Trojaner-Board - Windows10: Chrome öffnet permanent Links zu seltsamen Werbeseiten

Hallo ihr Lieben,

erst mal schon vorab vielen Dank für eure Hilfe. Seit ein paar Tagen öffnen sich beim Surfen permanent automatisch Werbeseiten.

Bitte seht mir nach, dass ich jemand bin, den man als DAU bezeichnet :(

Unten findet ihr die Log-Dateien

FRST.txt

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-08-2016

durchgeführt von Wölkchen (Administrator) auf CLAUDIA (30-08-2016 12:41:58)

Gestartet von C:\Users\Wölkchen\Downloads

Geladene Profile: Wölkchen & Gast (Verfügbare Profile: Wölkchen & Gast)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

() C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe

(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

() C:\Program Files (x86)\PHotkey\PHotkey.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

() C:\Program Files (x86)\PHotkey\POsd.exe

() C:\Program Files (x86)\PHotkey\GPMTray.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(Microsoft Corporation) C:\Windows\System32\wiawow64.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe

() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653720 2013-09-24] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353944 2013-09-16] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945656 2015-09-21] (Synaptics Incorporated)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-11-26] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-09-18] (CyberLink Corp.)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065024 2014-05-02] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [PDFPrint] => C:\Users\Wölkchen\Desktop\Wichtige Programm\PDF24\pdf24.exe [226816 2016-05-23] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23375200 2016-07-29] (Google)

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\Run: [Spybot-S&D Cleaning] => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd)

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"

HKU\S-1-5-21-111181969-29958568-1612040154-501\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-10-30] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)

Startup: C:\Users\Wölkchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-06-17]

ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

Tcpip\Parameters: [NameServer] 82.163.142.7 95.211.158.134

Tcpip\..\Interfaces\{1d942a65-89fa-41e2-82ce-42888160dc65}: [NameServer] 82.163.142.7 95.211.158.134

Tcpip\..\Interfaces\{1d942a65-89fa-41e2-82ce-42888160dc65}: [DhcpNameServer] 82.163.142.7

Tcpip\..\Interfaces\{7ad0f41e-a1fe-4345-9eef-090821ab9ac1}: [NameServer] 82.163.143.171,82.163.142.173

Tcpip\..\Interfaces\{7ad0f41e-a1fe-4345-9eef-090821ab9ac1}: [DhcpNameServer] 192.168.2.1 192.168.2.1

Tcpip\..\Interfaces\{9fc55f8e-743f-4db6-baba-d7676bd5cf32}: [NameServer] 82.163.142.7 95.211.158.134

Tcpip\..\Interfaces\{9fc55f8e-743f-4db6-baba-d7676bd5cf32}: [DhcpNameServer] 82.163.142.7

Tcpip\..\Interfaces\{ff88ccbf-aeba-4e5e-be20-d0f225cdf7f6}: [NameServer] 82.163.142.7 95.211.158.134

Tcpip\..\Interfaces\{ff88ccbf-aeba-4e5e-be20-d0f225cdf7f6}: [DhcpNameServer] 82.163.142.7
 

Internet Explorer:

==================

HKU\S-1-5-21-111181969-29958568-1612040154-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-111181969-29958568-1612040154-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-111181969-29958568-1612040154-501\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-111181969-29958568-1612040154-501\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB

BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)

BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2013-02-28] (SEIKO EPSON CORPORATION)

BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-22] (Oracle Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-22] (Oracle Corporation)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)

Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2013-02-28] (SEIKO EPSON CORPORATION)

Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Wölkchen\AppData\Roaming\Mozilla\Firefox\Profiles\x015gb2p.default-1448958609816

FF DefaultSearchEngine: Yahoo! Powered

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-22] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-22] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-01-10] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Wölkchen\AppData\Roaming\Mozilla\Firefox\Profiles\x015gb2p.default-1448958609816\searchplugins\yahoo! powered.xml [2016-06-14]

FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-09-25] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox

FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-05-23]

FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox

FF Extension: (Citavi Picker) - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2015-11-05]
 

Chrome: 

=======

CHR DefaultSearchURL: Default -> hxxps://safesearch.avira.com/#web/result?source=omnibar&q={searchTerms}

CHR DefaultSearchKeyword: Default -> Avira

CHR DefaultSuggestURL: Default -> hxxps://safesearch.avira.com/suggestions?q={searchTerms}&li=ff&hl=de

CHR Profile: C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (ProxFlow) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-11]

CHR Extension: (Google Docs) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-06]

CHR Extension: (Google Drive) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24]

CHR Extension: (YouTube) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-30]

CHR Extension: (Google-Suche) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (Kaspersky Protection) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2015-10-09]

CHR Extension: (Google Docs Offline) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-19]

CHR Extension: („Pin it“-Button) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-07-22]

CHR Extension: (Love Smoke) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgibfhhccaknggplelmbaepoikkcnllb [2015-04-21]

CHR Extension: (Skype) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-05-26]

CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-06]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]

CHR Extension: (ProxPrice) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nopgehbobniifpngnhmljfojnkkopbje [2016-07-01]

CHR Extension: (Google Mail) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]

CHR Extension: (Chrome Media Router) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-29]

CHR Extension: (Avira SafeSearch) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\plgjnighgeebiaalpbkmcbbiihegpbbp [2016-08-16]

CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

CHR HKU\S-1-5-21-111181969-29958568-1612040154-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-10-09] (Kaspersky Lab ZAO)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)

R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)

R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)

R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2014-12-03] (SEIKO EPSON CORPORATION)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)

R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [136192 2013-12-03] () [Datei ist nicht signiert]

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [247992 2015-09-21] (Synaptics Incorporated)

S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)

S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)

R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)

R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)

R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-02-29] (AO Kaspersky Lab)

S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)

R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-10-19] (AO Kaspersky Lab)

R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [238000 2016-05-23] (AO Kaspersky Lab)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [933808 2016-05-23] (AO Kaspersky Lab)

R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49240 2016-05-23] (AO Kaspersky Lab)

R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-10-09] (AO Kaspersky Lab)

R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87984 2016-05-23] (AO Kaspersky Lab)

R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)

R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

R3 PegaRadioSwitch; C:\Windows\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-22] (Windows (R) Win 7 DDK provider)

R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-03-11] (Realtek Semiconductor Corporation)

R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation                           )

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-09-21] (Synaptics Incorporated)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)

R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2031-03-19 09:53 - 2016-08-25 20:27 - 00000000 __SHD C:\System Volume Information

2016-08-30 12:41 - 2016-08-30 12:43 - 00025438 _____ C:\Users\Wölkchen\Downloads\FRST.txt

2016-08-30 12:41 - 2016-08-30 12:41 - 00000000 ____D C:\FRST

2016-08-30 12:35 - 2016-08-30 12:41 - 02397696 _____ (Farbar) C:\Users\Wölkchen\Downloads\FRST64 (1).exe

2016-08-30 12:32 - 2016-08-30 12:32 - 02397696 _____ (Farbar) C:\Users\Wölkchen\Downloads\FRST64.exe

2016-08-28 21:54 - 2016-08-28 21:54 - 00031625 _____ C:\Users\Wölkchen\AppData\Local\recently-used.xbel

2016-08-26 16:19 - 2016-08-26 16:19 - 00121289 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Ingwersirup - 2016-03-06.pdf

2016-08-26 16:19 - 2016-08-26 16:19 - 00112202 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Ingwersirup für Cocktail &amp; Tee - 2015-02-23.pdf

2016-08-25 18:08 - 2016-08-25 18:08 - 00003338 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task

2016-08-24 12:55 - 2016-08-24 12:55 - 03867379 _____ C:\Users\Wölkchen\Downloads\Ausweis-und-Bescheinigungen-fuer-das-SS-2016_PA-M_printed-2016-08-24_12-55-16.pdf

2016-08-24 12:55 - 2016-08-24 12:55 - 03867275 _____ C:\Users\Wölkchen\Downloads\Ausweis-und-Bescheinigungen-fuer-das-WS-2016-17_PA-M_printed-2016-08-24_12-55-18.pdf

2016-08-22 20:38 - 2016-08-22 20:38 - 00140835 _____ C:\Users\Wölkchen\Downloads\Bus-634.pdf

2016-08-22 20:38 - 2016-08-22 20:38 - 00043459 _____ C:\Users\Wölkchen\Downloads\Fahrplan_S-Bahn___Regionalzug.pdf

2016-08-17 16:35 - 2016-08-17 16:35 - 00988681 _____ C:\Users\Wölkchen\Downloads\isarcardabo-bestellung-d Copy.pdf

2016-08-11 12:26 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-08-11 12:26 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-08-11 12:26 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-08-11 12:26 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-08-11 12:26 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2016-08-11 12:26 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll

2016-08-11 12:26 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2016-08-11 12:26 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll

2016-08-11 12:26 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll

2016-08-11 12:26 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2016-08-11 12:26 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2016-08-11 12:26 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2016-08-11 12:26 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-08-11 12:26 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2016-08-11 12:26 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2016-08-11 12:26 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2016-08-11 12:26 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2016-08-11 12:26 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-08-11 12:26 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-08-11 12:26 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-08-11 12:26 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2016-08-11 12:26 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2016-08-11 12:26 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe

2016-08-11 12:26 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2016-08-11 12:26 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2016-08-11 12:26 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll

2016-08-11 12:26 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2016-08-11 12:26 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-08-11 12:26 - 2016-08-03 11:41 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

