| chrismo0741 | 04.04.2016 18:35 |
Bei der Deinstallatin von Windows Zip Driver Updater ist ein Fehler aufgetreten. Möglicherweise wurde es bereits deinstalliert.
...Möchten sie Winzip Driver Updater. Aus der Liste der Programme und Features entfernen?"
Der Beitrag von Vorhin hat sich verselbständigt. Den wolle ich noch gar nicht senden. Dies ist also die Meldung, die ich erhalte, wenn ich in der Stemsteuerung deinstallieren will.
Soll ich Entfernen?
Ich starte jetzt ESET...
Hier ESET HTML-Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=d710bd63fa79b741b4fe59d7a7dc270b
# end=init
# utc_time=2015-12-05 10:53:13
# local_time=2015-12-05 11:53:13 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27062
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=d710bd63fa79b741b4fe59d7a7dc270b
# end=updated
# utc_time=2015-12-05 11:05:09
# local_time=2015-12-06 12:05:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=d710bd63fa79b741b4fe59d7a7dc270b
# engine=27062
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-12-05 11:05:39
# local_time=2015-12-06 12:05:39 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1291 16777213 100 98 14335 104119461 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 66 85 7721486 13146309 0 0
# scanned=1
# found=0
# cleaned=0
# scan_time=29
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 27062
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 27062
Update Init
Update Download
Update Finalize
Updated modules version: 27068
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 27068
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=d710bd63fa79b741b4fe59d7a7dc270b
# end=init
# utc_time=2016-04-03 04:24:02
# local_time=2016-04-03 06:24:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 28887
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=d710bd63fa79b741b4fe59d7a7dc270b
# end=updated
# utc_time=2016-04-03 04:35:52
# local_time=2016-04-03 06:35:52 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=d710bd63fa79b741b4fe59d7a7dc270b
# engine=28887
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-04-04 06:21:47
# local_time=2016-04-04 08:21:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1291 16777213 100 98 216990 114513629 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 66 85 18115654 23540477 0 0
# scanned=586918
# found=0
# cleaned=0
# scan_time=49555
Hier FRST und Addition
FRST Logfile: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von Admin (Administrator) auf FAMILYNOTEBOOK (04-04-2016 08:38:14)
Gestartet von C:\Users\Admin\Downloads
Geladene Profile: Jasmin & Ecki & Benny Phase6 & Admin & neu (Verfügbare Profile: Christine & Benjamin & Jasmin & Ecki & Benny Phase6 & Admin & neu)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\WINDOWS\System32\igfxCUIService.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\WINDOWS\System32\igfxEM.exe
(Intel Corporation) C:\WINDOWS\System32\igfxHK.exe
(Intel Corporation) C:\WINDOWS\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\OSD.exe
(Microsoft Corporation) C:\WINDOWS\System32\GWX\GWX.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Microsoft Corporation) C:\WINDOWS\splwow64.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(Microsoft Corporation) C:\WINDOWS\System32\SnippingTool.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\swriter.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
() C:\Program Files (x86)\OpenOffice 4\program\uno.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-29] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1276488 2013-01-18] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-16] (Synaptics Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2464072 2014-11-06] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [LMgrVolOSD] => C:\Program Files (x86)\Launch Manager\OSD.exe [348960 2012-08-13] (Wistron Corp.)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\runner_avp.exe [24504 2012-10-04] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2005-03-17] (ScanSoft, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [438888 2014-01-15] (CANON INC.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [213536 2016-02-19] (Geek Software GmbH)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-2968291270-1025468254-3834404774-1006\...\Run: [GoogleChromeAutoLaunch_5156045E44E9B71A394FD244D2017527] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [874136 2016-03-27] (Google Inc.)
HKU\S-1-5-21-2968291270-1025468254-3834404774-1006\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-2968291270-1025468254-3834404774-1008\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [132608 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-2968291270-1025468254-3834404774-1011\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [217088 2014-10-29] (Microsoft Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-11-04] (NVIDIA Corporation)
AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [174856 2014-11-04] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [156840 2014-11-04] (NVIDIA Corporation)
AppInit_DLLs-x32: , C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [156840 2014-11-04] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
Startup: C:\Users\Christine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2016-02-22]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{4344FCB4-282C-4464-86A8-73E16D20D65E}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{A0BDB413-2FCC-4A6C-890B-8F2FD07F4717}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2968291270-1025468254-3834404774-1006\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2968291270-1025468254-3834404774-1008\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2968291270-1025468254-3834404774-1008\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2968291270-1025468254-3834404774-1011\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://youtube.com/
HKU\S-1-5-21-2968291270-1025468254-3834404774-1011\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2968291270-1025468254-3834404774-1012\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2968291270-1025468254-3834404774-1012\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
HKU\S-1-5-21-2968291270-1025468254-3834404774-1012\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/
URLSearchHook: [S-1-5-21-2968291270-1025468254-3834404774-1013] ACHTUNG => Standard URLSearchHook fehlt
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2016-03-17] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-10] (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-05-20] (Kaspersky Lab ZAO)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-10] (Kaspersky Lab ZAO)
BHO: WOT Helper -> {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} -> C:\Program Files\WOT\WOT.dll [2013-09-02] ()
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-03-17] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-01-22] (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-10] (Kaspersky Lab ZAO)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-10] (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-05-20] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-12-12] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-10] (Kaspersky Lab ZAO)
BHO-x32: WOT Helper -> {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} -> C:\Program Files (x86)\WOT\WOT.dll [2013-09-02] ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-12-12] (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll [2013-12-10] (Kaspersky Lab ZAO)
BHO-x32: ChromeFrame BHO -> {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} -> C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02] (Google Inc.)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll [2013-09-02] ()
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll [2013-09-02] ()
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-2968291270-1025468254-3834404774-1006 -> WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll [2013-09-02] ()
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll [2014-02-02] (Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll [2013-09-02] ()
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll [2013-09-02] ()
FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz43ofwp.default
FF Homepage: about:home
hxxp://www.giga.de/androidnews/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-23] ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll [2015-01-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-23] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-12-12] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-12-12] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-11-03] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-11-03] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-31] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-01-31] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Extension: AdBeaver - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pz43ofwp.default\Extensions\adbeaverSG@adbeaver.org.xpi [2016-04-02]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-24] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2015-02-18] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2015-02-18] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2015-02-18] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2015-02-18] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2015-02-18] [ist nicht signiert]
Chrome:
=======
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-03]
CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-03]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-04]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-04]
CHR Extension: (Google-Suche) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-04]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2015-09-03]
