Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   AdwCleaner, Registryeinträge die sich nicht löschen lassen (https://www.trojaner-board.de/182736-adwcleaner-registryeintraege-loeschen-lassen.html)

JSM 06.11.2016 16:56
AdwCleaner, Registryeinträge die sich nicht löschen lassen
 
Hallo,
ich habe Emisoft auf dem Rechner installiert und benutze zusätzlich HitmanPro und Antimalwarebytes Premium. Vor ein paar Tagen habe ich den AdwCleaner mal laufen lassen um zu schauen ob alles ok ist.

Bekomme immer wieder die gleichen 6 Registryeinträge die sich nicht löschen lassen. Emisoft hat mich an Anitmalwarebytes verwiesen da der AdwCleaner jetzt dazu gehört.

Ein Helfer von Animalwarbytes riet mir als erstes ich sollte den HitmanPro im Taskmanager ausschalten um zu schauen ob die Fehler immer noch da sind, sie sind weiter vorhanden.

Dann übersandte er mir eine Mail mit dem Hinweis, ich sollte Eingaben in der Registy vornehmen aber ehrlich gesagt alles nur auf English. Das war mir zu heikel.

Hoffe Ihr könnte mir weiterhelfen?!
MfG

Hier ist die Mail:

Subject: Malwarebytes bought and use AdwCleaner
This message was sent to xxxxxxxxxxxxxxxx in reference to Case #: 1135103.
NOV 06, 2016 | 04:40AM PST
Larry replied:

Step 1: Click the Start button on the bottom-left corner, type regedit in the empty search box and tap regedit in the results.

Step 2: Select Yes in the User Account Control dialog.

Make sure “My Computer” is highlighted

Click "Edit"> “Find”
Type or use Copy/Paste in 0A167702A96FE1D4DA3296FCA77354D9 tap Enter Key.

Right Click on the file if found and select “Delete”

Tap the “F3” Key to find the next entry of the file. Continue using the “F3” Key until it’s finished searching.

Close Regedit.

Restart the pc and run a new AdwCleaner scan

Let me know if that solved the issues

Code:
# AdwCleaner v6.030 - Bericht erstellt am 06/11/2016 um 13:20:52
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-11-05.1 [Server]
# Betriebssystem : Windows 8.1  (X64)
# Benutzername : Susanne - SUSANNE
# Gestartet von : C:\Users\Susanne\Desktop\AdwCleaner.exe
# Modus: Löschen
# Unterstützung : hxxps://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\Classes\Installer\Features\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\Classes\Installer\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\Installer\Features\0A167702A96FE1D4DA3296FCA77354D9
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\Installer\Products\0A167702A96FE1D4DA3296FCA77354D9


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt

*************************

C:\AdwCleaner\AdwCleaner[C2].txt - [4339 Bytes] - [04/11/2016 12:55:10]
C:\AdwCleaner\AdwCleaner[C3].txt - [1654 Bytes] - [06/11/2016 13:20:52]
C:\AdwCleaner\AdwCleaner[C4].txt - [3065 Bytes] - [03/11/2016 14:52:05]
C:\AdwCleaner\AdwCleaner[S0].txt - [4335 Bytes] - [04/11/2016 12:52:29]
C:\AdwCleaner\AdwCleaner[S1].txt - [2167 Bytes] - [04/11/2016 19:09:00]
C:\AdwCleaner\AdwCleaner[S2].txt - [2240 Bytes] - [06/11/2016 13:20:28]

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2019 Bytes] ##########

JSM 06.11.2016 16:56
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 04-11-2016
durchgeführt von Susanne (Administrator) auf SUSANNE (06-11-2016 16:17:06)
Gestartet von C:\Users\Susanne\Desktop
Geladene Profile: Susanne (Verfügbare Profile: Susanne & Gast)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\HSSCP.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(ZTE) C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
() C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_205.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_205.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X7 (64-bit)\pua.exe [2004312 2015-05-19] (Corel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397752 2016-03-24] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7818040 2013-09-19] (Motorola Solutions, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7838392 2016-10-29] (Emsisoft Ltd)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25424008 2016-10-24] (Dropbox, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Schmaili] => C:\Schmaili90\schmaili.exe [536576 2007-08-03] (Marc Waesche Services)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\MountPoints2: {25215d21-71fb-11e6-bf71-24fd52f78824} - "F:\windows\Data\setup.exe"
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [186136 2016-04-21] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164696 2016-04-21] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MCtlSvc.lnk [2016-09-06]
ShortcutTarget: MCtlSvc.lnk -> C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (ZTE)
Startup: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2015-08-26]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Hosts Datei wurde nicht im Standardordner gefunden
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1E5210DC-85FF-4E1C-98B0-40CB3565919B}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4C2CE82A-EBAB-4312-8E71-DF116B2A940E}: [DhcpNameServer] 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> DefaultScope {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {56EE4669-C5D3-4789-8C16-4DB4464DAD46} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE885D20150813&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations)
BHO-x32: Kein Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-24] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-24] (Oracle Corporation)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei

FireFox:
========
FF DefaultProfile: y9p501c2.default
FF ProfilePath: C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default [2016-11-06]
FF Homepage: Mozilla\Firefox\Profiles\y9p501c2.default -> hxxp://www.ferienwohnung-schifferstadt.de/
hxxp://www.gmx.net/logoutlounge/?p=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
hxxps://www.google.com/webhp?hl=de&sa=X&ved=0ahUKEwi5iaqh1IzQAhVJzRQKHZIbDPgQPAgD
hxxps://accounts.google.com/AccountChooser?continue=https%3A%2F%2Fgroups.google.com%2Fd%2Fmyforums&hl=de&service=groups2
hxxps://login.yahoo.com/config/login?.src=ygrp&.intl=de&.lang=de-DE&.done=hxxps://de.groups.yahoo.com/neo
hxxps://translate.google.de/?hl=de&tab=TT#de/en/Fehler%20der%20Registrierungsdatenbank.%20L%C3%B6sche%20diese%20aber%20beim%20n%C3%A4chsten%20Start%20und%20durchsuchen%2C%20sind%20die%20Fehler%20wieder%20da.%20K%C3%B6nnen%20Sie%20mir%20weiterhelfen%3F
hxxps://kabel.vodafone.de/logout
hxxps://www.1und1.de/login
hxxps://polizei.brandenburg.de/konto/login
hxxps://www.bussgeldkatalog.org/raser/
hxxps://www.paypal.de/einkaufswelt/
hxxps://www.congstar.de/meincongstar/
hxxps://www.dropbox.com/login?src=logout
hxxps://www.wesendit.com/
hxxp://heilkraeuter.de/lexikon/huflat.htm
hxxp://www.netdoktor.de/heilpflanzen/koenigskerze/
hxxp://swheattutorials.blogspot.de/2015/12/blog-post_74.html
hxxp://www.wheatcreations.com/SWHEATTUTORIALS/BJChristmas/BJChristmas.htm
hxxp://bienespspplace.bplaced.net/Tutorials/Saison/wintermagic/
hxxp://www.marinettedesings.be/winter_magic_engels.htm
hxxps://www.adac.de/Produkte/autovermietung/EmptyPage.aspx
hxxp://www.elv.de/output/controller.aspx?cid=74&detail=1&detail2=1360
hxxps://www.conrad.de/de/Search.html?search=elektronisches%20heizk%C3%B6rperthermostat%20Danfoss&searchType=REGULAR&category=%1FGeb%25C3%25A4udetechnik%1FL%25C3%25BCftung%252C%2BHeizung%252C%2BKlima
hxxp://www.animationfactory.com/de/search/index.html?s=76&spage=4&raw_q=halloween&CURRENCY=USD&category_id=E1&q=halloween&b=k&cid=E1&bl=%252Fde%252Fsearch%252Findex.html%253Fq%253Dhalloween%2526cid%253DE1%2526s%253D51%2526b%253Dk%2526t%253D244%2526ppage%253D3&t=244
FF Extension: (Webmail Ad Blocker) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\gmailnoads@mywebber.com.xpi [2015-08-15]
FF Extension: (Mailvelope) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-04-08]
FF Extension: (Open about:permissons) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\open.about.permissions@jasnapaka.com.xpi [2016-06-07]
FF Extension: (S3.Google Translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\s3google@translator.xpi [2015-12-13]
FF Extension: (translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@dontfollowme.net.xpi [2016-01-09]
FF Extension: (Google Translator for Firefox) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@zoli.bod.xpi [2015-12-21]
FF Extension: (NoScript) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-15]
FF Extension: (WOT) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-08-15]
FF Extension: (Video DownloadHelper) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-02-20]
FF Extension: (Adblock Plus) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-15]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon
FF Extension: (Bytemobile Optimization Client) - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon [2010-04-01] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_205.dll [2016-10-27] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_205.dll [2016-10-27] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9388576 2016-10-29] (Emsisoft Ltd)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-08-26] (Adobe Systems) [Datei ist nicht signiert]
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [Datei ist nicht signiert]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [41576 2016-10-24] (Dropbox, Inc.)
R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164856 2016-03-24] (NVIDIA Corporation)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2016-09-26] (SurfRight B.V.)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2710648 2016-08-24] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-08-24] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-03-24] (NVIDIA Corporation)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2013-09-13] (arvato digital services llc)
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [118424 2016-03-09] ()
R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [92160 2015-02-17] (Code Sector) [Datei ist nicht signiert]
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [254232 2016-08-23] (RaMMicHaeL)
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] ()
S3 vmicguestinterface; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation)
S3 vmicheartbeat; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation)
S3 vmickvpexchange; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation)
S3 vmicshutdown; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation)
S3 vmictimesync; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-25] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [55800 2015-06-02] ()
R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
R0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert]
S3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros)
R3 btmaux; C:\WINDOWS\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
S0 ebdrv; C:\WINDOWS\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [124304 2016-10-05] (Emsisoft Ltd)
R1 FWNDIS_LWF; C:\WINDOWS\system32\DRIVERS\fwndislwf64.sys [212560 2016-10-21] ()
R1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [152776 2016-10-21] ()
S3 HSPADataCardusbmdm; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys [122752 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbnmea; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys [122752 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbser; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys [122752 2011-08-19] (HSPADataCard Incorporated)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-06] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-03-09] ()
R3 taphss6; C:\WINDOWS\system32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.)
R1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert]
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-06 16:17 - 2016-11-06 16:17 - 00032407 _____ C:\Users\Susanne\Desktop\FRST.txt
2016-11-06 16:16 - 2016-11-06 16:16 - 00000000 ____D C:\Users\Susanne\Desktop\FRST-OlderVersion
2016-11-06 13:24 - 2016-11-06 13:24 - 00002117 _____ C:\Users\Susanne\Desktop\AdwCleaner[C3].txt
2016-11-06 13:23 - 2016-11-06 13:23 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-11-06 13:14 - 2016-11-06 13:15 - 00000000 ____D C:\Users\Susanne\Desktop\AM_VintageChristmas
2016-11-06 13:14 - 2016-11-06 13:14 - 19102226 _____ C:\Users\Susanne\Desktop\ccd_LilChristmasFairy_ts.zip
2016-11-06 13:13 - 2016-11-06 13:14 - 18570236 _____ C:\Users\Susanne\Desktop\AM_VictorianChristmas.rar
2016-11-06 13:13 - 2016-11-06 13:13 - 19531983 _____ C:\Users\Susanne\Desktop\AM_VintageChristmas.rar
2016-11-05 18:01 - 2016-11-05 18:01 - 00026524 _____ C:\Users\Susanne\Desktop\adobe photoshop cs3 10942.89.88.38.106.2356969311
2016-11-05 14:44 - 2016-11-05 14:44 - 00003267 _____ C:\Users\Susanne\Desktop\image.htm
2016-11-04 19:51 - 2016-11-04 19:52 - 00000000 ____D C:\Users\Susanne\Desktop\Inna
2016-11-04 18:38 - 2016-11-06 16:16 - 02410496 _____ (Farbar) C:\Users\Susanne\Desktop\FRST64.exe
2016-11-01 14:40 - 2016-11-01 14:41 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_HUN_NewYearswish
2016-10-30 18:56 - 2016-10-30 18:56 - 00000000 ____D C:\Users\Susanne\Downloads\DanielaE Design
2016-10-30 17:56 - 2016-10-30 17:56 - 00000000 ____D C:\Users\Susanne\Downloads\Spooktacular
2016-10-30 17:55 - 2016-10-30 17:55 - 00000000 ____D C:\Users\Susanne\Downloads\Tasha´s Playground
2016-10-28 11:37 - 2016-10-28 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-10-27 18:01 - 2016-10-27 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\HappyPumpkinStudio
2016-10-27 17:48 - 2016-10-27 17:54 - 25604688 _____ C:\Users\Susanne\Downloads\PATICIPANT.rar
2016-10-27 17:34 - 2016-10-27 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Vampiress
2016-10-27 17:33 - 2016-10-27 17:33 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Alessia
2016-10-27 16:47 - 2016-10-27 16:47 - 36002172 _____ C:\Users\Susanne\Downloads\Kit_PHF_Ravenworld2016.rar
2016-10-27 15:45 - 2016-10-27 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Origash MissAutumn
2016-10-27 15:34 - 2016-10-27 15:34 - 00000000 ____D C:\Users\Susanne\Downloads\Zebrush Lilian
2016-10-24 19:02 - 2016-10-24 19:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_VN_Mermaid
2016-10-24 18:42 - 2016-10-24 18:42 - 26095371 _____ C:\Users\Susanne\Downloads\LMB_OnTheHunt.rar
2016-10-24 14:06 - 2016-10-24 14:06 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-10-24 14:06 - 2016-10-24 14:06 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-10-24 14:06 - 2016-10-24 14:06 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-10-24 14:06 - 2016-10-24 14:06 - 00041576 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-10-24 10:57 - 2016-10-24 10:57 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Oracle
2016-10-22 19:41 - 2016-10-24 18:51 - 00000000 ____D C:\Users\Susanne\Downloads\Julia Fox
2016-10-22 19:35 - 2016-10-22 19:35 - 00000000 ____D C:\Users\Susanne\Downloads\GraphFreaks
2016-10-21 14:54 - 2016-10-21 14:54 - 00000831 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt
2016-10-20 19:22 - 2016-10-20 19:22 - 03910208 _____ C:\Users\Susanne\Desktop\AdwCleaner.exe
2016-10-18 16:13 - 2016-10-22 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\KrystalDesign
2016-10-18 15:37 - 2016-10-18 15:37 - 03382219 _____ C:\Users\Susanne\Downloads\SNC-KIWI-SEXY RED TUBE.psd
2016-10-18 14:04 - 2016-10-18 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\horseplayspasturedesigns
2016-10-17 19:22 - 2016-10-17 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\SNC Mariel Fairy Forest in Fall+
2016-10-17 13:07 - 2016-10-17 13:08 - 00000000 ____D C:\Users\Susanne\Downloads\Sandy Design
2016-10-17 13:03 - 2016-10-17 13:03 - 07836732 _____ C:\Users\Susanne\Downloads\AP Forbidden.rar
2016-10-17 12:00 - 2016-10-17 12:01 - 222214445 _____ C:\Users\Susanne\Downloads\Noch_Straha.zip
2016-10-17 11:29 - 2016-10-17 11:31 - 00000000 ____D C:\Users\Susanne\Downloads\CSDesigns
2016-10-17 11:08 - 2016-10-17 11:08 - 00000000 ____D C:\Users\Susanne\Downloads\Melissa Dawn Pck 3
2016-10-17 11:02 - 2016-10-17 11:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC AC Wickedness
2016-10-16 15:02 - 2016-11-03 16:13 - 00000000 ____D C:\Users\Susanne\Desktop\Zum Senden
2016-10-16 14:56 - 2016-11-01 19:27 - 00000000 ____D C:\Users\Susanne\Desktop\tutorial
2016-10-16 13:31 - 2016-10-16 13:31 - 00830935 _____ C:\Users\Susanne\Downloads\Liza tube 339.psp
2016-10-16 10:23 - 2016-10-23 19:15 - 00000000 ____D C:\Users\Susanne\Documents\Emisoft Verlängerung
2016-10-14 20:13 - 2016-10-21 19:20 - 00000000 ____D C:\Users\Susanne\Desktop\Downloads from Friends
2016-10-14 19:48 - 2016-10-14 19:51 - 00000000 ____D C:\Users\Susanne\Downloads\Flower Mohn Poppy
2016-10-14 18:56 - 2016-10-14 18:57 - 00000000 ____D C:\Users\Susanne\Downloads\Symphonie Verde Blu
2016-10-14 18:50 - 2016-10-14 18:50 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_DL_ Ginger+
2016-10-13 18:52 - 2016-10-29 17:03 - 00000000 ____D C:\Users\Susanne\Downloads\IS Design
2016-10-12 09:26 - 2016-10-01 01:22 - 07444312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-10-12 09:26 - 2016-09-30 08:55 - 25765376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-10-12 09:26 - 2016-09-30 07:25 - 02895360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-10-12 09:26 - 2016-09-30 07:25 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-10-12 09:26 - 2016-09-30 07:12 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-10-12 09:26 - 2016-09-30 07:09 - 06048256 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-10-12 09:26 - 2016-09-30 06:47 - 20306944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-10-12 09:26 - 2016-09-30 06:42 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-10-12 09:26 - 2016-09-30 06:41 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-10-12 09:26 - 2016-09-30 06:38 - 02286592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-10-12 09:26 - 2016-09-30 06:33 - 00724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-10-12 09:26 - 2016-09-30 06:33 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-10-12 09:26 - 2016-09-30 06:32 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-10-12 09:26 - 2016-09-30 06:32 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-10-12 09:26 - 2016-09-30 06:31 - 02131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-10-12 09:26 - 2016-09-30 06:21 - 15257088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-10-12 09:26 - 2016-09-30 06:17 - 02920960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-10-12 09:26 - 2016-09-30 06:12 - 04608512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-10-12 09:26 - 2016-09-30 06:11 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-10-12 09:26 - 2016-09-30 06:06 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-10-12 09:26 - 2016-09-30 06:05 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-10-12 09:26 - 2016-09-30 06:05 - 01544192 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-10-12 09:26 - 2016-09-30 06:05 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-10-12 09:26 - 2016-09-30 06:03 - 13653504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-10-12 09:26 - 2016-09-30 05:54 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-10-12 09:26 - 2016-09-30 05:46 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-10-12 09:26 - 2016-09-30 05:43 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-10-12 09:26 - 2016-09-30 05:42 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-10-12 09:26 - 2016-09-17 19:16 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\adsmsext.dll
2016-10-12 09:26 - 2016-09-17 18:53 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-10-12 09:26 - 2016-09-17 18:21 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-10-12 09:26 - 2016-09-17 18:03 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-10-12 09:26 - 2016-09-17 18:02 - 01446400 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-10-12 09:26 - 2016-09-14 02:53 - 01663184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-10-12 09:26 - 2016-09-14 02:53 - 01523208 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-10-12 09:26 - 2016-09-14 02:53 - 01490112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-10-12 09:26 - 2016-09-14 02:53 - 01358952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-10-12 09:26 - 2016-09-13 00:48 - 00085680 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-10-12 09:26 - 2016-09-12 23:03 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2016-10-12 09:26 - 2016-09-12 22:01 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-10-12 09:26 - 2016-09-09 15:17 - 04170752 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-10-12 09:26 - 2016-09-09 14:38 - 01629184 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-10-12 09:26 - 2016-09-09 14:38 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-10-12 09:26 - 2016-09-09 14:38 - 00586752 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-10-12 09:26 - 2016-09-09 14:38 - 00575488 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-10-12 09:26 - 2016-09-09 14:38 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-10-12 09:26 - 2016-09-09 14:38 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\centel.dll
2016-10-12 09:26 - 2016-09-09 14:38 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-10-12 09:26 - 2016-09-09 14:38 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-10-12 09:26 - 2016-09-08 21:41 - 00121176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-10-12 09:26 - 2016-09-08 15:00 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-10-12 09:26 - 2016-09-08 15:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-10-12 09:26 - 2016-09-07 23:07 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2016-10-12 09:26 - 2016-09-07 22:59 - 01754112 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-10-12 09:26 - 2016-09-07 22:59 - 01377792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2016-10-12 09:26 - 2016-09-07 22:57 - 01560064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-12 09:26 - 2016-09-07 22:56 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-10-12 09:26 - 2016-08-31 18:22 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-10-12 09:26 - 2016-08-31 17:33 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-10-12 09:26 - 2016-08-27 17:33 - 02881536 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-10-12 09:26 - 2016-08-27 17:11 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-10-12 09:26 - 2016-08-25 21:50 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2016-10-12 09:26 - 2016-08-25 20:40 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-10-12 09:26 - 2016-08-13 01:05 - 09323008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2016-10-12 09:26 - 2016-08-13 01:03 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifibus.sys
2016-10-12 09:26 - 2016-08-13 01:02 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2016-10-12 09:26 - 2016-08-13 01:01 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2016-10-12 09:26 - 2016-08-12 23:35 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2016-10-12 09:26 - 2016-08-12 23:19 - 09323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-10-12 09:26 - 2016-08-12 22:47 - 15431168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-10-12 09:26 - 2016-08-12 22:17 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2016-10-12 09:26 - 2016-08-12 21:52 - 13317120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-10-12 09:26 - 2016-08-12 02:58 - 02315496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-10-12 09:26 - 2016-08-12 02:58 - 01946176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-10-12 09:26 - 2016-08-11 19:33 - 00096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\parport.sys
2016-10-12 09:26 - 2016-08-11 19:33 - 00083456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
2016-10-12 09:26 - 2016-08-11 19:33 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serenum.sys
2016-10-12 09:26 - 2016-08-11 18:17 - 01574912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2016-10-12 09:26 - 2016-08-11 14:39 - 00445765 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-10-12 09:26 - 2016-08-11 06:46 - 00420184 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-10-12 09:26 - 2016-08-03 16:42 - 01317888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2016-10-12 09:26 - 2016-08-03 16:36 - 01102848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2016-10-12 09:26 - 2016-08-03 16:36 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2016-10-12 09:26 - 2016-08-03 16:33 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-10-12 09:26 - 2016-07-30 18:12 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2016-10-12 09:26 - 2016-07-30 17:36 - 02537472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-10-12 09:26 - 2016-07-26 14:40 - 00162850 _____ C:\WINDOWS\SysWOW64\C_932.NLS
2016-10-12 09:26 - 2016-07-26 14:40 - 00162850 _____ C:\WINDOWS\system32\C_932.NLS
2016-10-12 09:26 - 2016-07-23 19:18 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-10-12 09:26 - 2016-07-23 19:12 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-10-12 09:24 - 2016-08-27 20:44 - 22360288 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-10-12 09:24 - 2016-08-27 20:44 - 02755504 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-10-12 09:24 - 2016-08-27 20:44 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\RestoreOptIn.exe
2016-10-12 09:24 - 2016-08-27 19:26 - 19789232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-10-12 09:24 - 2016-08-27 19:26 - 02411048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-10-12 09:24 - 2016-08-27 19:26 - 00113656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RestoreOptIn.exe
2016-10-12 09:24 - 2016-08-27 17:09 - 14466560 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-10-12 09:24 - 2016-08-27 16:55 - 12879360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-12 09:24 - 2016-08-20 23:24 - 02778624 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2016-10-12 09:24 - 2016-08-20 23:12 - 02463744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-10-10 17:45 - 2016-10-10 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\OrigaSh DreamCatcher
2016-10-10 13:26 - 2016-10-10 13:26 - 00000000 ____D C:\Users\Susanne\Downloads\SNC-AUTHERECOLLA-GJ_CUS
2016-10-09 18:36 - 2016-10-09 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\OglArt September Girl
2016-10-09 18:35 - 2016-10-09 18:40 - 124614710 _____ C:\Users\Susanne\Downloads\SNC-AUTHERECOLLA-GJ_CUS.rar
2016-10-09 17:31 - 2016-10-09 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\SATC DL GlamGirl
2016-10-09 15:09 - 2016-10-09 17:03 - 00000000 ____D C:\Users\Susanne\graphicriver-9085825-stardust-photoshop-action
2016-10-07 19:46 - 2016-10-08 17:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-10-07 18:50 - 2016-10-07 18:50 - 26013296 _____ C:\Users\Susanne\Downloads\Magik_SwagAlleyBluesFTU.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-06 16:17 - 2015-11-15 17:25 - 00000000 ____D C:\FRST
2016-11-06 16:13 - 2015-11-23 18:19 - 00000000 ____D C:\Program Files\Emsisoft Internet Security
2016-11-06 15:39 - 2015-08-24 17:40 - 00001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-11-06 15:29 - 2015-12-08 11:14 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-11-06 13:39 - 2015-08-24 17:40 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-11-06 13:29 - 2015-08-13 17:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-11-06 13:29 - 2014-11-21 04:35 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-06 13:29 - 2014-11-21 03:45 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat
2016-11-06 13:29 - 2014-11-21 03:45 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat
2016-11-06 13:29 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-11-06 13:24 - 2015-09-20 15:03 - 00000000 ____D C:\AdwCleaner
2016-11-06 13:23 - 2015-08-24 17:45 - 00000000 ___RD C:\Users\Susanne\Dropbox
2016-11-06 13:22 - 2015-08-12 20:13 - 00000073 _____ C:\Users\Susanne\AppData\Roaming\sp_data.sys
2016-11-06 13:22 - 2014-03-01 11:33 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2016-11-06 13:22 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-11-06 12:12 - 2016-08-23 11:11 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2016-11-06 12:12 - 2015-08-15 12:15 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2016-11-06 12:04 - 2015-08-18 14:16 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4A105045-E9F4-48C6-AC0D-2E7F7A2F8B9E}
2016-11-05 20:50 - 2015-08-28 18:37 - 00000000 ____D C:\Program Files\CCleaner
2016-11-05 18:48 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\Alehandra Vanhek
2016-11-05 15:54 - 2015-11-30 19:54 - 00000000 ____D C:\Users\Susanne\Desktop\Filme
2016-11-05 13:34 - 2015-08-24 17:40 - 00004204 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2016-11-05 13:34 - 2015-08-24 17:40 - 00003968 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2016-11-04 19:58 - 2015-10-24 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\Verymany
2016-11-04 19:55 - 2016-05-25 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Alec Rud-LightartistXXX Emma
2016-11-04 19:48 - 2015-10-18 17:19 - 00000000 ____D C:\Users\Susanne\Downloads\Zlata M
2016-11-04 19:47 - 2015-11-02 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Hania Designs
2016-11-04 19:42 - 2016-01-03 13:05 - 00000000 ____D C:\Users\Susanne\Downloads\Ellie Milk
2016-11-04 18:37 - 2015-10-10 18:25 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\vlc
2016-11-04 18:04 - 2015-08-12 20:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1794304933-3207535254-2068445666-1002
2016-11-04 16:41 - 2015-10-24 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-11-04 10:50 - 2014-03-01 11:33 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2016-11-03 16:33 - 2016-02-06 19:06 - 00000000 ____D C:\Users\Susanne\Downloads\Toxic Desirez
2016-11-03 14:21 - 2015-08-13 17:30 - 00000000 ____D C:\Users\Susanne\Desktop\Programme
2016-11-01 18:52 - 2016-01-03 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Vadis
2016-11-01 18:51 - 2016-01-03 13:51 - 00000000 ____D C:\Users\Susanne\Downloads\Trinita
2016-11-01 17:49 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-11-01 16:52 - 2015-10-13 09:21 - 00000000 ____D C:\Users\Susanne\Downloads\Halloween
2016-11-01 16:04 - 2016-02-14 13:29 - 00000000 ____D C:\Users\Susanne\Downloads\Laguna
2016-11-01 15:46 - 2016-02-18 20:07 - 00000000 ____D C:\Users\Susanne\Downloads\Tais
2016-11-01 15:46 - 2015-11-02 14:12 - 00000000 ____D C:\Users\Susanne\Downloads\Bella Caribean
2016-11-01 15:18 - 2015-10-17 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Keith Garvey
2016-11-01 15:14 - 2016-04-25 18:17 - 00000000 ____D C:\Users\Susanne\Downloads\Thammys Welt
2016-10-31 19:43 - 2014-04-15 19:11 - 00000000 ____D C:\Users\Susanne\My PSP Files
2016-10-31 18:01 - 2015-10-17 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Elias Chatzoudis
2016-10-30 20:19 - 2016-02-21 14:49 - 00000000 ____D C:\Users\Susanne\Downloads\Misticheskaya
2016-10-30 20:18 - 2016-02-06 18:26 - 00000000 ____D C:\Users\Susanne\Downloads\DiHalim
2016-10-30 19:28 - 2015-12-07 16:26 - 00000000 ____D C:\Users\Susanne\Downloads\Chris Pastel
2016-10-30 19:19 - 2015-11-16 15:01 - 00000000 ____D C:\Users\Susanne\Downloads\Barbara Jensen
2016-10-30 19:04 - 2015-11-23 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Alfadesire
2016-10-30 19:02 - 2016-02-21 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\GoF Designs
2016-10-30 19:01 - 2016-06-01 16:50 - 00000000 ____D C:\Users\Susanne\Downloads\JoJo Kits
2016-10-30 18:59 - 2016-01-03 13:15 - 00000000 ____D C:\Users\Susanne\Downloads\Fedor
2016-10-30 18:59 - 2015-10-05 18:13 - 00000000 ____D C:\Users\Susanne\Downloads\RD_Rienike Designs
2016-10-30 18:45 - 2015-10-17 15:10 - 00000000 ____D C:\Users\Susanne\Downloads\Eugene Rzhevskii
2016-10-30 18:44 - 2016-08-12 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Nusha Lypina
2016-10-30 18:42 - 2015-10-22 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\KBK
2016-10-30 18:37 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lorri Kajenna
2016-10-30 18:18 - 2016-04-23 18:38 - 00000000 ____D C:\Users\Susanne\Downloads\Mariel Designs
2016-10-30 18:17 - 2015-11-28 15:12 - 00000000 ____D C:\Users\Susanne\Downloads\PinkParadoxProduktions
2016-10-30 18:16 - 2016-02-06 18:14 - 00000000 ____D C:\Users\Susanne\Downloads\DN Scraps
2016-10-30 18:15 - 2015-10-15 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\Arthur Crowe
2016-10-30 18:12 - 2015-10-05 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Bibi´s Collection
2016-10-30 18:11 - 2016-01-03 13:36 - 00000000 ____D C:\Users\Susanne\Downloads\Nocturne
2016-10-30 18:09 - 2016-01-08 20:15 - 00000000 ____D C:\Users\Susanne\Downloads\Disturbed Scraps
2016-10-30 17:54 - 2016-01-29 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\Tiny Turtles Designs
2016-10-30 16:18 - 2016-04-18 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\KatNKDA
2016-10-30 16:17 - 2016-01-03 15:47 - 00000000 ____D C:\Users\Susanne\Downloads\Angelica S
2016-10-30 14:28 - 2016-03-06 20:12 - 00000000 ____D C:\Users\Susanne\Downloads\Jennifer Janesko
2016-10-30 14:12 - 2016-01-03 15:46 - 00000000 ____D C:\Users\Susanne\Downloads\Stella Felice
2016-10-29 19:43 - 2016-08-22 15:53 - 00000000 ____D C:\Users\Susanne\Downloads\Mary Designs
2016-10-29 19:25 - 2016-03-18 12:08 - 00000000 ____D C:\Users\Susanne\Downloads\Grafik
2016-10-29 16:39 - 2015-10-15 19:04 - 00000000 ____D C:\Users\Susanne\Downloads\Comics
2016-10-29 16:34 - 2015-10-30 13:07 - 00000000 ____D C:\Users\Susanne\Downloads\Anna Liwanag
2016-10-29 13:24 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-10-28 11:38 - 2015-08-24 17:40 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-10-27 18:22 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lysisange
2016-10-27 18:21 - 2015-10-25 20:18 - 00000000 ____D C:\Users\Susanne\Downloads\Souldesigner
2016-10-27 18:08 - 2015-10-17 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\cm scraps
2016-10-27 18:06 - 2016-03-05 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Velerie
2016-10-27 18:01 - 2016-09-10 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Edelweiss Design
2016-10-27 17:38 - 2015-11-07 18:32 - 00000000 ____D C:\Users\Susanne\Downloads\Katharine
2016-10-27 15:57 - 2015-12-29 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alex Prihodko
2016-10-27 15:48 - 2015-11-15 15:26 - 00000000 ____D C:\Users\Susanne\Downloads\DB Joan
2016-10-27 15:39 - 2016-05-22 17:36 - 00000000 ____D C:\Users\Susanne\Downloads\Chili Designz
2016-10-27 15:36 - 2016-05-21 19:01 - 00000000 ____D C:\Users\Susanne\Downloads\Wicked Creationz Scraps
2016-10-27 15:35 - 2016-04-19 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\Irish Princess Designs IPD
2016-10-27 13:55 - 2016-07-11 13:37 - 00000000 ____D C:\Users\Susanne\Downloads\DevilishDezines
2016-10-27 10:29 - 2015-12-08 11:14 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-10-27 10:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-10-27 10:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-10-25 18:44 - 2015-11-24 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alicia Mujica
2016-10-24 22:54 - 2014-11-21 12:01 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-10-24 22:54 - 2014-11-21 12:01 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-10-24 19:29 - 2015-08-16 18:59 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashDumps
2016-10-24 18:55 - 2015-10-22 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Stan Dudin
2016-10-24 18:51 - 2016-01-03 13:23 - 00000000 ____D C:\Users\Susanne\Downloads\Jose Cano
2016-10-24 10:44 - 2015-08-28 15:41 - 00000000 ____D C:\ProgramData\Oracle
2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\Program Files (x86)\Java
2016-10-24 10:38 - 2015-08-28 15:43 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-10-24 10:38 - 2015-08-25 19:01 - 00000000 ____D C:\ProgramData\Unchecky
2016-10-22 19:46 - 2015-11-02 13:38 - 00000000 ____D C:\Users\Susanne\Downloads\Sophisticat
2016-10-22 19:42 - 2016-03-05 16:16 - 00000000 ____D C:\Users\Susanne\Downloads\Avroraart
2016-10-22 19:36 - 2016-04-22 19:44 - 00000000 ____D C:\Users\Susanne\Downloads\Spazz
2016-10-22 18:07 - 2016-02-27 18:49 - 00000000 ____D C:\Users\Susanne\Downloads\Maryline Cazenave
2016-10-22 18:03 - 2015-10-17 14:28 - 00000000 ____D C:\Users\Susanne\Downloads\PinUpToons
2016-10-21 13:41 - 2012-07-26 06:26 - 00003255 _____ C:\WINDOWS\system32\Drivers\etc\Hosts.old
2016-10-21 13:27 - 2016-05-24 12:43 - 00212560 _____ C:\WINDOWS\system32\Drivers\fwndislwf64.sys
2016-10-20 18:30 - 2015-11-28 14:34 - 00000000 ____D C:\Users\Susanne\Downloads\ZindyNielsen
2016-10-20 18:29 - 2014-03-01 11:45 - 00000000 ____D C:\ProgramData\Temp
2016-10-18 19:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-18 16:11 - 2016-07-04 18:39 - 00000000 ____D C:\Users\Susanne\Downloads\Ginnybug Designz
2016-10-18 13:40 - 2016-03-05 18:04 - 00000000 ____D C:\Users\Susanne\Downloads\Ismael RAC
2016-10-17 13:04 - 2016-10-03 19:36 - 00000000 ____D C:\Users\Susanne\Downloads\Mysterfeerie Creation
2016-10-17 11:31 - 2016-03-05 17:47 - 00000000 ____D C:\Users\Susanne\Downloads\Lady Mishka
2016-10-16 15:30 - 2016-01-21 16:24 - 00000000 ____D C:\Users\Susanne\Downloads\Karneval
2016-10-16 13:29 - 2015-10-17 12:38 - 00000000 ____D C:\Users\Susanne\Downloads\X Mas
2016-10-14 08:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2016-10-13 13:24 - 2015-08-22 19:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-13 13:24 - 2015-08-22 19:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-10-13 13:24 - 2013-08-22 15:44 - 00462016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-10-12 20:11 - 2015-11-24 11:02 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-10-12 20:11 - 2014-11-21 11:51 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2016-10-12 20:11 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2016-10-12 18:07 - 2015-10-15 07:11 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-10-12 17:04 - 2016-07-21 14:47 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2016-10-12 17:03 - 2015-08-13 17:18 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-10-12 17:00 - 2015-08-13 17:18 - 143495576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-10-12 16:58 - 2015-08-22 19:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-12 16:36 - 2016-01-12 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Blings
2016-10-12 15:48 - 2015-10-15 15:00 - 00000000 ____D C:\Users\Susanne\Downloads\WordArt
2016-10-10 14:21 - 2015-10-17 18:16 - 00000000 ____D C:\Users\Susanne\Downloads\Dominic Marco
2016-10-09 18:42 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\AmyMarieKits
2016-10-09 18:13 - 2016-06-13 18:44 - 00000000 ____D C:\Users\Susanne\Downloads\Moonshine Dezines
2016-10-09 18:04 - 2016-07-26 18:48 - 00000000 ____D C:\Users\Susanne\Downloads\SATC DL Parca
2016-10-09 17:22 - 2016-01-03 13:34 - 00000000 ____D C:\Users\Susanne\Downloads\Marika
2016-10-09 17:04 - 2015-11-23 16:06 - 00000000 ____D C:\Users\Susanne
2016-10-09 16:57 - 2015-11-02 14:14 - 00000000 ____D C:\Users\Susanne\Downloads\Celinart
2016-10-09 10:39 - 2015-08-12 20:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-10-09 10:39 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-29 17:04 - 2015-08-29 17:04 - 3585654 _____ () C:\Users\Susanne\AppData\Roaming\SageThumbs wallpaper.bmp
2015-08-12 20:13 - 2016-11-06 13:22 - 0000073 _____ () C:\Users\Susanne\AppData\Roaming\sp_data.sys
2016-01-17 14:35 - 2016-03-11 19:57 - 0005120 _____ () C:\Users\Susanne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-06-02 17:27 - 2016-06-02 17:27 - 0007600 _____ () C:\Users\Susanne\AppData\Local\Resmon.ResmonCfg
2015-08-28 17:48 - 2015-11-13 20:12 - 4969472 _____ () C:\Users\Susanne\AppData\Local\SageThumbs.db3
2016-04-03 17:22 - 2016-04-03 17:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-10-28 07:07 - 2015-10-28 07:07 - 0000261 _____ () C:\ProgramData\fontcacheev1.dat
2015-11-29 18:31 - 2015-11-29 18:31 - 0004943 _____ () C:\ProgramData\rxsmznjf.zcp

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\fontcacheev1.dat
C:\Users\Susanne\359.06-notebook-win8-win7-64bit-international-whql.exe


Einige Dateien in TEMP:
====================
C:\Users\Susanne\AppData\Local\Temp\libeay32.dll
C:\Users\Susanne\AppData\Local\Temp\msvcr120.dll
C:\Users\Susanne\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-01 16:57

==================== Ende von FRST.txt ============================

JSM 06.11.2016 16:58
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04-11-2016
durchgeführt von Susanne (06-11-2016 16:17:58)
Gestartet von C:\Users\Susanne\Desktop
Windows 8.1 (Update) (X64) (2015-11-23 16:34:54)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1794304933-3207535254-2068445666-500 - Administrator - Disabled)
Gast (S-1-5-21-1794304933-3207535254-2068445666-501 - Limited - Disabled) => C:\Users\Gast
Susanne (S-1-5-21-1794304933-3207535254-2068445666-1002 - Administrator - Enabled) => C:\Users\Susanne