2016-08-11 12:26 - 2016-08-03 11:41 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2016-08-11 12:26 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2016-08-11 12:26 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

2016-08-11 12:26 - 2016-08-03 11:40 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys

2016-08-11 12:26 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll

2016-08-11 12:26 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2016-08-11 12:26 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2016-08-11 12:26 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2016-08-11 12:26 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll

2016-08-11 12:26 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2016-08-11 12:26 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll

2016-08-11 12:26 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll

2016-08-11 12:26 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2016-08-11 12:26 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll

2016-08-11 12:26 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2016-08-11 12:26 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2016-08-11 12:26 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe

2016-08-11 12:26 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2016-08-11 12:26 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2016-08-11 12:26 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-08-11 12:26 - 2016-08-03 11:29 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-08-11 12:26 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-08-11 12:26 - 2016-08-03 11:29 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2016-08-11 12:26 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2016-08-11 12:26 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2016-08-11 12:26 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2016-08-11 12:26 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2016-08-11 12:26 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2016-08-11 12:26 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2016-08-11 12:26 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-08-11 12:26 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-08-11 12:26 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2016-08-11 12:26 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-08-11 12:26 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-08-11 12:26 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-08-11 12:26 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-08-11 12:26 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-08-11 12:26 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2016-08-11 12:26 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2016-08-11 12:26 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll

2016-08-11 12:26 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll

2016-08-11 12:26 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll

2016-08-11 12:26 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll

2016-08-11 12:26 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-08-11 12:26 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2016-08-11 12:26 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2016-08-11 12:26 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-08-11 12:26 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2016-08-11 12:26 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2016-08-11 12:26 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe

2016-08-11 12:26 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll

2016-08-11 12:26 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-08-11 12:26 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2016-08-11 12:26 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll

2016-08-11 12:26 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll

2016-08-11 12:26 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll

2016-08-11 12:26 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-08-11 12:26 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2016-08-11 12:26 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe

2016-08-11 12:26 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2016-08-11 12:26 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-08-11 12:26 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2016-08-11 12:26 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-08-11 12:26 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2016-08-11 12:26 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2016-08-11 12:26 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll

2016-08-11 12:26 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2016-08-11 12:26 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2016-08-11 12:26 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-08-11 12:26 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2016-08-11 12:26 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2016-08-11 12:26 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-08-11 12:26 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-08-11 12:26 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-08-11 12:26 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2016-08-11 12:25 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2016-08-11 12:25 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll

2016-08-11 12:25 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-08-11 12:25 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2016-08-11 12:25 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-08-11 12:25 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll

2016-08-11 12:25 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2016-08-11 12:25 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2016-08-11 12:25 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2016-08-11 12:25 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2016-08-11 12:25 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll

2016-08-11 12:25 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2016-08-11 12:25 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-08-11 12:25 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2016-08-11 12:25 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2016-08-11 12:25 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2016-08-11 12:25 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2016-08-11 12:25 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2016-08-11 12:25 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-08-11 12:25 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-08-11 12:25 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-08-11 12:25 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2016-08-11 12:25 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2016-08-11 12:25 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2016-08-11 12:25 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-08-11 12:25 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-08-03 21:54 - 2016-08-03 21:54 - 00242345 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Gemüse Asiastyle - 2016-05-15.pdf

2016-08-03 21:52 - 2016-08-03 21:52 - 00173870 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Gemüse-Ebly-Topf - 2016-07-07.pdf

2016-08-03 21:48 - 2016-08-03 21:48 - 00241496 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Chocolate Chip Cookies - 2016-08-03.pdf

2016-08-03 21:47 - 2016-08-03 21:47 - 00150249 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - White Chocolate Chip Macadamia Cookies - 2015-10-24.pdf

2016-08-03 21:47 - 2016-08-03 21:47 - 00150243 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - White Chocolate Chip Macadamia Cookies - 2015-10-24 (1).pdf

2016-08-03 21:43 - 2016-08-03 21:43 - 00205913 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Marinade für Grill-Gemüse.  Rezept des Tages vom 28.07.2016 - 2016-07-28.pdf

2016-08-03 21:40 - 2016-08-03 21:42 - 00176163 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Müsliriegel - 2016-07-27.pdf

2016-08-03 14:12 - 2016-08-03 14:12 - 00016276 _____ C:\Users\Wölkchen\Downloads\Übersicht MA (1)

2016-08-03 14:11 - 2016-08-03 14:12 - 00016276 _____ C:\Users\Wölkchen\Downloads\Übersicht MA

2016-08-02 15:26 - 2016-08-02 15:26 - 00033280 _____ C:\Users\Wölkchen\Downloads\Lohnübersicht 06-2016.xls

2016-08-02 15:25 - 2016-08-02 15:25 - 00547222 _____ C:\Users\Wölkchen\Downloads\SKM_364e16080213480.pdf
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-08-30 12:42 - 2014-09-25 11:42 - 00000935 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job

2016-08-30 12:42 - 2014-09-25 11:42 - 00000749 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job

2016-08-30 12:38 - 2014-06-05 10:17 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-08-30 11:55 - 2015-10-08 13:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2016-08-30 11:51 - 2014-09-01 15:51 - 00000935 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {420CD611-88BF-4C64-AA15-40200B65964E}.job

2016-08-30 11:51 - 2014-09-01 15:51 - 00000749 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {420CD611-88BF-4C64-AA15-40200B65964E}.job

2016-08-29 21:19 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-08-29 21:14 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps

2016-08-29 14:43 - 2014-06-05 21:35 - 00000000 ___RD C:\Users\Wölkchen\Google Drive

2016-08-29 14:42 - 2016-04-12 15:44 - 00000000 __SHD C:\Users\Wölkchen\IntelGraphicsProfiles

2016-08-29 14:42 - 2014-06-05 10:17 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-08-28 21:57 - 2016-04-17 11:17 - 00000000 ____D C:\Users\Wölkchen\.gimp-2.8

2016-08-28 21:54 - 2016-04-25 21:16 - 00000000 ____D C:\Users\Wölkchen\AppData\Local\gtk-2.0

2016-08-25 18:08 - 2016-04-12 15:49 - 00002429 _____ C:\Users\Wölkchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2016-08-25 18:08 - 2016-04-12 15:49 - 00000000 ___RD C:\Users\Wölkchen\OneDrive

2016-08-25 18:07 - 2014-10-30 22:19 - 00000000 ____D C:\Users\Wölkchen\AppData\Roaming\Skype

2016-08-24 10:57 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-08-22 16:50 - 2014-06-05 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2016-08-17 16:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache

2016-08-16 14:18 - 2016-04-12 12:43 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-08-16 14:18 - 2016-02-13 18:59 - 00776766 _____ C:\WINDOWS\system32\perfh007.dat

2016-08-16 14:18 - 2016-02-13 18:59 - 00155544 _____ C:\WINDOWS\system32\perfc007.dat

2016-08-16 14:18 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF

2016-08-13 08:48 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-08-13 08:43 - 2016-02-13 19:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-08-12 23:03 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2016-08-12 22:55 - 2016-02-13 19:12 - 00000000 ____D C:\Program Files\Windows Journal

2016-08-12 22:55 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-08-12 22:55 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-08-12 10:25 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates

2016-08-12 10:25 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-08-12 10:23 - 2014-06-14 13:02 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-08-11 12:40 - 2013-10-24 14:33 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-08-05 12:26 - 2016-05-10 10:51 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-08-03 19:44 - 2014-06-05 10:19 - 00002268 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-08-03 19:44 - 2014-06-05 10:19 - 00002256 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-08-03 15:07 - 2015-08-11 20:24 - 00000000 ____D C:\Users\Wölkchen\AppData\Roaming\vlc

2016-07-31 12:38 - 2016-07-14 21:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-07-31 12:38 - 2015-09-15 22:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-03-09 14:41 - 2015-03-09 14:41 - 0185529 _____ () C:\Program Files (x86)\lizenzvertrag.pdf

2014-06-05 09:05 - 2016-04-12 10:57 - 1462013 _____ () C:\Users\Wölkchen\AppData\Local\BTServer.log

2014-06-18 18:34 - 2014-12-30 23:50 - 0017920 _____ () C:\Users\Wölkchen\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2016-08-28 21:54 - 2016-08-28 21:54 - 0031625 _____ () C:\Users\Wölkchen\AppData\Local\recently-used.xbel

2016-04-12 12:18 - 2016-04-12 12:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2014-02-27 18:15 - 2014-02-27 18:16 - 0000104 _____ () C:\ProgramData\{01FB4998-33C4-4431-85ED-079E3EEFE75D}.log

2014-02-27 18:16 - 2014-02-27 18:16 - 0000119 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log

2014-02-27 18:12 - 2014-02-27 18:12 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log

2014-02-27 18:15 - 2014-02-27 18:15 - 0000111 _____ () C:\ProgramData\{44510C84-AE2A-4079-A75B-D44E68D73B9A}.log

2014-02-27 18:13 - 2014-02-27 18:13 - 0000032 _____ () C:\ProgramData\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}.log

2014-02-27 18:11 - 2014-02-27 18:11 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

2014-02-27 18:13 - 2014-02-27 18:14 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log

2014-02-27 18:11 - 2014-02-27 18:12 - 0000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log

2014-02-27 18:12 - 2014-02-27 18:12 - 0000110 _____ () C:\ProgramData\{E3D04529-6EDB-11D8-A372-0050BAE317E1}.log
 

Einige Dateien in TEMP:

====================

C:\Users\Wölkchen\AppData\Local\Temp\jre-8u101-windows-au.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-08-25 18:36
 

==================== Ende von FRST.txt ============================

Addition.txt

Code:

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 29-08-2016

durchgefÃ¼hrt von WÃ¶lkchen (30-08-2016 12:44:30)

Gestartet von C:\Users\WÃ¶lkchen\Downloads

Windows 10 Home Version 1511 (X64) (2016-04-12 13:43:42)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-111181969-29958568-1612040154-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-111181969-29958568-1612040154-503 - Limited - Disabled)

Gast (S-1-5-21-111181969-29958568-1612040154-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-111181969-29958568-1612040154-1003 - Limited - Enabled)

WÃ¶lkchen (S-1-5-21-111181969-29958568-1612040154-1001 - Administrator - Enabled) => C:\Users\WÃ¶lkchen
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)

Ashampoo AppLauncher (Medion) v.1.0.0 (HKLM-x32\...\Ashampoo AppLauncher (Medion)_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)

CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)

Citavi 5 (HKLM-x32\...\{7EB278FB-0C3C-445E-8665-4A6CDD9B794E}) (Version: 5.2.0.8 - Swiss Academic Software)

CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerDirector 11 (Version: 11.0.0.3714 - CyberLink Corp.) Hidden

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.2527 - CyberLink Corp.)

