-25 03:45 - 2016-01-25 03:45 - 00072808 _____ (Lenovo.) C:\WINDOWS\system32\Drivers\ibmpmdrv.sys

2016-01-25 03:45 - 2016-01-25 03:45 - 00050888 _____ (Lenovo.) C:\WINDOWS\system32\tpinspm.dll

2016-01-19 23:09 - 2016-01-19 23:09 - 00165907 _____ C:\Users\Michael\Desktop\auftrag.pdf

2016-01-19 21:41 - 2016-02-01 13:39 - 00861909 _____ C:\Users\Michael\Desktop\antrag_beihilfe_lang.pdf

2016-01-15 18:04 - 2016-01-15 18:04 - 00002121 _____ C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk

2016-01-15 18:04 - 2016-01-15 18:04 - 00000000 ____D C:\ProgramData\Sony

2016-01-15 18:04 - 2016-01-15 18:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2016-01-15 18:04 - 2016-01-15 18:04 - 00000000 ____D C:\Program Files (x86)\Sony

2016-01-15 18:01 - 2016-01-15 18:04 - 29511952 _____ (Sony Mobile Communications ) C:\Users\Michael\AppData\Local\pcc.exe

2016-01-14 20:24 - 2016-01-14 20:25 - 00000513 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics

2016-01-14 20:11 - 2016-01-14 20:11 - 00043872 _____ (Connectify) C:\WINDOWS\system32\Drivers\cnnctfy3.sys

2016-01-14 20:11 - 2016-01-14 20:11 - 00036736 _____ (Connectify) C:\WINDOWS\system32\Drivers\cfywlan1.sys

2016-01-14 20:05 - 2016-02-05 11:48 - 00000008 __RSH C:\ProgramData\ntuser.pol

2016-01-14 20:04 - 2016-01-14 20:04 - 00000000 ____D C:\Users\Michael\AppData\Local\DanuSoft

2016-01-14 20:03 - 2016-01-14 20:03 - 00000000 ____D C:\Program Files (x86)\WiFi HotSpot Creator

2016-01-14 19:37 - 2016-01-14 19:37 - 00000000 ____D C:\Users\Michael\AppData\Roaming\FLEXnet

2016-01-14 19:24 - 2016-01-14 19:24 - 00000000 ____D C:\ProgramData\Vodafone

2016-01-12 23:53 - 2016-01-12 23:53 - 00000000 ____D C:\Users\Michael\AppData\Roaming\Vodafone

2016-01-12 23:53 - 2009-06-29 18:00 - 00132608 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbnet.sys

2016-01-12 23:53 - 2009-06-29 18:00 - 00116096 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbfake.sys

2016-01-12 23:53 - 2009-04-09 13:38 - 00116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ewusbmdm.sys

2016-01-12 23:52 - 2016-01-12 23:52 - 00008464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpOrder.dll

2016-01-12 23:52 - 2016-01-12 23:52 - 00000000 ____D C:\Users\Michael\AppData\Local\{86DD38A2-C8BD-404A-A1BD-907F6B69C913}
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-02-05 11:53 - 2014-10-16 22:14 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-02-05 11:53 - 2014-10-16 17:32 - 00000000 __SHD C:\Users\Michael\IntelGraphicsProfiles

2016-02-05 11:50 - 2014-10-16 06:22 - 00000000 ____D C:\ProgramData\Validity

2016-02-05 11:50 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-02-05 11:45 - 2015-05-17 12:11 - 01812820 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-02-05 11:45 - 2014-09-24 06:43 - 00779098 _____ C:\WINDOWS\system32\perfh007.dat

2016-02-05 11:45 - 2014-09-24 06:43 - 00164784 _____ C:\WINDOWS\system32\perfc007.dat

2016-02-05 11:45 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf

2016-02-05 11:44 - 2015-07-31 12:02 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation

2016-02-05 11:25 - 2014-10-17 15:59 - 00000000 ____D C:\Users\Michael\AppData\Roaming\vlc

2016-02-05 11:18 - 2014-10-16 21:15 - 00000000 ____D C:\Users\Michael\AppData\Local\CrashDumps

2016-02-05 11:11 - 2014-10-16 22:14 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-02-05 10:17 - 2014-10-14 19:31 - 00003594 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3695500385-1387106-2215658511-1002

2016-02-05 09:12 - 2014-10-14 21:40 - 00000000 ____D C:\Users\Michael\Downloads\Programme install

2016-02-05 09:07 - 2015-05-01 16:40 - 00000000 ____D C:\Users\Michael\AppData\Local\Akamai

2016-02-04 10:09 - 2014-10-17 11:55 - 00000000 ____D C:\Users\Michael\AppData\Local\NPE

2016-02-04 10:04 - 2014-10-17 12:01 - 00000000 ____D C:\NPE

2016-02-03 22:19 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache

2016-02-03 20:23 - 2015-06-11 21:58 - 00000000 ____D C:\Program Files\Common Files\AV

2016-02-03 19:20 - 2014-10-16 17:31 - 00000401 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat

2016-02-03 19:17 - 2014-10-16 06:22 - 00000000 ____D C:\ProgramData\NVIDIA

2016-02-03 19:17 - 2013-08-22 15:44 - 00596200 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-02-03 19:16 - 2015-06-02 22:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-02-03 19:16 - 2015-05-17 09:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2016-02-03 19:16 - 2015-05-17 09:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2016-02-03 19:16 - 2014-10-16 06:21 - 00000000 ____D C:\Program Files\CONEXANT

2016-02-03 19:16 - 2014-10-14 21:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2016-02-03 19:02 - 2015-05-16 12:13 - 00000000 ___SD C:\WINDOWS\system32\GWX

2016-02-03 19:02 - 2015-05-16 12:13 - 00000000 ____D C:\WINDOWS\SysWOW64\GWX

2016-02-03 19:02 - 2015-05-16 10:26 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-02-03 19:02 - 2014-09-24 08:43 - 00000000 ___SD C:\WINDOWS\system32\CompatTel