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Internet Security (Enabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Internet Security (Enabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Enabled) {4827332C-A1D3-AB84-3AB9-7746197C0BE6}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)
Alien Skin Blow Up (HKLM-x32\...\Blow Up) (Version:  - )
Alien Skin Exposure (HKLM-x32\...\Exposure) (Version:  - )
Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version:  - )
Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version:  - )
Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version:  - Alien Skin)
Alien Skin Image Doctor 2 (HKLM-x32\...\Image Doctor 2) (Version:  - )
Alien Skin Snap Art (HKLM-x32\...\Snap Art) (Version:  - )
Apowersoft Smartphone Manager Version 2.7.1 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.7.1 - APOWERSOFT LIMITED)
Apple Application Support (32-Bit) (HKLM-x32\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{5905C8CF-1C88-4478-A48E-4E458AD1BC7E}) (Version: 5.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D4D86CB2-2370-4691-8272-3869EDED6C64}) (Version: 10.0.0.18 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.6 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.13 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.7 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.1.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS)
AVS Video Converter 9.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.1.4.574 - Online Media Technologies Ltd.)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
congstar Internet-Manager (HKLM-x32\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: 1.0.0.3 - ZTE CORPORATION)
Contents (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\CopyTrans Suite) (Version: 4.004 - WindSolutions)
Corel FastFlick (HKLM-x32\...\_{10EC8494-8A92-49D8-9677-2483EB01F7F1}) (Version: 1.0.0.101 - Corel Corporation)
Corel KPT Collection (HKLM-x32\...\_{B16DC136-9583-4C54-BE27-F001BBC546B1}) (Version: 1.0.0.109 - Corel Corporation)
Corel KPT Collection (x32 Version: 1.0.0.109 - Ihr Firmenname) Hidden
Corel PaintShop Pro X7  (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.3.0.30 - Corel Corporation)
Corel PaintShop Pro X7 (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Ihr Firmenname) Hidden
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 13.4.21 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.51.1 - Dropbox, Inc.) Hidden
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Filters Unlimited 2.0 (HKLM-x32\...\Filters Unlimited_is1) (Version:  - )
Filzip 3.06 (HKLM-x32\...\Filzip 3.0.6.93_is1) (Version: 3.0.6 - Philipp Engel)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.14.280 - SurfRight B.V.)
Hotspot Shield 5.4.11 (HKLM-x32\...\HotspotShield) (Version: 5.4.11 - AnchorFree Inc.)
Hotspot Shield 5.4.11 Embedded (x32 Version: 5.4.11.9772 - Buildbot) Hidden
ICA (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
ICA (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.15 - Intel) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Intel(R) Product Improvement Program (x32 Version: 2.1.27.3 - Intel) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{1b09c4de-9cae-4122-b17c-65d395062b50}) (Version: 2.4.0.15 - Intel)
IPM_PSP_COM (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_PSP_COM64 (Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_VS_Pro (x32 Version: 1.0 - Corel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{9946A4F7-E0FD-4A33-82D1-06CBFFBBB9F9}) (Version: 12.5.1.21 - Apple Inc.)
Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Ihr Firmenname)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version:  - Crystal Rich Ltd)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.4.0.6115 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
MultiTranse European 6.6 special build (HKLM-x32\...\MultiTranse European_is1) (Version:  - Tialsoft Software)
MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NVIDIA GeForce Experience 2.11.2.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.46 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.46 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plugin Commander Light 1.62 (HKLM-x32\...\Plugin Commander Light 1.62_is1) (Version: 1.60 - The Plugin Site)
PSPPContent (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPro64 (Version: 17.3.0.30 - Corel Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7514 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Schmaili 9.0 (HKLM-x32\...\Schmaili_is1) (Version:  - )
Setup (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Setup (x32 Version: 17.3.0.30 - Ihr Firmenname) Hidden
Share (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.1 - xiberpix)
Sqirlz Water Reflections (HKLM-x32\...\Sqirlz Water Reflections) (Version: 2.6 - xiberpix)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version:  - Code Sector)
Toon Boom Studio 8.1 (HKLM-x32\...\{A3A336BA-61CF-4B0F-83D7-690A8FB23A5D}) (Version:  - Toon Boom Animation Inc.)
Unchecky v1.0.1 (HKLM-x32\...\Unchecky) (Version: 1.0.1 - RaMMicHaeL)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSClassic (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
VSPro (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse  (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1584372C-BE27-42D3-9C29-0B7B050F0676} - System32\Tasks\{DFE56015-71E1-4F3C-B92C-4BC78BB43DCF} => pcalua.exe -a "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12\signcrtr.exe" -d "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12"
Task: {15922986-92BB-4514-B441-715A41DC784F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16] (Adobe Systems Incorporated)
Task: {1DE75A1E-B3F6-410F-9D0A-6C724DC5D7BA} - System32\Tasks\{3A681209-9B28-4FB4-B434-90C78D19AA76} => pcalua.exe -a C:\Users\Susanne\Desktop\win64_153342.exe -d C:\Users\Susanne\Desktop
Task: {1F93A434-BC9F-4437-AA95-0868BAB8E7D1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {278FB095-70F3-41AF-86E1-ACDCC3DFCD4F} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
Task: {384F7404-E4A7-4AF6-BFC2-0E966AB9A65A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {46CE1FA1-950E-4406-BE83-9B8278BE36FE} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {4A0493F9-F5CF-45E0-BCBF-B791EF2C6690} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {568A8D83-61EE-417F-B2F4-D8E199F65D47} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {65E4B102-42C8-4272-BE24-C07ECF847106} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {6C3DD3AD-739B-4B44-AEC6-9844F7E1D814} - System32\Tasks\{2175E4B1-B401-419C-B3FC-7F5CFDE77152} => pcalua.exe -a E:\SETUP.EXE -d E:\ -c /AUTORUN
Task: {7004ABEF-4FB5-4DB9-9D07-BBEE825C98A6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {749335FC-4206-4E47-864C-4C789D3DB14B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-27] (Adobe Systems Incorporated)
Task: {7535A508-68C4-4552-B25C-041DB8F71935} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2013-01-22] (ASUS)
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=face
Task: {937F2797-535D-4D7E-865E-DF6460A3E660} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {9C8D2AEE-2E56-486A-8603-FD26811BF306} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {A143A7AF-E6A4-41CB-A24F-4682A328495A} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {A2668456-59ED-4A07-9421-09A7A3052F99} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {B500B226-A848-48AC-AD89-FC46DD40726A} - System32\Tasks\{C34BCC4B-E192-4B85-9591-5B9275232FC4} => pcalua.exe -a "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90\unins000.exe" -d "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90"
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=pcs
Task: {D65C524D-CC2D-4D37-AB73-7D79DD3F9F7E} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-04-16] (AsusTek)
Task: {DF4E779D-E89D-43BF-BFEA-92AFBD12A035} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {E7DB6F04-0E5F-49F6-82E1-C45912A304B9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {E833CAEB-5DC4-47B3-8051-EF7AA579E8AD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {EB9F98C6-FED1-40F0-BFD1-4272F4DE9576} - System32\Tasks\{D52E5E0D-7B83-453B-B34F-8346DD360FFF} => pcalua.exe -a "C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe" -c -r -m -nrg2709
Task: {EF2C2CD6-5F9B-43F9-A3B4-87DE57826197} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {FE9FAC54-D116-4F35-8188-88E83F570501} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01] (Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.com

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-11-23 16:01 - 2016-02-15 08:26 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-05-24 12:43 - 2016-10-21 13:27 - 01024968 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-08-28 14:59 - 2012-01-20 13:55 - 00678400 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2012-08-24 18:26 - 2012-08-24 18:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00118424 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-03-09 19:43 - 2016-03-09 19:43 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019688 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00460952 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2013-01-25 01:09 - 2013-01-25 01:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-25 01:05 - 2013-01-25 01:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-10-01 12:02 - 2013-10-01 12:02 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll
2013-01-25 01:12 - 2013-01-25 01:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00220944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00036624 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2016-08-24 00:04 - 2016-08-24 00:04 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2015-12-21 17:36 - 2016-03-24 06:35 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-09-06 16:10 - 2011-05-06 04:03 - 00594944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-1.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00099328 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\itapi.dll
2016-09-06 16:10 - 2011-11-07 09:43 - 00020992 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libctlsvr.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00971776 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libxml2.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00035840 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libConfig.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00027136 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\log.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00055296 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\coder.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00043008 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\audio.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00080688 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\zlib1.dll
2016-09-06 16:10 - 2007-09-09 16:07 - 00151552 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libexpat.dll
2016-09-06 16:10 - 2011-05-06 04:02 - 00341504 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\sqlite3.dll
2016-05-21 16:03 - 2016-10-10 19:19 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-05-21 16:03 - 2016-10-10 19:19 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-05-21 15:57 - 2016-10-10 19:19 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-05-21 15:57 - 2016-10-10 19:19 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-05-21 16:03 - 2016-10-10 19:20 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-10-28 11:37 - 2016-10-10 19:19 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-10-28 11:37 - 2016-10-10 19:21 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-08-05 19:23 - 2016-10-10 19:20 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-05-21 15:57 - 2016-10-10 19:21 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-05-21 15:57 - 2016-10-24 14:16 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-05-21 16:03 - 2016-10-10 19:21 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-05-21 16:03 - 2016-10-24 14:16 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-10-28 11:37 - 2016-10-10 19:17 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-10-28 11:37 - 2016-10-24 14:15 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-10-28 11:37 - 2016-10-24 14:15 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-05-21 15:57 - 2016-10-10 19:19 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-10-28 11:37 - 2016-10-24 14:15 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-10-28 11:37 - 2016-10-10 19:24 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-10-28 11:37 - 2016-10-10 19:24 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-05-21 15:57 - 2016-10-10 19:21 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-08-05 19:23 - 2016-10-24 14:16 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-10-28 11:37 - 2016-10-24 14:16 - 00168760 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2014-03-01 11:32 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO AnnaMarine-11-1+:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO GlistenSnowFlakes:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO WinterMagic:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\SNC_CUPIDO COLLAB:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\Sue PSP Stuff:com.dropbox.attributes [168]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe:  =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1001movie.com -> 1001movie.com

Da befinden sich 6091 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Susanne\AppData\Local\Microsoft\Windows\Themes\Rainbows\DesktopBackground\rainbows7.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "egui"
HKLM\...\StartupApproved\Run: => "Corel Update Helper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Digiarty_Software_AirPlayit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Schmaili"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{698A6761-A7D7-436A-828F-F5D0B9649607}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{725B442B-AA22-40A6-9A4C-C080895D11B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{43ED2D84-F0D6-4176-8654-2BF85E93929E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A83C85B4-8237-4A7A-B5CF-F4548CE998C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B05144DD-2A59-4CE6-AC21-A487450C32BB}] => (Allow) LPort=1900
FirewallRules: [{6E10BE55-BF0B-41CB-874B-35BBAE2A6CC8}] => (Allow) LPort=2869
FirewallRules: [{6FB3AE7A-27BA-4EC1-8459-F674A66F398E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5732DE92-F2E8-4EFA-8211-59D9C1216D9C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{FB4B5D1F-46F4-4EE4-A9DD-1CC5A993E8B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{BEBD6992-F474-476F-AA99-813387C3315B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{12619529-46A3-401F-8C45-41DA4469E6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{75F78078-FA69-47CD-84C8-ABAF1E6028BA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5F08B6D7-908A-4C10-BE37-07290BAA1FC4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DC5EE5FD-A4A3-4403-A62A-E542DAC852F8}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{0253E503-D67B-4A8C-AF6E-60B041B9957E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{07DB8C66-1A03-4036-B21D-E47878AE360E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{F8374132-09A8-413C-90AB-BBDB95A4DDB1}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{43F41AD3-EA64-4AB5-861C-9B99C3F868C3}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{6E936865-405B-44EC-B6AB-CF8C8EE059DE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{1B75F8F1-6B88-4172-9246-7564E7E451F6}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{7BAD37C1-5B00-4E99-B040-688BC81EE367}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Wiederherstellungspunkte =========================

21-10-2016 13:17:54 Geplanter Prüfpunkt
29-10-2016 13:23:01 Windows Update
06-11-2016 12:58:40 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/06/2016 01:22:23 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (11/04/2016 05:49:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ab8

Startzeit: 01d236bb56f4b741

Endzeit: 4294967295

Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe

Berichts-ID: 97b38f14-a2ae-11e6-bf86-24fd52f78824

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/04/2016 05:46:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 880

Startzeit: 01d236baff784b8d

Endzeit: 4294967295

Anwendungspfad: C:\Users\Susanne\Desktop\FRST-OlderVersion\FRST64.exe

Berichts-ID: 3e622c0a-a2ae-11e6-bf86-24fd52f78824

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/04/2016 05:44:44 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fc0

Startzeit: 01d236babc3e639c

Endzeit: 4294967295

Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe

Berichts-ID: fc9b4de3-a2ad-11e6-bf86-24fd52f78824

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/04/2016 05:40:40 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 12f0

Startzeit: 01d236ba2b205cfa

Endzeit: 4294967295

Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe

Berichts-ID: 6b648462-a2ad-11e6-bf86-24fd52f78824

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/04/2016 05:39:42 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1498

Startzeit: 01d236ba08a11e44

Endzeit: 4294967295

Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe

Berichts-ID: 48e38e54-a2ad-11e6-bf86-24fd52f78824

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/04/2016 05:39:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm FRST64.exe, Version 3.11.2016.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1a04

Startzeit: 01d236b9f89d131f

Endzeit: 4294967295

Anwendungspfad: C:\Users\Susanne\Desktop\FRST64.exe

Berichts-ID: 3a45b5c6-a2ad-11e6-bf86-24fd52f78824

Vollständiger Name des fehlerhaften Pakets:

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/04/2016 12:56:43 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (11/03/2016 02:53:35 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (11/03/2016 02:52:15 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.

Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)


Systemfehler:
=============
Error: (11/06/2016 01:29:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/06/2016 01:25:08 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/06/2016 01:22:36 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/06/2016 01:22:34 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/06/2016 01:22:25 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/06/2016 01:22:20 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Energy Server Service WILLAMETTE" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/06/2016 01:21:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) ME Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-07-23 18:39:48.072
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:47.369
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:45.338
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:44.853
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:41.649
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:38.959
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:36.146
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:35.615
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:33.629
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:33.176
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 8069.73 MB
Verfügbarer physikalischer RAM: 5186.49 MB
Summe virtueller Speicher: 10245.73 MB
Verfügbarer virtueller Speicher: 6461.94 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:1117.37 GB) (Free:832.04 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:1655.6 GB) (Free:1655.12 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: A523CAED)

Partition: GPT.

==================== Ende von Addition.txt ============================

M-K-D-B 12.11.2016 13:45
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!
  • Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.



Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!






Schritt 1
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.







Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 3
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von MBAM,
  • die Logdatei von JRT,
  • die beiden neuen Logdateien von FRST.

JSM 13.11.2016 17:17
Danke Matthias
 
Hier sind die Logfiles:

Habe übrigens Malwarebytes AntiMalware Premium.

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 13.11.2016
Suchlaufzeit: 15:37
Protokolldatei: mbamlog.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.11.13.04
Rootkit-Datenbank: v2016.10.31.01
Lizenz: Premium-Version
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Susanne

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 375376
Abgelaufene Zeit: 25 Min., 30 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 8.1 x64
Ran by Susanne (Administrator) on 13.11.2016 at 16:54:16,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 4

Successfully deleted: C:\Users\Susanne\AppData\Local\crashrpt (Folder)
Successfully deleted: C:\WINDOWS\hgfs.sys (File)
Successfully deleted: C:\WINDOWS\prleth.sys (File)
Successfully deleted: C:\WINDOWS\wininit.ini (File)



Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.11.2016 at 16:59:07,53
End of JRT log


FRST Logfile:
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
durchgeführt von Susanne (Administrator) auf SUSANNE (13-11-2016 17:04:26)
Gestartet von C:\Users\Susanne\Desktop
Geladene Profile: Susanne (Verfügbare Profile: Susanne & Gast)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X7 (64-bit)\pua.exe [2004312 2015-05-19] (Corel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397752 2016-03-24] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7838392 2016-10-29] (Emsisoft Ltd)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25673776 2016-11-07] (Dropbox, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Schmaili] => C:\Schmaili90\schmaili.exe [536576 2007-08-03] (Marc Waesche Services)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\MountPoints2: {25215d21-71fb-11e6-bf71-24fd52f78824} - "F:\windows\Data\setup.exe"
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [186136 2016-04-21] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164696 2016-04-21] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MCtlSvc.lnk [2016-09-06]
ShortcutTarget: MCtlSvc.lnk -> C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (ZTE)
Startup: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2015-08-26]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Hosts Datei wurde nicht im Standardordner gefunden
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1E5210DC-85FF-4E1C-98B0-40CB3565919B}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4C2CE82A-EBAB-4312-8E71-DF116B2A940E}: [DhcpNameServer] 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> DefaultScope {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {56EE4669-C5D3-4789-8C16-4DB4464DAD46} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE885D20150813&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations)
BHO-x32: Kein Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-24] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-24] (Oracle Corporation)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei

FireFox:
========
FF DefaultProfile: y9p501c2.default
FF ProfilePath: C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default [2016-11-13]
FF Homepage: Mozilla\Firefox\Profiles\y9p501c2.default -> hxxp://www.ferienwohnung-schifferstadt.de/
hxxp://www.gmx.net/logoutlounge/?p=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
hxxps://www.google.com/webhp?hl=de&sa=X&ved=0ahUKEwi5iaqh1IzQAhVJzRQKHZIbDPgQPAgD
hxxps://accounts.google.com/AccountChooser?continue=https%3A%2F%2Fgroups.google.com%2Fd%2Fmyforums&hl=de&service=groups2
hxxps://login.yahoo.com/config/login?.src=ygrp&.intl=de&.lang=de-DE&.done=hxxps://de.groups.yahoo.com/neo
hxxps://translate.google.de/?hl=de&tab=TT#de/en/Fehler%20der%20Registrierungsdatenbank.%20L%C3%B6sche%20diese%20aber%20beim%20n%C3%A4chsten%20Start%20und%20durchsuchen%2C%20sind%20die%20Fehler%20wieder%20da.%20K%C3%B6nnen%20Sie%20mir%20weiterhelfen%3F
hxxps://sso.kabelmail.de/portal/sites/messaging/inbox.aspx
hxxps://www.1und1.de/login
hxxps://polizei.brandenburg.de/konto/login
hxxps://www.bussgeldkatalog.org/raser/
hxxps://www.congstar.de/meincongstar/
hxxps://www.dropbox.com/login?src=logout
hxxps://www.wesendit.com/
hxxp://heilkraeuter.de/lexikon/huflat.htm
hxxp://www.netdoktor.de/heilpflanzen/koenigskerze/
hxxp://swheattutorials.blogspot.de/2015/12/blog-post_74.html
hxxp://www.wheatcreations.com/SWHEATTUTORIALS/BJChristmas/BJChristmas.htm
hxxp://bienespspplace.bplaced.net/Tutorials/Saison/wintermagic/
hxxp://www.marinettedesings.be/winter_magic_engels.htm
hxxps://www.adac.de/Produkte/autovermietung/EmptyPage.aspx
hxxp://www.animationfactory.com/de/search/index.html?s=76&spage=4&raw_q=halloween&CURRENCY=USD&category_id=E1&q=halloween&b=k&cid=E1&bl=%252Fde%252Fsearch%252Findex.html%253Fq%253Dhalloween%2526cid%253DE1%2526s%253D51%2526b%253Dk%2526t%253D244%2526ppage%253D3&t=244
http://www.trojaner-board.de/182736-...en-lassen.html
http://www.trojaner-board.de/72623-e...ml#post1621693
FF Extension: (Webmail Ad Blocker) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\gmailnoads@mywebber.com.xpi [2015-08-15]
FF Extension: (Mailvelope) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-04-08]
FF Extension: (Open about:permissons) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\open.about.permissions@jasnapaka.com.xpi [2016-06-07]
FF Extension: (S3.Google Translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\s3google@translator.xpi [2015-12-13]
FF Extension: (translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@dontfollowme.net.xpi [2016-01-09]
FF Extension: (Google Translator for Firefox) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@zoli.bod.xpi [2015-12-21]
FF Extension: (NoScript) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-15]
FF Extension: (WOT) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-08-15]
FF Extension: (Video DownloadHelper) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-02-20]
FF Extension: (Adblock Plus) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-15]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon
FF Extension: (Bytemobile Optimization Client) - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon [2010-04-01] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9388576 2016-10-29] (Emsisoft Ltd)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-08-26] (Adobe Systems) [Datei ist nicht signiert]
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [Datei ist nicht signiert]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-11-07] (Dropbox, Inc.)
R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164856 2016-03-24] (NVIDIA Corporation)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2016-11-11] (SurfRight B.V.)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2710648 2016-08-24] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-08-24] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-03-24] (NVIDIA Corporation)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2013-09-13] (arvato digital services llc)
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [118424 2016-03-09] ()
R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [92160 2015-02-17] (Code Sector) [Datei ist nicht signiert]
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [254232 2016-08-23] (RaMMicHaeL)
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] ()
S3 vmicvss; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-25] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [55800 2015-06-02] ()
R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
R0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert]
S3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros)
R3 btmaux; C:\WINDOWS\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
S0 ebdrv; C:\WINDOWS\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [124304 2016-10-05] (Emsisoft Ltd)
R1 FWNDIS_LWF; C:\WINDOWS\system32\DRIVERS\fwndislwf64.sys [212560 2016-10-21] ()
S1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [152776 2016-10-21] ()
S3 HSPADataCardusbmdm; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys [122752 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbnmea; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys [122752 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbser; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys [122752 2011-08-19] (HSPADataCard Incorporated)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-13] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-03-09] ()
R3 taphss6; C:\WINDOWS\system32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.)
R1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert]
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-13 17:04 - 2016-11-13 17:04 - 00029009 _____ C:\Users\Susanne\Desktop\FRST.txt
2016-11-13 17:04 - 2016-11-13 17:04 - 00000000 ____D C:\Users\Susanne\Desktop\FRST-OlderVersion
2016-11-13 16:59 - 2016-11-13 16:59 - 00000908 _____ C:\Users\Susanne\Desktop\JRT.txt
2016-11-13 16:52 - 2016-11-13 16:52 - 01631928 _____ (Malwarebytes) C:\Users\Susanne\Desktop\JRT.exe
2016-11-13 16:36 - 2016-11-13 16:36 - 00001195 _____ C:\Users\Susanne\Desktop\mbamlog.txt
2016-11-13 15:36 - 2016-11-13 15:36 - 03910208 _____ C:\Users\Susanne\Desktop\adwcleaner_6.030.exe
2016-11-13 13:04 - 2016-11-13 13:04 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-11-12 19:43 - 2016-11-12 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-11-11 21:10 - 2016-11-11 21:10 - 00002263 _____ C:\Users\Susanne\Desktop\AdwCleaner[C5].txt
2016-11-11 18:43 - 2016-10-28 22:04 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-11-11 18:43 - 2016-10-28 22:04 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-10 20:31 - 2016-11-10 20:31 - 00000000 ____D C:\Users\Susanne\Downloads\MMDesignz Garden Love
2016-11-10 20:26 - 2016-11-10 20:27 - 00000000 ____D C:\Users\Susanne\Downloads\Chachaz Creationz
2016-11-10 19:37 - 2016-11-10 19:37 - 03189746 _____ C:\Users\Susanne\Downloads\HDSDASummerNightFae.rar
2016-11-10 19:37 - 2016-11-10 19:37 - 01854417 _____ C:\Users\Susanne\Downloads\SNC-AC-PRINCESSICE.pspimage
2016-11-10 19:36 - 2016-11-10 19:36 - 03972990 _____ C:\Users\Susanne\Downloads\SNC-DL-Orange Mermaid.psd
2016-11-10 19:22 - 2016-11-10 19:22 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_AndyCooperSweet Catrina
2016-11-10 18:54 - 2016-11-10 18:54 - 00000000 ____D C:\Users\Susanne\Downloads\MelissaDawn
2016-11-10 13:09 - 2016-10-27 19:28 - 25763328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-11-10 13:09 - 2016-10-27 19:19 - 06047744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-11-10 13:09 - 2016-10-27 18:17 - 15257088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-11-10 13:09 - 2016-10-27 18:16 - 02920448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-11-10 13:09 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-11-10 13:09 - 2016-10-25 15:11 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-11-10 13:09 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-11-10 13:09 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-11-10 13:09 - 2016-10-08 23:53 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-11-10 13:09 - 2016-08-22 14:34 - 01628672 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-11-10 13:08 - 2016-11-02 21:48 - 00372568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-11-10 13:08 - 2016-11-02 21:48 - 00315224 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-11-10 13:08 - 2016-11-02 15:03 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-11-10 13:08 - 2016-11-02 15:00 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-11-10 13:08 - 2016-10-27 19:53 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-11-10 13:08 - 2016-10-27 19:51 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-11-10 13:08 - 2016-10-27 19:37 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-11-10 13:08 - 2016-10-27 19:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-11-10 13:08 - 2016-10-27 19:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2016-11-10 13:08 - 2016-10-27 19:05 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-11-10 13:08 - 2016-10-27 18:57 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-11-10 13:08 - 2016-10-27 18:49 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-11-10 13:08 - 2016-10-27 18:47 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-11-10 13:08 - 2016-10-27 18:46 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-11-10 13:08 - 2016-10-27 18:46 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-11-10 13:08 - 2016-10-27 18:44 - 02131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-11-10 13:08 - 2016-10-27 18:03 - 01543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-11-10 13:08 - 2016-10-27 17:54 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-11-10 13:08 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-11-10 13:08 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2016-11-10 13:08 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-11-10 13:08 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-11-10 13:08 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-11-10 13:08 - 2016-10-22 17:57 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2016-11-10 13:08 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-11-10 13:08 - 2016-10-22 17:51 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-11-10 13:08 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-11-10 13:08 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-11-10 13:08 - 2016-10-22 17:45 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-11-10 13:08 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-11-10 13:08 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-11-10 13:08 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-11-10 13:08 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-11-10 13:08 - 2016-10-13 20:06 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-11-10 13:08 - 2016-10-13 20:06 - 01124376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-11-10 13:08 - 2016-10-12 09:01 - 00377176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-11-10 13:08 - 2016-10-11 21:21 - 00497448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-11-10 13:08 - 2016-10-11 21:21 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-11-10 13:08 - 2016-10-11 19:34 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-11-10 13:08 - 2016-10-11 18:47 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2016-11-10 13:08 - 2016-10-11 17:55 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2016-11-10 13:08 - 2016-10-10 22:17 - 00444248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-11-10 13:08 - 2016-10-10 22:17 - 00333656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-11-10 13:08 - 2016-10-09 23:59 - 00551256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-11-10 13:08 - 2016-10-09 00:12 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-11-10 13:08 - 2016-10-08 23:21 - 01445376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-11-10 13:08 - 2016-10-08 23:18 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-11-10 13:08 - 2016-10-08 23:07 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2016-11-10 13:08 - 2016-10-08 23:02 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-11-10 13:08 - 2016-10-08 22:49 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-11-10 13:08 - 2016-10-08 22:21 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-11-10 13:08 - 2016-10-08 02:34 - 01660040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-11-10 13:08 - 2016-10-08 02:34 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-11-10 13:08 - 2016-10-04 21:39 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2016-11-10 13:08 - 2016-10-04 21:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-11-10 13:08 - 2016-10-04 21:08 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-11-10 13:08 - 2016-10-04 21:08 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-11-10 13:08 - 2016-09-09 23:52 - 00921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2016-11-10 13:08 - 2016-09-09 23:14 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2016-11-10 13:08 - 2016-09-09 15:15 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2016-11-10 13:08 - 2016-09-09 15:09 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2016-11-10 13:08 - 2016-09-09 15:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-11-10 13:08 - 2016-09-09 15:03 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2016-11-10 13:08 - 2016-09-09 15:02 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2016-11-10 13:08 - 2016-09-09 14:38 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-11-10 13:08 - 2016-09-03 19:20 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll
2016-11-10 13:08 - 2016-09-03 19:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll
2016-11-10 13:08 - 2016-09-03 18:21 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll
2016-11-10 13:08 - 2016-09-03 17:12 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-11-10 13:08 - 2016-09-03 17:05 - 01094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-11-10 13:08 - 2016-09-03 16:58 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-11-10 13:08 - 2016-09-02 15:05 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-11-10 13:08 - 2016-09-02 15:05 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-11-10 13:08 - 2016-09-01 15:33 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-11-10 13:08 - 2016-09-01 15:33 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-11-10 13:08 - 2016-09-01 15:31 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-11-10 13:08 - 2016-08-30 15:11 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2016-11-10 13:08 - 2016-08-30 03:45 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
2016-11-10 13:08 - 2016-08-30 03:18 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2016-11-10 13:08 - 2016-08-30 03:18 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2016-11-10 13:08 - 2016-08-30 03:03 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\Program Files\iPod
2016-11-08 19:59 - 2016-11-08 20:09 - 00000000 ____D C:\Users\Susanne\Desktop\Steampunk_Orient_1
2016-11-08 19:14 - 2016-11-08 19:14 - 00000000 ____D C:\Users\Susanne\Downloads\DigitalDreams WinterTime
2016-11-08 17:48 - 2016-11-08 17:49 - 00000000 ____D C:\Users\Susanne\Downloads\RAY
2016-11-08 16:58 - 2016-11-08 17:12 - 00000000 ____D C:\Users\Susanne\Downloads\Selisan Al-Giab
2016-11-08 16:56 - 2016-11-08 16:56 - 04657679 _____ C:\Users\Susanne\Downloads\Joy.rar
2016-11-08 16:06 - 2016-11-08 16:06 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-11-07 23:49 - 2016-11-07 23:49 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-11-07 20:27 - 2016-11-07 20:29 - 89882380 _____ C:\Users\Susanne\Desktop\Snowy_Fantasy.zip
2016-11-07 20:27 - 2016-11-07 20:29 - 143486031 _____ C:\Users\Susanne\Desktop\Vintage_Elegance_1.zip
2016-11-07 20:26 - 2016-11-07 20:28 - 158478349 _____ C:\Users\Susanne\Desktop\Steampunk_Orient_1.zip
2016-11-07 20:26 - 2016-11-07 20:28 - 115926832 _____ C:\Users\Susanne\Desktop\Snuggle_Season.zip
2016-11-07 16:03 - 2016-11-07 16:03 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-11-07 16:01 - 2016-11-07 16:01 - 00000000 ____D C:\Users\Susanne\Desktop\graphicriver-9085825-stardust-photoshop-action
2016-11-07 13:01 - 2016-11-07 13:01 - 04300155 _____ C:\Users\Susanne\Desktop\Sparkling_Pink_Summer-Nolver_22062011.psp
2016-11-07 13:01 - 2016-11-07 13:01 - 02035528 _____ C:\Users\Susanne\Desktop\Sparkling_Black_Hole-Nolver_06092011.psp
2016-11-04 18:38 - 2016-11-13 17:04 - 02411520 _____ (Farbar) C:\Users\Susanne\Desktop\FRST64.exe
2016-11-01 14:40 - 2016-11-01 14:41 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_HUN_NewYearswish
2016-10-30 18:56 - 2016-11-08 17:53 - 00000000 ____D C:\Users\Susanne\Downloads\DanielaE Design
2016-10-30 17:56 - 2016-10-30 17:56 - 00000000 ____D C:\Users\Susanne\Downloads\Spooktacular
2016-10-30 17:55 - 2016-10-30 17:55 - 00000000 ____D C:\Users\Susanne\Downloads\Tasha´s Playground
2016-10-27 18:01 - 2016-10-27 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\HappyPumpkinStudio
2016-10-27 17:48 - 2016-10-27 17:54 - 25604688 _____ C:\Users\Susanne\Downloads\PATICIPANT.rar
2016-10-27 17:34 - 2016-10-27 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Vampiress
2016-10-27 17:33 - 2016-10-27 17:33 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Alessia
2016-10-27 16:47 - 2016-10-27 16:47 - 36002172 _____ C:\Users\Susanne\Downloads\Kit_PHF_Ravenworld2016.rar
2016-10-27 15:45 - 2016-10-27 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Origash MissAutumn
2016-10-27 15:34 - 2016-10-27 15:34 - 00000000 ____D C:\Users\Susanne\Downloads\Zebrush Lilian
2016-10-24 19:02 - 2016-10-24 19:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_VN_Mermaid
2016-10-24 18:42 - 2016-10-24 18:42 - 26095371 _____ C:\Users\Susanne\Downloads\LMB_OnTheHunt.rar
2016-10-24 10:57 - 2016-10-24 10:57 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Oracle
2016-10-22 19:41 - 2016-10-24 18:51 - 00000000 ____D C:\Users\Susanne\Downloads\Julia Fox
2016-10-22 19:35 - 2016-10-22 19:35 - 00000000 ____D C:\Users\Susanne\Downloads\GraphFreaks
2016-10-21 14:54 - 2016-10-21 14:54 - 00000831 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt
2016-10-18 16:13 - 2016-11-10 16:51 - 00000000 ____D C:\Users\Susanne\Downloads\KrystalDesign
2016-10-18 15:37 - 2016-10-18 15:37 - 03382219 _____ C:\Users\Susanne\Downloads\SNC-KIWI-SEXY RED TUBE.psd
2016-10-18 14:04 - 2016-10-18 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\horseplayspasturedesigns
2016-10-17 19:22 - 2016-10-17 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\SNC Mariel Fairy Forest in Fall+
2016-10-17 13:07 - 2016-10-17 13:08 - 00000000 ____D C:\Users\Susanne\Downloads\Sandy Design
2016-10-17 13:03 - 2016-10-17 13:03 - 07836732 _____ C:\Users\Susanne\Downloads\AP Forbidden.rar
2016-10-17 12:00 - 2016-10-17 12:01 - 222214445 _____ C:\Users\Susanne\Downloads\Noch_Straha.zip
2016-10-17 11:29 - 2016-10-17 11:31 - 00000000 ____D C:\Users\Susanne\Downloads\CSDesigns
2016-10-17 11:08 - 2016-10-17 11:08 - 00000000 ____D C:\Users\Susanne\Downloads\Melissa Dawn Pck 3
2016-10-17 11:02 - 2016-10-17 11:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC AC Wickedness
2016-10-16 15:02 - 2016-11-08 20:32 - 00000000 ____D C:\Users\Susanne\Desktop\Zum Senden
2016-10-16 14:56 - 2016-11-01 19:27 - 00000000 ____D C:\Users\Susanne\Desktop\tutorial
2016-10-16 13:31 - 2016-10-16 13:31 - 00830935 _____ C:\Users\Susanne\Downloads\Liza tube 339.psp
2016-10-16 10:23 - 2016-10-23 19:15 - 00000000 ____D C:\Users\Susanne\Documents\Emisoft Verlängerung
2016-10-14 20:13 - 2016-11-10 16:23 - 00000000 ____D C:\Users\Susanne\Desktop\Downloads from Friends
2016-10-14 19:48 - 2016-10-14 19:51 - 00000000 ____D C:\Users\Susanne\Downloads\Flower Mohn Poppy
2016-10-14 18:56 - 2016-10-14 18:57 - 00000000 ____D C:\Users\Susanne\Downloads\Symphonie Verde Blu
2016-10-14 18:50 - 2016-10-14 18:50 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_DL_ Ginger+

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-13 17:04 - 2015-11-15 17:25 - 00000000 ____D C:\FRST
2016-11-13 17:03 - 2015-11-23 18:19 - 00000000 ____D C:\Program Files\Emsisoft Internet Security
2016-11-13 16:44 - 2015-08-24 17:40 - 00001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-11-13 16:29 - 2015-12-08 11:14 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-11-13 16:16 - 2015-08-13 17:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-11-13 15:57 - 2015-09-20 15:03 - 00000000 ____D C:\AdwCleaner
2016-11-13 15:51 - 2015-08-24 17:45 - 00000000 ___RD C:\Users\Susanne\Dropbox
2016-11-13 14:29 - 2015-08-18 14:16 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4A105045-E9F4-48C6-AC0D-2E7F7A2F8B9E}
2016-11-13 13:06 - 2016-08-23 11:11 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2016-11-13 13:06 - 2015-08-15 12:15 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2016-11-13 13:06 - 2014-11-21 04:35 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-13 13:06 - 2014-11-21 03:45 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat
2016-11-13 13:06 - 2014-11-21 03:45 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat
2016-11-13 13:06 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-11-13 13:03 - 2015-08-24 17:40 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-11-13 13:03 - 2015-08-12 20:13 - 00000073 _____ C:\Users\Susanne\AppData\Roaming\sp_data.sys
2016-11-13 13:03 - 2014-03-01 11:33 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2016-11-12 21:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2016-11-12 20:39 - 2015-08-12 20:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1794304933-3207535254-2068445666-1002
2016-11-12 19:43 - 2015-08-24 17:40 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-11-11 21:08 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-11-11 20:01 - 2015-10-29 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Amberly Brendson
2016-11-11 20:00 - 2015-10-25 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\Masken
2016-11-11 19:30 - 2015-10-15 19:04 - 00000000 ____D C:\Users\Susanne\Downloads\Comics
2016-11-11 18:48 - 2015-08-25 18:46 - 00000000 ____D C:\Program Files\HitmanPro
2016-11-11 18:42 - 2013-08-22 15:44 - 00462016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-11-10 21:14 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2016-11-10 21:13 - 2015-08-28 18:37 - 00000000 ____D C:\Program Files\CCleaner
2016-11-10 21:12 - 2015-08-16 18:59 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashDumps
2016-11-10 20:34 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\Alehandra Vanhek
2016-11-10 20:30 - 2016-04-25 18:17 - 00000000 ____D C:\Users\Susanne\Downloads\Thamys Welt
2016-11-10 20:25 - 2016-01-03 13:36 - 00000000 ____D C:\Users\Susanne\Downloads\Nocturne
2016-11-10 20:22 - 2016-02-21 14:49 - 00000000 ____D C:\Users\Susanne\Downloads\Misticheskaya
2016-11-10 20:14 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lysisange
2016-11-10 20:14 - 2015-10-05 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Bibi´s Collection
2016-11-10 20:13 - 2016-01-08 20:15 - 00000000 ____D C:\Users\Susanne\Downloads\Disturbed Scraps
2016-11-10 20:13 - 2015-10-25 20:18 - 00000000 ____D C:\Users\Susanne\Downloads\Souldesigner
2016-11-10 20:12 - 2016-02-06 18:26 - 00000000 ____D C:\Users\Susanne\Downloads\DiHalim
2016-11-10 20:11 - 2016-01-03 15:47 - 00000000 ____D C:\Users\Susanne\Downloads\Angelica S
2016-11-10 20:11 - 2015-12-07 16:26 - 00000000 ____D C:\Users\Susanne\Downloads\Chris Pastel
2016-11-10 20:10 - 2015-10-13 09:21 - 00000000 ____D C:\Users\Susanne\Downloads\Halloween
2016-11-10 20:07 - 2016-01-03 13:15 - 00000000 ____D C:\Users\Susanne\Downloads\Fedor
2016-11-10 20:05 - 2016-01-29 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\Tiny Turtles Designs
2016-11-10 20:05 - 2016-01-03 13:23 - 00000000 ____D C:\Users\Susanne\Downloads\Jose Cano
2016-11-10 20:02 - 2015-11-15 15:26 - 00000000 ____D C:\Users\Susanne\Downloads\DB Joan
2016-11-10 20:00 - 2015-11-24 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alicia Mujica
2016-11-10 19:59 - 2016-07-04 18:39 - 00000000 ____D C:\Users\Susanne\Downloads\Ginnybug Designz
2016-11-10 19:57 - 2015-11-28 15:12 - 00000000 ____D C:\Users\Susanne\Downloads\PinkParadoxProduktions
2016-11-10 19:55 - 2016-01-03 13:30 - 00000000 ____D C:\Users\Susanne\Downloads\Lightartist
2016-11-10 19:46 - 2015-10-18 17:19 - 00000000 ____D C:\Users\Susanne\Downloads\Zlata M
2016-11-10 19:45 - 2016-01-03 15:46 - 00000000 ____D C:\Users\Susanne\Downloads\Stella Felice
2016-11-10 19:45 - 2016-01-03 13:51 - 00000000 ____D C:\Users\Susanne\Downloads\Trinita
2016-11-10 19:45 - 2015-10-17 15:10 - 00000000 ____D C:\Users\Susanne\Downloads\Eugene Rzhevskii
2016-11-10 19:43 - 2016-07-11 13:37 - 00000000 ____D C:\Users\Susanne\Downloads\DevilishDezines
2016-11-10 19:41 - 2016-02-06 18:14 - 00000000 ____D C:\Users\Susanne\Downloads\DN Scraps
2016-11-10 19:38 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lorri Kajenna
2016-11-10 19:38 - 2015-12-29 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alex Prihodko
2016-11-10 19:36 - 2015-10-22 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Stan Dudin
2016-11-10 19:20 - 2016-09-10 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Edelweiss Design
2016-11-10 19:18 - 2015-10-15 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\Arthur Crowe
2016-11-10 19:07 - 2015-11-02 14:12 - 00000000 ____D C:\Users\Susanne\Downloads\Bella Caribean
2016-11-10 19:06 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\AmyMarieKits
2016-11-10 19:04 - 2015-10-17 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Keith Garvey
2016-11-10 18:52 - 2015-10-22 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\KBK
2016-11-10 18:50 - 2016-02-21 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\GoF Designs
2016-11-10 18:48 - 2015-10-24 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\Verymany
2016-11-10 16:53 - 2016-06-13 18:44 - 00000000 ____D C:\Users\Susanne\Downloads\Moonshine Dezines
2016-11-10 16:43 - 2015-11-02 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Hania Designs
2016-11-10 13:48 - 2015-08-13 17:30 - 00000000 ____D C:\Users\Susanne\Desktop\Programme
2016-11-10 13:29 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-11-10 13:28 - 2015-08-13 17:18 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-11-10 13:25 - 2015-08-13 17:18 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-11-10 13:09 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-11-10 13:00 - 2015-08-31 15:24 - 00000000 ____D C:\Program Files\iTunes
2016-11-10 13:00 - 2015-08-31 15:20 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-11-10 12:39 - 2015-08-24 17:40 - 00004204 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2016-11-10 12:39 - 2015-08-24 17:40 - 00003968 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2016-11-08 19:54 - 2016-05-25 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Alec Rud-LightartistXXX Emma
2016-11-08 19:16 - 2015-11-15 15:19 - 00000000 ____D C:\Users\Susanne\Downloads\DeesignDepot
2016-11-08 18:29 - 2015-12-08 11:14 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-11-08 18:02 - 2015-10-17 14:28 - 00000000 ____D C:\Users\Susanne\Downloads\PinUpToons
2016-11-08 17:56 - 2015-10-30 13:07 - 00000000 ____D C:\Users\Susanne\Downloads\Anna Liwanag
2016-11-08 17:54 - 2016-04-22 19:44 - 00000000 ____D C:\Users\Susanne\Downloads\Spazz
2016-11-08 17:45 - 2015-11-23 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Alfadesire
2016-11-08 17:43 - 2015-10-17 12:38 - 00000000 ____D C:\Users\Susanne\Downloads\X Mas
2016-11-08 17:24 - 2016-03-05 16:16 - 00000000 ____D C:\Users\Susanne\Downloads\Avroraart
2016-11-08 16:06 - 2015-08-25 18:46 - 00000000 ____D C:\ProgramData\HitmanPro
2016-11-08 15:56 - 2015-10-23 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Landschaftstuben
2016-11-07 19:00 - 2015-10-15 07:11 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-11-07 17:57 - 2016-10-13 18:52 - 00000000 ____D C:\Users\Susanne\Downloads\IS Design
2016-11-07 17:42 - 2016-04-23 18:38 - 00000000 ____D C:\Users\Susanne\Downloads\Mariel Designs
2016-11-07 17:36 - 2016-02-18 20:07 - 00000000 ____D C:\Users\Susanne\Downloads\Tais
2016-11-07 16:03 - 2015-11-23 16:06 - 00000000 ____D C:\Users\Susanne
2016-11-07 11:58 - 2015-11-30 19:54 - 00000000 ____D C:\Users\Susanne\Desktop\Filme
2016-11-07 10:50 - 2014-03-01 11:33 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2016-11-04 19:42 - 2016-01-03 13:05 - 00000000 ____D C:\Users\Susanne\Downloads\Ellie Milk
2016-11-04 18:37 - 2015-10-10 18:25 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\vlc
2016-11-04 16:41 - 2015-10-24 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-11-03 16:33 - 2016-02-06 19:06 - 00000000 ____D C:\Users\Susanne\Downloads\Toxic Desirez
2016-11-01 18:52 - 2016-01-03 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Vadis
2016-11-01 16:04 - 2016-02-14 13:29 - 00000000 ____D C:\Users\Susanne\Downloads\Laguna
2016-10-31 19:43 - 2014-04-15 19:11 - 00000000 ____D C:\Users\Susanne\My PSP Files
2016-10-31 18:01 - 2015-10-17 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Elias Chatzoudis
2016-10-30 19:19 - 2015-11-16 15:01 - 00000000 ____D C:\Users\Susanne\Downloads\Barbara Jensen
2016-10-30 19:01 - 2016-06-01 16:50 - 00000000 ____D C:\Users\Susanne\Downloads\JoJo Kits
2016-10-30 18:59 - 2015-10-05 18:13 - 00000000 ____D C:\Users\Susanne\Downloads\RD_Rienike Designs
2016-10-30 18:44 - 2016-08-12 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Nusha Lypina
2016-10-30 16:18 - 2016-04-18 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\KatNKDA
2016-10-30 14:28 - 2016-03-06 20:12 - 00000000 ____D C:\Users\Susanne\Downloads\Jennifer Janesko
2016-10-29 19:43 - 2016-08-22 15:53 - 00000000 ____D C:\Users\Susanne\Downloads\Mary Designs
2016-10-29 19:25 - 2016-03-18 12:08 - 00000000 ____D C:\Users\Susanne\Downloads\Grafik
2016-10-27 18:08 - 2015-10-17 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\cm scraps
2016-10-27 18:06 - 2016-03-05 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Velerie
2016-10-27 17:38 - 2015-11-07 18:32 - 00000000 ____D C:\Users\Susanne\Downloads\Katharine
2016-10-27 15:39 - 2016-05-22 17:36 - 00000000 ____D C:\Users\Susanne\Downloads\Chili Designz
2016-10-27 15:36 - 2016-05-21 19:01 - 00000000 ____D C:\Users\Susanne\Downloads\Wicked Creationz Scraps
2016-10-27 15:35 - 2016-04-19 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\Irish Princess Designs IPD
2016-10-24 10:44 - 2015-08-28 15:41 - 00000000 ____D C:\ProgramData\Oracle
2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\Program Files (x86)\Java
2016-10-24 10:38 - 2015-08-28 15:43 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-10-24 10:38 - 2015-08-25 19:01 - 00000000 ____D C:\ProgramData\Unchecky
2016-10-22 19:46 - 2015-11-02 13:38 - 00000000 ____D C:\Users\Susanne\Downloads\Sophisticat
2016-10-22 18:07 - 2016-02-27 18:49 - 00000000 ____D C:\Users\Susanne\Downloads\Maryline Cazenave
2016-10-21 13:41 - 2012-07-26 06:26 - 00003255 _____ C:\WINDOWS\system32\Drivers\etc\Hosts.old
2016-10-21 13:27 - 2016-05-24 12:43 - 00212560 _____ C:\WINDOWS\system32\Drivers\fwndislwf64.sys
2016-10-20 18:30 - 2015-11-28 14:34 - 00000000 ____D C:\Users\Susanne\Downloads\ZindyNielsen
2016-10-20 18:29 - 2014-03-01 11:45 - 00000000 ____D C:\ProgramData\Temp
2016-10-18 19:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-18 13:40 - 2016-03-05 18:04 - 00000000 ____D C:\Users\Susanne\Downloads\Ismael RAC
2016-10-17 13:04 - 2016-10-03 19:36 - 00000000 ____D C:\Users\Susanne\Downloads\Mysterfeerie Creation
2016-10-17 11:31 - 2016-03-05 17:47 - 00000000 ____D C:\Users\Susanne\Downloads\Lady Mishka
2016-10-16 15:30 - 2016-01-21 16:24 - 00000000 ____D C:\Users\Susanne\Downloads\Karneval