CyberLink PowerRecover (Version: 5.7.0.2527 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DNSUnlocker (HKLM\...\{E1527582-8509-4011-B922-29E3FB548882}_is1) (Version:  - )

DNSUnlocker (HKLM-x32\...\{E1527582-8509-4011-B922-29E3FB548882}_is1) (Version: 1.4 - )

Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.5.1.1 - Dolby Laboratories Inc)

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.1.18829 - Landesfinanzdirektion ThÃ¼ringen)

Epson Easy Photo Print 2 (HKLM-x32\...\{71E90740-5E5F-4D43-AB8F-CAC1D93DBB5B}) (Version: 2.5.0.0 - SEIKO EPSON CORPORATION)

Epson Event Manager (HKLM-x32\...\{0F13C24A-FFE2-4CD0-8E0B-DC804E0A0E0B}) (Version: 3.10.0035 - Seiko Epson Corporation)

Epson E-Web Print (HKLM-x32\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EPSON XP-312 313 315 Series Printer Uninstall (HKLM\...\EPSON XP-312 313 315 Series) (Version:  - SEIKO EPSON Corporation)

EPSON-HandbÃ¼cher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.32.0.0 - SEIKO EPSON CORPORATION)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)

Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

Fotogalerija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalleri (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalleriet (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

FotoÄŸraf Galerisi (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

FotÃ³tÃ¡r (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)

Galeria de Fotografias (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

GalerÃ*a de fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galeria fotografii (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)

Google Drive (HKLM-x32\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)

Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1050 - Intel Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden

Meine CEWE FOTOWELT (HKLM-x32\...\Meine CEWE FOTOWELT) (Version: 6.1.3 - CEWE Stiftung u Co. KGaA)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

Mozilla Firefox 43.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)

Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)

PDF24 Creator 7.8.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.317.0 - Tracker Software Products Ltd)

PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0094 - Pegatron Corporation)

Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

RawTherapee Version 4.2 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.2 - rawtherapee.com)

REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.769.093013 - REALTEK Semiconductor Corp.)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39052 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7045 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0227 - REALTEK Semiconductor Corp.)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)

Skypeâ„¢ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.20 - Synaptics Incorporated)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update fÃ¼r Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update fÃ¼r Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update fÃ¼r Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

Valokuvavalikoima (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)

Î£Ï…Î»Î»Î¿Î³Î® Ï†Ï‰Ï„Î¿Î³ÏÎ±Ï†Î¹ÏŽÎ½ (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-111181969-29958568-1612040154-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-111181969-29958568-1612040154-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {06AA49D9-159D-44B1-8708-547E5288F249} - System32\Tasks\EPSON XP-312 313 315 Series Update {420CD611-88BF-4C64-AA15-40200B65964E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {184ECEE0-A0A6-417D-83D3-8F93B953228A} - \Safer-Networking\Spybot - Search and Destroy\Check for updates -> Keine Datei <==== ACHTUNG

Task: {1C8BC42B-CA39-4311-AA9F-C3ABEA43B09D} - System32\Tasks\EPSON XP-312 313 315 Series Invitation {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {22D9FDA3-9CB0-45AF-8FE1-8BD7F024B70B} - System32\Tasks\EPSON XP-312 313 315 Series Invitation {420CD611-88BF-4C64-AA15-40200B65964E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {2969CA60-6208-40AB-B940-0A75EA801499} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {2D31CDCB-C3D9-4176-9258-C57D1D4BBA36} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {3454C0B2-2036-467B-8975-22899FEEE050} - System32\Tasks\EPSON XP-312 313 315 Series Update {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {345FD4E5-56CB-43C4-B4B0-107410D7D40D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {36FF0CB5-71E2-4F6D-BD0C-2765EC027BC1} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

Task: {3E0FFDCB-0250-4EC5-A47D-A1E8617CB2F6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {566D17E3-3C70-4A7F-BAFB-08730B5AF886} - \Safer-Networking\Spybot - Search and Destroy\Scan the system -> Keine Datei <==== ACHTUNG

Task: {56FFECA5-194D-48B1-A42D-73DE14D065CB} - System32\Tasks\DNSWAXHAW => dnswaxhaw.exe <==== ACHTUNG

Task: {66A4B8E3-8A7C-4E5A-8CED-225ECE0B5D21} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)

Task: {6FFE704F-1CF3-4EC4-84F2-7DE4310721A8} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-03-22] (Tracker Software Products (Canada) Ltd.)

Task: {731BFB9A-5D1B-4574-BF20-3A548DFE8416} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {770FB4BB-A7B2-41C9-9BF1-B7B8B5BE4500} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {85ADF039-3CA6-4CDA-8D6B-7CC564C5EE4E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {988861A9-121F-4241-8240-65CFA7FDF2C8} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {9E074F8D-D9C8-4DAD-8B1F-E73901CB43D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)

Task: {A0E109A6-D3E7-4FA9-8430-9E3E0E680F36} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {BF3215C2-6CBF-4083-9E8A-5D0DCA5EC380} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization -> Keine Datei <==== ACHTUNG

Task: {C285B44B-BA5D-4EA8-BA91-1F7A2AFCD0C6} - \{D2A1A8E6-E961-F74D-00CC-92C0ED9E2513} -> Keine Datei <==== ACHTUNG

Task: {D7541B59-6888-4DFF-BC88-E15E973B60C7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)

Task: {DC165313-30B6-454B-B267-00D6FF06A507} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {DF2D15D0-039E-4942-953D-EEB5C830D7BD} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-08-11] (Microsoft Corporation)

Task: {EC692A38-1E60-42C0-B095-1372BCDA7DBA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)

Task: {F02A5651-7369-42BB-8E67-1C37C2EB7853} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-25] (Microsoft Corporation)

Task: {F76CF4B5-B6B3-4A73-ABC4-ABAFAE46AB8D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {FCC2DF7B-FB6E-412C-8406-BE4E59346894} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {420CD611-88BF-4C64-AA15-40200B65964E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E} /F:Update WORKGROUP\CLAUDIA$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {420CD611-88BF-4C64-AA15-40200B65964E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{420CD611-88BF-4C64-AA15-40200B65964E} /F:Update WORKGROUP\CLAUDIA$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {47AAFAAB-A64F-49A9-A1B4-4CD52913B9D4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{47AAFAAB-A64F-49A9-A1B4-4CD52913B9D4} /F:UpdateWORKGROUP\CLAUDIA$

Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe
 

==================== VerknÃ¼pfungen =============================
 

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI SÃ¼d Blumen Service.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www2.aldi-blumenservice.de/

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI SÃ¼d Reisen.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.aldi-sued.de/de/html/service/aldi_reisen.htm

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI SÃ¼d Startseite.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.aldi-sued.de

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI Talk.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.medionmobile.de

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.medion.com

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.aldi-sued.de
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-03-19 07:41 - 2013-12-03 01:21 - 00136192 _____ () C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe

2014-02-27 18:13 - 2013-03-06 16:42 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-07-13 19:26 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2014-03-19 07:41 - 2013-10-14 21:11 - 02215424 _____ () C:\Program Files (x86)\PHotkey\PHotkey.exe

2016-07-13 19:26 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-08-25 18:07 - 2016-08-25 18:07 - 01864384 _____ () C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-07-13 19:28 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-07-13 19:26 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-07-13 19:26 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-07-13 19:26 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-07-13 19:26 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2014-03-19 07:41 - 2012-10-23 20:07 - 03471872 _____ () C:\Program Files (x86)\PHotkey\POSD.exe

2014-03-19 07:41 - 2013-10-14 19:09 - 08856576 _____ () C:\Program Files (x86)\PHotkey\GPMTray.exe

2016-06-10 17:22 - 2016-06-10 17:22 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-04-19 10:57 - 2016-04-19 10:58 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-08-25 18:12 - 2016-08-25 18:13 - 03763712 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe

2016-08-16 08:54 - 2016-08-16 08:59 - 00017408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

2016-08-16 08:54 - 2016-08-16 08:59 - 13475840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll

2016-06-03 21:22 - 2016-06-03 21:23 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll

2016-04-12 16:34 - 2016-04-12 16:34 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.722.10060.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll

2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll

2014-03-19 07:41 - 2009-12-18 17:36 - 00973432 _____ () C:\Program Files (x86)\PHotkey\acAuth.dll

2014-03-19 07:41 - 2013-09-18 01:23 - 00108032 _____ () C:\Program Files (x86)\PHotkey\PGFNEX.dll

2016-08-29 14:43 - 2016-08-29 14:43 - 00098816 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32api.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00110080 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\pywintypes27.dll

2016-08-29 14:43 - 2016-08-29 14:43 - 00364544 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\pythoncom27.dll

2016-08-29 14:43 - 2016-08-29 14:43 - 00320512 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32com.shell.shell.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00776704 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_hashlib.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 01176576 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._core_.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00806400 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._gdi_.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00816128 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._windows_.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 01067008 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._controls_.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00733184 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._misc_.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00682496 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\pysqlite2._sqlite.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00088064 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_ctypes.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00119808 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32file.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00108544 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32security.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00007168 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\hashobjs_ext.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00017920 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\thumbnails_ext.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00088064 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\usb_ext.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00012800 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\common.time34.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00018432 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32event.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00167936 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32gui.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00046080 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_socket.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 01208320 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_ssl.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00128512 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_elementtree.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00127488 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\pyexpat.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00038912 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32inet.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00036864 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_psutil_windows.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00525208 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\windows._lib_cacheinvalidation.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00011264 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32crypt.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00077312 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._html2.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00027136 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_multiprocessing.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00020480 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\_yappi.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00035840 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32process.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00686080 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\unicodedata.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00078848 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._animate.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00123392 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\wx._wizard.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00024064 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32pipe.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00010240 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\select.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00025600 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32pdh.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00017408 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32profile.pyd

2016-08-29 14:43 - 2016-08-29 14:43 - 00022528 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI95722\win32ts.pyd

2016-08-25 18:07 - 2016-08-25 18:07 - 01383616 _____ () C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll

2016-08-25 18:07 - 2016-08-25 18:07 - 00118976 _____ () C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncViews.dll

2016-04-19 10:57 - 2016-04-19 10:58 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-04-19 10:57 - 2016-04-19 10:58 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2015-11-11 04:41 - 2015-11-11 04:41 - 00756376 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL

2016-08-03 19:44 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll

2016-08-03 19:44 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)
 
 

==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\007guard.com -> install.007guard.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\008k.com -> www.008k.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\00hq.com -> www.00hq.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\010402.com -> 010402.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\0scan.com -> www.0scan.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\10sek.com -> www.10sek.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7865 mehr Seiten.
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKU\S-1-5-21-111181969-29958568-1612040154-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\WÃ¶lkchen\Pictures\Fotos\Fotos 2016\07 Juli\14760712\DSC04542.JPG

HKU\S-1-5-21-111181969-29958568-1612040154-501\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\MEDION\wallpaper.jpg

DNS Servers: 82.163.143.171 - 82.163.142.173

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKLM\...\StartupApproved\Run32: => "PDFPrint"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{9468E47F-3D99-42B5-AA6B-7063952B3130}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B2C7F68E-7284-4C7A-B621-3E530771E43C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{372A8F0D-9767-4F5D-968A-8857BB8A1F93}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{BD0D9D9A-05A2-4A2E-B6A2-B92924539529}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{057C71C1-D687-4F5B-A544-D63ACA0FCD69}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [TCP Query User{A20783AC-9587-4C18-84FE-262499FD35BB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{E258DB50-A2AC-4CBC-83A8-26833C88AA02}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{47E3B7C0-07A3-4B7A-9FF6-7D4117BAF0D8}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [UDP Query User{98252307-3309-4841-84CE-0D34535F7E26}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{C50F38D7-704C-4E80-B76D-2E8F8C72629A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [{CB549515-9490-48C5-BEC5-8262AE2474CF}] => (Allow) C:\Users\WÃ¶lkchen\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup3_6_1_2200\ENEasyApp.exe

FirewallRules: [{381FAB51-EC68-44A9-9CAF-B13CA2DDF8A6}] => (Allow) C:\Users\WÃ¶lkchen\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup3_6_1_2200\ENEasyApp.exe

FirewallRules: [{1E4562FC-31A5-4C28-9E5A-B7499E0F4CD7}] => (Allow) C:\Program Files (x86)\Fortinet\FortiClient VPN\ipsec.exe

FirewallRules: [{E972DF28-F090-40DB-A2F7-911FF5DD5A39}] => (Allow) LPort=1900

FirewallRules: [{91EBCD83-DD07-4FF1-B484-8F7CD7D56451}] => (Allow) LPort=2869

FirewallRules: [{7EFC002B-6922-477A-93C2-425FBFAC3146}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{FE74F804-335B-4E6C-8BFB-0CA2302C4512}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

FirewallRules: [{E84669DA-D2F5-4967-819A-43725D9D9B1F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

FirewallRules: [{D6658834-C0CB-44F2-933A-D544687991B7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{26C28D10-8731-43D7-8632-773513AB68A8}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{7F222D0F-595E-4F66-840A-AEEBCE903560}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE

FirewallRules: [{88C6513E-A40C-4D39-9DE8-E22FD11F7718}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Wiederherstellungspunkte =========================
 

11-08-2016 12:31:02 Windows Update

21-08-2016 15:14:42 Geplanter PrÃ¼fpunkt
 

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============
 
 

==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (08/25/2016 09:42:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!Appâ€œ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/24/2016 10:42:05 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.WindowsMaps_8wekyb3d8bbwe!Appâ€œ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/24/2016 10:31:22 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.BingWeather_8wekyb3d8bbwe!Appâ€œ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/21/2016 03:15:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (08/12/2016 09:45:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Claudia)

Description: Das Paket â€žMicrosoft.Windows.Photos_16.526.11220.0_x64__8wekyb3d8bbwe+Appâ€œ wurde beendet, da das Anhalten zu lange dauerte.
 

Error: (08/12/2016 09:44:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.Windows.Photos_8wekyb3d8bbwe!Appâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/12/2016 09:44:16 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Microsoft.Photos.exe, Version: 16.526.11240.0, Zeitstempel: 0x574744f3

Name des fehlerhaften Moduls: SharedLibrary.dll, Version: 1.4.24201.0, Zeitstempel: 0x574e6cd1

Ausnahmecode: 0x802a0201

Fehleroffset: 0x000000000041cf48

ID des fehlerhaften Prozesses: 0x2450

Startzeit der fehlerhaften Anwendung: 0x01d1f4d17738d57e

Pfad der fehlerhaften Anwendung: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.526.11220.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

Pfad des fehlerhaften Moduls: C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\SharedLibrary.dll

Berichtskennung: 6d27ff61-a717-4cdc-85e3-a7b59ad7a712

VollstÃ¤ndiger Name des fehlerhaften Pakets: Microsoft.Windows.Photos_16.526.11220.0_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
 

Error: (08/11/2016 12:31:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (08/03/2016 09:55:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIâ€œ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/02/2016 04:27:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.Messaging_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1â€œ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 
 

Systemfehler:

=============

Error: (08/30/2016 11:40:19 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/29/2016 10:49:24 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/29/2016 09:13:34 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/29/2016 03:16:04 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/29/2016 02:45:45 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/28/2016 10:17:46 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_a5c349e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende KorrekturmaÃŸnahmen werden in 10000 Millisekunden durchgefÃ¼hrt: Neustart des Diensts.
 

Error: (08/28/2016 08:54:46 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/28/2016 08:12:16 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/26/2016 04:23:09 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/26/2016 04:15:27 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 
 

CodeIntegrity:

===================================

  Date: 2016-08-13 08:44:39.200

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-08-12 10:27:49.669

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-07-15 19:41:58.439

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-07-14 10:32:13.280

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-06-21 12:59:54.912

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-06-16 16:09:57.327

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-17 11:22:39.064

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-16 11:24:36.867

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-04-20 09:31:08.020

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-04-16 10:15:16.689

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Celeron(R) CPU N2920 @ 1.86GHz

Prozentuale Nutzung des RAM: 72%

Installierter physikalischer RAM: 3986.44 MB

Verfügbarer physikalischer RAM: 1089.7 MB

Summe virtueller Speicher: 5812 MB

Verfügbarer virtueller Speicher: 2076.75 MB
 

==================== Laufwerke ================================
 

Drive c: (Boot) (Fixed) (Total:402.44 GB) (Free:190.09 GB) NTFS

Drive d: (Recover) (Fixed) (Total:60 GB) (Free:43.41 GB) NTFS

Drive f: () (Removable) (Total:14.45 GB) (Free:13.77 GB) FAT32
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 465.8 GB) (Disk ID: E87CCE09)
 

Partition: GPT.
 