CHR Extension: (Google Tabellen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-03]
CHR Extension: (Google Docs Offline) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-30]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2015-09-03]
CHR Extension: (Modul für das Blockieren gefährlicher Webseiten) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2015-09-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-03]
CHR Extension: (Google Mail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-03]
CHR Extension: (Anti-Banner) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2015-09-03]
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\urladvisor.crx [2012-10-04]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\online_banking_chrome.crx [2012-10-04]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\content_blocker_chrome.crx [2012-10-04]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\virtkbd.crx [2012-10-04]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ChromeExt\ab.crx [2012-10-04]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-09] (Kaspersky Lab ZAO)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2828016 2016-02-09] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-12-03] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-11-06] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2012-08-13] (Wistron Corp.)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3386160 2012-12-03] (Intel® Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1342848 2012-12-03] (Motorola Solutions, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-12-10] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [627296 2014-05-20] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-12-10] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2013-10-09] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-09] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [50448 2013-04-29] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [177864 2015-02-18] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38216 2014-10-03] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-16] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-16] (Synaptics Incorporated)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-11-29] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-11-29] (Windows (R) Win 7 DDK provider)
S3 intaud_WaveExtensible; \SystemRoot\system32\drivers\intelaud.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-04-03 20:11 - 2016-04-03 20:11 - 00087019 _____ C:\Users\Admin\Desktop\WLAN aktivieren.odt
2016-04-03 19:47 - 2016-04-03 19:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\OpenOffice
2016-04-03 18:21 - 2016-04-03 18:22 - 02870984 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_deu.exe
2016-04-01 20:18 - 2016-04-01 20:19 - 02374144 _____ (Farbar) C:\Users\Christine\Downloads\FRST64.exe
2016-04-01 20:06 - 2016-04-01 20:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2016-04-01 19:43 - 2016-04-01 19:44 - 03102720 _____ C:\Users\Christine\Downloads\AdwCleaner_5.108.exe
2016-04-01 19:38 - 2016-04-01 19:38 - 00002068 _____ C:\Users\Christine\Desktop\mbam.txt
2016-04-01 18:44 - 2016-04-01 18:45 - 00000000 ____D C:\Users\Admin\AppData\Local\Adobe
2016-04-01 18:44 - 2016-04-01 18:44 - 00000000 ____D C:\Users\Admin\AppData\LocalLow\Adobe
2016-03-31 13:28 - 2016-03-31 13:28 - 00319760 _____ C:\WINDOWS\Minidump\033116-27218-01.dmp
2016-03-31 12:17 - 2016-03-31 12:17 - 00001862 _____ C:\Users\Christine\Documents\MBAM 23.03.16.txt
2016-03-31 12:08 - 2016-03-31 12:08 - 00001862 _____ C:\Users\Christine\Documents\MBAM 26.03.16.txt
2016-03-31 12:07 - 2016-03-31 12:07 - 00000000 ____D C:\MBAM
2016-03-31 11:17 - 2016-04-02 08:23 - 00047840 _____ C:\Users\Admin\Downloads\Addition.txt
2016-03-31 11:15 - 2016-04-04 08:38 - 00027816 _____ C:\Users\Admin\Downloads\FRST.txt
2016-03-31 11:14 - 2016-03-31 11:14 - 02374144 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2016-03-31 11:12 - 2016-03-31 11:12 - 04832472 _____ (WinZip) C:\Users\Admin\Downloads\wzdu32 (1).exe
2016-03-30 16:27 - 2016-04-03 17:29 - 00000322 _____ C:\WINDOWS\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine at logon.job
2016-03-30 16:27 - 2016-04-03 17:29 - 00000296 _____ C:\WINDOWS\Tasks\Start WinZip Driver Updater for FAMILYNOTEBOOK@Christine(logon).job
2016-03-30 16:27 - 2016-03-30 18:29 - 00000322 _____ C:\WINDOWS\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine.job
2016-03-30 16:27 - 2016-03-30 16:27 - 00003432 _____ C:\WINDOWS\System32\Tasks\Start WinZip Driver Updater Schedule
2016-03-30 16:27 - 2016-03-30 16:27 - 00003364 _____ C:\WINDOWS\System32\Tasks\Start WinZip Driver Updater Update
2016-03-30 16:27 - 2016-03-30 16:27 - 00002726 _____ C:\WINDOWS\System32\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine
2016-03-30 16:27 - 2016-03-30 16:27 - 00002614 _____ C:\WINDOWS\System32\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine at logon
2016-03-30 16:27 - 2016-03-30 16:27 - 00002588 _____ C:\WINDOWS\System32\Tasks\Start WinZip Driver Updater for FAMILYNOTEBOOK@Christine(logon)
2016-03-30 16:27 - 2016-03-30 16:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2016-03-30 16:26 - 2016-03-30 16:26 - 04748384 _____ (WinZip) C:\Users\Admin\Downloads\wzdu32.exe
2016-03-30 16:19 - 2016-03-30 16:19 - 00001104 _____ C:\Users\Public\Desktop\PDF24.lnk
2016-03-30 16:19 - 2016-03-30 16:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2016-03-30 16:14 - 2016-03-30 16:15 - 16521632 _____ (Geek Software GmbH ) C:\Users\Christine\Downloads\pdf24-creator-7.6.4.exe
2016-03-27 20:12 - 2016-03-29 16:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-03-26 12:46 - 2016-03-26 12:46 - 00000000 ____D C:\Users\Admin\AppData\Local\ESET
2016-03-26 12:45 - 2016-03-26 12:45 - 06568608 _____ (ESET spol. s r.o.) C:\Users\Christine\Downloads\ESETOnlineScanner_ENU.exe
2016-03-26 12:45 - 2016-03-26 12:45 - 00000000 ____D C:\Users\Christine\AppData\Local\ESET
2016-03-26 11:13 - 2016-03-26 11:13 - 00001808 _____ C:\Users\Christine\Documents\Malwarebyte 26.03.16.txt
2016-03-26 10:25 - 2016-03-26 10:27 - 00039286 _____ C:\Users\Christine\Downloads\Addition.txt
2016-03-26 10:24 - 2016-04-01 20:21 - 00058624 _____ C:\Users\Christine\Downloads\FRST.txt
2016-03-24 17:51 - 2016-03-26 11:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-18 15:44 - 2016-03-18 15:45 - 00323816 _____ C:\WINDOWS\Minidump\031816-49750-01.dmp
2016-03-13 19:35 - 2016-03-13 19:35 - 00001175 _____ C:\Users\Admin\Desktop\CDBurnerXP.lnk
2016-03-13 19:35 - 2016-03-13 19:35 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2016-03-13 19:35 - 2016-03-13 19:35 - 00000000 ____D C:\Users\Christine\AppData\Roaming\Canneverbe Limited
2016-03-13 19:35 - 2016-03-13 19:35 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Canneverbe Limited
2016-03-13 19:35 - 2016-03-13 19:35 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2016-03-13 19:35 - 2016-03-13 19:35 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2016-03-13 19:30 - 2016-03-13 19:31 - 10217755 _____ C:\Users\Christine\Downloads\CDBurnerXP5931.zip
2016-03-12 18:33 - 2016-03-12 18:33 - 28611051 _____ C:\Users\Christine\Downloads\WhatsApp.apk
2016-03-11 12:12 - 2016-03-08 09:00 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-03-11 12:12 - 2016-03-08 09:00 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-11 12:00 - 2016-03-11 12:00 - 00001167 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-11 11:56 - 2016-03-11 11:57 - 43348232 _____ C:\Users\Christine\Downloads\Firefox_Setup_45.0.exe
2016-03-09 07:16 - 2016-02-20 17:45 - 01373184 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-03-09 07:16 - 2016-02-20 17:45 - 01168896 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-09 07:16 - 2016-02-20 17:45 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-09 07:16 - 2016-02-20 17:45 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-03-09 07:15 - 2016-02-20 17:45 - 00696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-09 07:15 - 2016-02-20 17:45 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-09 07:15 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-03-09 07:15 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-03-09 07:15 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-09 07:15 - 2016-02-05 21:06 - 00046768 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-03-09 07:14 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-09 07:14 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-09 07:14 - 2016-02-08 22:29 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-03-09 07:14 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-03-09 07:14 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-09 07:14 - 2016-02-08 22:07 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-03-09 07:14 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-09 07:14 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-03-09 07:14 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-09 07:14 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-03-09 07:14 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-09 07:14 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-03-09 07:14 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-09 07:14 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-03-09 07:14 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-09 07:14 - 2016-02-08 20:14 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-03-09 07:14 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-03-09 07:14 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-03-09 07:14 - 2016-02-08 19:42 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-03-09 07:14 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-03-09 07:14 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-03-09 