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-29 17:04 - 2015-08-29 17:04 - 3585654 _____ () C:\Users\Susanne\AppData\Roaming\SageThumbs wallpaper.bmp
2015-08-12 20:13 - 2016-11-13 13:03 - 0000073 _____ () C:\Users\Susanne\AppData\Roaming\sp_data.sys
2016-01-17 14:35 - 2016-03-11 19:57 - 0005120 _____ () C:\Users\Susanne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-06-02 17:27 - 2016-06-02 17:27 - 0007600 _____ () C:\Users\Susanne\AppData\Local\Resmon.ResmonCfg
2015-08-28 17:48 - 2015-11-13 20:12 - 4969472 _____ () C:\Users\Susanne\AppData\Local\SageThumbs.db3
2016-04-03 17:22 - 2016-04-03 17:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-10-28 07:07 - 2015-10-28 07:07 - 0000261 _____ () C:\ProgramData\fontcacheev1.dat
2015-11-29 18:31 - 2015-11-29 18:31 - 0004943 _____ () C:\ProgramData\rxsmznjf.zcp

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\fontcacheev1.dat
C:\Users\Susanne\359.06-notebook-win8-win7-64bit-international-whql.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-12 20:45

==================== Ende von FRST.txt ============================
--- --- ---



Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Susanne (13-11-2016 17:06:00)
Gestartet von C:\Users\Susanne\Desktop
Windows 8.1 (Update) (X64) (2015-11-23 16:34:54)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1794304933-3207535254-2068445666-500 - Administrator - Disabled)
Gast (S-1-5-21-1794304933-3207535254-2068445666-501 - Limited - Disabled) => C:\Users\Gast
Susanne (S-1-5-21-1794304933-3207535254-2068445666-1002 - Administrator - Enabled) => C:\Users\Susanne

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Internet Security (Disabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Internet Security (Disabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Disabled) {4827332C-A1D3-AB84-3AB9-7746197C0BE6}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)
Alien Skin Blow Up (HKLM-x32\...\Blow Up) (Version:  - )
Alien Skin Exposure (HKLM-x32\...\Exposure) (Version:  - )
Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version:  - )
Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version:  - )
Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version:  - Alien Skin)
Alien Skin Image Doctor 2 (HKLM-x32\...\Image Doctor 2) (Version:  - )
Alien Skin Snap Art (HKLM-x32\...\Snap Art) (Version:  - )
Apowersoft Smartphone Manager Version 2.7.1 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.7.1 - APOWERSOFT LIMITED)
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.6 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.13 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.7 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.1.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS)
AVS Video Converter 9.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.1.4.574 - Online Media Technologies Ltd.)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
congstar Internet-Manager (HKLM-x32\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: 1.0.0.3 - ZTE CORPORATION)
Contents (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\CopyTrans Suite) (Version: 4.004 - WindSolutions)
Corel FastFlick (HKLM-x32\...\_{10EC8494-8A92-49D8-9677-2483EB01F7F1}) (Version: 1.0.0.101 - Corel Corporation)
Corel KPT Collection (HKLM-x32\...\_{B16DC136-9583-4C54-BE27-F001BBC546B1}) (Version: 1.0.0.109 - Corel Corporation)
Corel KPT Collection (x32 Version: 1.0.0.109 - Ihr Firmenname) Hidden
Corel PaintShop Pro X7  (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.3.0.30 - Corel Corporation)
Corel PaintShop Pro X7 (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Ihr Firmenname) Hidden
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 14.4.19 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.57.1 - Dropbox, Inc.) Hidden
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Filters Unlimited 2.0 (HKLM-x32\...\Filters Unlimited_is1) (Version:  - )
Filzip 3.06 (HKLM-x32\...\Filzip 3.0.6.93_is1) (Version: 3.0.6 - Philipp Engel)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.15.281 - SurfRight B.V.)
Hotspot Shield 5.4.11 (HKLM-x32\...\HotspotShield) (Version: 5.4.11 - AnchorFree Inc.)
Hotspot Shield 5.4.11 Embedded (x32 Version: 5.4.11.9772 - Buildbot) Hidden
ICA (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
ICA (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.15 - Intel) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Intel(R) Product Improvement Program (x32 Version: 2.1.27.3 - Intel) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{1b09c4de-9cae-4122-b17c-65d395062b50}) (Version: 2.4.0.15 - Intel)
IPM_PSP_COM (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_PSP_COM64 (Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_VS_Pro (x32 Version: 1.0 - Corel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)
Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Ihr Firmenname)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version:  - Crystal Rich Ltd)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.4.0.6115 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
MultiTranse European 6.6 special build (HKLM-x32\...\MultiTranse European_is1) (Version:  - Tialsoft Software)
MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NVIDIA GeForce Experience 2.11.2.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.46 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.46 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plugin Commander Light 1.62 (HKLM-x32\...\Plugin Commander Light 1.62_is1) (Version: 1.60 - The Plugin Site)
PSPPContent (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPro64 (Version: 17.3.0.30 - Corel Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7514 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Schmaili 9.0 (HKLM-x32\...\Schmaili_is1) (Version:  - )
Setup (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Setup (x32 Version: 17.3.0.30 - Ihr Firmenname) Hidden
Share (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.1 - xiberpix)
Sqirlz Water Reflections (HKLM-x32\...\Sqirlz Water Reflections) (Version: 2.6 - xiberpix)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version:  - Code Sector)
Toon Boom Studio 8.1 (HKLM-x32\...\{A3A336BA-61CF-4B0F-83D7-690A8FB23A5D}) (Version:  - Toon Boom Animation Inc.)
Unchecky v1.0.1 (HKLM-x32\...\Unchecky) (Version: 1.0.1 - RaMMicHaeL)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSClassic (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
VSPro (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse  (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1584372C-BE27-42D3-9C29-0B7B050F0676} - System32\Tasks\{DFE56015-71E1-4F3C-B92C-4BC78BB43DCF} => pcalua.exe -a "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12\signcrtr.exe" -d "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12"
Task: {1DE75A1E-B3F6-410F-9D0A-6C724DC5D7BA} - System32\Tasks\{3A681209-9B28-4FB4-B434-90C78D19AA76} => pcalua.exe -a C:\Users\Susanne\Desktop\win64_153342.exe -d C:\Users\Susanne\Desktop
Task: {1F93A434-BC9F-4437-AA95-0868BAB8E7D1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {278FB095-70F3-41AF-86E1-ACDCC3DFCD4F} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
Task: {384F7404-E4A7-4AF6-BFC2-0E966AB9A65A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {46CE1FA1-950E-4406-BE83-9B8278BE36FE} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {568A8D83-61EE-417F-B2F4-D8E199F65D47} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {57BD5BFA-0639-4897-8B79-A444969AD171} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {65E4B102-42C8-4272-BE24-C07ECF847106} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {699484B8-754F-4354-A8EE-F97F3490ED39} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {6C3DD3AD-739B-4B44-AEC6-9844F7E1D814} - System32\Tasks\{2175E4B1-B401-419C-B3FC-7F5CFDE77152} => pcalua.exe -a E:\SETUP.EXE -d E:\ -c /AUTORUN
Task: {7004ABEF-4FB5-4DB9-9D07-BBEE825C98A6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {749335FC-4206-4E47-864C-4C789D3DB14B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
Task: {7535A508-68C4-4552-B25C-041DB8F71935} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2013-01-22] (ASUS)
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=face
Task: {875E6F2B-4C80-4C1F-BDDF-F8D0ADDD352A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {937F2797-535D-4D7E-865E-DF6460A3E660} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {9C8D2AEE-2E56-486A-8603-FD26811BF306} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {A143A7AF-E6A4-41CB-A24F-4682A328495A} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {B500B226-A848-48AC-AD89-FC46DD40726A} - System32\Tasks\{C34BCC4B-E192-4B85-9591-5B9275232FC4} => pcalua.exe -a "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90\unins000.exe" -d "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90"
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=pcs
Task: {D65C524D-CC2D-4D37-AB73-7D79DD3F9F7E} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-04-16] (AsusTek)
Task: {DF4E779D-E89D-43BF-BFEA-92AFBD12A035} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {E7DB6F04-0E5F-49F6-82E1-C45912A304B9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {E833CAEB-5DC4-47B3-8051-EF7AA579E8AD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {EB9F98C6-FED1-40F0-BFD1-4272F4DE9576} - System32\Tasks\{D52E5E0D-7B83-453B-B34F-8346DD360FFF} => pcalua.exe -a "C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe" -c -r -m -nrg2709
Task: {EF2C2CD6-5F9B-43F9-A3B4-87DE57826197} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {FE9FAC54-D116-4F35-8188-88E83F570501} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01] (Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.com

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-05-24 12:43 - 2016-10-21 13:27 - 01024968 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00118424 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-03-09 19:43 - 2016-03-09 19:43 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00034968 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\AnalyzerTask.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019096 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverDetection.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00019688 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\DriverInfo.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00026856 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\IDUUDetection.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-08-28 14:59 - 2012-01-20 13:55 - 00678400 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2016-08-24 00:04 - 2016-08-24 00:04 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2014-03-01 11:32 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO AnnaMarine-11-1+:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO GlistenSnowFlakes:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO WinterMagic:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\SNC_CUPIDO COLLAB:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\Sue PSP Stuff:com.dropbox.attributes [168]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe:  =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1001movie.com -> 1001movie.com

Da befinden sich 6091 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Susanne\AppData\Local\Microsoft\Windows\Themes\Rainbows\DesktopBackground\rainbows7.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "egui"
HKLM\...\StartupApproved\Run: => "Corel Update Helper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Digiarty_Software_AirPlayit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Schmaili"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{698A6761-A7D7-436A-828F-F5D0B9649607}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{725B442B-AA22-40A6-9A4C-C080895D11B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{43ED2D84-F0D6-4176-8654-2BF85E93929E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A83C85B4-8237-4A7A-B5CF-F4548CE998C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B05144DD-2A59-4CE6-AC21-A487450C32BB}] => (Allow) LPort=1900
FirewallRules: [{6E10BE55-BF0B-41CB-874B-35BBAE2A6CC8}] => (Allow) LPort=2869
FirewallRules: [{6FB3AE7A-27BA-4EC1-8459-F674A66F398E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5732DE92-F2E8-4EFA-8211-59D9C1216D9C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{FB4B5D1F-46F4-4EE4-A9DD-1CC5A993E8B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{BEBD6992-F474-476F-AA99-813387C3315B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{12619529-46A3-401F-8C45-41DA4469E6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{75F78078-FA69-47CD-84C8-ABAF1E6028BA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5F08B6D7-908A-4C10-BE37-07290BAA1FC4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DC5EE5FD-A4A3-4403-A62A-E542DAC852F8}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{0253E503-D67B-4A8C-AF6E-60B041B9957E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{07DB8C66-1A03-4036-B21D-E47878AE360E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{F8374132-09A8-413C-90AB-BBDB95A4DDB1}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{43F41AD3-EA64-4AB5-861C-9B99C3F868C3}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{6E936865-405B-44EC-B6AB-CF8C8EE059DE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{337EB821-B0AB-4651-95E3-0219CB12024F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{3819976B-9F89-4FB5-8313-54197BBBF34F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Wiederherstellungspunkte =========================

29-10-2016 13:23:01 Windows Update
06-11-2016 12:58:40 Geplanter Prüfpunkt
08-11-2016 16:05:42 Prüfpunkt von HitmanPro
13-11-2016 16:54:17 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/12/2016 07:43:04 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (11/12/2016 07:43:02 PM) (Source: DbxSvc) (EventID: 270) (User: )
Description: Filter Unload failed with: (-2145452013) Der angegebene Filter wurde nicht gefunden.

Error: (11/11/2016 09:08:46 PM) (Source: DbxSvc) (EventID: 320) (User: )
Description: Failed to connect to the driver: (-2147024894) Das System kann die angegebene Datei nicht finden.

Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.

Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung

Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog

Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 3057) (User: )
Description: Der Plug-In-Manager <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung

Details:
        (HRESULT : 0x8e5e0210) (0x8e5e0210)

Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.

Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  0xc0041801 (0xc0041801)

Error: (11/11/2016 06:43:53 PM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4810 - enduser\mssearch2\search\ytrip\common\util\jetutil.cpp (167)} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.

Details:
        0x8e5e0210 (0x8e5e0210)


Systemfehler:
=============
Error: (11/13/2016 04:54:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/13/2016 04:18:32 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/13/2016 04:03:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/13/2016 01:55:23 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "KLAUS-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{1E5210DC-85FF-4E1C-98B0-40CB3565919B}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (11/13/2016 01:29:16 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/13/2016 01:08:05 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/13/2016 08:25:12 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/13/2016 05:28:32 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/13/2016 03:33:06 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/13/2016 03:32:36 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


CodeIntegrity:
===================================
  Date: 2016-11-13 17:04:16.321
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-23 18:39:48.072
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:47.369
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:45.338
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:44.853
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:41.649
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:38.959
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:36.146
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:35.615
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:33.629
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 8069.73 MB
Verfügbarer physikalischer RAM: 5462.59 MB
Summe virtueller Speicher: 10245.73 MB
Verfügbarer virtueller Speicher: 6800.57 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:1117.37 GB) (Free:812.56 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:1655.6 GB) (Free:1655.12 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: A523CAED)

Partition: GPT.

==================== Ende von Addition.txt ============

M-K-D-B 14.11.2016 15:28
Servus,


wir entfernen die letzten Reste und kontrollieren nochmal alles. :)



Hinweis: Der Suchlauf mit ESET kann länger dauern.



Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
start
CloseProcesses:
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
C:\ProgramData\SlimWare Utilities, Inc
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=face
C:\Users\Susanne\AppData\Roaming\istartsurf
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=pcs
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe:  =>  <===== ACHTUNG
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Schritt 2

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset







Schritt 3
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
  • Starte die HitmanPro.exe
  • Klicke auf
  • Entferne den Haken bei
  • Klicke auf
    und
  • Akzeptiere die Lizenzbedingungen und klicke auf
  • Klicke auf

    und auf
  • Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
    und speichere die Logdatei auf Deinem Desktop.
  • Schließe HitmanPro und poste mir das Log.

 







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.





http://www.trojaner-board.de/extra/lesestoff.pngGibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?







Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die Logdatei von ESET,
  • die Logdatei von HitmanPro,
  • die beiden neuen Logdateien von FRST,
  • die Beantwortung der gestellten Fragen.

JSM 15.11.2016 19:49
Die Logfiles
 
Hallo Matthias, die Logfiles

Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Susanne (14-11-2016 19:41:36) Run:2
Gestartet von C:\Users\Susanne\Desktop
Geladene Profile: Susanne (Verfügbare Profile: Susanne & Gast)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
Task: {37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD} - System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => pcalua.exe -a "C:\ProgramData\SlimWare Utilities, Inc\DriverApp\Downloads\00F46400BE06BC2EF0051C27633897CA9F0000000015BC1B9E.exe"
C:\ProgramData\SlimWare Utilities, Inc
Task: {7BEB7A52-7115-44FE-983C-760FD41865A4} - System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=face
C:\Users\Susanne\AppData\Roaming\istartsurf
Task: {B78CA17D-3A08-43C7-AC90-44AF8F9116DF} - System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => pcalua.exe -a C:\Users\Susanne\AppData\Roaming\istartsurf\UninstallManager.exe -c  -ptid=pcs
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [127]
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe:  =>  <===== ACHTUNG
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
     
*****************

Prozess erfolgreich geschlossen.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37A4D3D1-A9C0-4F1F-A1E4-69F7106967AD}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{521DB96D-E9CC-4273-A927-56A7DF8BA731} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{521DB96D-E9CC-4273-A927-56A7DF8BA731}" => Schlüssel erfolgreich entfernt
"C:\ProgramData\SlimWare Utilities, Inc" => nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7BEB7A52-7115-44FE-983C-760FD41865A4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7BEB7A52-7115-44FE-983C-760FD41865A4}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A7D58E18-1B4E-465F-B6ED-4EFE3829029A}" => Schlüssel erfolgreich entfernt
"C:\Users\Susanne\AppData\Roaming\istartsurf" => nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B78CA17D-3A08-43C7-AC90-44AF8F9116DF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B78CA17D-3A08-43C7-AC90-44AF8F9116DF}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{825879E2-CC36-47E0-887E-8D5A3643532D} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{825879E2-CC36-47E0-887E-8D5A3643532D}" => Schlüssel erfolgreich entfernt
C:\ProgramData\Temp => ":5C321E34" ADS erfolgreich entfernt.
C:\ProgramData\Temp => ":890CC2F3" ADS erfolgreich entfernt.
"HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Classes\.exe" => Schlüssel erfolgreich entfernt

========= dir "%ProgramFiles%" =========

 Datentr„ger in Laufwerk C: ist OS
 Volumeseriennummer: CA3C-B082

 Verzeichnis von C:\Program Files

10.11.2016  13:00    <DIR>          .
10.11.2016  13:00    <DIR>          ..
06.10.2015  12:44    <DIR>          Alien Skin
06.10.2015  13:20    <DIR>          AlienSkin Eye Candy 7.1.0.1203
01.03.2014  11:47    <DIR>          ASUS
12.11.2015  09:06    <DIR>          Bonjour
10.11.2016  21:13    <DIR>          CCleaner
30.11.2015  13:23    <DIR>          Common Files
25.08.2015  19:39    <DIR>          Corel
01.03.2014  11:38    <DIR>          DIFX
14.11.2016  19:41    <DIR>          Emsisoft Internet Security
11.11.2016  18:48    <DIR>          HitmanPro
03.04.2016  17:37    <DIR>          Intel
10.11.2016  21:14    <DIR>          Internet Explorer
10.11.2016  13:00    <DIR>          iPod
10.11.2016  13:00    <DIR>          iTunes
25.08.2015  19:17    <DIR>          LockHunter
13.10.2016  13:24    <DIR>          Microsoft Silverlight
23.11.2015  15:55    <DIR>          MSBuild
30.11.2015  13:23    <DIR>          NewBlue
29.04.2016  08:32    <DIR>          NVIDIA Corporation
23.11.2015  16:00    <DIR>          Realtek
28.02.2016  15:05    <DIR>          Recuva
23.11.2015  15:55    <DIR>          Reference Assemblies
28.08.2015  15:05    <DIR>          TeraCopy
19.08.2015  11:28    <DIR>          VS Revo Group
24.11.2015  11:02    <DIR>          Windows Defender
21.11.2014  11:52    <DIR>          Windows Mail
23.11.2015  16:11    <DIR>          Windows Media Player
21.11.2014  11:52    <DIR>          Windows Multimedia Platform
23.11.2015  16:28    <DIR>          Windows NT
21.11.2014  11:52    <DIR>          Windows Photo Viewer
21.11.2014  11:52    <DIR>          Windows Portable Devices
23.11.2015  16:11    <DIR>          WindowsPowerShell
25.08.2015  18:00    <DIR>          WinRAR
              0 Datei(en),              0 Bytes
              35 Verzeichnis(se), 870.192.959.488 Bytes frei