========================================================

Disk: 1 (Size: 14.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

Sorry, hatte die letzten Tage noch etwas Stress

FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016

durchgeführt von Wölkchen (Administrator) auf CLAUDIA (02-09-2016 19:27:11)

Gestartet von C:\Users\Wölkchen\Downloads

Geladene Profile: Wölkchen (Verfügbare Profile: Wölkchen & Gast)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

() C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe

(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe

(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe

() C:\Program Files (x86)\PHotkey\PHotkey.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

() C:\Program Files (x86)\PHotkey\POsd.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

() C:\Program Files (x86)\PHotkey\GPMTray.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.486_none_7640e086266ea227\TiWorker.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13653720 2013-09-24] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353944 2013-09-16] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945656 2015-09-21] (Synaptics Incorporated)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-11-26] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-09-18] (CyberLink Corp.)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1065024 2014-05-02] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [PDFPrint] => C:\Users\Wölkchen\Desktop\Wichtige Programm\PDF24\pdf24.exe [226816 2016-05-23] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23375200 2016-07-29] (Google)

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\Run: [Spybot-S&D Cleaning] => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd)

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"

HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\RunOnce: [Uninstall C:\Users\W�lkchen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wölkchen\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"

ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)

Startup: C:\Users\Wölkchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-06-17]

ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4

Tcpip\..\Interfaces\{1d942a65-89fa-41e2-82ce-42888160dc65}: [DhcpNameServer] 82.163.142.7

Tcpip\..\Interfaces\{7ad0f41e-a1fe-4345-9eef-090821ab9ac1}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{9fc55f8e-743f-4db6-baba-d7676bd5cf32}: [DhcpNameServer] 82.163.142.7

Tcpip\..\Interfaces\{ff88ccbf-aeba-4e5e-be20-d0f225cdf7f6}: [DhcpNameServer] 82.163.142.7
 

Internet Explorer:

==================

HKU\S-1-5-21-111181969-29958568-1612040154-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-111181969-29958568-1612040154-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB

BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)

BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2013-02-28] (SEIKO EPSON CORPORATION)

BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\WINDOWS\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-22] (Oracle Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)

BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-22] (Oracle Corporation)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)

Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll [2013-02-28] (SEIKO EPSON CORPORATION)

Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-10-19] (AO Kaspersky Lab)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Wölkchen\AppData\Roaming\Mozilla\Firefox\Profiles\x015gb2p.default-1448958609816

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-22] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-22] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-01-10] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-30] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)

FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on

FF Extension: (E-Web Print) - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-09-25] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox

FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-05-23]

FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox

FF Extension: (Citavi Picker) - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2015-11-05]
 

Chrome: 

=======

CHR DefaultSearchURL: Default -> hxxps://safesearch.avira.com/#web/result?source=omnibar&q={searchTerms}

CHR DefaultSearchKeyword: Default -> Avira

CHR DefaultSuggestURL: Default -> hxxps://safesearch.avira.com/suggestions?q={searchTerms}&li=ff&hl=de

CHR Profile: C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (ProxFlow) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-11]

CHR Extension: (Google Docs) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-06]

CHR Extension: (Google Drive) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24]

CHR Extension: (YouTube) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-30]

CHR Extension: (Google-Suche) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (Kaspersky Protection) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2015-10-09]

CHR Extension: (Google Docs Offline) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-19]

CHR Extension: („Pin it“-Button) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2016-07-22]

CHR Extension: (Love Smoke) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgibfhhccaknggplelmbaepoikkcnllb [2015-04-21]

CHR Extension: (Skype) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-08-30]

CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-06]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]

CHR Extension: (ProxPrice) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nopgehbobniifpngnhmljfojnkkopbje [2016-07-01]

CHR Extension: (Google Mail) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]

CHR Extension: (Chrome Media Router) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-29]

CHR Extension: (Avira SafeSearch) - C:\Users\Wölkchen\AppData\Local\Google\Chrome\User Data\Default\Extensions\plgjnighgeebiaalpbkmcbbiihegpbbp [2016-08-16]

CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

CHR HKU\S-1-5-21-111181969-29958568-1612040154-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]

CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-10-09] (Kaspersky Lab ZAO)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)

R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)

R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)

R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [144560 2012-05-17] (Seiko Epson Corporation)

R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2014-12-03] (SEIKO EPSON CORPORATION)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)

R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [136192 2013-12-03] () [Datei ist nicht signiert]

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [247992 2015-09-21] (Synaptics Incorporated)

S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)

S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)

R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)

R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)

R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)

R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-02-29] (AO Kaspersky Lab)

S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)

R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-10-19] (AO Kaspersky Lab)

R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [238000 2016-05-23] (AO Kaspersky Lab)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [933808 2016-05-23] (AO Kaspersky Lab)

R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49240 2016-05-23] (AO Kaspersky Lab)

R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)

R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-10-09] (AO Kaspersky Lab)

R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87984 2016-05-23] (AO Kaspersky Lab)

R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)

R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)

R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON)

R3 PegaRadioSwitch; C:\Windows\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-22] (Windows (R) Win 7 DDK provider)

R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-03-11] (Realtek Semiconductor Corporation)

R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation                           )

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-14] (Synaptics Incorporated)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-09-21] (Synaptics Incorporated)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)

R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-01] (Intel Corporation)

S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2031-03-19 09:53 - 2016-08-31 22:55 - 00000000 __SHD C:\System Volume Information

2016-09-02 19:26 - 2016-09-02 19:26 - 00000000 ____D C:\Users\Wölkchen\Downloads\FRST-OlderVersion

2016-08-31 20:11 - 2016-08-31 20:11 - 00000550 _____ C:\Users\Wölkchen\Desktop\JRT.txt

2016-08-31 20:05 - 2016-08-31 20:05 - 00000000 ___HD C:\$WINDOWS.~BT

2016-08-31 20:03 - 2016-08-31 20:03 - 01610560 _____ (Malwarebytes) C:\Users\Wölkchen\Downloads\JRT.exe

2016-08-31 19:46 - 2016-08-31 19:52 - 00000000 ____D C:\AdwCleaner

2016-08-31 19:46 - 2016-08-31 19:46 - 03826240 _____ C:\Users\Wölkchen\Downloads\AdwCleaner_6.010.exe

2016-08-30 14:51 - 2016-08-31 19:54 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2016-08-30 14:51 - 2016-08-30 15:53 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2016-08-30 14:51 - 2016-08-30 14:51 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-08-30 14:44 - 2016-08-30 16:39 - 00000000 ____D C:\Users\Wölkchen\Desktop\mbar

2016-08-30 14:44 - 2016-08-30 15:52 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2016-08-30 14:42 - 2016-08-30 14:44 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Wölkchen\Downloads\mbar-1.09.3.1001.exe

2016-08-30 12:44 - 2016-08-30 12:48 - 00049440 _____ C:\Users\Wölkchen\Downloads\Addition.txt

2016-08-30 12:41 - 2016-09-02 19:27 - 00023858 _____ C:\Users\Wölkchen\Downloads\FRST.txt

2016-08-30 12:41 - 2016-09-02 19:27 - 00000000 ____D C:\FRST

2016-08-30 12:32 - 2016-09-02 19:26 - 02397696 _____ (Farbar) C:\Users\Wölkchen\Downloads\FRST64.exe

2016-08-28 21:54 - 2016-08-28 21:54 - 00031625 _____ C:\Users\Wölkchen\AppData\Local\recently-used.xbel

2016-08-26 16:19 - 2016-08-26 16:19 - 00121289 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Ingwersirup - 2016-03-06.pdf

2016-08-26 16:19 - 2016-08-26 16:19 - 00112202 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Ingwersirup für Cocktail &amp; Tee - 2015-02-23.pdf

2016-08-25 18:08 - 2016-08-25 18:08 - 00003338 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task

2016-08-24 12:55 - 2016-08-24 12:55 - 03867379 _____ C:\Users\Wölkchen\Downloads\Ausweis-und-Bescheinigungen-fuer-das-SS-2016_PA-M_printed-2016-08-24_12-55-16.pdf

2016-08-24 12:55 - 2016-08-24 12:55 - 03867275 _____ C:\Users\Wölkchen\Downloads\Ausweis-und-Bescheinigungen-fuer-das-WS-2016-17_PA-M_printed-2016-08-24_12-55-18.pdf

2016-08-22 20:38 - 2016-08-22 20:38 - 00140835 _____ C:\Users\Wölkchen\Downloads\Bus-634.pdf

2016-08-22 20:38 - 2016-08-22 20:38 - 00043459 _____ C:\Users\Wölkchen\Downloads\Fahrplan_S-Bahn___Regionalzug.pdf

2016-08-17 16:35 - 2016-08-17 16:35 - 00988681 _____ C:\Users\Wölkchen\Downloads\isarcardabo-bestellung-d Copy.pdf

2016-08-11 12:26 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2016-08-11 12:26 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2016-08-11 12:26 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2016-08-11 12:26 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-08-11 12:26 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys

2016-08-11 12:26 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll

2016-08-11 12:26 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2016-08-11 12:26 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll

2016-08-11 12:26 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll

2016-08-11 12:26 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2016-08-11 12:26 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2016-08-11 12:26 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2016-08-11 12:26 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2016-08-11 12:26 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe

2016-08-11 12:26 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2016-08-11 12:26 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2016-08-11 12:26 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2016-08-11 12:26 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-08-11 12:26 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2016-08-11 12:26 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-08-11 12:26 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2016-08-11 12:26 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2016-08-11 12:26 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe

2016-08-11 12:26 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2016-08-11 12:26 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2016-08-11 12:26 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll

2016-08-11 12:26 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll

2016-08-11 12:26 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-08-11 12:26 - 2016-08-03 11:41 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

2016-08-11 12:26 - 2016-08-03 11:41 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2016-08-11 12:26 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2016-08-11 12:26 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

2016-08-11 12:26 - 2016-08-03 11:40 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys

2016-08-11 12:26 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll

2016-08-11 12:26 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2016-08-11 12:26 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2016-08-11 12:26 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2016-08-11 12:26 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll

2016-08-11 12:26 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2016-08-11 12:26 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll

2016-08-11 12:26 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll

2016-08-11 12:26 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2016-08-11 12:26 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll

2016-08-11 12:26 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2016-08-11 12:26 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2016-08-11 12:26 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe

2016-08-11 12:26 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2016-08-11 12:26 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2016-08-11 12:26 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-08-11 12:26 - 2016-08-03 11:29 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-08-11 12:26 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2016-08-11 12:26 - 2016-08-03 11:29 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2016-08-11 12:26 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2016-08-11 12:26 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2016-08-11 12:26 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2016-08-11 12:26 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2016-08-11 12:26 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2016-08-11 12:26 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2016-08-11 12:26 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-08-11 12:26 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-08-11 12:26 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2016-08-11 12:26 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-08-11 12:26 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-08-11 12:26 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-08-11 12:26 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-08-11 12:26 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-08-11 12:26 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2016-08-11 12:26 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll

2016-08-11 12:26 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll

2016-08-11 12:26 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll

2016-08-11 12:26 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll

2016-08-11 12:26 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll

2016-08-11 12:26 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2016-08-11 12:26 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2016-08-11 12:26 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2016-08-11 12:26 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-08-11 12:26 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe

2016-08-11 12:26 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2016-08-11 12:26 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe

2016-08-11 12:26 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll

2016-08-11 12:26 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-08-11 12:26 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2016-08-11 12:26 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll

2016-08-11 12:26 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll

2016-08-11 12:26 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll

2016-08-11 12:26 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-08-11 12:26 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2016-08-11 12:26 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe

2016-08-11 12:26 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2016-08-11 12:26 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-08-11 12:26 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2016-08-11 12:26 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2016-08-11 12:26 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2016-08-11 12:26 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2016-08-11 12:26 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll

2016-08-11 12:26 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2016-08-11 12:26 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2016-08-11 12:26 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-08-11 12:26 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2016-08-11 12:26 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2016-08-11 12:26 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-08-11 12:26 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-08-11 12:26 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-08-11 12:26 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll

2016-08-11 12:26 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2016-08-11 12:25 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2016-08-11 12:25 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll

2016-08-11 12:25 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-08-11 12:25 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2016-08-11 12:25 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-08-11 12:25 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll

2016-08-11 12:25 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2016-08-11 12:25 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2016-08-11 12:25 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2016-08-11 12:25 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2016-08-11 12:25 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll

2016-08-11 12:25 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll

2016-08-11 12:25 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-08-11 12:25 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2016-08-11 12:25 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2016-08-11 12:25 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2016-08-11 12:25 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2016-08-11 12:25 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2016-08-11 12:25 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-08-11 12:25 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-08-11 12:25 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-08-11 12:25 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2016-08-11 12:25 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll

2016-08-11 12:25 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2016-08-11 12:25 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-08-11 12:25 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-08-03 21:54 - 2016-08-03 21:54 - 00242345 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Gemüse Asiastyle - 2016-05-15.pdf

2016-08-03 21:52 - 2016-08-03 21:52 - 00173870 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Gemüse-Ebly-Topf - 2016-07-07.pdf

2016-08-03 21:48 - 2016-08-03 21:48 - 00241496 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Chocolate Chip Cookies - 2016-08-03.pdf

2016-08-03 21:47 - 2016-08-03 21:47 - 00150249 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - White Chocolate Chip Macadamia Cookies - 2015-10-24.pdf

2016-08-03 21:47 - 2016-08-03 21:47 - 00150243 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - White Chocolate Chip Macadamia Cookies - 2015-10-24 (1).pdf

2016-08-03 21:43 - 2016-08-03 21:43 - 00205913 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Marinade für Grill-Gemüse.  Rezept des Tages vom 28.07.2016 - 2016-07-28.pdf

2016-08-03 21:40 - 2016-08-03 21:42 - 00176163 _____ C:\Users\Wölkchen\Downloads\Thermomix Rezeptwelt - Müsliriegel - 2016-07-27.pdf

2016-08-03 14:12 - 2016-08-03 14:12 - 00016276 _____ C:\Users\Wölkchen\Downloads\Übersicht MA (1)

2016-08-03 14:11 - 2016-08-03 14:12 - 00016276 _____ C:\Users\Wölkchen\Downloads\Übersicht MA
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-09-02 19:26 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-09-02 19:26 - 2014-06-05 21:35 - 00000000 ___RD C:\Users\Wölkchen\Google Drive

2016-09-02 19:25 - 2016-04-12 15:44 - 00000000 __SHD C:\Users\Wölkchen\IntelGraphicsProfiles

2016-09-02 19:25 - 2015-10-08 13:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab

2016-09-02 19:25 - 2014-06-05 10:17 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-08-31 22:55 - 2016-02-13 19:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-08-31 22:54 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2016-08-31 22:51 - 2014-09-01 15:51 - 00000935 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {420CD611-88BF-4C64-AA15-40200B65964E}.job

2016-08-31 22:51 - 2014-09-01 15:51 - 00000749 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {420CD611-88BF-4C64-AA15-40200B65964E}.job

2016-08-31 20:05 - 2016-04-12 13:15 - 00000000 ___DC C:\WINDOWS\Panther

2016-08-31 19:59 - 2016-04-12 12:43 - 01799166 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-08-31 19:59 - 2016-02-13 18:59 - 00776766 _____ C:\WINDOWS\system32\perfh007.dat

2016-08-31 19:59 - 2016-02-13 18:59 - 00155544 _____ C:\WINDOWS\system32\perfc007.dat

2016-08-31 19:59 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF

2016-08-31 19:56 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps

2016-08-31 19:42 - 2014-09-25 11:42 - 00000935 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job

2016-08-31 19:42 - 2014-09-25 11:42 - 00000749 _____ C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job

2016-08-31 19:38 - 2014-06-05 10:17 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-08-30 15:45 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PLA

2016-08-28 21:57 - 2016-04-17 11:17 - 00000000 ____D C:\Users\Wölkchen\.gimp-2.8

2016-08-28 21:54 - 2016-04-25 21:16 - 00000000 ____D C:\Users\Wölkchen\AppData\Local\gtk-2.0

2016-08-25 18:08 - 2016-04-12 15:49 - 00002429 _____ C:\Users\Wölkchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2016-08-25 18:08 - 2016-04-12 15:49 - 00000000 ___RD C:\Users\Wölkchen\OneDrive

2016-08-25 18:07 - 2014-10-30 22:19 - 00000000 ____D C:\Users\Wölkchen\AppData\Roaming\Skype

2016-08-24 10:57 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-08-22 16:50 - 2014-06-05 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2016-08-17 16:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache

2016-08-13 08:48 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-08-12 22:55 - 2016-02-13 19:12 - 00000000 ____D C:\Program Files\Windows Journal

2016-08-12 22:55 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-08-12 22:55 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-08-12 10:25 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates

2016-08-12 10:25 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-08-12 10:23 - 2014-06-14 13:02 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-08-11 12:40 - 2013-10-24 14:33 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-08-05 12:26 - 2016-05-10 10:51 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-08-03 19:44 - 2014-06-05 10:19 - 00002268 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-08-03 19:44 - 2014-06-05 10:19 - 00002256 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-08-03 15:07 - 2015-08-11 20:24 - 00000000 ____D C:\Users\Wölkchen\AppData\Roaming\vlc
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-03-09 14:41 - 2015-03-09 14:41 - 0185529 _____ () C:\Program Files (x86)\lizenzvertrag.pdf

2014-06-05 09:05 - 2016-04-12 10:57 - 1462013 _____ () C:\Users\Wölkchen\AppData\Local\BTServer.log

2014-06-18 18:34 - 2014-12-30 23:50 - 0017920 _____ () C:\Users\Wölkchen\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2016-08-28 21:54 - 2016-08-28 21:54 - 0031625 _____ () C:\Users\Wölkchen\AppData\Local\recently-used.xbel

2016-04-12 12:18 - 2016-04-12 12:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

2014-02-27 18:15 - 2014-02-27 18:16 - 0000104 _____ () C:\ProgramData\{01FB4998-33C4-4431-85ED-079E3EEFE75D}.log

2014-02-27 18:16 - 2014-02-27 18:16 - 0000119 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log

2014-02-27 18:12 - 2014-02-27 18:12 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log

2014-02-27 18:15 - 2014-02-27 18:15 - 0000111 _____ () C:\ProgramData\{44510C84-AE2A-4079-A75B-D44E68D73B9A}.log

2014-02-27 18:13 - 2014-02-27 18:13 - 0000032 _____ () C:\ProgramData\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}.log

2014-02-27 18:11 - 2014-02-27 18:11 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log

2014-02-27 18:13 - 2014-02-27 18:14 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log

2014-02-27 18:11 - 2014-02-27 18:12 - 0000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log

2014-02-27 18:12 - 2014-02-27 18:12 - 0000110 _____ () C:\ProgramData\{E3D04529-6EDB-11D8-A372-0050BAE317E1}.log
 

Einige Dateien in TEMP:

====================

C:\Users\Wölkchen\AppData\Local\Temp\jre-8u101-windows-au.exe

C:\Users\Wölkchen\AppData\Local\Temp\libeay32.dll

C:\Users\Wölkchen\AppData\Local\Temp\msvcr120.dll

C:\Users\Wölkchen\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-08-25 18:36
 

==================== Ende von FRST.txt ============================

Addition

Code:

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016

durchgefÃ¼hrt von WÃ¶lkchen (02-09-2016 19:31:32)

Gestartet von C:\Users\WÃ¶lkchen\Downloads

Windows 10 Home Version 1511 (X64) (2016-04-12 13:43:42)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-111181969-29958568-1612040154-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-111181969-29958568-1612040154-503 - Limited - Disabled)

Gast (S-1-5-21-111181969-29958568-1612040154-501 - Limited - Disabled) => C:\Users\Gast

HomeGroupUser$ (S-1-5-21-111181969-29958568-1612040154-1003 - Limited - Enabled)

WÃ¶lkchen (S-1-5-21-111181969-29958568-1612040154-1001 - Administrator - Enabled) => C:\Users\WÃ¶lkchen
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Kaspersky Internet Security (Disabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Kaspersky Internet Security (Disabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Kaspersky Internet Security (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)

Ashampoo AppLauncher (Medion) v.1.0.0 (HKLM-x32\...\Ashampoo AppLauncher (Medion)_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)

CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)

Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)

Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)

Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)

Citavi 5 (HKLM-x32\...\{7EB278FB-0C3C-445E-8665-4A6CDD9B794E}) (Version: 5.2.0.8 - Swiss Academic Software)

CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerDirector 11 (Version: 11.0.0.3714 - CyberLink Corp.) Hidden

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.2527 - CyberLink Corp.)