07:14 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-09 07:14 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-03-09 07:14 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-09 07:14 - 2016-02-08 19:15 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-03-09 07:14 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-09 07:14 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-03-09 07:03 - 2016-02-11 16:21 - 00869576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-03-09 07:03 - 2016-02-11 16:21 - 00678600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-03-09 07:03 - 2016-02-11 16:20 - 00875720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2016-03-09 07:03 - 2016-02-11 16:20 - 00536776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2016-03-09 07:03 - 2016-02-05 16:59 - 07784960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-03-09 07:03 - 2016-02-05 16:55 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-03-09 07:03 - 2016-02-05 16:48 - 07075840 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2016-03-09 07:03 - 2016-02-05 16:47 - 05268480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2016-03-09 07:02 - 2016-02-12 21:14 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-03-09 07:02 - 2016-02-12 17:14 - 03708416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-09 07:02 - 2016-02-12 16:55 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2016-03-09 07:02 - 2016-02-12 16:54 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2016-03-09 07:02 - 2016-02-12 16:54 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2016-03-09 07:02 - 2016-02-12 16:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2016-03-09 07:02 - 2016-02-12 16:51 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2016-03-09 07:02 - 2016-02-12 16:51 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2016-03-09 07:02 - 2016-02-12 16:51 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2016-03-09 07:02 - 2016-02-12 16:48 - 02244096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2016-03-09 07:02 - 2016-02-12 16:47 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-03-09 07:02 - 2016-02-12 16:46 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-03-09 07:02 - 2016-02-06 20:08 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\seclogon.dll
2016-03-09 07:02 - 2016-02-06 18:58 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-03-09 07:02 - 2016-02-06 18:32 - 00801792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-03-09 07:02 - 2016-02-05 21:07 - 00292696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMASF.DLL
2016-03-09 07:02 - 2016-02-05 21:07 - 00243032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMASF.DLL
2016-03-09 07:02 - 2016-02-05 17:03 - 15432704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-09 07:02 - 2016-02-05 17:00 - 13318144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-09 07:02 - 2016-02-04 20:18 - 04174336 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-03-09 07:02 - 2016-02-04 20:18 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-03-09 07:02 - 2016-02-04 20:12 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-03-09 07:02 - 2016-02-04 19:44 - 00301568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-03-09 07:02 - 2016-02-04 19:39 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-03-09 07:02 - 2016-02-03 22:37 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-03-09 07:02 - 2016-02-03 22:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-03-09 07:02 - 2016-02-03 17:09 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-03-09 07:02 - 2016-02-03 17:00 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-03-09 07:02 - 2016-02-03 17:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-03-09 07:02 - 2016-01-31 21:16 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2016-03-09 07:01 - 2016-02-04 19:24 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2016-03-09 07:01 - 2016-02-04 19:02 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-04-04 08:38 - 2015-03-01 14:19 - 00000000 ____D C:\FRST
2016-04-04 08:33 - 2013-04-30 21:19 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-04-04 08:31 - 2013-07-13 14:48 - 00001148 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-04 08:23 - 2015-01-20 22:54 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2968291270-1025468254-3834404774-1012
2016-04-04 08:06 - 2013-09-30 06:14 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-04-04 08:06 - 2013-09-30 05:56 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat
2016-04-04 08:06 - 2013-09-30 05:56 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat
2016-04-04 08:06 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\Inf
2016-04-04 08:04 - 2013-02-01 10:20 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-04-03 17:34 - 2013-05-30 19:22 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2968291270-1025468254-3834404774-1008
2016-04-03 17:31 - 2013-05-29 18:20 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2968291270-1025468254-3834404774-1005
2016-04-03 17:29 - 2014-08-05 20:06 - 00000000 __SHD C:\Users\Ecki\IntelGraphicsProfiles
2016-04-03 17:29 - 2013-11-17 19:10 - 00000008 __RSH C:\Users\Ecki\ntuser.pol
2016-04-03 17:29 - 2013-11-16 15:42 - 00000000 ____D C:\Users\Ecki
2016-04-03 17:29 - 2013-07-13 14:48 - 00001144 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-03 17:26 - 2014-09-11 13:46 - 00000000 __SHD C:\Users\Benjamin\IntelGraphicsProfiles
2016-04-03 17:26 - 2013-12-14 17:52 - 00000008 __RSH C:\Users\Benjamin\ntuser.pol
2016-04-03 17:26 - 2013-11-16 15:42 - 00000000 ____D C:\Users\Benjamin
2016-04-03 17:23 - 2013-11-26 21:06 - 00003970 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{829B3F11-1DAB-4556-A3BA-B59BF6FE25F6}
2016-04-02 08:06 - 2015-01-20 22:47 - 00000000 __SHD C:\Users\Admin\IntelGraphicsProfiles
2016-04-01 21:16 - 2013-04-29 17:17 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2968291270-1025468254-3834404774-1002
2016-04-01 20:15 - 2014-08-05 08:22 - 00000000 __SHD C:\Users\Christine\IntelGraphicsProfiles
2016-04-01 20:15 - 2013-11-16 19:40 - 00000000 ___DO C:\Users\Christine\SkyDrive
2016-04-01 20:04 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-04-01 20:03 - 2013-08-22 15:25 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-04-01 20:01 - 2013-11-16 19:32 - 00000008 __RSH C:\Users\Christine\ntuser.pol
2016-04-01 20:01 - 2013-11-16 15:42 - 00000000 ____D C:\Users\Christine
2016-04-01 20:00 - 2013-12-20 16:11 - 00000000 ____D C:\AdwCleaner
2016-04-01 18:46 - 2015-10-30 21:27 - 00000000 ___HD C:\$WINDOWS.~BT
2016-04-01 18:44 - 2015-01-20 22:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Adobe
2016-03-31 14:28 - 2015-01-20 21:30 - 00000000 ____D C:\Users\Admin
2016-03-31 13:28 - 2014-12-13 20:30 - 1156851129 _____ C:\WINDOWS\MEMORY.DMP
2016-03-31 13:28 - 2014-12-13 20:30 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-31 13:28 - 2013-04-29 23:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-31 12:49 - 2014-04-12 12:59 - 00003950 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C362D28F-0D64-47D3-B58D-FBC9352217AE}
2016-03-30 21:43 - 2015-12-05 18:46 - 00003936 _____ C:\Users\Admin\Desktop\Rkill.txt
2016-03-30 21:33 - 2014-12-20 15:48 - 00002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-30 16:27 - 2014-07-17 16:08 - 00000000 ____D C:\ProgramData\WinZip
2016-03-30 16:19 - 2016-01-24 16:43 - 00000000 ____D C:\Program Files (x86)\PDF24
2016-03-29 17:14 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-03-26 17:54 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-26 17:49 - 2015-04-05 16:56 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2016-03-26 17:49 - 2015-04-05 16:56 - 00000000 ___SD C:\WINDOWS\system32\GWX
2016-03-24 17:21 - 2013-04-29 17:05 - 00000000 ____D C:\Users\Christine\AppData\Local\Packages
2016-03-23 21:07 - 2015-11-03 17:19 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-23 20:48 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-03-23 20:33 - 2013-04-30 21:19 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-03-17 20:44 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-03-17 20:42 - 2013-05-15 13:15 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-03-14 19:41 - 2014-03-21 13:49 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-11 12:11 - 2013-08-22 16:44 - 00515816 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-11 12:04 - 2015-04-20 07:59 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-11 12:00 - 2014-12-22 13:02 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-11 07:29 - 2013-08-22 20:10 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-11 07:09 - 2013-02-01 07:09 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-09 06:52 - 2015-12-09 09:05 - 00718336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-03-09 06:52 - 2015-12-09 09:05 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-03-09 06:52 - 2015-12-09 09:05 - 00325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-03-07 18:32 - 2015-11-23 18:11 - 00001712 _____ C:\Users\Christine\Desktop\Neurofeedback Jasmin.avi - Verknüpfung.lnk
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-02-01 09:41 - 2013-02-01 09:41 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-02-26 19:19 - 2014-12-28 19:19 - 0000032 ____R () C:\ProgramData\hash.dat
2014-12-29 22:49 - 2014-12-29 22:49 - 0000032 _____ () C:\ProgramData\Temp.log
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\hash.dat
Einige Dateien in TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\dotnetfx35.exe
C:\Users\Admin\AppData\Local\Temp\libeay32.dll
C:\Users\Admin\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Admin\AppData\Local\Temp\msvcr120.dll
C:\Users\Admin\AppData\Local\Temp\Quarantine.exe
C:\Users\Admin\AppData\Local\Temp\sdan.exe