2016-02-03 19:02 - 2014-09-24 07:00 - 00000000 ____D C:\Program Files\Windows Journal

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Defender

2016-02-03 19:02 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2016-02-03 18:58 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-02-03 18:56 - 2015-05-17 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2016-02-03 18:41 - 2014-10-20 20:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2016-02-03 18:39 - 2014-10-16 06:21 - 00000000 ____D C:\ProgramData\Conexant

2016-02-03 18:37 - 2014-10-16 06:21 - 00000000 ____D C:\Temp

2016-02-03 18:37 - 2014-10-16 06:21 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2016-02-03 18:37 - 2014-10-16 06:21 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2016-02-03 18:33 - 2014-10-14 21:26 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-02-03 18:29 - 2014-10-14 21:26 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-02-03 16:07 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2016-02-03 13:33 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP

2016-02-03 13:16 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM

2016-02-03 13:06 - 2014-10-16 22:14 - 00004102 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2016-02-03 13:06 - 2014-10-16 22:14 - 00003866 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2016-02-03 12:56 - 2013-10-30 13:10 - 00000000 ____D C:\ProgramData\Norton

2016-02-03 12:50 - 2013-10-30 13:10 - 00000000 ____D C:\Program Files (x86)\NortonInstaller

2016-02-03 12:49 - 2014-10-27 08:13 - 00926208 ___SH C:\Users\Michael\Desktop\Thumbs.db

2016-02-03 12:46 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI

2016-02-03 12:32 - 2013-10-30 13:10 - 00000000 ____D C:\ProgramData\NortonInstaller

2016-02-03 12:27 - 2014-10-30 19:13 - 00000000 ____D C:\Users\Public\Downloads\Norton

2016-02-03 11:13 - 2014-10-14 22:16 - 00000000 ____D C:\Users\Michael\AppData\Roaming\IrfanView

2016-02-03 11:10 - 2014-10-17 22:42 - 00000000 ____D C:\Users\Michael\Div

2016-02-03 10:57 - 2014-10-16 06:27 - 00000000 ____D C:\Users\Michael

2016-02-02 11:48 - 2015-02-10 09:22 - 00000000 ____D C:\Users\Michael\AppData\Roaming\avidemux

2016-02-01 13:39 - 2015-12-10 21:18 - 00000000 ____D C:\Users\Michael\Desktop\TrailTrophy

2016-01-31 20:19 - 2014-10-17 19:44 - 00000000 ____D C:\Users\Michael\AppData\Roaming\calibre

2016-01-31 15:02 - 2014-10-17 23:05 - 00000738 _____ C:\Users\Michael\Desktop\Too Do Liste.txt

2016-01-30 22:35 - 2013-10-30 13:09 - 00000000 ____D C:\WINDOWS\System32\Tasks\Intel(R) Small Business Advantage

2016-01-22 21:37 - 2015-03-09 22:38 - 00000000 ____D C:\Users\Michael\AppData\Roaming\dvdcss

2016-01-16 23:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-01-15 22:16 - 2013-10-30 12:38 - 00000000 ____D C:\Intel

2016-01-15 18:05 - 2013-10-30 12:45 - 00000000 ____D C:\ProgramData\Package Cache

2016-01-15 18:04 - 2014-10-16 06:20 - 00000000 ____D C:\Program Files\Intel

2016-01-15 18:04 - 2013-10-30 12:44 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-01-14 20:32 - 2015-05-17 20:08 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task

2016-01-14 20:32 - 2014-10-15 19:47 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2016-01-14 19:28 - 2014-12-10 22:01 - 01833602 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI

2016-01-14 19:17 - 2015-03-21 09:32 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys

2016-01-12 23:53 - 2014-10-23 20:44 - 00000000 ____D C:\ProgramData\FLEXnet

2016-01-07 23:00 - 2014-10-17 14:16 - 00000000 ____D C:\Users\Michael\AppData\Local\JDownloader v2.0
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2014-10-14 19:26 - 2014-10-18 22:25 - 0007514 _____ () C:\Users\Michael\AppData\Roaming\AbsoluteReminder.xml

2014-09-01 09:18 - 2015-07-05 17:58 - 0000365 _____ () C:\Users\Michael\AppData\Roaming\DSQHLNAB

2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Michael\AppData\Roaming\OYYSR

2014-12-10 22:02 - 2014-12-10 22:02 - 0000095 _____ () C:\Users\Michael\AppData\Local\fusioncache.dat

2014-10-17 14:35 - 2014-10-17 14:35 - 84160900 _____ () C:\Users\Michael\AppData\Local\JDownloader v2.0 - Kopie.rar

2016-01-15 18:01 - 2016-01-15 18:04 - 29511952 _____ (Sony Mobile Communications                                  ) C:\Users\Michael\AppData\Local\pcc.exe

2015-05-06 20:06 - 2015-05-06 20:06 - 0000831 _____ () C:\Users\Michael\AppData\Local\recently-used.xbel

2014-10-14 19:25 - 2014-10-16 21:15 - 0000280 _____ () C:\Users\Michael\AppData\Local\RegisteredPackageInformation.xml

2013-10-30 13:01 - 2013-10-30 13:01 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2014-10-23 19:53 - 2014-10-23 19:53 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

2013-10-30 13:05 - 2013-10-30 13:05 - 0000107 _____ () C:\ProgramData\{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}.log

2013-10-30 13:03 - 2013-10-30 13:04 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log

2013-10-30 13:04 - 2013-10-30 13:05 - 0000110 _____ () C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log

2013-10-30 13:05 - 2013-10-30 13:05 - 0000115 _____ () C:\ProgramData\{D6E853EC-8960-4D44-AF03-7361BB93227C}.log
 

Einige Dateien in TEMP:

====================

C:\Users\Michael\AppData\Local\Temp\ose00000.exe

C:\Users\Michael\AppData\Local\Temp\proxy_vole4083257817253690246.dll

C:\Users\Michael\AppData\Local\Temp\SpOrder.dll

C:\Users\Michael\AppData\Local\Temp\sqlite3.dll

C:\Users\Michael\AppData\Local\Temp\_unps.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-01-31 14:00
 

==================== Ende von FRST.txt ============================

Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Untersuchen klicken.

http://www.trojaner-board.de/picture...&pictureid=611

Ok, war mir nicht sicher.