========= Ende von CMD: =========


========= dir "%ProgramFiles(x86)%" =========

 Datentr„ger in Laufwerk C: ist OS
 Volumeseriennummer: CA3C-B082

 Verzeichnis von C:\Program Files (x86)

18.10.2016  08:38    <DIR>          .
18.10.2016  08:38    <DIR>          ..
22.11.2015  18:04    <DIR>          Adobe
06.10.2015  12:44    <DIR>          Alien Skin
12.10.2015  14:11    <DIR>          AlienSkin Eye Candy 7.1.0.1203
27.08.2015  10:51    <DIR>          Apowersoft
08.04.2016  09:13    <DIR>          Apple Software Update
24.11.2015  10:09    <DIR>          ASUS
16.01.2016  20:06    <DIR>          AVS4YOU
18.11.2015  09:41    <DIR>          Bluetooth Suite
12.11.2015  09:06    <DIR>          Bonjour
24.10.2016  10:38    <DIR>          Common Files
06.09.2016  16:09    <DIR>          congstar
25.08.2015  19:37    <DIR>          Corel
26.11.2015  12:20    <DIR>          CrystalDiskInfo
01.03.2014  11:46    <DIR>          CyberLink
12.11.2016  19:43    <DIR>          Dropbox
29.11.2015  18:54    <DIR>          Emsisoft Internet Security
21.11.2015  17:57    <DIR>          ESET
29.12.2015  18:14    <DIR>          Filzip
11.09.2016  18:36    <DIR>          Hotspot Shield
28.04.2016  14:05    <DIR>          Intel
28.04.2016  14:08    <DIR>          Intel Driver Update Utility
10.11.2016  21:14    <DIR>          Internet Explorer
29.08.2015  09:03    <DIR>          IrfanView
26.09.2015  19:51    <DIR>          Jasc Software Inc
24.10.2016  10:39    <DIR>          Java
18.11.2015  08:52    <DIR>          JDownloader
02.06.2016  17:36    <DIR>          Malwarebytes Anti-Malware
19.10.2015  13:55    <DIR>          Microsoft
23.12.2015  13:09    <DIR>          Microsoft ASP.NET
17.10.2015  19:18    <DIR>          Microsoft Office
13.10.2016  13:24    <DIR>          Microsoft Silverlight
26.04.2013  00:16    <DIR>          Microsoft SkyDrive
26.04.2013  00:17    <DIR>          Microsoft SQL Server Compact Edition
23.11.2015  16:11    <DIR>          Microsoft.NET
24.05.2016  19:29    <DIR>          Mozilla Firefox
09.10.2016  10:39    <DIR>          Mozilla Maintenance Service
08.10.2016  17:22    <DIR>          Mozilla Thunderbird
23.11.2015  15:55    <DIR>          MSBuild
17.10.2015  19:17    <DIR>          MSECache
17.11.2015  15:00    <DIR>          MultiTranse European
30.11.2015  13:23    <DIR>          NewBlue
28.04.2016  15:30    <DIR>          NVIDIA Corporation
29.09.2015  14:38    <DIR>          Opera
26.09.2016  20:45    <DIR>          PDF24
26.02.2016  19:43    <DIR>          Plugin Commander Light
01.03.2014  11:30    <DIR>          Qualcomm Atheros
10.01.2016  18:04    <DIR>          QuickTime
03.04.2016  17:06    <DIR>          Realtek
23.11.2015  15:55    <DIR>          Reference Assemblies
29.04.2016  08:34    <DIR>          Skype
25.08.2015  18:08    <DIR>          SpywareBlaster
06.07.2016  18:04    <DIR>          Sqirlz Morph
06.07.2016  17:59    <DIR>          Sqirlz Water Reflections
24.10.2015  15:49    <DIR>          Toon Boom Animation
13.10.2015  08:39    <DIR>          Unchecky
10.10.2015  18:24    <DIR>          VideoLAN
03.04.2016  16:18    <DIR>          VulkanRT
26.04.2013  00:20    <DIR>          WildGames
26.04.2013  00:20    <DIR>          WildTangent Games
19.10.2015  12:00    <DIR>          Winamp
19.10.2015  11:55    <DIR>          Winamp Detect
24.11.2015  11:02    <DIR>          Windows Defender
18.10.2015  14:25    <DIR>          Windows Live
21.11.2014  11:51    <DIR>          Windows Mail
23.11.2015  16:11    <DIR>          Windows Media Player
21.11.2014  11:51    <DIR>          Windows Multimedia Platform
22.08.2013  16:36    <DIR>          Windows NT
21.11.2014  11:51    <DIR>          Windows Photo Viewer
21.11.2014  11:51    <DIR>          Windows Portable Devices
23.11.2015  16:11    <DIR>          WindowsPowerShell
25.08.2015  17:15    <DIR>          WinRAR
              0 Datei(en),              0 Bytes
              73 Verzeichnis(se), 870.192.955.392 Bytes frei

========= Ende von CMD: =========


========= dir "%ProgramData%" =========

 Datentr„ger in Laufwerk C: ist OS
 Volumeseriennummer: CA3C-B082

 Verzeichnis von C:\ProgramData

07.11.2015  19:12    <DIR>          Adobe
06.10.2015  12:44    <DIR>          Alien Skin
26.09.2015  18:37    <DIR>          Apple
26.09.2015  18:37    <DIR>          Apple Computer
26.04.2013  00:15    <DIR>          ASUSLogos
26.09.2015  18:37    <DIR>          ASUSVibe
26.09.2015  18:37    <DIR>          Atheros
16.01.2016  20:04    <DIR>          AVS4YOU
07.11.2015  18:34    <DIR>          boost_interprocess
15.10.2015  14:15    <DIR>          CDTPL
25.08.2015  19:44    <DIR>          Corel
30.11.2015  13:38    <DIR>          CyberLink
24.08.2015  17:40    <DIR>          Dropbox
26.12.2015  16:14    <DIR>          Emsisoft
16.07.2016  16:38    <DIR>          FLEXnet
28.10.2015  07:07              261 fontcacheev1.dat
08.11.2016  16:06    <DIR>          HitmanPro
11.09.2016  18:36    <DIR>          Hotspot Shield
03.04.2016  17:33    <DIR>          Intel
20.09.2015  13:07    <DIR>          LHService
26.09.2015  18:37    <DIR>          Licenses
26.09.2015  18:37    <DIR>          LockHunter
21.08.2015  15:08    <DIR>          Malwarebytes
26.09.2015  18:37    <DIR>          McAfee
26.04.2013  00:16    <DIR>          Microsoft SkyDrive
29.11.2015  18:57    <DIR>          Movavi
29.04.2016  09:55    <DIR>          NVIDIA
28.04.2016  15:30    <DIR>          NVIDIA Corporation
24.10.2016  10:44    <DIR>          Oracle
26.09.2015  18:37    <DIR>          P4G
28.04.2016  14:05    <DIR>          Package Cache
23.11.2015  16:11    <DIR>          PRICache
25.08.2015  19:30    <DIR>          Protexis
01.03.2014  11:30    <DIR>          Qualcomm Atheros
23.11.2015  16:16    <DIR>          regid.1986-12.com.adobe
23.11.2015  16:16    <DIR>          regid.1991-06.com.microsoft
16.07.2016  16:23    <DIR>          Rosetta Stone
16.07.2016  16:23    <DIR>          Rosetta Stone Backups
29.11.2015  18:31            4.943 rxsmznjf.zcp
29.04.2016  08:34    <DIR>          Skype
30.11.2015  13:41    <DIR>          SUPPORTDIR
20.10.2016  18:29    <DIR>          Temp
17.11.2015  14:44    <DIR>          Ulead Systems
24.10.2016  10:38    <DIR>          Unchecky
26.09.2015  18:37    <DIR>          USBChargerPlus
26.09.2015  18:37    <DIR>          VS Revo Group
26.09.2015  18:37    <DIR>          WildTangent
05.11.2015  11:39    <DIR>          WindSolutions
              2 Datei(en),          5.204 Bytes
              46 Verzeichnis(se), 870.192.951.296 Bytes frei

========= Ende von CMD: =========


========= dir "%Appdata%" =========

 Datentr„ger in Laufwerk C: ist OS
 Volumeseriennummer: CA3C-B082

 Verzeichnis von C:\Users\Susanne\AppData\Roaming

24.10.2016  10:57    <DIR>          .
24.10.2016  10:57    <DIR>          ..
17.11.2015  17:53    <DIR>          Adobe
17.11.2015  17:43    <DIR>          Alien Skin
08.02.2016  11:57    <DIR>          Apowersoft
31.08.2015  15:33    <DIR>          Apple Computer
05.10.2015  09:08    <DIR>          Atheros
30.11.2015  12:43    <DIR>          avidemux
16.01.2016  20:04    <DIR>          AVS4YOU
19.10.2015  11:05    <DIR>          BlueLabsSoftware
19.10.2015  11:48    <DIR>          CDTPL
16.07.2016  16:29    <DIR>          com.rosettastone.languagetraining
25.08.2015  19:30    <DIR>          Corel
30.11.2015  13:38    <DIR>          CyberLink
04.09.2015  12:20    <DIR>          Digiarty
24.08.2015  17:42    <DIR>          Dropbox
18.08.2015  13:33    <DIR>          Identities
26.11.2015  18:24    <DIR>          iMobie
03.04.2016  17:33    <DIR>          Intel Corporation
26.09.2015  18:37    <DIR>          IrfanView
23.09.2015  16:31    <DIR>          Jasc
25.08.2015  19:13    <DIR>          LockHunter
12.08.2015  20:14    <DIR>          Macromedia
30.11.2015  13:05    <DIR>          MotionDSP
12.08.2015  20:36    <DIR>          Mozilla
04.10.2015  19:47    <DIR>          MysticCoder
11.11.2015  10:02    <DIR>          Neos Eureka S.r.l
29.08.2015  17:32    <DIR>          NVIDIA
26.08.2015  11:01    <DIR>          Opera
29.09.2015  14:37    <DIR>          Opera Software
24.10.2016  10:57    <DIR>          Oracle
28.10.2015  07:07    <DIR>          Performix LLC
29.08.2015  17:04        3.585.654 SageThumbs wallpaper.bmp
30.04.2016  15:54    <DIR>          Skype
14.11.2016  13:38                73 sp_data.sys
28.08.2015  15:41    <DIR>          Sun
25.08.2015  19:01    <DIR>          TeamViewer
26.09.2015  18:37    <DIR>          TeraCopy
23.08.2015  15:15    <DIR>          Thunderbird
29.02.2016  13:54    <DIR>          Tracker Software
17.11.2015  14:44    <DIR>          Ulead Systems
04.11.2016  18:37    <DIR>          vlc
19.10.2015  11:53    <DIR>          Winamp
05.11.2015  11:39    <DIR>          WindSolutions
25.08.2015  17:46    <DIR>          WinRAR
16.01.2016  19:00    <DIR>          {950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
              2 Datei(en),      3.585.727 Bytes
              44 Verzeichnis(se), 870.192.947.200 Bytes frei

========= Ende von CMD: =========


========= dir "%LocalAppdata%" =========

 Datentr„ger in Laufwerk C: ist OS
 Volumeseriennummer: CA3C-B082

 Verzeichnis von C:\Users\Susanne\AppData\Local

14.11.2016  13:39    <DIR>          .
14.11.2016  13:39    <DIR>          ..
30.01.2016  22:00    <DIR>          Adobe
23.09.2015  18:59    <DIR>          Alien Skin
08.02.2016  11:57    <DIR>          Apowersoft
31.08.2015  15:22    <DIR>          Apple
17.01.2016  14:29    <DIR>          Apple Computer
26.09.2015  18:37    <DIR>          ASUS
12.08.2015  20:14    <DIR>          BMExplorer
24.10.2015  15:46    <DIR>          CEF
29.11.2015  18:58    <DIR>          converter
25.08.2015  19:41    <DIR>          Corel PaintShop Pro
10.11.2016  21:12    <DIR>          CrashDumps
14.11.2016  13:38    <DIR>          CrashRpt
30.11.2015  13:37    <DIR>          CyberLink
11.03.2016  19:57            5.120 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
13.10.2016  18:40    <DIR>          Diagnostics
30.09.2016  19:13    <DIR>          Dropbox
25.08.2016  11:10    <DIR>          ElevatedDiagnostics
26.12.2015  10:22    <DIR>          Escape Motions
01.10.2016  17:29          119.616 GDIPFONTCACHEV1.DAT
22.08.2015  18:44    <DIR>          Google
21.08.2015  07:55    <DIR>          GWX
26.11.2015  17:44    <DIR>          iMobie_Inc
03.04.2016  16:29    <DIR>          Intel
20.11.2015  18:28    <DIR>          Intel_Corporation
14.11.2015  16:42    <DIR>          JDownloader 2.0
21.09.2015  20:06    <DIR>          JDownloader v2.0
15.08.2015  17:49    <DIR>          Macromedia
17.01.2016  16:18    <DIR>          Microsoft
30.11.2015  13:05    <DIR>          MotionDSP
29.11.2015  18:58    <DIR>          Movavi
12.08.2015  20:37    <DIR>          Mozilla
03.04.2016  16:21    <DIR>          NVIDIA
03.04.2016  16:20    <DIR>          Nvidia Corporation
29.09.2015  14:37    <DIR>          Opera Software
23.11.2015  16:07    <DIR>          Packages
18.08.2015  13:35    <DIR>          PackageStaging
12.11.2015  12:51    <DIR>          Paint.NET
19.10.2015  14:02    <DIR>          PDF24
18.08.2015  17:03    <DIR>          Programs
02.06.2016  17:27            7.600 Resmon.ResmonCfg
13.11.2015  20:12        4.969.472 SageThumbs.db3
29.04.2016  08:34    <DIR>          Skype
14.11.2016  19:41    <DIR>          Temp
23.08.2015  15:15    <DIR>          Thunderbird
24.10.2015  15:51    <DIR>          Toon Boom Animation
29.11.2015  18:51    <DIR>          videocapture
29.11.2015  18:35    <DIR>          VideoEditor
02.10.2016  19:50    <DIR>          VirtualStore
19.08.2015  11:28    <DIR>          VS Revo Group
21.12.2015  20:33    <DIR>          Windows Live
              4 Datei(en),      5.101.808 Bytes
              48 Verzeichnis(se), 870.192.947.200 Bytes frei

========= Ende von CMD: =========


========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


========= ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========= Ende von CMD: =========


========= netsh winsock reset =========


Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.


========= Ende von CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 12582912 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 116669664 B
Java, Flash, Steam htmlcache => 1508 B
Windows/system/drivers => 494078 B
Edge => 0 B
Chrome => 0 B
Firefox => 383110331 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 117794 B
NetworkService => 0 B
UpdatusUser => 0 B
Susanne => 43187720 B
Gast => 0 B

RecycleBin => 7487572 B
EmptyTemp: => 537.5 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 19:41:57 ====

Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=4b022ec5c69103468bcef4c326c51291
# end=init
# utc_time=2016-11-15 03:03:54
# local_time=2016-11-15 04:03:54 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31417
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=4b022ec5c69103468bcef4c326c51291
# end=updated
# utc_time=2016-11-15 03:06:16
# local_time=2016-11-15 04:06:16 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=4b022ec5c69103468bcef4c326c51291
# engine=31417
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-11-15 05:09:52
# local_time=2016-11-15 06:09:52 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 30870415 43019362 0 0
# scanned=434374
# found=1
# cleaned=1
# scan_time=7416
sh=80CB29F1BF1F250CC6804DAB0EAE56CC43B6E37D ft=1 fh=c5d8f6e2a6c7cf9e vn="Win32/Adware.Agent.NQE Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\$Recycle.Bin\S-1-5-18\$RP7O1KO.exe"
Vollversion von HitmanPro
Code:
HitmanPro 3.7.15.281
www.hitmanpro.com

  Computer name . . . . : SUSANNE
  Windows . . . . . . . : 6.3.0.9600.X64/8
  User name . . . . . . : Susanne\Susanne
  UAC . . . . . . . . . : Enabled
  License . . . . . . . : Paid (483 days left)

  Scan date . . . . . . : 2016-11-15 18:54:22
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 11m 52s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : No

  Threats . . . . . . . : 0
  Traces  . . . . . . . : 2

  Objects scanned . . . : 2.830.818
  Files scanned . . . . : 207.825
  Remnants scanned  . . : 995.251 files / 1.627.742 keys

Suspicious files ____________________________________________________________

  C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\FRST64.exe
      Size . . . . . . . : 2.411.520 bytes
      Age  . . . . . . . : 2.0 days (2016-11-13 18:14:10)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 1DB9547CD72BE4D4BA6391FF9983CD69C0721BFD04CA89FB8AB2D9A7C8D7DE61
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
        Program has no publisher information but prompts the user for permission elevation.
        Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Time indicates that the file appeared recently on this computer.
      Forensic Cluster
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\
        -16.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (4).jpg
        -16.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (3).jpg
        -15.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (2).jpg
        -15.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (1).png
        -15.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT PAPERS (1).jpg
        -15.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (99).png
        -15.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (98).png
        -15.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (97).png
        -14.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (96).png
        -14.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (95).png
        -14.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (94).png
        -14.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (93).png
        -14.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (92).png
        -14.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (91).png
        -14.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (90).png
        -14.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (9).png
        -14.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (89).png
        -13.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (88).png
        -13.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (87).png
        -13.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (86).png
        -13.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (85).png
        -13.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (84).png
        -13.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (83).png
        -12.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (82).png
        -12.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (81).png
        -12.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (80).png
        -12.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (8).png
        -12.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (79).png
        -12.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (78).png
        -11.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (77).png
        -11.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (76).png
        -11.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (75).png
        -11.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (74).png
        -11.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (73).png
        -11.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (72).png
        -11.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (71).png
        -11.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (70).png
        -11.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (7).png
        -11.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (69).png
        -11.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (68).png
        -11.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (67).png
        -11.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (66).png
        -10.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (65).png
        -10.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (64).png
        -9.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (63).png
        -9.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (62).png
        -9.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (61).png
        -9.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (60).png
        -9.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (6).png
        -9.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (59).png
        -9.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (58).png
        -9.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (57).png
        -9.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (56).png
        -9.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (55).png
        -8.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (54).png
        -7.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (53).png
        -7.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (52).png
        -7.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (51).png
        -7.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (50).PNG
        -7.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (5).png
        -7.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (49).PNG
        -7.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (48).PNG
        -7.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (47).PNG
        -7.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (46).PNG
        -7.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (45).png
        -7.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (44).PNG
        -6.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (43).PNG
        -6.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (42).PNG
        -6.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (41).png
        -6.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (40).PNG
        -6.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (4).png
        -6.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (39).PNG
        -6.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (38).png
        -6.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (37).png
        -6.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (36).PNG
        -6.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (35).png
        -5.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (34).png
        -5.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (33).png
        -5.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (32).png
        -5.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (31).png
        -5.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (30).png
        -5.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (3).png
        -5.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (29).png
        -5.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (28).png
        -5.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (27).png
        -5.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (26).png
        -5.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (25).png
        -5.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (24).png
        -4.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (23).png
        -4.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (22).png
        -4.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (21).png
        -4.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (20).png
        -4.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (2).png
        -4.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (19).png
        -3.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (18).png
        -3.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (17).png
        -3.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (16).png
        -3.1s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (15).png
        -3.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (14).png
        -2.9s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (13).png
        -2.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (12).png
        -2.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (11).png
        -2.7s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (10).png
        -2.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\BIBI-GALA NIGHT ELEMS (1).png
        -2.5s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\@BIBI TOU.txt
        -2.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BIBI-GALA_NIGHT\BIBI-GALA NIGHT\!BIBI.gif
        -1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\
        -1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\
        -1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\Tou\
        -1.8s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\Tou\TERMS OF USE.txt
        -1.3s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\Tou\snc_Store-dbs14.gif
        -1.2s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\LYS-SNCO_BEACH-PARADISE.psd
        -0.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\Downloads from Friends\Rochy\BEACH_PARADISE\BEACH PARADISE\LYS-SNCO_BEACH-PARADISE.jpg
          0.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\FRST64.exe
          2.4s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\JRT.txt
          3.0s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\JRT.exe
          4.6s C:\Users\Susanne\AppData\Local\Microsoft\Windows\FileHistory\Data\2785\C\Users\Susanne\Desktop\mbamlog.txt

  C:\Users\Susanne\Desktop\FRST64.exe
      Size . . . . . . . : 2.411.520 bytes
      Age  . . . . . . . : 2.1 days (2016-11-13 17:04:19)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 1DB9547CD72BE4D4BA6391FF9983CD69C0721BFD04CA89FB8AB2D9A7C8D7DE61
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
        Program has no publisher information but prompts the user for permission elevation.
        Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\Susanne\Desktop\FRST64.exe
          6.8s C:\Users\Susanne\Desktop\FRST.txt