C:\Users\Admin\AppData\Local\Temp\sdapk.exe
C:\Users\Admin\AppData\Local\Temp\sdaspwn.exe
C:\Users\Admin\AppData\Local\Temp\sqlite3.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1051857604221273369.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1191966078617044728.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1309647075260020615.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1363136771569960984.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1417899544011932803.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1638444230180699784.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1733640874524144484.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1814314715744265096.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna19493213235772388.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1958135574563846095.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1975476214603980931.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna1992990063757724459.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2034885365963452223.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2067681782548527438.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2097848692969409209.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna213329184565930747.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2270137332872999786.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2341435272156368256.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna247831522124226096.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2623864947494731160.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2624179016950251442.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2660436710653340193.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2673909527534872430.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna2966796850471685027.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3008790895068134555.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3027557791767656987.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3181603475773257734.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3250129841739030316.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3278375403626423536.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3338664219864238557.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3387255241716130662.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3609270410706079809.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3633299768339626095.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3634395531836760221.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3636587485054586329.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3642202370944858160.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3652941633568162197.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3778914408167024803.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3809566305819498102.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna3890654400626527245.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna4165748967536039677.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna4430885641406265083.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna4489790129248494514.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna4519590305946062331.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna4587565289024424849.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna4909045677304272513.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5284784935910394212.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5475459250674263932.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5476497893430305755.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5485034094194051480.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5491542838837477472.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5559675575094230414.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5757206830223148521.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5806661848987578874.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna5975649723491020866.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6035485341345462577.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6096315780607461128.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6192461542297162170.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6265720619767211847.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna627532261047504578.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6324871395016524186.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6324923767130515529.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6376242126938047518.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6512809005769666676.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6835905855431363409.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6856913767857069998.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6861646046018558383.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6968468851704628057.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6988107427138211.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna6995537130295872623.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7070907015173583317.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7090681624837033861.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7144153884905659125.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7191189144822711488.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7217576155280394734.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7322637044353943787.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7580077124996013237.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7608520953799883666.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7772394499424492745.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7890240239172252309.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7902024981626341362.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna7956881507582517169.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna80083002870616788.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna846536555643826858.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8545040366228413892.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8584072077371963875.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8609939779370011797.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8741173219935418586.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8758695936056730527.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8791674966408871895.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8914083736582760041.hunspell-win-x86-32.dll
C:\Users\Benny Phase6\AppData\Local\Temp\jna8978715230267976117.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\gkc.exe
C:\Users\Christine\AppData\Local\Temp\i4jdel0.exe
C:\Users\Christine\AppData\Local\Temp\jna1550559977857635603.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna1909647372989798369.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2057401609410638447.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2059298140904499552.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2151569671348608818.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2245355669910074656.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2420372445742388053.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna252132944951679419.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2671216121493760411.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2760870368337415390.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2798007600721010057.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna2919091689305245616.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3020076464872860829.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3024905261274020701.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3244207418908084073.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3538120537740707599.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna357446109158070050.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3729747502170001533.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3805538473192033769.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3826917743255522784.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna3840599328337473774.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4260424879118120637.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4288826304180968692.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4526342369763113213.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4574506221868764928.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4594573025365704756.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4612050426225552707.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4652646077229920084.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4673146025182730392.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4701353354804878838.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4753953383934259882.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4770403397861745889.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4808475341066665524.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4820439614040469571.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna4825951423054546472.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5004358485894485201.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5012979420487369071.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5093604979594848902.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5168824890562591927.