Addition

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016

durchgeführt von Michael (2016-02-05 13:41:53)

Gestartet von C:\Users\Michael\Desktop

Windows 8.1 (X64) (2014-10-16 16:31:40)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-3695500385-1387106-2215658511-500 - Administrator - Disabled) => C:\Users\Administrator

ASPNET (S-1-5-21-3695500385-1387106-2215658511-1007 - Limited - Enabled)

Gast (S-1-5-21-3695500385-1387106-2215658511-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3695500385-1387106-2215658511-1006 - Limited - Enabled)

Michael (S-1-5-21-3695500385-1387106-2215658511-1002 - Administrator - Enabled) => C:\Users\Michael

UpdatusUser (S-1-5-21-3695500385-1387106-2215658511-1001 - Limited - Enabled) => C:\Users\UpdatusUser
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Norton 360 Premier (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Norton 360 Premier (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}

FW: Norton 360 Premier (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

µTorrent (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\uTorrent) (Version: 3.4.5.41202 - BitTorrent Inc.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.3.0.1 - Absolute Software)

Acronis True Image 2015 (HKLM-x32\...\{F2FEDE47-3088-49C1-AC91-B6F2F1056824}Visible) (Version: 18.0.6055 - Acronis)

Acronis True Image 2015 (x32 Version: 18.0.6055 - Acronis) Hidden

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.172 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.14) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.14 - Adobe Systems Incorporated)

Akamai NetSession Interface (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Akamai) (Version:  - Akamai Technologies, Inc)

Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 8.42.20 - )

ape@map (HKLM-x32\...\{93300680-2A38-4B1D-9B1D-B6A95296E3CA}) (Version: 3.3.5 - Onyx Technologie OG)

Arbortext IsoView 7.3 (HKLM-x32\...\{DE52A69A-978A-480A-82F7-E17C50F98EC6}) (Version: 7.3.10.22 - PTC)

AutoCAD Mechanical 2015 - Deutsch (German) (Version: 19.0.206.0 - Autodesk) Hidden

AutoCAD Mechanical 2015 - Deutsch (German) (Version: 19.0.48.0 - Autodesk) Hidden

AutoCAD Mechanical 2015 - Deutsch (German) SP2 (HKLM\...\AutoCAD Mechanical 2015 - Deutsch (German) SP2) (Version: 1 - Autodesk)

AutoCAD Mechanical 2015 Language Pack - Deutsch (German) (Version: 19.0.48.0 - Autodesk) Hidden

Autodesk 360 (HKLM\...\{556966D9-F7F6-421B-9707-D07901604DDF}) (Version: 5.2.3.1000 - Autodesk)

Autodesk App Manager (HKLM-x32\...\{C8125548-F2D5-4059-823F-1F3C5BBD9F19}) (Version: 1.2.0 - Autodesk)

Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.9 - Autodesk)

Autodesk AutoCAD Mechanical 2015 - Deutsch (German) (HKLM\...\AutoCAD Mechanical 2015 - Deutsch (German)) (Version: 19.0.48.0 - Autodesk)

Autodesk AutoCAD Performance Feedback Tool Version 1.2.2 (HKLM-x32\...\{85735431-6CD3-4B16-BEC8-95332034E53B}) (Version: 1.2.2.0 - Autodesk)

Autodesk BIM 360 Glue AutoCAD 2015 Add-in 64 bit (HKLM\...\{C87C5BB3-1C3D-4291-A324-BAC130558081}) (Version: 4.35.8396 - Autodesk)

Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)

Autodesk Content Service (x32 Version: 3.2.0.0 - Autodesk) Hidden

Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden

Autodesk Content Service Language Pack (x32 Version: 3.2.0.0 - Autodesk) Hidden

Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)

Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)

AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - )

Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )

Bandizip (HKLM\...\Bandizip) (Version: 5.06 - Bandisoft.com)

Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)

calibre 64bit (HKLM\...\{7A073C16-B3B5-4913-8457-262B6E17947A}) (Version: 2.5.0 - Kovid Goyal)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.5.5571 - CDBurnerXP)

Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.65.55.62 - Conexant)

Creo Direct Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Direct Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Layout Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Layout Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Parametric Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Parametric Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Platform 2.36 (HKLM-x32\...\{BB175478-4D65-42E7-AC13-60F8389E243B}) (Version: 2.36.0 - PTC)

Creo Simulate Version 2.0 Datecode [M120] (HKLM-x32\...\Creo Simulate Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

Creo Thumbnail Viewer 2.0 (HKLM\...\{F22311A6-0C71-46EE-A501-4C5503CFEFCC}) (Version: 30.14.200 - PTC)

Creo View Express 2.0 (HKLM\...\{03F6002E-A32B-4C68-818F-DEE386463FBC}) (Version: 10.1.40.15 - PTC)

CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5428.52 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)

Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden

Dependency Package Update (Version: 1.6.36.00 - Lenovo Inc.) Hidden

Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden

DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.6.1 - DivX, Inc.)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.80 - DivX, LLC)

FARO LS 1.1.501.0 (64bit) (HKLM-x32\...\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Freemake Video Converter Version 4.1.5 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.5 - Ellora Assets Corporation)

FreeMat (HKLM-x32\...\FreeMat 4.2) (Version: 4.2 - Humanity)

Garmin BaseCamp (HKLM-x32\...\{11172DEF-77A3-418C-B980-EF0D097CA237}) (Version: 4.5.1 - Garmin Ltd or its subsidiaries)

Garmin USB Drivers (HKLM\...\{DC7720F2-98BE-41C1-B0A8-E391362E86B8}) (Version: 2.3.1.1 - Garmin Ltd or its subsidiaries)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden

HandBrake 0.10.1 (HKLM-x32\...\HandBrake) (Version: 0.10.1 - )

Integrated Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10224 - Realtek Semiconductor Corp.)

Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41900) (Version: 3.8.0.41900.72 - Intel)

Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1011 - Intel Corporation)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.10.1372 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1306-148929CC1385}) (Version: 3.1.1306.0354 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)

Intel(R) Smart Connect Technology 4.1 x64 (HKLM\...\{6555226B-7295-4CFD-9D5B-9C8F394BE03A}) (Version: 4.1.41.2234 - Intel)

Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)

Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden

Intel(R) WiDi (HKLM\...\{AD5700DA-F9C5-432B-9927-F555204E38CE}) (Version: 4.1.52.0 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{313c06de-4aa7-4a1f-930a-f10f80380426}) (Version: 17.14.0 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)

Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)

JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)

Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.01 - )

Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.36.00 - Lenovo Group Limited)

Lenovo Fingerprint Manager (HKLM\...\{1E36FF16-8B0B-4399-99D6-A33EE7D48EDC}) (Version: 4.5.266.0 - Synaptics)

Lenovo Fingerprint Manager (HKLM\...\{F7AB2C19-6A27-4C75-A92A-8CC7C59E5FA2}) (Version: 4.5.266.0 - )

Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden

Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden

Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.11.08 - Lenovo)

Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 1.10 - Lenovo Group Limited)

Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.1.3.0 - Lenovo Corporation)

Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 1.2.5.8 - Lenovo Group Limited)

Lenovo Settings Mobile Hotspot (HKLM\...\{42603F7D-B08D-436B-B0D8-3E2DEF1AFD41}_is1) (Version: 1.2.0.80 - Lenovo)

Lenovo Solution Center (HKLM\...\{4386A5EF-BD23-49F4-9DAD-CD76B4F6A8BF}) (Version: 2.8.006.00 - Lenovo Group Limited)

Lenovo Solutions for Small Business (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.0.32.7350 - Intel(R) Corporation)

Lenovo Solutions for Small Business Customizations (HKLM-x32\...\{AFD7B869-3B70-40C7-8983-769256BA3BD2}) (Version: 2.0.0005.00 - Lenovo Group Limited)

Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0019 - Lenovo)

Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited)

Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo)

Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)

Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden

Metric Collection SDK 35 (x32 Version: 1.2.0001.00 - Lenovo Group Limited) Hidden

Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )

Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (HKLM-x32\...\{90120000-00B2-0409-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version:  - Microsoft Corporation)

MKS Platform Components 9.x (HKLM\...\{30276636-0000-0905-9ABB-000BDB5CF35D}) (Version: 9.5.0000 - Mortice Kern Systems)

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)

Mozilla Firefox 43.0.1 (x86 de) (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)

Mozilla Thunderbird 38.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.5.0 (x86 de)) (Version: 38.5.0 - Mozilla)

Mozilla Thunderbird 38.5.1 (x86 de) (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Mozilla Thunderbird 38.5.1 (x86 de)) (Version: 38.5.1 - Mozilla)

Norton 360 Premier (HKLM-x32\...\N360) (Version: 22.5.5.15 - Symantec Corporation)

NVIDIA Grafiktreiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.82 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)

NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)

paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)

PDF24 Creator 6.9.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Pinnacle MediaCenter (HKLM-x32\...\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}) (Version:  - )

PTC Portmapper Version 2.0 Datecode [M120] (HKLM-x32\...\PTC Portmapper Version 2.0 Datecode [M120]) (Version: 2.0 - PTC)

PTC Quality Agent (HKLM-x32\...\{CE7DF7C9-82FC-4E33-9E1E-D5C024A0EECE}) (Version: 2.0.0.0 - PTC)

RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 2.1.1.0 - Lenovo)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21234 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)

SAM 6.1 (HKLM-x32\...\SAM 6.1_is1) (Version:  - ARTAS - Engineering Software)

Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14074.11 - Samsung Electronics Co., Ltd.)

Samsung Kies (x32 Version: 2.6.3.14074.11 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.)

SketchUp-Import (HKLM-x32\...\{C403E867-FCF1-432B-BCC1-8FFD40A10A6E}) (Version: 1.2.0 - Autodesk)

SOLIDWORKS 2015 x64 Edition SP02.1 (HKLM-x32\...\SolidWorks Installation Manager 20150-40201-1100-100) (Version: 23.2.1.1 - SolidWorks Corporation)

SOLIDWORKS 2015 x64 Edition SP02.1 (Version: 23.121.1 - Dassault Systemes SolidWorks Corp) Hidden

SOLIDWORKS 2015 x64 German Resources (Version: 23.121.1 - Dassault Systèmes SolidWorks Corp) Hidden

SOLIDWORKS Composer Player 2015 SP02.1 x64 Edition (Version: 23.21.1 - Dassault Systèmes SolidWorks Corp) Hidden

SOLIDWORKS eDrawings 2015 x64 Edition SP02.1 (Version: 15.2.0033 - Dassault Systèmes SolidWorks Corp) Hidden

Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony)

Startup TOOLS - SE Creo 2.0 M030 (HKLM-x32\...\Startup TOOLS - SE Creo 2.0) (Version: M030 - INNEO Solutions GmbH)

SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.80.99066 - SugarSync, Inc.)