FRST Logfile:
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
durchgeführt von Susanne (Administrator) auf SUSANNE (15-11-2016 19:07:26)
Gestartet von C:\Users\Susanne\Desktop
Geladene Profile: Susanne & Gast (Verfügbare Profile: Susanne & Gast)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2service.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\HSSCP.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2guard.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(ZTE) C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe
() C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Emsisoft Ltd) C:\Program Files\Emsisoft Internet Security\a2start.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_23_0_0_207.exe
() C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464 2000-01-01] (Realtek Semiconductor)
HKLM\...\Run: [Corel Update Helper] => c:\Program Files\Corel\Corel PaintShop Pro X7 (64-bit)\pua.exe [2004312 2015-05-19] (Corel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397752 2016-03-24] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [emsisoft anti-malware] => c:\program files\emsisoft internet security\a2guard.exe [7838392 2016-10-29] (Emsisoft Ltd)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [25673776 2016-11-07] (Dropbox, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [131712 2013-01-25] (Atheros Communications)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Schmaili] => C:\Schmaili90\schmaili.exe [536576 2007-08-03] (Marc Waesche Services)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\MountPoints2: {25215d21-71fb-11e6-bf71-24fd52f78824} - "F:\windows\Data\setup.exe"
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [186136 2016-04-21] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164696 2016-04-21] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.3.0.dll [2016-11-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MCtlSvc.lnk [2016-09-06]
ShortcutTarget: MCtlSvc.lnk -> C:\Program Files (x86)\congstar\Internet-Manager\Bin\mcserver.exe (ZTE)
Startup: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2015-08-26]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Hosts Datei wurde nicht im Standardordner gefunden
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1E5210DC-85FF-4E1C-98B0-40CB3565919B}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{4C2CE82A-EBAB-4312-8E71-DF116B2A940E}: [DhcpNameServer] 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: [S-1-5-21-1794304933-3207535254-2068445666-501] ACHTUNG => Standard URLSearchHook fehlt
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> DefaultScope {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {56EE4669-C5D3-4789-8C16-4DB4464DAD46} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE885D20150813&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002 -> {70D443E2-171A-419A-A51C-BCCF5FA9F887} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25] (Qualcomm Atheros Commnucations)
BHO-x32: Kein Name -> {451C804F-C205-4F03-B48E-537EC94937BF} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-24] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-24] (Oracle Corporation)
Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei

FireFox:
========
FF DefaultProfile: y9p501c2.default
FF ProfilePath: C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default [2016-11-15]
FF Homepage: Mozilla\Firefox\Profiles\y9p501c2.default -> hxxp://www.ferienwohnung-schifferstadt.de/
hxxp://www.gmx.net/logoutlounge/?p=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
hxxps://www.google.de/webhp?hl=de&sa=X&ved=0ahUKEwi5iaqh1IzQAhVJzRQKHZIbDPgQPAgD&gws_rd=cr&ei=8r4qWP7YCMO-aPSZpNAH
hxxps://accounts.google.com/ServiceLogin?continue=https%3A%2F%2Fgroups.google.com%2Fd%2Fmyforums&service=groups2&sacu=1&rip=1#identifier
hxxps://login.yahoo.com/config/login?.src=ygrp&.intl=de&.lang=de-DE&.done=hxxps://de.groups.yahoo.com/neo
hxxps://translate.google.de/?hl=de&tab=TT#de/fr/papierrolle
hxxps://sso.kabelmail.de/portal/sites/messaging/inbox.aspx
hxxps://www.1und1.de/login
hxxps://polizei.brandenburg.de/konto/login
hxxps://www.bussgeldkatalog.org/raser/
hxxps://www.congstar.de/meincongstar/
hxxps://www.dropbox.com/login?src=logout
hxxps://www.wesendit.com/
hxxp://heilkraeuter.de/lexikon/huflat.htm
hxxp://www.netdoktor.de/heilpflanzen/koenigskerze/
hxxp://swheattutorials.blogspot.de/2015/12/blog-post_74.html
hxxp://www.wheatcreations.com/SWHEATTUTORIALS/BJChristmas/BJChristmas.htm
hxxp://bienespspplace.bplaced.net/Tutorials/Saison/wintermagic/
hxxp://www.marinettedesings.be/winter_magic_engels.htm
hxxps://www.adac.de/Produkte/autovermietung/EmptyPage.aspx
hxxp://www.animationfactory.com/de/search/index.html?s=76&spage=4&raw_q=halloween&CURRENCY=USD&category_id=E1&q=halloween&b=k&cid=E1&bl=%252Fde%252Fsearch%252Findex.html%253Fq%253Dhalloween%2526cid%253DE1%2526s%253D51%2526b%253Dk%2526t%253D244%2526ppage%253D3&t=244
http://www.trojaner-board.de/182736-...en-lassen.html
hxxps://de.pinterest.com/pin/241505598747736884/
hxxp://mamietitine.centerblog.net/rub-pour-vos-creas-fonds--34.html
hxxps://translate.google.com/translate?hl=de&sl=fr&u=hxxp://mamietitine.centerblog.net/&prev=search
http://www.trojaner-board.de/182736-...ml#post1623044
http://www.trojaner-board.de/80603-e...ner-nod32.html
FF Extension: (Webmail Ad Blocker) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\gmailnoads@mywebber.com.xpi [2015-08-15]
FF Extension: (Mailvelope) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-04-08]
FF Extension: (Open about:permissons) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\open.about.permissions@jasnapaka.com.xpi [2016-06-07]
FF Extension: (S3.Google Translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\s3google@translator.xpi [2015-12-13]
FF Extension: (translator) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@dontfollowme.net.xpi [2016-01-09]
FF Extension: (Google Translator for Firefox) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\translator@zoli.bod.xpi [2015-12-21]
FF Extension: (NoScript) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-08-15]
FF Extension: (WOT) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-08-15]
FF Extension: (Video DownloadHelper) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-02-20]
FF Extension: (Adblock Plus) - C:\Users\Susanne\AppData\Roaming\Mozilla\Firefox\Profiles\y9p501c2.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-08-15]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon
FF Extension: (Bytemobile Optimization Client) - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon [2010-04-01] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1222172.dll [2015-11-19] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> C:\Program Files (x86)\Winamp Detect\npwachk.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 a2AntiMalware; C:\Program Files\Emsisoft Internet Security\a2service.exe [9388576 2016-10-29] (Emsisoft Ltd)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2015-08-26] (Adobe Systems) [Datei ist nicht signiert]
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227456 2013-01-25] (Qualcomm Atheros Commnucations) [Datei ist nicht signiert]
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-03-07] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [42096 2016-11-07] (Dropbox, Inc.)
R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] ()
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164856 2016-03-24] (NVIDIA Corporation)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2016-11-11] (SurfRight B.V.)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2710648 2016-08-24] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [103168 2016-08-24] ()
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-03-24] (NVIDIA Corporation)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2013-09-13] (arvato digital services llc)
R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [118424 2016-03-09] ()
R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [92160 2015-02-17] (Code Sector) [Datei ist nicht signiert]
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [254232 2016-08-23] (RaMMicHaeL)
S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-03-09] ()
S3 vmicvss; C:\WINDOWS\System32\ICSvc.dll [524800 2014-11-21] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-01-25] (Atheros) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 adgnetworkwfpdrv; C:\WINDOWS\System32\drivers\adgnetworkwfpdrv.sys [55800 2015-06-02] ()
R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [65784 2013-04-16] (ASUS Corporation)
R0 BMLoad; C:\WINDOWS\System32\drivers\BMLoad.sys [16512 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert]
S3 BTATH_LWFLT; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [77464 2013-01-25] (Qualcomm Atheros)
R3 btmaux; C:\WINDOWS\system32\DRIVERS\btmaux.sys [140600 2013-07-22] (Motorola Solutions, Inc.)
S0 ebdrv; C:\WINDOWS\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 epp; C:\PROGRAM FILES\EMSISOFT INTERNET SECURITY\epp.sys [124304 2016-10-05] (Emsisoft Ltd)
R1 FWNDIS_LWF; C:\WINDOWS\system32\DRIVERS\fwndislwf64.sys [212560 2016-10-21] ()
R1 fwwfp; C:\Program Files\Emsisoft Internet Security\fwwfp764.sys [152776 2016-10-21] ()
S3 HSPADataCardusbmdm; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbmdm.sys [122752 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbnmea; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbnmea.sys [122752 2011-08-19] (HSPADataCard Incorporated)
S3 HSPADataCardusbser; C:\WINDOWS\system32\DRIVERS\HSPADataCardusbser.sys [122752 2011-08-19] (HSPADataCard Incorporated)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-11-15] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.)
R3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-03-09] ()
R3 taphss6; C:\WINDOWS\system32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.)
R1 tcpipBM; C:\WINDOWS\system32\drivers\tcpipBM.sys [39552 2009-12-15] (Bytemobile, Inc.) [Datei ist nicht signiert]
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-15 17:33 - 2016-11-15 17:33 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-AC-MONTHPINK
2016-11-15 17:32 - 2016-11-15 17:32 - 00000000 ____D C:\Users\Susanne\Desktop\COLLAB-LYS-WINTER-LOVE
2016-11-15 17:30 - 2016-11-15 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Landschaftsbilder
2016-11-15 17:26 - 2016-11-15 17:26 - 00000000 ____D C:\Users\Susanne\Desktop\WINTER_GLAMOUR
2016-11-15 16:56 - 2016-11-15 16:56 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-SD-SHINE
2016-11-15 12:30 - 2016-11-15 12:32 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2016-11-15 08:53 - 2016-11-15 08:53 - 00000000 ___RD C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-11-14 19:41 - 2016-11-14 19:41 - 00019529 _____ C:\Users\Susanne\Desktop\Fixlog.txt
2016-11-14 19:38 - 2016-11-14 19:38 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-AV-DARK_SNOW_QUEEN
2016-11-14 19:34 - 2016-11-14 19:34 - 00000000 ____D C:\Users\Susanne\Desktop\SNC-AV-INES
2016-11-14 18:25 - 2016-11-14 18:26 - 15850891 _____ C:\Users\Susanne\Desktop\COLLAB-LYS-WINTER-LOVE.zip
2016-11-14 18:25 - 2016-11-14 18:26 - 14352935 _____ C:\Users\Susanne\Desktop\SNC-AV-DARK_SNOW_QUEEN.zip
2016-11-14 18:25 - 2016-11-14 18:26 - 14301111 _____ C:\Users\Susanne\Desktop\SNC-SD-SHINE.zip
2016-11-14 18:25 - 2016-11-14 18:26 - 04243078 _____ C:\Users\Susanne\Desktop\WINTER_GLAMOUR.zip
2016-11-14 18:25 - 2016-11-14 18:25 - 11193655 _____ C:\Users\Susanne\Desktop\SNC-AV-INES.zip
2016-11-14 18:25 - 2016-11-14 18:25 - 02454333 _____ C:\Users\Susanne\Desktop\SNC-AC-MONTHPINK.zip
2016-11-14 17:56 - 2016-11-14 17:57 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_ViNina Jennifer
2016-11-14 17:17 - 2016-11-14 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\RivusDea Your Fairy
2016-11-14 15:46 - 2016-11-14 15:50 - 00000000 ____D C:\Users\Susanne\Downloads\Hintergrundbilder
2016-11-14 15:44 - 2016-11-14 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Schriftrollen
2016-11-14 13:38 - 2016-11-14 13:38 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashRpt
2016-11-13 17:42 - 2016-11-13 17:42 - 00000000 ____D C:\Users\Susanne\Downloads\Purple Dreams Scraps
2016-11-13 17:40 - 2016-11-13 17:40 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_TheHunter_MerryChristmas
2016-11-13 17:32 - 2016-11-13 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Angi Designs
2016-11-13 17:06 - 2016-11-14 19:41 - 00056495 _____ C:\Users\Susanne\Desktop\Addition.txt
2016-11-13 17:04 - 2016-11-15 19:08 - 00031890 _____ C:\Users\Susanne\Desktop\FRST.txt
2016-11-13 16:59 - 2016-11-13 16:59 - 00000908 _____ C:\Users\Susanne\Desktop\JRT.txt
2016-11-13 16:52 - 2016-11-13 16:52 - 01631928 _____ (Malwarebytes) C:\Users\Susanne\Desktop\JRT.exe
2016-11-13 15:36 - 2016-11-13 17:07 - 03910208 _____ C:\Users\Susanne\Desktop\adwcleaner_6.030.exe
2016-11-12 19:43 - 2016-11-12 19:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-11-11 18:43 - 2016-10-28 22:04 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-11-11 18:43 - 2016-10-28 22:04 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-10 20:31 - 2016-11-10 20:31 - 00000000 ____D C:\Users\Susanne\Downloads\MMDesignz Garden Love
2016-11-10 20:26 - 2016-11-10 20:27 - 00000000 ____D C:\Users\Susanne\Downloads\Chachaz Creationz
2016-11-10 19:37 - 2016-11-10 19:37 - 03189746 _____ C:\Users\Susanne\Downloads\HDSDASummerNightFae.rar
2016-11-10 19:37 - 2016-11-10 19:37 - 01854417 _____ C:\Users\Susanne\Downloads\SNC-AC-PRINCESSICE.pspimage
2016-11-10 19:36 - 2016-11-10 19:36 - 03972990 _____ C:\Users\Susanne\Downloads\SNC-DL-Orange Mermaid.psd
2016-11-10 19:22 - 2016-11-10 19:22 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_AndyCooperSweet Catrina
2016-11-10 18:54 - 2016-11-10 18:54 - 00000000 ____D C:\Users\Susanne\Downloads\MelissaDawn
2016-11-10 13:09 - 2016-10-27 19:28 - 25763328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-11-10 13:09 - 2016-10-27 19:19 - 06047744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-11-10 13:09 - 2016-10-27 18:17 - 15257088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-11-10 13:09 - 2016-10-27 18:16 - 02920448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-11-10 13:09 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-11-10 13:09 - 2016-10-25 15:11 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-11-10 13:09 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-11-10 13:09 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-11-10 13:09 - 2016-10-08 23:53 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-11-10 13:09 - 2016-08-22 14:34 - 01628672 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-11-10 13:08 - 2016-11-02 21:48 - 00372568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-11-10 13:08 - 2016-11-02 21:48 - 00315224 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-11-10 13:08 - 2016-11-02 15:03 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-11-10 13:08 - 2016-11-02 15:00 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-11-10 13:08 - 2016-10-27 19:53 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-11-10 13:08 - 2016-10-27 19:51 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-11-10 13:08 - 2016-10-27 19:37 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-11-10 13:08 - 2016-10-27 19:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-11-10 13:08 - 2016-10-27 19:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2016-11-10 13:08 - 2016-10-27 19:05 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-11-10 13:08 - 2016-10-27 18:57 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-11-10 13:08 - 2016-10-27 18:49 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-11-10 13:08 - 2016-10-27 18:47 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-11-10 13:08 - 2016-10-27 18:46 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-11-10 13:08 - 2016-10-27 18:46 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-11-10 13:08 - 2016-10-27 18:44 - 02131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-11-10 13:08 - 2016-10-27 18:03 - 01543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-11-10 13:08 - 2016-10-27 17:54 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-11-10 13:08 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-11-10 13:08 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2016-11-10 13:08 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-11-10 13:08 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-11-10 13:08 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-11-10 13:08 - 2016-10-22 17:57 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2016-11-10 13:08 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-11-10 13:08 - 2016-10-22 17:51 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-11-10 13:08 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-11-10 13:08 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-11-10 13:08 - 2016-10-22 17:45 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-11-10 13:08 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-11-10 13:08 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-11-10 13:08 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-11-10 13:08 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-11-10 13:08 - 2016-10-13 20:06 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-11-10 13:08 - 2016-10-13 20:06 - 01124376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-11-10 13:08 - 2016-10-12 09:01 - 00377176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-11-10 13:08 - 2016-10-11 21:21 - 00497448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-11-10 13:08 - 2016-10-11 21:21 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-11-10 13:08 - 2016-10-11 19:34 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-11-10 13:08 - 2016-10-11 18:47 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2016-11-10 13:08 - 2016-10-11 17:55 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2016-11-10 13:08 - 2016-10-10 22:17 - 00444248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-11-10 13:08 - 2016-10-10 22:17 - 00333656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-11-10 13:08 - 2016-10-09 23:59 - 00551256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-11-10 13:08 - 2016-10-09 00:12 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-11-10 13:08 - 2016-10-08 23:21 - 01445376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-11-10 13:08 - 2016-10-08 23:18 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-11-10 13:08 - 2016-10-08 23:07 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2016-11-10 13:08 - 2016-10-08 23:02 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-11-10 13:08 - 2016-10-08 22:49 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-11-10 13:08 - 2016-10-08 22:21 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-11-10 13:08 - 2016-10-08 02:34 - 01660040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-11-10 13:08 - 2016-10-08 02:34 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-11-10 13:08 - 2016-10-04 21:39 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2016-11-10 13:08 - 2016-10-04 21:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-11-10 13:08 - 2016-10-04 21:08 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-11-10 13:08 - 2016-10-04 21:08 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-11-10 13:08 - 2016-09-09 23:52 - 00921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2016-11-10 13:08 - 2016-09-09 23:14 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2016-11-10 13:08 - 2016-09-09 15:15 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2016-11-10 13:08 - 2016-09-09 15:09 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2016-11-10 13:08 - 2016-09-09 15:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-11-10 13:08 - 2016-09-09 15:03 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2016-11-10 13:08 - 2016-09-09 15:02 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2016-11-10 13:08 - 2016-09-09 14:38 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-11-10 13:08 - 2016-09-03 19:20 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll
2016-11-10 13:08 - 2016-09-03 19:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll
2016-11-10 13:08 - 2016-09-03 18:21 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll
2016-11-10 13:08 - 2016-09-03 17:12 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-11-10 13:08 - 2016-09-03 17:05 - 01094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-11-10 13:08 - 2016-09-03 16:58 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-11-10 13:08 - 2016-09-02 15:05 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-11-10 13:08 - 2016-09-02 15:05 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-11-10 13:08 - 2016-09-01 15:33 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-11-10 13:08 - 2016-09-01 15:33 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-11-10 13:08 - 2016-09-01 15:31 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-11-10 13:08 - 2016-08-30 15:11 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2016-11-10 13:08 - 2016-08-30 03:45 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
2016-11-10 13:08 - 2016-08-30 03:18 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2016-11-10 13:08 - 2016-08-30 03:18 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2016-11-10 13:08 - 2016-08-30 03:03 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-11-10 13:00 - 2016-11-10 13:00 - 00000000 ____D C:\Program Files\iPod
2016-11-08 19:59 - 2016-11-08 20:09 - 00000000 ____D C:\Users\Susanne\Desktop\Steampunk_Orient_1
2016-11-08 19:14 - 2016-11-08 19:14 - 00000000 ____D C:\Users\Susanne\Downloads\DigitalDreams WinterTime
2016-11-08 17:48 - 2016-11-08 17:49 - 00000000 ____D C:\Users\Susanne\Downloads\RAY
2016-11-08 16:58 - 2016-11-08 17:12 - 00000000 ____D C:\Users\Susanne\Downloads\Selisan Al-Giab
2016-11-08 16:56 - 2016-11-08 16:56 - 04657679 _____ C:\Users\Susanne\Downloads\Joy.rar
2016-11-08 16:06 - 2016-11-08 16:06 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2016-11-07 23:49 - 2016-11-07 23:49 - 00075888 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2016-11-07 23:49 - 2016-11-07 23:49 - 00042096 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2016-11-07 20:27 - 2016-11-07 20:29 - 89882380 _____ C:\Users\Susanne\Desktop\Snowy_Fantasy.zip
2016-11-07 20:27 - 2016-11-07 20:29 - 143486031 _____ C:\Users\Susanne\Desktop\Vintage_Elegance_1.zip
2016-11-07 20:26 - 2016-11-07 20:28 - 158478349 _____ C:\Users\Susanne\Desktop\Steampunk_Orient_1.zip
2016-11-07 20:26 - 2016-11-07 20:28 - 115926832 _____ C:\Users\Susanne\Desktop\Snuggle_Season.zip
2016-11-07 16:03 - 2016-11-07 16:03 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-11-07 16:01 - 2016-11-07 16:01 - 00000000 ____D C:\Users\Susanne\Desktop\graphicriver-9085825-stardust-photoshop-action
2016-11-04 18:38 - 2016-11-13 17:04 - 02411520 _____ (Farbar) C:\Users\Susanne\Desktop\FRST64.exe
2016-11-01 14:40 - 2016-11-01 14:41 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_HUN_NewYearswish
2016-10-30 18:56 - 2016-11-08 17:53 - 00000000 ____D C:\Users\Susanne\Downloads\DanielaE Design
2016-10-30 17:56 - 2016-10-30 17:56 - 00000000 ____D C:\Users\Susanne\Downloads\Spooktacular
2016-10-30 17:55 - 2016-10-30 17:55 - 00000000 ____D C:\Users\Susanne\Downloads\Tasha´s Playground
2016-10-27 18:01 - 2016-10-27 18:03 - 00000000 ____D C:\Users\Susanne\Downloads\HappyPumpkinStudio
2016-10-27 17:48 - 2016-10-27 17:54 - 25604688 _____ C:\Users\Susanne\Downloads\PATICIPANT.rar
2016-10-27 17:34 - 2016-10-27 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Vampiress
2016-10-27 17:33 - 2016-10-27 17:33 - 00000000 ____D C:\Users\Susanne\Downloads\TonyTzanoukakis Alessia
2016-10-27 16:47 - 2016-10-27 16:47 - 36002172 _____ C:\Users\Susanne\Downloads\Kit_PHF_Ravenworld2016.rar
2016-10-27 15:45 - 2016-10-27 15:45 - 00000000 ____D C:\Users\Susanne\Downloads\Origash MissAutumn
2016-10-27 15:34 - 2016-10-27 15:34 - 00000000 ____D C:\Users\Susanne\Downloads\Zebrush Lilian
2016-10-24 19:02 - 2016-10-24 19:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC_VN_Mermaid
2016-10-24 18:42 - 2016-10-24 18:42 - 26095371 _____ C:\Users\Susanne\Downloads\LMB_OnTheHunt.rar
2016-10-24 10:57 - 2016-10-24 10:57 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\Oracle
2016-10-22 19:41 - 2016-10-24 18:51 - 00000000 ____D C:\Users\Susanne\Downloads\Julia Fox
2016-10-22 19:35 - 2016-10-22 19:35 - 00000000 ____D C:\Users\Susanne\Downloads\GraphFreaks
2016-10-21 14:54 - 2016-10-21 14:54 - 00000831 _____ C:\WINDOWS\system32\Drivers\etc\hosts.txt
2016-10-18 16:13 - 2016-11-14 17:10 - 00000000 ____D C:\Users\Susanne\Downloads\KrystalDesign
2016-10-18 15:37 - 2016-10-18 15:37 - 03382219 _____ C:\Users\Susanne\Downloads\SNC-KIWI-SEXY RED TUBE.psd
2016-10-18 14:04 - 2016-10-18 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\horseplayspasturedesigns
2016-10-17 19:22 - 2016-10-17 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\SNC Mariel Fairy Forest in Fall+
2016-10-17 13:07 - 2016-10-17 13:08 - 00000000 ____D C:\Users\Susanne\Downloads\Sandy Design
2016-10-17 13:03 - 2016-10-17 13:03 - 07836732 _____ C:\Users\Susanne\Downloads\AP Forbidden.rar
2016-10-17 12:00 - 2016-10-17 12:01 - 222214445 _____ C:\Users\Susanne\Downloads\Noch_Straha.zip
2016-10-17 11:29 - 2016-10-17 11:31 - 00000000 ____D C:\Users\Susanne\Downloads\CSDesigns
2016-10-17 11:08 - 2016-10-17 11:08 - 00000000 ____D C:\Users\Susanne\Downloads\Melissa Dawn Pck 3
2016-10-17 11:02 - 2016-10-17 11:02 - 00000000 ____D C:\Users\Susanne\Downloads\SNC AC Wickedness
2016-10-16 15:02 - 2016-11-08 20:32 - 00000000 ____D C:\Users\Susanne\Desktop\Zum Senden
2016-10-16 14:56 - 2016-11-01 19:27 - 00000000 ____D C:\Users\Susanne\Desktop\tutorial
2016-10-16 13:31 - 2016-10-16 13:31 - 00830935 _____ C:\Users\Susanne\Downloads\Liza tube 339.psp
2016-10-16 10:23 - 2016-10-23 19:15 - 00000000 ____D C:\Users\Susanne\Documents\Emisoft Verlängerung