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5209227000937658109.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5368280399571633181.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5488590491880453104.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5542730325213048671.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna556558743597626502.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5589653971107934854.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5704980369318452302.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5737202740715478344.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5841130779018104904.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5842775971954306105.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna5885104411449473529.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna592307948246073271.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6017259405452542111.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6200315702204819110.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6244917222598087117.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6395096599620184033.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6409475580658941564.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6451115690969471282.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6615502940423691772.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna68084681278010425.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6857589183628559515.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna6887450656850100407.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna7153271822974599559.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna7190440940445761830.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna7570417362609998558.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna770021709153131213.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna7711263563318869191.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna796799976559524882.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8061899222481541011.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8133091716843049543.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8195109473195724790.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8243390333793006508.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8285480496088193934.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8362915033699549058.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8436287918121657854.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8537148444730686549.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8794296015338418802.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna8948755840228270646.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jna998675891627986749.hunspell-win-x86-32.dll
C:\Users\Christine\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Christine\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Christine\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Christine\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Christine\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Christine\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Christine\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Christine\AppData\Local\Temp\nvStInst.exe
C:\Users\Christine\AppData\Local\Temp\nvstlink.exe
C:\Users\Christine\AppData\Local\Temp\Opera_NI_stable.exe
C:\Users\Christine\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Christine\AppData\Local\Temp\sdapskill.exe
C:\Users\Ecki\AppData\Local\Temp\COMAP.EXE
C:\Users\Ecki\AppData\Local\Temp\jna2489006855836005094.hunspell-win-x86-32.dll
C:\Users\Ecki\AppData\Local\Temp\jna4522058172259707923.hunspell-win-x86-32.dll
C:\Users\Ecki\AppData\Local\Temp\jna4740816468678122311.hunspell-win-x86-32.dll
C:\Users\Ecki\AppData\Local\Temp\jna7059304574788696481.hunspell-win-x86-32.dll
C:\Users\Jasmin\AppData\Local\Temp\jna2429004176451255738.hunspell-win-x86-32.dll
C:\Users\Jasmin\AppData\Local\Temp\jna5026049854169630952.hunspell-win-x86-32.dll
C:\Users\Jasmin\AppData\Local\Temp\jna6864153444314441533.hunspell-win-x86-32.dll
C:\Users\Jasmin\AppData\Local\Temp\jna8474096059983619037.hunspell-win-x86-32.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-02-19 11:03
==================== Ende von FRST.txt ============================
--- --- --- HTML-Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
durchgeführt von Admin (2016-04-04 08:40:13)
Gestartet von C:\Users\Admin\Downloads
Windows 8.1 (X64) (2013-11-16 14:23:32)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Admin (S-1-5-21-2968291270-1025468254-3834404774-1012 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-2968291270-1025468254-3834404774-500 - Administrator - Disabled)
Benjamin (S-1-5-21-2968291270-1025468254-3834404774-1005 - Limited - Enabled) => C:\Users\Benjamin
Benny Phase6 (S-1-5-21-2968291270-1025468254-3834404774-1011 - Limited - Enabled) => C:\Users\Benny Phase6
Christine (S-1-5-21-2968291270-1025468254-3834404774-1002 - Limited - Enabled) => C:\Users\Christine
Ecki (S-1-5-21-2968291270-1025468254-3834404774-1008 - Limited - Enabled) => C:\Users\Ecki
Gast (S-1-5-21-2968291270-1025468254-3834404774-501 - Limited - Disabled)
Jasmin (S-1-5-21-2968291270-1025468254-3834404774-1006 - Limited - Enabled) => C:\Users\Jasmin
neu (S-1-5-21-2968291270-1025468254-3834404774-1013 - Limited - Enabled) => C:\Users\neu
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Internet Security (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B}
AS: Kaspersky Internet Security (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {8C27F4BD-7F99-4CD1-5651-D3EB97674300}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.197 - Adobe Systems Incorporated)
Alien Swarm (HKLM-x32\...\Steam App 630) (Version: - Valve)
BattleBlock Theater (HKLM-x32\...\Steam App 238460) (Version: - The Behemoth)
BLOCKADE 3D (HKLM-x32\...\Steam App 302830) (Version: - Shumkov Dmitriy)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.2.3 - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.5.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.10.15 - Canon Inc.)
Canon MG6600 series Benutzerregistrierung (HKLM-x32\...\Canon MG6600 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MG6600 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6600_series) (Version: 1.00 - Canon Inc.)
Canon MG6600 series On-screen Manual (HKLM-x32\...\Canon MG6600 series On-screen Manual) (Version: 7.7.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.0.0 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.4.0 - Canon Inc.)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP)
Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 3.18.0.342250 - NNG Llc.)
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)
CyberLink PowerRecover (Version: 5.7.0.0913 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Deponia (HKLM-x32\...\Steam App 214340) (Version: - Daedalic Entertainment)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Edna Bricht Aus - Sammler Edition (HKLM-x32\...\EdnaSE) (Version: 1.2 - Daedalic Entertainment)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Freemake Audio Converter Version 1.1.0 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.0 - Ellora Assets Corporation)
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Giana Sisters: Twisted Dreams - Rise of the Owlverlord (HKLM-x32\...\Steam App 246960) (Version: - Black Forest Games)
Giana Sisters: Twisted Dreams (HKLM-x32\...\Steam App 223220) (Version: - Black Forest Games)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.110 - Google Inc.)
Google Chrome Frame (HKLM-x32\...\{CD4ABC29-0547-388C-B8BC-EF88333E5C2E}) (Version: 65.119.72 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Harveys neue Augen Special Edition (HKLM-x32\...\Harveys neue Augen Special Edition) (Version: 1.3 - Daedalic Entertainment)
Ich sehe was ... die große Schatzsuche (HKLM-x32\...\{3170BDC4-4BF9-42AE-81BC-14D4F60569C0}) (Version: 1.00.0000 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{DA2600C1-6BDF-4FD1-1212-148929CC1385}) (Version: 2.6.1212.0302 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.7.0.1013 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{23D486D4-FBE0-40F3-A245-E4D56D094764}) (Version: 3.5.41.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{2b83a547-7e0f-4dca-8990-97ff818fa3d8}) (Version: 15.6.0 - Intel Corporation)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
Java(TM) 7 Update 2 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417002FF}) (Version: 7.0.20 - Oracle)
Kaspersky Internet Security 2013 (HKLM-x32\...\InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}) (Version: 13.0.1.4190 - Kaspersky Lab)
Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190 - Kaspersky Lab) Hidden
Launch Manager (HKLM-x32\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.1.8 - Wistron Corp.)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mediathek (HKLM-x32\...\{EFFED0C0-5299-422E-AFE6-8B8066D18A2A}) (Version: 1.4.0 - Medion)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4805.1003 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2968291270-1025468254-3834404774-1006\...\OneDriveSetup.exe) (Version: 17.3.5860.0512 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minetest Version 0.4.7 (HKLM-x32\...\{A024C0B7-5487-4571-8CA5-A3BDCBC0C250}_is1) (Version: 0.4.7 - Minetest)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 45.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 de)) (Version: 45.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1.5918 - Mozilla)
Mozilla Thunderbird 38.7.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.7.1 (x86 de)) (Version: 38.7.1 - Mozilla)
Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.)