Synaptics WBF DDK 5011 (HKLM\...\{4D70781C-36A9-4335-9568-565C6F61B5EB}) (Version: 4.5.289.0 - )

Synaptics WBF DDK 5011 (HKLM\...\{9062E143-DEDB-4F8C-B5B8-30AEC328400C}) (Version: 4.5.289.0 - Synaptics)

TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)

The Klub 17 (HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\Klub-7) (Version: 7.5.0 - Team WRK17)

ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.6.4.27 - )

ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.26 - Lenovo)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

Verfügbare Autodesk-Apps (HKLM-x32\...\{EDDEE94B-214D-4B07-9727-A3E46F3E379A}) (Version: 1.2.0 - Autodesk)

VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)

VSDC Free Video Editor Version 3.1.1.361 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 3.1.1.361 - Flash-Integro LLC)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (04/22/2013 12.6.0.1033) (HKLM\...\7C710827497AEB36701301B03C5D3CE34799DC28) (Version: 04/22/2013 12.6.0.1033 - Intel Corporation)

Windows-Treiberpaket - Lenovo 1.67.00.02 (04/17/2013 1.67.00.02) (HKLM\...\907DA143458FE258EFEB416B946DE8DF2B87A0BA) (Version: 04/17/2013 1.67.00.02 - Lenovo)

WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2015\acad.exe (Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{5B69A6B4-393B-459C-8EBB-214237A9E7AC}\InprocServer32 -> C:\Program Files\Bandizip\bdzshl64.dll (Bandisoft.com)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe => Keine Datei

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3695500385-1387106-2215658511-1002_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2015\de-DE\acadficn.dll (Autodesk, Inc.)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {059AA132-6ECD-4063-9A0F-466110A041A8} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)

Task: {07ACEA6E-67DF-4A28-8426-E171A92894FA} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2015-08-17] (Lenovo)

Task: {13D69F84-9EBE-494E-818C-3352E61A062B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {16A86755-4E8D-47ED-A8BA-114113F61DAC} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton 360 Premier\Upgrade.exe [2016-01-06] (Symantec Corporation)

Task: {178DF087-C431-4975-8E5F-CED760CA5461} - System32\Tasks\PMTask => C:\PROGRA~2\ThinkPad\UTILIT~1\PwmIdTsv.exe

Task: {31B76DC0-BB5C-45AD-85BB-1DEF1160360A} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-12-10] (Lenovo)

Task: {38B16F6B-DC0F-474C-9EE7-8C6B04A42EDF} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2013-06-28] (CyberLink Corp.)

Task: {481973EF-4025-4A13-9FD9-CA9D30A97A36} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)

Task: {546F069C-815E-4B7A-9611-8DB709E730EE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-03] (Microsoft Corporation)

Task: {56A7539C-C2F2-465A-99C5-8E1923972BBC} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-12-10] (Lenovo)

Task: {5849A97B-84A3-48AE-A8FB-4EC2F97A4BA2} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe

Task: {6FCBBF2B-690A-4E24-B50D-C13F4E300C24} - System32\Tasks\{34C81C06-4869-4CDD-8785-06C7237A0B92} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}\Setup.exe" -c UNINSTALL /l0x0007

Task: {769D748E-34D1-4CAA-854F-B646D7A00BFC} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-12-10] (Lenovo)

Task: {8415785E-A16A-4CA7-B02F-82711DDEB240} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2015-11-11] ()

Task: {8F56A121-721E-4137-BDC8-32989660DFF9} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\WSCStub.exe [2016-01-06] (Symantec Corporation)

Task: {9CA1147E-B7F8-4480-873F-8ABD320B8673} - System32\Tasks\Intel(R) Small Business Advantage\Notifier => C:\Program Files\Intel\Intel(R) Small Business Advantage\UI\SBA_Notifier.exe [2013-04-10] (Intel Corporation)

Task: {A1C2B286-F6CA-4B79-9F09-232F45C3CEE9} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)

Task: {A2A6F834-1626-41A9-B2A4-3A58FD91AC94} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)

Task: {A558D31D-2561-4587-9B1D-8E70BD61D69E} - \CreateChoiceProcessTask -> Keine Datei <==== ACHTUNG

Task: {AE93A683-D738-4810-A6E8-C4FE986D2ACF} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

Task: {B828D301-DC7C-4FC5-A78E-8E8D52733328} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2013-03-25] (Intel Corporation)

Task: {BA48FCCD-F364-42BF-B684-E7B4DCC4D3D1} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto

Task: {BCF78AEC-A75C-4304-AE65-FEEF4EFEDF58} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-03-06] ()

Task: {BE7FC032-8100-42FA-86AE-EE20647ADA97} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe [2015-12-10] (Lenovo)

Task: {C605BECB-54A6-4FC4-A5B8-B99FADBA4388} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

Task: {C78AAB59-F9EA-47E3-B66A-15288F96422A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)

Task: {C819B0CB-3578-4D52-AE54-E6272A3835D2} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe [2015-12-10] (Lenovo)

Task: {D4BAC466-4612-4E23-AB7D-15B23CAB4BBF} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-12-10] (Lenovo)

Task: {E907FFEB-6DEE-4660-8925-C1E00003E8C8} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\Michael\Div\Neuer Ordner\Cryptload_1.1.8\router\FRITZ!Box\reconnect.bat - Verknüpfung.lnk -> C:\Users\Michael\Documents\Backup\Div\Neuer Ordner\Cryptload_1.1.8\router\FRITZ!Box\reconnect.bat (Keine Datei)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2013-10-30 13:11 - 2013-08-01 07:42 - 00117248 _____ () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL

2011-04-14 01:41 - 2011-04-14 01:41 - 00034304 _____ () C:\WINDOWS\System32\ssb3ml6.dll

2011-04-14 01:40 - 2011-04-14 01:40 - 00968192 _____ () C:\WINDOWS\system32\spool\DRIVERS\x64\3\ssb3mdu.dll

2013-06-21 15:42 - 2013-06-21 15:42 - 00465912 _____ () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe

2015-05-01 19:29 - 2015-11-17 03:33 - 00055328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll

2015-05-01 19:29 - 2015-11-17 03:33 - 00103968 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll

2013-10-30 13:02 - 2013-10-30 13:02 - 00033520 _____ () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll

2013-10-30 12:39 - 2013-05-16 09:05 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2015-01-17 13:03 - 2015-01-17 13:03 - 00799232 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Networking\86865ced79f3180ebdfa736d895e5edb\Windows.Networking.ni.dll

2015-01-17 13:03 - 2015-01-17 13:03 - 00228864 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\16c3eb7650767d95d002c998d0c73eb5\Windows.Foundation.ni.dll

2014-10-22 10:45 - 2014-10-22 10:45 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll

2014-10-22 10:53 - 2014-10-22 10:53 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll

2014-10-22 10:46 - 2014-10-22 10:46 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\apemap.com -> hxxp://apemap.com
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "DivXMediaServer"

HKLM\...\StartupApproved\Run32: => "DivXUpdate"

HKLM\...\StartupApproved\Run32: => "KiesTrayAgent"

HKLM\...\StartupApproved\Run32: => "PDFPrint"

HKLM\...\StartupApproved\Run32: => "ADSKAppManager"

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\StartupApproved\StartupFolder: => "OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk"

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\StartupApproved\Run: => "DAEMON Tools Lite"

HKU\S-1-5-21-3695500385-1387106-2215658511-1002\...\StartupApproved\Run: => "Autodesk Sync"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{F0667ADB-C7DD-461E-A751-CA8675D420BB}] => (Allow) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe

FirewallRules: [{87CDD91B-3C88-4725-A3C9-CAE9318E83CF}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe

FirewallRules: [{5CD5F1FE-3FAF-4453-AEF1-DD964C1165C5}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{1DED1EFF-4EBA-4B5F-B751-E3DA4C0F870C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{7B69F144-31A9-433A-A664-59691645B391}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe

FirewallRules: [{E24F5575-9071-4C24-8BF0-E47477904366}] => (Allow) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe

FirewallRules: [{F58B3720-0A92-42B8-9284-A0F1C72F4A3D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{0925BBA3-92A4-4B87-BF75-5BC0E5EB7663}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{8622E70C-3387-4939-B8DE-39135B64552C}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe

FirewallRules: [{FEB03F9F-0381-4849-AD33-3AA4A2684ACC}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{CF2D435E-2FF8-4E7E-B847-3F2F68BE1BDB}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{916C92F9-36CA-4870-9361-87046761F4FC}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{20DB91EA-7D48-4062-8209-EC9732994631}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

FirewallRules: [{3271F7FB-050B-4F41-9DC0-92348438D113}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMC.exe

FirewallRules: [{C179976C-6057-4724-B62C-D092B3005CF5}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMC.exe

FirewallRules: [{6F5396F7-2358-4F0B-8298-00CA0135CCDF}] => (Allow) C:\Program Files (x86)\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe

FirewallRules: [{40B3EFB5-8E41-4C9D-94E3-30333109762B}] => (Allow) C:\Program Files (x86)\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe

FirewallRules: [{909F52B1-6270-4D69-BD3B-9939CE5A6693}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PSST.exe

FirewallRules: [{AA198A54-E16F-4B22-9A07-4724511F96EE}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PSST.exe

FirewallRules: [{2578A926-831B-4F7D-9E1C-56B5506968D6}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMSInstallInit.exe

FirewallRules: [{DD414C88-7220-4196-A7B3-9B804BDDCBF6}] => (Allow) C:\Program Files (x86)\Pinnacle\MediaCenter\PMSInstallInit.exe

FirewallRules: [{D7117F87-8191-48AE-BCAC-2D2A3528DA8E}] => (Allow) LPort=1900

FirewallRules: [{20B8C29E-C343-4FDE-ACD9-F702DD1D6F28}] => (Allow) LPort=2869

FirewallRules: [{20295365-D8CB-49F6-83C9-ECA81D70EB22}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B9209D86-036F-4B2A-96C6-8D7247E7AC5D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{C50CB052-01AA-4B18-89B8-80D84346019F}] => (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe

FirewallRules: [{FAEECDE2-A68C-4FE7-AB27-F4171B2365FE}] => (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe

FirewallRules: [{CFCBCDC8-6163-48C1-8789-42899E309029}] => (Allow) C:\Program Files\PTC\Creo 2.0\View Express\i486_nt\obj\productview.exe

FirewallRules: [{E87F7DC8-2CC3-4E19-AEFF-418D65E51283}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{B766662C-8ABF-48C7-8192-EA5776FDD8B4}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{6D43DDE6-664D-45DC-8C91-EFC62456712A}] => (Allow) LPort=50248

FirewallRules: [TCP Query User{B83C8A7C-8530-494F-A254-F2423749CC4F}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{6094F45C-FC14-4193-96E8-7363B9280DFD}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [{85F69D71-14D9-44A5-A8BC-D54792329382}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{29FBD059-83D4-4F67-9713-70AA8ACE4C1B}] => (Allow) LPort=2869

FirewallRules: [{BEC51D66-5640-4D9A-ACBE-98B7D338FAE6}] => (Allow) LPort=1900

FirewallRules: [{D0D78A34-EAA2-4A73-ADE0-E919097084C8}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [TCP Query User{F21B6A95-6B89-49E0-A10A-58B53F65CBE2}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe

FirewallRules: [UDP Query User{B3ED1102-C41A-449D-AD85-64F762CE1AEB}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\nms\nmsd.exe

FirewallRules: [TCP Query User{25C5811C-D15E-477A-99E8-5BEFDFF16063}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe

FirewallRules: [UDP Query User{E7DED16E-ABCD-4B8C-88C0-68AEC00FDF78}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\xtop.exe

FirewallRules: [TCP Query User{B4D56A37-C34F-4BA1-BB1C-A28ADB147537}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe

FirewallRules: [UDP Query User{EA86D32D-0762-4B94-92D7-8D6647EB6577}C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 2.0\common files\m120\x86e_win64\obj\pro_comm_msg.exe

FirewallRules: [{E0DD0B4B-DC3B-481C-9AFF-7D2127D95E98}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{CD9A8D4A-BD9A-4478-9189-3E014F4C5220}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{6DA52323-296C-483F-90F1-59F9FC97F471}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{31AE6E20-6C30-4D5A-B483-853B84D1A802}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D4CE867D-EC9C-45C1-82A1-324556B6FCDD}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe

FirewallRules: [{F6D23606-7DA3-4424-9EBF-AC84AE86CDCE}] => (Allow) C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe

FirewallRules: [TCP Query User{9C240B87-FFA7-447A-AAD2-38C4AF965142}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{E5D85636-1F69-45A2-A628-25793F5DEC26}C:\users\michael\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\michael\appdata\local\akamai\netsession_win.exe