CyberLink PowerRecover (Version: 5.7.0.2527 - CyberLink Corp.) Hidden

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.5.1.1 - Dolby Laboratories Inc)

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.1.18829 - Landesfinanzdirektion ThÃ¼ringen)

Epson Easy Photo Print 2 (HKLM-x32\...\{71E90740-5E5F-4D43-AB8F-CAC1D93DBB5B}) (Version: 2.5.0.0 - SEIKO EPSON CORPORATION)

Epson Event Manager (HKLM-x32\...\{0F13C24A-FFE2-4CD0-8E0B-DC804E0A0E0B}) (Version: 3.10.0035 - Seiko Epson Corporation)

Epson E-Web Print (HKLM-x32\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

EPSON XP-312 313 315 Series Printer Uninstall (HKLM\...\EPSON XP-312 313 315 Series) (Version:  - SEIKO EPSON Corporation)

EPSON-HandbÃ¼cher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.32.0.0 - SEIKO EPSON CORPORATION)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)

Fotogalerie (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

Fotogalerija (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalleri (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotogalleriet (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

FotoÄŸraf Galerisi (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

FotÃ³tÃ¡r (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)

Galeria de Fotografias (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

GalerÃ*a de fotos (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galeria fotografii (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Galerie de photos (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)

Google Drive (HKLM-x32\...\{459CE109-4E46-4340-92BC-054642BC3BC2}) (Version: 1.31.2873.2758 - Google, Inc.)

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)

Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1050 - Intel Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)

Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden

Meine CEWE FOTOWELT (HKLM-x32\...\Meine CEWE FOTOWELT) (Version: 6.1.3 - CEWE Stiftung u Co. KGaA)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (x32 Version: 16.4.3522.0110 - Microsoft Corporation) Hidden

Mozilla Firefox 43.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)

Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)

PDF24 Creator 7.8.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.317.0 - Tracker Software Products Ltd)

PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0094 - Pegatron Corporation)

Raccolta foto (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

RawTherapee Version 4.2 (HKLM\...\{128459AB-59A7-430A-8BD0-3D8803D50400}_is1) (Version: 4.2 - rawtherapee.com)

REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.769.769.093013 - REALTEK Semiconductor Corp.)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.39052 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7045 - Realtek Semiconductor Corp.)

REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0227 - REALTEK Semiconductor Corp.)

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)

Skypeâ„¢ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.20 - Synaptics Incorporated)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update fÃ¼r Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update fÃ¼r Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update fÃ¼r Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

Valokuvavalikoima (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3522.0110 - Microsoft Corporation)

Î£Ï…Î»Î»Î¿Î³Î® Ï†Ï‰Ï„Î¿Î³ÏÎ±Ï†Î¹ÏŽÎ½ (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-111181969-29958568-1612040154-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-111181969-29958568-1612040154-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {06AA49D9-159D-44B1-8708-547E5288F249} - System32\Tasks\EPSON XP-312 313 315 Series Update {420CD611-88BF-4C64-AA15-40200B65964E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList

Task: {184ECEE0-A0A6-417D-83D3-8F93B953228A} - \Safer-Networking\Spybot - Search and Destroy\Check for updates -> Keine Datei <==== ACHTUNG

Task: {1C8BC42B-CA39-4311-AA9F-C3ABEA43B09D} - System32\Tasks\EPSON XP-312 313 315 Series Invitation {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {22D9FDA3-9CB0-45AF-8FE1-8BD7F024B70B} - System32\Tasks\EPSON XP-312 313 315 Series Invitation {420CD611-88BF-4C64-AA15-40200B65964E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {2969CA60-6208-40AB-B940-0A75EA801499} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {2D31CDCB-C3D9-4176-9258-C57D1D4BBA36} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {3454C0B2-2036-467B-8975-22899FEEE050} - System32\Tasks\EPSON XP-312 313 315 Series Update {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E} => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE [2014-12-03] (SEIKO EPSON CORPORATION)

Task: {345FD4E5-56CB-43C4-B4B0-107410D7D40D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {36FF0CB5-71E2-4F6D-BD0C-2765EC027BC1} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

Task: {3E0FFDCB-0250-4EC5-A47D-A1E8617CB2F6} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {566D17E3-3C70-4A7F-BAFB-08730B5AF886} - \Safer-Networking\Spybot - Search and Destroy\Scan the system -> Keine Datei <==== ACHTUNG

Task: {66A4B8E3-8A7C-4E5A-8CED-225ECE0B5D21} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)

Task: {6FFE704F-1CF3-4EC4-84F2-7DE4310721A8} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-03-22] (Tracker Software Products (Canada) Ltd.)

Task: {731BFB9A-5D1B-4574-BF20-3A548DFE8416} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {770FB4BB-A7B2-41C9-9BF1-B7B8B5BE4500} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {85ADF039-3CA6-4CDA-8D6B-7CC564C5EE4E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {988861A9-121F-4241-8240-65CFA7FDF2C8} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {9E074F8D-D9C8-4DAD-8B1F-E73901CB43D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.)

Task: {A0E109A6-D3E7-4FA9-8430-9E3E0E680F36} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {BF3215C2-6CBF-4083-9E8A-5D0DCA5EC380} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization -> Keine Datei <==== ACHTUNG

Task: {C285B44B-BA5D-4EA8-BA91-1F7A2AFCD0C6} - \{D2A1A8E6-E961-F74D-00CC-92C0ED9E2513} -> Keine Datei <==== ACHTUNG

Task: {D7541B59-6888-4DFF-BC88-E15E973B60C7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)

Task: {DC165313-30B6-454B-B267-00D6FF06A507} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {DF2D15D0-039E-4942-953D-EEB5C830D7BD} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-08-11] (Microsoft Corporation)

Task: {EC692A38-1E60-42C0-B095-1372BCDA7DBA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)

Task: {F02A5651-7369-42BB-8E67-1C37C2EB7853} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-25] (Microsoft Corporation)

Task: {F76CF4B5-B6B3-4A73-ABC4-ABAFAE46AB8D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {FCC2DF7B-FB6E-412C-8406-BE4E59346894} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Invitation {420CD611-88BF-4C64-AA15-40200B65964E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{18B8DF6A-B04C-4DA2-8CB0-4CA55C5A560E} /F:Update WORKGROUP\CLAUDIA$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {420CD611-88BF-4C64-AA15-40200B65964E}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{420CD611-88BF-4C64-AA15-40200B65964E} /F:Update WORKGROUP\CLAUDIA$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON XP-312 313 315 Series Update {47AAFAAB-A64F-49A9-A1B4-4CD52913B9D4}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_ITSLFE.EXE:/EXE:{47AAFAAB-A64F-49A9-A1B4-4CD52913B9D4} /F:UpdateWORKGROUP\CLAUDIA$

Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe
 

==================== VerknÃ¼pfungen =============================
 

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI SÃ¼d Blumen Service.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www2.aldi-blumenservice.de/

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI SÃ¼d Reisen.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.aldi-sued.de/de/html/service/aldi_reisen.htm

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI SÃ¼d Startseite.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.aldi-sued.de

ShortcutWithArgument: C:\Users\WÃ¶lkchen\Desktop\Vorinstallierter Krampf\ALDI Talk.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.medionmobile.de

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDIONhome.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.medion.com

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Welcome.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.aldi-sued.de
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-03-19 07:41 - 2013-12-03 01:21 - 00136192 _____ () C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe

2014-02-27 18:13 - 2013-03-06 16:42 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2014-03-19 07:41 - 2013-10-14 21:11 - 02215424 _____ () C:\Program Files (x86)\PHotkey\PHotkey.exe

2016-07-13 19:26 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2014-03-19 07:41 - 2012-10-23 20:07 - 03471872 _____ () C:\Program Files (x86)\PHotkey\POSD.exe

2016-04-19 10:57 - 2016-04-19 10:58 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2014-03-19 07:41 - 2013-10-14 19:09 - 08856576 _____ () C:\Program Files (x86)\PHotkey\GPMTray.exe

2016-07-13 19:26 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-08-25 18:07 - 2016-08-25 18:07 - 01864384 _____ () C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-07-13 19:28 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-07-13 19:26 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-07-13 19:26 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-07-13 19:26 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-07-13 19:26 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-06-10 17:22 - 2016-06-10 17:22 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll

2014-03-19 07:41 - 2009-12-18 17:36 - 00973432 _____ () C:\Program Files (x86)\PHotkey\acAuth.dll

2014-03-19 07:41 - 2013-09-18 01:23 - 00108032 _____ () C:\Program Files (x86)\PHotkey\PGFNEX.dll

2016-04-19 10:57 - 2016-04-19 10:58 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-04-19 10:57 - 2016-04-19 10:58 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2016-09-02 19:25 - 2016-09-02 19:25 - 00098816 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32api.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00110080 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\pywintypes27.dll

2016-09-02 19:25 - 2016-09-02 19:25 - 00364544 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\pythoncom27.dll

2016-09-02 19:25 - 2016-09-02 19:25 - 00320512 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32com.shell.shell.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00776704 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_hashlib.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 01176576 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._core_.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00806400 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._gdi_.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00816128 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._windows_.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 01067008 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._controls_.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00733184 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._misc_.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00682496 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\pysqlite2._sqlite.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00088064 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_ctypes.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00119808 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32file.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00108544 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32security.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00007168 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\hashobjs_ext.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00017920 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\thumbnails_ext.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00088064 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\usb_ext.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00012800 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\common.time34.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00018432 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32event.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00167936 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32gui.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00046080 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_socket.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 01208320 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_ssl.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00128512 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_elementtree.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00127488 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\pyexpat.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00038912 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32inet.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00036864 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_psutil_windows.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00525208 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\windows._lib_cacheinvalidation.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00011264 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32crypt.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00077312 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._html2.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00027136 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_multiprocessing.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00020480 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\_yappi.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00035840 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32process.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00686080 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\unicodedata.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00078848 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._animate.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00123392 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\wx._wizard.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00024064 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32pipe.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00010240 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\select.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00025600 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32pdh.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00017408 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32profile.pyd

2016-09-02 19:25 - 2016-09-02 19:25 - 00022528 ____R () C:\Users\WÃ¶lkchen\AppData\Local\Temp\_MEI26402\win32ts.pyd

2016-08-25 18:07 - 2016-08-25 18:07 - 01383616 _____ () C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll

2016-08-25 18:07 - 2016-08-25 18:07 - 00118976 _____ () C:\Users\WÃ¶lkchen\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileSyncViews.dll

2016-08-03 19:44 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll

2016-08-03 19:44 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)
 
 

==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\007guard.com -> install.007guard.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\008k.com -> www.008k.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\00hq.com -> www.00hq.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\010402.com -> 010402.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\0scan.com -> www.0scan.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\10sek.com -> www.10sek.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\S-1-5-21-111181969-29958568-1612040154-1001\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7865 mehr Seiten.
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKU\S-1-5-21-111181969-29958568-1612040154-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\WÃ¶lkchen\Pictures\Fotos\Fotos 2016\07 Juli\14760712\DSC04542.JPG

DNS Servers: 192.168.0.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKLM\...\StartupApproved\Run32: => "PDFPrint"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{9468E47F-3D99-42B5-AA6B-7063952B3130}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{B2C7F68E-7284-4C7A-B621-3E530771E43C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{372A8F0D-9767-4F5D-968A-8857BB8A1F93}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{BD0D9D9A-05A2-4A2E-B6A2-B92924539529}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [UDP Query User{057C71C1-D687-4F5B-A544-D63ACA0FCD69}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [TCP Query User{A20783AC-9587-4C18-84FE-262499FD35BB}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{E258DB50-A2AC-4CBC-83A8-26833C88AA02}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{47E3B7C0-07A3-4B7A-9FF6-7D4117BAF0D8}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [UDP Query User{98252307-3309-4841-84CE-0D34535F7E26}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{C50F38D7-704C-4E80-B76D-2E8F8C72629A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [{CB549515-9490-48C5-BEC5-8262AE2474CF}] => (Allow) C:\Users\WÃ¶lkchen\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup3_6_1_2200\ENEasyApp.exe

FirewallRules: [{381FAB51-EC68-44A9-9CAF-B13CA2DDF8A6}] => (Allow) C:\Users\WÃ¶lkchen\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup3_6_1_2200\ENEasyApp.exe

FirewallRules: [{1E4562FC-31A5-4C28-9E5A-B7499E0F4CD7}] => (Allow) C:\Program Files (x86)\Fortinet\FortiClient VPN\ipsec.exe

FirewallRules: [{E972DF28-F090-40DB-A2F7-911FF5DD5A39}] => (Allow) LPort=1900

FirewallRules: [{91EBCD83-DD07-4FF1-B484-8F7CD7D56451}] => (Allow) LPort=2869

FirewallRules: [{7EFC002B-6922-477A-93C2-425FBFAC3146}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{FE74F804-335B-4E6C-8BFB-0CA2302C4512}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

FirewallRules: [{E84669DA-D2F5-4967-819A-43725D9D9B1F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

FirewallRules: [{D6658834-C0CB-44F2-933A-D544687991B7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{26C28D10-8731-43D7-8632-773513AB68A8}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{7F222D0F-595E-4F66-840A-AEEBCE903560}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE

FirewallRules: [{88C6513E-A40C-4D39-9DE8-E22FD11F7718}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Wiederherstellungspunkte =========================
 

11-08-2016 12:31:02 Windows Update

21-08-2016 15:14:42 Geplanter PrÃ¼fpunkt

30-08-2016 13:50:56 Geplanter PrÃ¼fpunkt

30-08-2016 15:42:05 Malwarebytes Anti-Rootkit Restore Point

31-08-2016 20:03:48 JRT Pre-Junkware Removal
 

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============
 
 

==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (08/31/2016 08:04:06 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (08/31/2016 07:20:06 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NetworkUXBroker.exe, Version: 10.0.10586.420, Zeitstempel: 0x57491d98

Name des fehlerhaften Moduls: WlanMediaManager.dll, Version: 10.0.10586.494, Zeitstempel: 0x5775e784

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000036cf5

ID des fehlerhaften Prozesses: 0x630

Startzeit der fehlerhaften Anwendung: 0x01d203abbe05c01b

Pfad der fehlerhaften Anwendung: C:\WINDOWS\System32\NetworkUXBroker.exe

Pfad des fehlerhaften Moduls: C:\Windows\System32\WlanMediaManager.dll

Berichtskennung: d7d51db1-b013-42d1-a697-c5fd540a3a66

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (08/30/2016 03:42:22 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (08/30/2016 01:51:12 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (08/25/2016 09:42:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!Appâ€œ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/24/2016 10:42:05 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.WindowsMaps_8wekyb3d8bbwe!Appâ€œ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/24/2016 10:31:22 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.BingWeather_8wekyb3d8bbwe!Appâ€œ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (08/21/2016 03:15:02 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (08/12/2016 09:45:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Claudia)

Description: Das Paket â€žMicrosoft.Windows.Photos_16.526.11220.0_x64__8wekyb3d8bbwe+Appâ€œ wurde beendet, da das Anhalten zu lange dauerte.
 

Error: (08/12/2016 09:44:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Claudia)

Description: Bei der Aktivierung der App â€žMicrosoft.Windows.Photos_8wekyb3d8bbwe!Appâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 
 

Systemfehler:

=============

Error: (09/02/2016 07:28:07 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/31/2016 10:54:03 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_46852" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende KorrekturmaÃŸnahmen werden in 10000 Millisekunden durchgefÃ¼hrt: Neustart des Diensts.
 

Error: (08/31/2016 10:49:46 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/31/2016 08:06:14 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÃ„T)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Funktionsupdate fÃ¼r Windows 10 â€“ Version 1607
 

Error: (08/31/2016 07:58:16 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÃ„T)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/31/2016 07:53:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_c73db8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende KorrekturmaÃŸnahmen werden in 10000 Millisekunden durchgefÃ¼hrt: Neustart des Diensts.
 

Error: (08/31/2016 07:52:43 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" KorrekturmaÃŸnahmen (Neustart des Diensts) durchzufÃ¼hren, ist fehlgeschlagen. Fehler: 

Es wird bereits eine Instanz des Dienstes ausgefÃ¼hrt.
 

Error: (08/31/2016 07:52:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende KorrekturmaÃŸnahmen werden in 30000 Millisekunden durchgefÃ¼hrt: Neustart des Diensts.
 

Error: (08/31/2016 07:52:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende KorrekturmaÃŸnahmen werden in 0 Millisekunden durchgefÃ¼hrt: Neustart des Diensts.
 

Error: (08/31/2016 07:52:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "SynTPEnh Caller Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

CodeIntegrity:

===================================

  Date: 2016-08-13 08:44:39.200

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-08-12 10:27:49.669

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-07-15 19:41:58.439

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-07-14 10:32:13.280

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-06-21 12:59:54.912

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-06-16 16:09:57.327

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-17 11:22:39.064

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-05-16 11:24:36.867

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-04-20 09:31:08.020

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-04-16 10:15:16.689

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Celeron(R) CPU N2920 @ 1.86GHz

Prozentuale Nutzung des RAM: 64%

Installierter physikalischer RAM: 3986.44 MB

Verfügbarer physikalischer RAM: 1427.99 MB

Summe virtueller Speicher: 5266.44 MB

Verfügbarer virtueller Speicher: 2436.55 MB
 

==================== Laufwerke ================================
 

Drive c: (Boot) (Fixed) (Total:402.44 GB) (Free:186.24 GB) NTFS

Drive d: (Recover) (Fixed) (Total:60 GB) (Free:43.41 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 465.8 GB) (Disk ID: E87CCE09)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================