NVIDIA 3D Vision Treiber 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.4 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.65 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4805.1003 - Microsoft Corporation) Hidden
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PaperPort (HKLM-x32\...\{A17EABB6-D0C6-44E5-820C-72DC7F495064}) (Version: 9.02.0823 - ScanSoft, Inc.)
PDF24 Creator 7.6.4 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
phase-6 2.3.4 (HKLM-x32\...\phase-6) (Version: 2.3.4 - phase-6)
Pokemon Online 2.1.0 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version: - Dreambelievers)
Pokémon Trading Card Game Online (HKLM-x32\...\{496D7B7E-EBDC-4E2B-B021-4FF03B188B69}) (Version: 1.0.0 - The Pokémon Company International)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
Portal Stories: Mel (HKLM-x32\...\Steam App 317400) (Version: - Prism Studios)
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6833 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Scribblenauts Unlimited (HKLM-x32\...\Steam App 218680) (Version: - 5th Cell Media)
Shakes and Fidget (HKLM-x32\...\Steam App 438040) (Version: - Playa Games GmbH)
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Source Filmmaker (HKLM-x32\...\Steam App 1840) (Version: - Valve)
Spiral Knights (HKLM-x32\...\Steam App 99900) (Version: - Three Rings)
Spooky's House of Jump Scares (HKLM-x32\...\Steam App 356670) (Version: - Lag Studios)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.5 - Synaptics Incorporated)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version: - Edmund McMillen and Florian Himsl)
The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version: - Nicalis, Inc.)
Thinking with Time Machine (HKLM-x32\...\Steam App 286080) (Version: - Stridemann)
Versteckt - Entdeckt! Fantasy (HKLM-x32\...\{09A79A8C-11EA-418B-B7AF-5FA3556C3B8C}) (Version: 1.00.0000 - Terzio Verlag)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinZip Driver Updater (HKLM\...\WinZip Driver Updater) (Version: 5.3.2.54 - VAPC (Lux) S.a.r.L)
WOT for Internet Explorer (HKLM\...\{373B90E1-A28C-434C-92B6-7281AFA6115A}) (Version: 13.9.2.0 - WOT Services Oy)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {07D02259-3FCD-4DAD-AD49-D58D098101CF} - System32\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine at logon => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe
Task: {114E6C9D-F01E-4704-BEF5-79C524CDFEBA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {21BC214E-5107-48F8-95BA-1A07BE0337C1} - System32\Tasks\{C445041D-4259-486A-A6BF-CE7359CC8206} => pcalua.exe -a "C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe" -d "C:\Program Files (x86)\Malwarebytes Anti-Malware"
Task: {2814547F-E0DE-41BE-95A0-FBA8C0233A79} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2016-03-17] (Microsoft Corporation)
Task: {3763096E-DDD7-4121-86C7-F87E70379944} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {3DD722F4-6D11-4127-A169-E21276779844} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-23] (Adobe Systems Incorporated)
Task: {3E838CA3-3B10-44B7-95B3-C147CEA9501E} - \Plus-HD-2.3-firefoxinstaller -> Keine Datei <==== ACHTUNG
Task: {44E826DA-45F6-46B4-997C-CE0C52F7ED39} - System32\Tasks\Start WinZip Driver Updater Update => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe
Task: {53433BD2-C2ED-4E59-82C2-960D7845DD86} - System32\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe
Task: {54B306D9-07CC-462E-9395-61167006146E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {6390A00E-5623-4BFB-8E74-4AC5C9F0B9B1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
Task: {77C8EC54-9D89-44ED-BFD8-FA082AA7C5D8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {9BC69F5F-77BC-4BAC-9651-0B346EA4A320} - System32\Tasks\Synaptics TouchPad Enhancements => Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: {9F3211EF-A766-4C11-91A9-2DD04B6CDA6F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-02-09] (Microsoft Corporation)
Task: {A8D51F00-1019-422B-AA5C-CFF41E977580} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-03-11] (Microsoft Corporation)
Task: {B0578A03-3A9D-468D-93C8-8485E61DEFBC} - System32\Tasks\Start WinZip Driver Updater Schedule => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe
Task: {B5DFD8BE-D3A9-40DF-8BDE-E73EA51FAC30} - System32\Tasks\Start WinZip Driver Updater for FAMILYNOTEBOOK@Christine(logon) => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe
Task: {BEFC131C-AD9F-41BF-A38F-282DBEEB9A43} - System32\Tasks\{15B345C9-1980-425D-8AE3-5F3EBA6CFB9F} => pcalua.exe -a E:\Setup\rsrc\usm.exe -d E:\Setup\rsrc
Task: {E2CC8E2B-BC70-42EC-9C08-765E40D6356C} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2968291270-1025468254-3834404774-1006 => C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Start WinZip Driver Updater for FAMILYNOTEBOOK@Christine(logon).job => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe
Task: C:\WINDOWS\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine at logon.job => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe-runExecutable SRTray.exe
Task: C:\WINDOWS\Tasks\Start WinZip Driver Updater( SR ) for FAMILYNOTEBOOK@Christine.job => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe-runExecutable SRTray.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-03-19 15:37 - 2015-10-13 05:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-09-05 03:36 - 2014-11-04 02:04 - 00013120 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-11-16 15:35 - 2014-11-04 00:02 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-07-29 08:54 - 2014-07-29 08:54 - 00111616 _____ () C:\Program Files (x86)\OpenOffice 4\program\uno.exe
2012-08-17 23:39 - 2013-04-29 17:23 - 01310136 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll
2016-02-13 20:37 - 2016-02-13 20:37 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\64ae37916bc61618f6decd872c7dd595\PSIClient.ni.dll
2013-02-01 09:10 - 2012-06-25 10:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2012-08-17 23:38 - 2012-08-17 23:38 - 00479160 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
2014-11-12 09:39 - 2014-11-04 02:04 - 00010952 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2014-08-13 09:27 - 2014-08-13 09:27 - 00988160 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxml2.dll
2014-07-29 13:34 - 2014-07-29 13:34 - 00170496 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxslt.dll
2014-07-29 13:34 - 2014-07-29 13:34 - 00136192 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxmlsec-mscrypto.dll
2014-07-29 13:34 - 2014-07-29 13:34 - 00303616 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxmlsec.dll
2014-07-29 09:07 - 2014-07-29 09:07 - 00045056 _____ () C:\Program Files (x86)\OpenOffice 4\program\python-core-2.7.6\lib\_socket.pyd
2014-07-29 09:07 - 2014-07-29 09:07 - 00024064 _____ () C:\Program Files (x86)\OpenOffice 4\program\python-core-2.7.6\lib\_ssl.pyd
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\WINDOWS\system32\Drivers\btmhsf.sys:Microsoft_Appcompat_ReinstallUpgrade [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2968291270-1025468254-3834404774-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\Jasmin\Pictures\2011-04-11_15.59.45.PNG