FirewallRules: [{4A001043-8D1E-4646-B82F-30795835C95A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{7711779A-5AAE-46EC-8AA5-F1B22D0127FA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{91FB9B88-D576-434E-875A-FC8531040812}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{B0D262F6-DD51-48F8-8092-DD374D6E4D48}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{8C09B769-8BD6-408C-A67A-01134F8202D8}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe

FirewallRules: [{DF677A84-688C-42AA-B876-EBD057423316}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe

FirewallRules: [{6A90D776-EE91-46F7-9B89-39C9D445DF3F}] => (Allow) C:\Program Files (x86)\DanuSoft\WiFi HotSpot Creator\WiFi HotSpot Creator.exe

FirewallRules: [{75D883BD-C133-40C5-9DF0-58FCBA8A9C7F}] => (Allow) C:\Program Files (x86)\DanuSoft\WiFi HotSpot Creator\WiFi HotSpot Creator.exe

FirewallRules: [TCP Query User{D09D5126-AC03-4267-8513-29CDB95C7C5F}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe

FirewallRules: [UDP Query User{1477614A-E26D-4E44-8390-1297A24D2030}C:\program files (x86)\connectify\connectify.exe] => (Allow) C:\program files (x86)\connectify\connectify.exe
 

==================== Wiederherstellungspunkte =========================
 

14-01-2016 19:23:14 Installed Vodafone Mobile Connect Lite.

24-01-2016 14:57:14 Geplanter Prüfpunkt

31-01-2016 15:41:29 Geplanter Prüfpunkt

03-02-2016 13:43:01 Norton_Power_Eraser_20160203134255305

05-02-2016 11:58:51 JRT Pre-Junkware Removal
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (02/05/2016 11:51:46 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase

   bei Connect.MetaStore.MetaStorage.Initialize()

   bei Connect.IVault.IVault.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (02/05/2016 11:51:16 AM) (Source: ISCTAgent) (EventID: 1000) (User: )

Description: ISCT - CISCTPnpDriverApi::CreateInstance   *****Unable to open the ISCT device driver
 

Error: (02/05/2016 11:38:13 AM) (Source: Autodesk Content Service) (EventID: 0) (User: )

Description: Der Dienst kann nicht gestartet werden. Connect.Exceptions.IndexingServiceException: IndexingServiceErrCodes:129:UnexpectedDatabase

   bei Connect.MetaStore.MetaStorage.Initialize()

   bei Connect.IVault.IVault.OnStart(String[] args)

   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 

Error: (02/05/2016 11:38:11 AM) (Source: ISCTAgent) (EventID: 1000) (User: )

Description: ISCT - CISCTPnpDriverApi::CreateInstance   *****Unable to open the ISCT device driver
 

Error: (02/05/2016 11:18:13 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.18185, Zeitstempel: 0x5683f0c5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000005467b

ID des fehlerhaften Prozesses: 0x744

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3

Vollständiger Name des fehlerhaften Pakets: vlc.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: vlc.exe5
 

Error: (02/05/2016 11:07:41 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.18185, Zeitstempel: 0x5683f0c5

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000005467b

ID des fehlerhaften Prozesses: 0x1108

Startzeit der fehlerhaften Anwendung: 0xvlc.exe0

Pfad der fehlerhaften Anwendung: vlc.exe1

Pfad des fehlerhaften Moduls: vlc.exe2

Berichtskennung: vlc.exe3

Vollständiger Name des fehlerhaften Pakets: vlc.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: vlc.exe5
 

Error: (02/05/2016 09:07:52 AM) (Source: MsiInstaller) (EventID: 11310) (User: MRost)

Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Michael\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
 

Error: (02/05/2016 09:07:28 AM) (Source: MsiInstaller) (EventID: 11310) (User: MRost)

Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Michael\AppData\Local\Akamai\admintool.exe.  Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
 

Error: (02/04/2016 08:14:34 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm mmamain.exe, Version 1.5.0.41 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 184c
 

Startzeit: 01d15f803c842eea
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp\mmamain.exe
 

Berichts-ID: 83e9d81f-cb73-11e5-bec3-0c8bfd4aea97
 

Vollständiger Name des fehlerhaften Pakets: SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
 

Error: (02/04/2016 08:14:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: MRost)

Description: Die App „SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 
 

Systemfehler:

=============

Error: (02/05/2016 11:59:25 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (02/05/2016 11:56:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (02/05/2016 11:56:44 AM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1326
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (02/05/2016 11:55:37 AM) (Source: DCOM) (EventID: 10010) (User: MRost)

Description: {BEBA2AA5-B5A7-4DD3-9AD6-43B24CDD3B7D}
 

Error: (02/05/2016 11:53:14 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}
 

Error: (02/05/2016 11:49:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1069
 

Error: (02/05/2016 11:49:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (02/05/2016 11:49:17 AM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%50
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (02/05/2016 11:49:16 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (02/05/2016 11:49:16 AM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%50
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz

Prozentuale Nutzung des RAM: 31%

Installierter physikalischer RAM: 8082.65 MB

Verfügbarer physikalischer RAM: 5529.25 MB

Summe virtueller Speicher: 9362.65 MB

Verfügbarer virtueller Speicher: 6998.01 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows8_OS) (Fixed) (Total:917.03 GB) (Free:401.51 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 682D57F9)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

Task: {A558D31D-2561-4587-9B1D-8E70BD61D69E} - \CreateChoiceProcessTask -> Keine Datei <==== ACHTUNG

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Erledigt. Die Startseite lässt sich schon wieder selbst bestimmen, dafür schon mal Danke!