HKU\S-1-5-21-2968291270-1025468254-3834404774-1008\Control Panel\Desktop\\Wallpaper -> C:\Users\Ecki\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
HKU\S-1-5-21-2968291270-1025468254-3834404774-1011\Control Panel\Desktop\\Wallpaper -> C:\Users\Benny Phase6\Pictures\Camera Roll\Beny Phase6.jpg
HKU\S-1-5-21-2968291270-1025468254-3834404774-1012\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "phase-6 Reminder.lnk"
HKLM\...\StartupApproved\Run32: => "IminentMessenger"
HKLM\...\StartupApproved\Run32: => "Iminent"
HKLM\...\StartupApproved\Run32: => "IndexSearch"
HKLM\...\StartupApproved\Run32: => "PaperPort PTD"
HKLM\...\StartupApproved\Run32: => "SSBkgdUpdate"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{BF1D66CC-09E0-4D85-B417-25F97DAA9106}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{50886FBD-AA47-4E2E-81A2-D586EE5AEDDD}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{5257C427-CFFC-49FD-972D-AF35E0A1C61C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FCCFE17C-9B29-491D-A1D8-51C59E219B45}] => (Allow) LPort=1900
FirewallRules: [{ED0551DA-DA7B-432C-902F-77A00511C8FE}] => (Allow) LPort=2869
FirewallRules: [{2972C268-9057-4F3D-AD97-41CE5E5DA7D5}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{FDD878A8-57C9-4FE7-8999-28766D050F80}] => (Allow) C:\Users\Christine\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{A6645F49-6A15-4F18-AB90-FA7F5FDD9A9B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{FE8BC4A0-2D29-4D66-9C80-B49799C28B38}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{DD8DB1BA-2266-4421-AB58-E24283E37AA3}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{87682EE9-7C1F-40D6-B331-272408276EF8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{80F7426C-3681-4A6B-A487-B745367109A9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{43EE8218-29F7-47C2-8230-47FA9CE45743}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Scribblenauts\Scribble.exe
FirewallRules: [{D6F34112-C6A8-42F2-8CCA-20C52C28CC13}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Scribblenauts\Scribble.exe
FirewallRules: [{50BBD4D2-4034-41AF-8F08-79DE89F973FB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{2B060066-DBB2-482F-9466-F442AFC37149}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{9D6B88D8-11D2-4844-85F6-C81EEDCFA55C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{01F33013-B12E-4AC2-9787-CB485556D330}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{D0235431-0E0E-44AC-A6C3-393DCFAD4EA4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{BA22E081-F2ED-4D97-A10B-18D261F04249}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{F47FE637-78DD-4E35-BC3E-86330E115C0E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{EC23FE21-6315-4FD8-AA6B-C2B8022D9EA5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C35BA362-4B99-447B-A230-AED1F54644E5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DD417157-1A1A-4BBE-B0CD-283543A3BA39}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{90294958-13AE-4161-B145-E9234F09C08E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Blockade3d\main.exe
FirewallRules: [{61A4D80D-3A6C-4048-AF2B-E5FBE2CA144A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Blockade3d\main.exe
FirewallRules: [{520A3311-3DC2-4784-B20D-EFD13516A4AE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{52D5845F-B1EA-4FB6-86D1-0702E068E5EB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{6188DBF9-0AE2-4D88-AA95-63FD3967250E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [{1AC301AE-EE33-40CD-9C02-D5D0363C66D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [{7BA362C6-53FC-4D75-B352-525DE79D4CF1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{AF9F91FA-8DD8-4009-9642-CA1D9DC75D2E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{2A9DA33A-5B57-4532-BABF-82524AF7B910}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Giana Sisters Twisted Dreams\launcher\GSLauncher.exe
FirewallRules: [{A058C900-F7AF-4B71-80D1-0D40C3F76AEF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Giana Sisters Twisted Dreams\launcher\GSLauncher.exe
FirewallRules: [{7D49EF15-22E7-470D-AEF2-CFED17A94905}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GSTD - Rise of the Owlverlord\launcher\GSLauncher.exe
FirewallRules: [{B85E83C9-0021-4B36-BD9E-895762D9D016}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GSTD - Rise of the Owlverlord\launcher\GSLauncher.exe
FirewallRules: [{7AC639BC-9E6A-42F7-8709-088B3ACBA588}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spiral Knights\java_vm\bin\javaw.exe
FirewallRules: [{CD10FE8C-DF32-4661-A12A-BC7347FA8F56}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spiral Knights\java_vm\bin\javaw.exe
FirewallRules: [{D01480A5-8658-40A3-8E9A-BC2E2CAD859C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alien Swarm\swarm.exe
FirewallRules: [{C1A24AD1-D5D8-4B12-AE27-98C0AF2A1743}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Alien Swarm\swarm.exe
FirewallRules: [{73485D30-B8D8-42B8-98C1-E005C9A20108}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{1376004D-25B1-4009-AE19-9382D745439E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\sfm.exe
FirewallRules: [{A4B084A0-550B-40C7-94CD-514AFF4EAAC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{FBC21976-7F0E-4696-BB86-3A3E74212420}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\SourceFilmmaker\game\bin\qsdklauncher.exe
FirewallRules: [{35A64C27-3913-45D5-8990-2F72E20FD46B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleBlock Theater\BattleBlockTheater.exe
FirewallRules: [{05B1B6AE-9CBE-4D62-8352-A86B87FBE85A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleBlock Theater\BattleBlockTheater.exe
FirewallRules: [{FF188D87-C153-4F2A-A8F2-0CE844887ABD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{96AA13B1-34A1-4B67-AF8F-179AC426A6BA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe
FirewallRules: [{399CAD41-72FF-48D9-A1E9-172851CC7D0C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Deponia\deponia.exe
FirewallRules: [{D56D694A-A07F-4236-9C6D-110312509503}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Deponia\deponia.exe
FirewallRules: [{C08A5DB7-9E58-4C8F-896E-F3D2229104A9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Deponia\VisionaireConfigurationTool.exe
FirewallRules: [{DB931A30-7820-4E71-9198-6103D3F3B33F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Deponia\VisionaireConfigurationTool.exe
FirewallRules: [{3E691F86-5D65-4F5D-92EC-9DF9A7FA87D5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\TWTM.exe
FirewallRules: [{E5D1B7DA-CE56-457E-AD7F-D3C7754F3451}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\TWTM.exe
FirewallRules: [{F277BFD2-6810-4964-BFA4-D0EF189DB56C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\bin\SDKLauncher.exe
FirewallRules: [{A9C72796-DB55-438A-9A89-1F91B503C01D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\bin\SDKLauncher.exe
FirewallRules: [{F3E0E651-58DF-4271-8A13-902EA517DAA5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{8EDFC100-4357-4C5A-A5BC-94C5DEF29696}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{FB61C9A9-CE7A-4434-BB1A-CB43C5727D40}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6D273E71-5556-4DB6-8B6C-AA821B957874}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D807A10F-147E-4B03-B022-ED367A8C6538}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E1FD4326-1ACB-4A99-BD74-AF87FAD19001}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A3A2A821-8674-4FB6-8712-AC032A6EDE6F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\portal2.exe
FirewallRules: [{2B14CCAE-E172-459E-8685-A1C419990622}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\portal2.exe
FirewallRules: [{17A0645B-300D-4CFB-8191-F39C13436D06}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal Stories Mel\portal2.exe
FirewallRules: [{66F9D8EB-4ADA-49CB-914A-A28865BC1409}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Portal Stories Mel\portal2.exe
FirewallRules: [{B5C5D3FE-95E3-415B-A775-4E8D68C53928}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spooky's House of Jump Scares\SPOOKY.exe
FirewallRules: [{69E0808D-D79A-41E0-9BC6-A3D90451CC9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spooky's House of Jump Scares\SPOOKY.exe
FirewallRules: [{F8276034-DFED-409F-97A5-75D989F7CFBD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shakes & Fidget\Shakes and Fidget.exe
FirewallRules: [{FC55A2BB-3E1C-41B2-A355-50217882273F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Shakes & Fidget\Shakes and Fidget.exe
FirewallRules: [{5807A869-7C0E-4DF6-BECB-9C3ABFCB1F4C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
11-03-2016 07:02:11 Windows Update
26-03-2016 17:45:33 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: High Definition Audio-Controller
Description: High Definition Audio-Controller
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: HDAudBus
Problem: : This device cannot find enough free resources that it can use. If you want to use this device, you will need to disable one of the other devices on this system. (Code12)
Resolution: Two devices have been assigned the same input/output (I/O) ports, the same interrupt, or the same Direct Memory Access channel (either by the BIOS, the operating system, or a combination of the two). This error message can also appear if the BIOS did not allocate enough resources to the device (for example, if a universal serial bus (USB) controller does not get an interrupt from the BIOS because of a corrupt Multiprocessor System (MPS) table).
You can use Device Manager to determine where the conflict is and disable the conflicting device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (04/03/2016 06:36:51 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (04/03/2016 06:23:00 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (04/03/2016 06:22:58 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (04/03/2016 06:22:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (04/03/2016 06:22:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (04/03/2016 05:57:18 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [0]
Error: (04/03/2016 05:57:18 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to launch stream service as user [87]
Error: (04/03/2016 05:32:06 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073422302
Error: (04/03/2016 04:42:08 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.4.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2280
Startzeit: 01d18d141c030b9f
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: a762b128-f945-11e5-bfd7-6036dd988c39
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (04/02/2016 05:42:15 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073422302
Systemfehler:
=============
Error: (04/03/2016 06:32:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (04/03/2016 06:32:27 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Admin\AppData\Local\Temp\ehdrv.sys
Error: (04/03/2016 06:32:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (04/03/2016 06:32:27 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Admin\AppData\Local\Temp\ehdrv.sys
Error: (04/03/2016 06:32:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275
Error: (04/03/2016 06:32:27 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Admin\AppData\Local\Temp\ehdrv.sys
Error: (04/03/2016 05:57:11 PM) (Source: DCOM) (EventID: 10010) (User: FamilyNotebook)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (04/03/2016 05:57:09 PM) (Source: DCOM) (EventID: 10010) (User: FamilyNotebook)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (04/01/2016 08:03:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\WINDOWS\System32\IWMSSvc.dll
Error: (04/01/2016 08:03:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\WINDOWS\System32\IWMSSvc.dll
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i3-3120M CPU @ 2.50GHz
Prozentuale Nutzung des RAM: 36%
Installierter physikalischer RAM: 8054.82 MB
Verfügbarer physikalischer RAM: 5139.37 MB
Summe virtueller Speicher: 16246.82 MB
Verfügbarer virtueller Speicher: 13177.88 MB
==================== Laufwerke ================================
Drive c: (Boot) (Fixed) (Total:869 GB) (Free:639.91 GB) NTFS
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:39.19 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: CEAAD2D8)
Partition: GPT.
==================== Ende von Addition.txt ============================
Du schreibst: Zitat:
"Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset"
| Soll man alle Programme (ESET, FRST, AdwCleaner, MBAM) nach den Untersuchungen löschen? Auch immer die Ordner unter Programme löschen samt Logfiles? Zitat:
Hast du noch irgendwelche Probleme mit deinem Rechner?
| Gestern Abend (noch während ESET lief) hatte ich etliche Fenster wie z.B.
"PC Fix mit Reimage Repair
keinen Grund einen neuen PC zu kaufen
Windows Funktionen wiederherstellen"
mit einem blauen und einem weißen Punkt und einem blauer Pfeil
(Das Fenster habe ich nicht geschafft rein zu kopieren)
Das hätte man anklicken können und hätte sich wieder irgendwas runtergeladen. Diese Fensterchen tauchten überall auf (auch auf Eurer Internetseite) und man musste aufpassen, dass man sie nicht versehentlich angeklickt hat, weil sie so geschickt platziert waren. (Vor allem, wenn man bei Filepony z.B AdwCleaner runterladen wollte und beinahe was anderes runtergeladen hätte)
Heute (NACH Beendigung von ESET aber noch VOR FRST) habe ich keine Fenster mehr gesehen. Obwohl ESET doch nichts gefunden und somit auch nichts mehr verändert hat.
Ansonsten hatte ich auch vor der Bereinigung keine Probleme, außer, dass der PC oft lange gebraucht hat. Eine Mail an eine Gruppe konnte ich nicht raus schicken. Das werde ich gleich noch probieren, ob das nun geht.
In der Systemsteuerung ist Winzip Driver Updater noch drin. Wenn ich ihn deinstallieren will, kommt die schon beschriebene Meldung. Soll ich ihn einfach entfernen?
Einen schönen Tag
chrismo0741
am 3.4.16 um 7.02 Uhr kam die letzte SPAM-Mail
04.04.16 17.45 Uhr kam wieder eine SPAM-Mail |
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
Hast du noch irgendwelche Probleme mit deinem Rechner? 
dann auf 
und dann auf 
. 