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016

durchgeführt von Michael (2016-02-05 14:09:47) Run:1

Gestartet von C:\Users\Michael\Desktop

Geladene Profile: Michael (Verfügbare Profile: UpdatusUser & Michael & Administrator)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

Task: {A558D31D-2561-4587-9B1D-8E70BD61D69E} - \CreateChoiceProcessTask -> Keine Datei <==== ACHTUNG

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

emptytemp:

        

*****************
 

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A558D31D-2561-4587-9B1D-8E70BD61D69E}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A558D31D-2561-4587-9B1D-8E70BD61D69E}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CreateChoiceProcessTask" => Schlüssel erfolgreich entfernt

"HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt

EmptyTemp: => 435.4 MB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 14:16:50 ====

Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:

1. Schritt: MBAM

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

3. Schritt: SecurityCheck

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Scheint noch nicht ausgestanden, ESET hat gemeckert.

MBAM

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 05.02.2016

Suchlaufzeit: 15:01

Protokolldatei: mbam.txt

Administrator: Ja
 

Version: 2.2.0.1024

Malware-Datenbank: v2016.02.05.04

Rootkit-Datenbank: v2016.01.20.01

Lizenz: Kostenlose Version

Malware-Schutz: Deaktiviert

Schutz vor bösartigen Websites: Deaktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 8.1

CPU: x64

Dateisystem: NTFS

Benutzer: Michael
 

Suchlauftyp: Bedrohungssuchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 514949

Abgelaufene Zeit: 33 Min., 38 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswerte: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 0

(keine bösartigen Elemente erkannt)
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

ESET

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=297e4e05efb9ce46b2e650739752eef4

# end=init

# utc_time=2016-02-05 03:08:26

# local_time=2016-02-05 04:08:26 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

Update Finalize

Updated modules version: 27991

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=297e4e05efb9ce46b2e650739752eef4

# end=updated

# utc_time=2016-02-05 03:16:03

# local_time=2016-02-05 04:16:03 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.2.9200 NT 

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=297e4e05efb9ce46b2e650739752eef4

# engine=27991

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2016-02-05 07:32:40

# local_time=2016-02-05 08:32:40 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1=''

# compatibility_mode=3589 16777213 100 57 127921 217297345 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 66 85 181826 18490330 0 0

# scanned=560595

# found=11

# cleaned=0

# scan_time=15397

sh=9413821E4285C46DAF48156B472065FC2D763FE8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\AppData\Roaming\OYYSR"

sh=20FF1BAC2D79C8BCEFE18338ECBB18BF5D3F7531 ft=1 fh=61dfe1878e8fa572 vn="Variante von Win32/AdkDLLWrapper.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\AppData\Roaming\uTorrent\updates\3.4.1_31227.exe"

sh=B312E79757AFDF6BB9DD07F5D3E88066B5C1D438 ft=1 fh=d702af4396ccb3ce vn="Win32/Adware.WhenU.SaveNow evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Div\Programme div\Neuer Ordner\Daemon.exe"

sh=9B091416C62D5731A232E8E03AC52A9913E87083 ft=1 fh=463fc4d85dc68931 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Div\Programme div\Neuer Ordner\FreeStudio503.exe"

sh=C9352C798D66F96D4F894C2BC2CDAD192B662D62 ft=1 fh=7209dc7ad243ecb3 vn="Variante von Win32/Toolbar.Conduit.AI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Div\Programme div\Neuer Ordner\zaSetup_92_105_000_de.exe"

sh=20FF1BAC2D79C8BCEFE18338ECBB18BF5D3F7531 ft=1 fh=61dfe1878e8fa572 vn="Variante von Win32/AdkDLLWrapper.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Div\Programme fuer Lenovo\uTorrent_3.4.1_31227.exe"

sh=8A72F448F17C026A1B2A59686DE720079CCBA08F ft=1 fh=4d4a711952b3453e vn="Win32/DownWare.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Div\Programme fuer Lenovo\erl\DTLite4481-0347.exe"

sh=3555345D2A2FF08772CC0ECBD0DD1FC00F5630D3 ft=1 fh=8346307f029f3769 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Downloads\Programme install\FreeMat - CHIP-Installer.exe"

sh=2853881FDF3773390829B28A7C8699D7E2D013F9 ft=1 fh=05ab4bd274fa06e9 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Downloads\Programme install\WiFi HotSpot Creator - CHIP-Installer.exe"

sh=5257A2E56E63C2D8ABCCD9E574C8955FA76904E3 ft=1 fh=d9acd49d716b774a vn="Win32/InstallMonetizer.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Downloads\Programme install\erl\gbooks.exe"

sh=E9C2F0226D7B538C544A8AC7B4000B4DB1B3E8AF ft=1 fh=89bfb80c632675ce vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Michael\Downloads\Programme install\erl\Samsung Kies - CHIP-Installer.exe"

SecurityCheck

Code:

 Results of screen317's Security Check version 1.009  

   x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Norton 360 Premier   

Windows Defender     

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 Java version 32-bit out of Date! 

  Adobe Flash Player         17.0.0.134 Flash Player out of Date!  

 Adobe Reader XI  

 Mozilla Firefox 38.0.5 Firefox out of Date!  

 Mozilla Thunderbird (38.5.0) 
 ````````Process Check: objlist.exe by Laurent````````  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

Code:

C:\Users\Michael\AppData\Roaming\OYYSR

C:\Users\Michael\AppData\Roaming\uTorrent\updates\3.4.1_31227.exe

C:\Users\Michael\Div\Programme div\Neuer Ordner\Daemon.exe

C:\Users\Michael\Div\Programme div\Neuer Ordner\FreeStudio503.exe

C:\Users\Michael\Div\Programme div\Neuer Ordner\zaSetup_92_105_000_de.exe

C:\Users\Michael\Div\Programme fuer Lenovo\uTorrent_3.4.1_31227.exe

C:\Users\Michael\Div\Programme fuer Lenovo\erl\DTLite4481-0347.exe

C:\Users\Michael\Downloads\Programme install\FreeMat - CHIP-Installer.exe

C:\Users\Michael\Downloads\Programme install\WiFi HotSpot Creator - CHIP-Installer.exe

C:\Users\Michael\Downloads\Programme install\erl\gbooks.exe

C:\Users\Michael\Downloads\Programme install\erl\Samsung Kies - CHIP-Installer.exe

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.