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-11-15 19:08 - 2016-01-03 13:15 - 00000000 ____D C:\Users\Susanne\Downloads\Fedor
2016-11-15 19:07 - 2015-11-15 17:25 - 00000000 ____D C:\FRST
2016-11-15 19:06 - 2016-01-03 15:46 - 00000000 ____D C:\Users\Susanne\Downloads\Stella Felice
2016-11-15 19:04 - 2016-02-14 13:29 - 00000000 ____D C:\Users\Susanne\Downloads\Laguna
2016-11-15 19:04 - 2015-10-15 17:45 - 00000000 ____D C:\Users\Susanne\Downloads\Arthur Crowe
2016-11-15 18:54 - 2015-11-23 18:19 - 00000000 ____D C:\Program Files\Emsisoft Internet Security
2016-11-15 18:48 - 2016-01-24 17:50 - 00000000 ____D C:\Users\Susanne\Downloads\Winter
2016-11-15 18:46 - 2015-11-16 15:01 - 00000000 ____D C:\Users\Susanne\Downloads\Barbara Jensen
2016-11-15 18:44 - 2015-08-24 17:40 - 00001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2016-11-15 18:29 - 2015-12-08 11:14 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-11-15 18:11 - 2015-08-13 17:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-11-15 18:05 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lysisange
2016-11-15 18:04 - 2016-10-03 19:36 - 00000000 ____D C:\Users\Susanne\Downloads\Mysterfeerie Creation
2016-11-15 18:03 - 2016-04-25 18:17 - 00000000 ____D C:\Users\Susanne\Downloads\Thammys Welt
2016-11-15 16:55 - 2015-10-18 17:19 - 00000000 ____D C:\Users\Susanne\Downloads\Zlata M
2016-11-15 15:33 - 2015-08-18 14:16 - 00003934 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4A105045-E9F4-48C6-AC0D-2E7F7A2F8B9E}
2016-11-15 12:44 - 2015-08-24 17:40 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2016-11-15 12:32 - 2015-08-15 12:15 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2016-11-15 11:00 - 2015-10-17 12:38 - 00000000 ____D C:\Users\Susanne\Downloads\X Mas
2016-11-15 10:50 - 2014-03-01 11:33 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2016-11-15 09:57 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-11-15 08:56 - 2015-08-24 17:45 - 00000000 ___RD C:\Users\Susanne\Dropbox
2016-11-15 08:55 - 2014-11-21 04:35 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-15 08:55 - 2014-11-21 03:45 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat
2016-11-15 08:55 - 2014-11-21 03:45 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat
2016-11-15 08:53 - 2015-08-12 20:13 - 00000073 _____ C:\Users\Susanne\AppData\Roaming\sp_data.sys
2016-11-15 08:51 - 2014-03-01 11:33 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2016-11-14 20:29 - 2015-08-28 18:37 - 00000000 ____D C:\Program Files\CCleaner
2016-11-14 19:43 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-11-14 19:10 - 2016-03-18 12:08 - 00000000 ____D C:\Users\Susanne\Downloads\Grafik
2016-11-14 18:03 - 2015-11-02 14:12 - 00000000 ____D C:\Users\Susanne\Downloads\Bella Caribean
2016-11-14 18:00 - 2015-11-02 17:34 - 00000000 ____D C:\Users\Susanne\Downloads\Hania Designs
2016-11-14 17:55 - 2015-10-05 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Bibi´s Collection
2016-11-14 17:52 - 2015-12-07 16:26 - 00000000 ____D C:\Users\Susanne\Downloads\Chris Pastel
2016-11-14 17:51 - 2015-10-24 17:18 - 00000000 ____D C:\Users\Susanne\Downloads\Verymany
2016-11-14 17:50 - 2016-02-21 14:49 - 00000000 ____D C:\Users\Susanne\Downloads\Misticheskaya
2016-11-14 17:49 - 2015-12-29 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alex Prihodko
2016-11-14 17:45 - 2015-11-24 19:21 - 00000000 ____D C:\Users\Susanne\Downloads\Alicia Mujica
2016-11-14 17:43 - 2016-03-05 17:47 - 00000000 ____D C:\Users\Susanne\Downloads\Lady Mishka
2016-11-14 17:43 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\Alehandra Vanhek
2016-11-14 17:42 - 2016-02-21 15:04 - 00000000 ____D C:\Users\Susanne\Downloads\GoF Designs
2016-11-14 17:42 - 2015-10-25 20:18 - 00000000 ____D C:\Users\Susanne\Downloads\Souldesigner
2016-11-14 17:39 - 2016-08-04 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Sephisto Simone
2016-11-14 17:35 - 2016-01-03 15:47 - 00000000 ____D C:\Users\Susanne\Downloads\Angelica S
2016-11-14 17:34 - 2016-03-05 16:16 - 00000000 ____D C:\Users\Susanne\Downloads\Avroraart
2016-11-14 17:34 - 2016-01-03 13:36 - 00000000 ____D C:\Users\Susanne\Downloads\Nocturne
2016-11-14 17:33 - 2016-01-03 13:30 - 00000000 ____D C:\Users\Susanne\Downloads\Lightartist
2016-11-14 17:28 - 2016-01-03 13:51 - 00000000 ____D C:\Users\Susanne\Downloads\Trinita
2016-11-14 17:28 - 2015-10-22 18:34 - 00000000 ____D C:\Users\Susanne\Downloads\Stan Dudin
2016-11-14 17:25 - 2016-02-18 20:07 - 00000000 ____D C:\Users\Susanne\Downloads\Tais
2016-11-14 17:20 - 2016-05-22 17:00 - 00000000 ____D C:\Users\Susanne\Downloads\Amalie
2016-11-14 17:09 - 2015-11-23 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Alfadesire
2016-11-14 17:09 - 2015-11-15 15:26 - 00000000 ____D C:\Users\Susanne\Downloads\DB Joan
2016-11-14 17:08 - 2016-06-01 16:50 - 00000000 ____D C:\Users\Susanne\Downloads\JoJo Kits
2016-11-14 15:44 - 2015-10-25 19:23 - 00000000 ____D C:\Users\Susanne\Downloads\Masken
2016-11-13 17:44 - 2016-04-02 15:24 - 00000000 ____D C:\Users\Susanne\Downloads\Gothic Inspiration
2016-11-13 17:19 - 2015-09-20 15:03 - 00000000 ____D C:\AdwCleaner
2016-11-12 21:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2016-11-12 20:39 - 2015-08-12 20:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1794304933-3207535254-2068445666-1002
2016-11-12 19:43 - 2015-08-24 17:40 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-11-11 20:01 - 2015-10-29 19:49 - 00000000 ____D C:\Users\Susanne\Downloads\Amberly Brendson
2016-11-11 19:30 - 2015-10-15 19:04 - 00000000 ____D C:\Users\Susanne\Downloads\Comics
2016-11-11 18:48 - 2015-08-25 18:46 - 00000000 ____D C:\Program Files\HitmanPro
2016-11-11 18:42 - 2013-08-22 15:44 - 00462016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-11-10 21:14 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2016-11-10 21:12 - 2015-08-16 18:59 - 00000000 ____D C:\Users\Susanne\AppData\Local\CrashDumps
2016-11-10 20:13 - 2016-01-08 20:15 - 00000000 ____D C:\Users\Susanne\Downloads\Disturbed Scraps
2016-11-10 20:12 - 2016-02-06 18:26 - 00000000 ____D C:\Users\Susanne\Downloads\DiHalim
2016-11-10 20:10 - 2015-10-13 09:21 - 00000000 ____D C:\Users\Susanne\Downloads\Halloween
2016-11-10 20:05 - 2016-01-29 19:45 - 00000000 ____D C:\Users\Susanne\Downloads\Tiny Turtles Designs
2016-11-10 20:05 - 2016-01-03 13:23 - 00000000 ____D C:\Users\Susanne\Downloads\Jose Cano
2016-11-10 19:59 - 2016-07-04 18:39 - 00000000 ____D C:\Users\Susanne\Downloads\Ginnybug Designz
2016-11-10 19:57 - 2015-11-28 15:12 - 00000000 ____D C:\Users\Susanne\Downloads\PinkParadoxProduktions
2016-11-10 19:45 - 2015-10-17 15:10 - 00000000 ____D C:\Users\Susanne\Downloads\Eugene Rzhevskii
2016-11-10 19:43 - 2016-07-11 13:37 - 00000000 ____D C:\Users\Susanne\Downloads\DevilishDezines
2016-11-10 19:41 - 2016-02-06 18:14 - 00000000 ____D C:\Users\Susanne\Downloads\DN Scraps
2016-11-10 19:38 - 2016-01-03 13:33 - 00000000 ____D C:\Users\Susanne\Downloads\Lorri Kajenna
2016-11-10 19:20 - 2016-09-10 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\Edelweiss Design
2016-11-10 19:06 - 2016-01-03 13:06 - 00000000 ____D C:\Users\Susanne\Downloads\AmyMarieKits
2016-11-10 19:04 - 2015-10-17 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Keith Garvey
2016-11-10 18:52 - 2015-10-22 18:37 - 00000000 ____D C:\Users\Susanne\Downloads\KBK
2016-11-10 16:53 - 2016-06-13 18:44 - 00000000 ____D C:\Users\Susanne\Downloads\Moonshine Dezines
2016-11-10 16:23 - 2016-10-14 20:13 - 00000000 ____D C:\Users\Susanne\Desktop\Downloads from Friends
2016-11-10 13:48 - 2015-08-13 17:30 - 00000000 ____D C:\Users\Susanne\Desktop\Programme
2016-11-10 13:29 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-11-10 13:28 - 2015-08-13 17:18 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-11-10 13:25 - 2015-08-13 17:18 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-11-10 13:09 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-11-10 13:00 - 2015-08-31 15:24 - 00000000 ____D C:\Program Files\iTunes
2016-11-10 13:00 - 2015-08-31 15:20 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-11-10 12:39 - 2015-08-24 17:40 - 00004204 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA
2016-11-10 12:39 - 2015-08-24 17:40 - 00003968 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore
2016-11-08 19:54 - 2016-05-25 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Alec Rud-LightartistXXX Emma
2016-11-08 19:16 - 2015-11-15 15:19 - 00000000 ____D C:\Users\Susanne\Downloads\DeesignDepot
2016-11-08 18:29 - 2015-12-08 11:14 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-11-08 18:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-11-08 18:02 - 2015-10-17 14:28 - 00000000 ____D C:\Users\Susanne\Downloads\PinUpToons
2016-11-08 17:56 - 2015-10-30 13:07 - 00000000 ____D C:\Users\Susanne\Downloads\Anna Liwanag
2016-11-08 17:54 - 2016-04-22 19:44 - 00000000 ____D C:\Users\Susanne\Downloads\Spazz
2016-11-08 16:06 - 2015-08-25 18:46 - 00000000 ____D C:\ProgramData\HitmanPro
2016-11-08 15:56 - 2015-10-23 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Landschaftstuben
2016-11-07 19:00 - 2015-10-15 07:11 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-11-07 17:57 - 2016-10-13 18:52 - 00000000 ____D C:\Users\Susanne\Downloads\IS Design
2016-11-07 17:42 - 2016-04-23 18:38 - 00000000 ____D C:\Users\Susanne\Downloads\Mariel Designs
2016-11-07 16:03 - 2015-11-23 16:06 - 00000000 ____D C:\Users\Susanne
2016-11-07 11:58 - 2015-11-30 19:54 - 00000000 ____D C:\Users\Susanne\Desktop\Filme
2016-11-04 19:42 - 2016-01-03 13:05 - 00000000 ____D C:\Users\Susanne\Downloads\Ellie Milk
2016-11-04 18:37 - 2015-10-10 18:25 - 00000000 ____D C:\Users\Susanne\AppData\Roaming\vlc
2016-11-04 16:41 - 2015-10-24 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-11-03 16:33 - 2016-02-06 19:06 - 00000000 ____D C:\Users\Susanne\Downloads\Toxic Desirez
2016-11-01 18:52 - 2016-01-03 13:54 - 00000000 ____D C:\Users\Susanne\Downloads\Vadis
2016-10-31 19:43 - 2014-04-15 19:11 - 00000000 ____D C:\Users\Susanne\My PSP Files
2016-10-31 18:01 - 2015-10-17 18:18 - 00000000 ____D C:\Users\Susanne\Downloads\Elias Chatzoudis
2016-10-30 18:59 - 2015-10-05 18:13 - 00000000 ____D C:\Users\Susanne\Downloads\RD_Rienike Designs
2016-10-30 18:44 - 2016-08-12 18:28 - 00000000 ____D C:\Users\Susanne\Downloads\Nusha Lypina
2016-10-30 16:18 - 2016-04-18 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\KatNKDA
2016-10-30 14:28 - 2016-03-06 20:12 - 00000000 ____D C:\Users\Susanne\Downloads\Jennifer Janesko
2016-10-29 19:43 - 2016-08-22 15:53 - 00000000 ____D C:\Users\Susanne\Downloads\Mary Designs
2016-10-27 18:08 - 2015-10-17 18:08 - 00000000 ____D C:\Users\Susanne\Downloads\cm scraps
2016-10-27 18:06 - 2016-03-05 19:10 - 00000000 ____D C:\Users\Susanne\Downloads\Velerie
2016-10-27 17:38 - 2015-11-07 18:32 - 00000000 ____D C:\Users\Susanne\Downloads\Katharine
2016-10-27 15:39 - 2016-05-22 17:36 - 00000000 ____D C:\Users\Susanne\Downloads\Chili Designz
2016-10-27 15:36 - 2016-05-21 19:01 - 00000000 ____D C:\Users\Susanne\Downloads\Wicked Creationz Scraps
2016-10-27 15:35 - 2016-04-19 19:08 - 00000000 ____D C:\Users\Susanne\Downloads\Irish Princess Designs IPD
2016-10-24 10:44 - 2015-08-28 15:41 - 00000000 ____D C:\ProgramData\Oracle
2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-10-24 10:39 - 2015-08-28 15:43 - 00000000 ____D C:\Program Files (x86)\Java
2016-10-24 10:38 - 2015-08-28 15:43 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-10-24 10:38 - 2015-08-25 19:01 - 00000000 ____D C:\ProgramData\Unchecky
2016-10-22 19:46 - 2015-11-02 13:38 - 00000000 ____D C:\Users\Susanne\Downloads\Sophisticat
2016-10-22 18:07 - 2016-02-27 18:49 - 00000000 ____D C:\Users\Susanne\Downloads\Maryline Cazenave
2016-10-21 13:41 - 2012-07-26 06:26 - 00003255 _____ C:\WINDOWS\system32\Drivers\etc\Hosts.old
2016-10-21 13:27 - 2016-05-24 12:43 - 00212560 _____ C:\WINDOWS\system32\Drivers\fwndislwf64.sys
2016-10-20 18:30 - 2015-11-28 14:34 - 00000000 ____D C:\Users\Susanne\Downloads\ZindyNielsen
2016-10-20 18:29 - 2014-03-01 11:45 - 00000000 ____D C:\ProgramData\Temp
2016-10-18 19:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-10-18 13:40 - 2016-03-05 18:04 - 00000000 ____D C:\Users\Susanne\Downloads\Ismael RAC
2016-10-16 15:30 - 2016-01-21 16:24 - 00000000 ____D C:\Users\Susanne\Downloads\Karneval

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-29 17:04 - 2015-08-29 17:04 - 3585654 _____ () C:\Users\Susanne\AppData\Roaming\SageThumbs wallpaper.bmp
2015-08-12 20:13 - 2016-11-15 08:53 - 0000073 _____ () C:\Users\Susanne\AppData\Roaming\sp_data.sys
2016-01-17 14:35 - 2016-03-11 19:57 - 0005120 _____ () C:\Users\Susanne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-06-02 17:27 - 2016-06-02 17:27 - 0007600 _____ () C:\Users\Susanne\AppData\Local\Resmon.ResmonCfg
2015-08-28 17:48 - 2015-11-13 20:12 - 4969472 _____ () C:\Users\Susanne\AppData\Local\SageThumbs.db3
2016-04-03 17:22 - 2016-04-03 17:22 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-10-28 07:07 - 2015-10-28 07:07 - 0000261 _____ () C:\ProgramData\fontcacheev1.dat
2015-11-29 18:31 - 2015-11-29 18:31 - 0004943 _____ () C:\ProgramData\rxsmznjf.zcp

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\fontcacheev1.dat
C:\Users\Susanne\359.06-notebook-win8-win7-64bit-international-whql.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-11-12 20:45

==================== Ende von FRST.txt ============================
--- --- ---

JSM 15.11.2016 19:55
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von Susanne (15-11-2016 19:08:29)
Gestartet von C:\Users\Susanne\Desktop
Windows 8.1 (Update) (X64) (2015-11-23 16:34:54)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1794304933-3207535254-2068445666-500 - Administrator - Disabled)
Gast (S-1-5-21-1794304933-3207535254-2068445666-501 - Limited - Disabled) => C:\Users\Gast
Susanne (S-1-5-21-1794304933-3207535254-2068445666-1002 - Administrator - Enabled) => C:\Users\Susanne

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Emsisoft Internet Security (Enabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D}
AS: Emsisoft Internet Security (Enabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Emsisoft Internet Security (Enabled) {4827332C-A1D3-AB84-3AB9-7746197C0BE6}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.2.172 - Adobe Systems, Inc.)
Alien Skin Blow Up (HKLM-x32\...\Blow Up) (Version:  - )
Alien Skin Exposure (HKLM-x32\...\Exposure) (Version:  - )
Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version:  - )
Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version:  - )
Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version:  - Alien Skin)
Alien Skin Image Doctor 2 (HKLM-x32\...\Image Doctor 2) (Version:  - )
Alien Skin Snap Art (HKLM-x32\...\Snap Art) (Version:  - )
Apowersoft Smartphone Manager Version 2.7.1 (HKLM-x32\...\{4A00E3C4-2D0F-4AE7-9F2A-74870BE09EF8}_is1) (Version: 2.7.1 - APOWERSOFT LIMITED)
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ASUS InstantOn (HKLM-x32\...\{749F674B-2674-47E8-879C-5626A06B2A91}) (Version: 3.0.6 - ASUS)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.1.13 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 2.1.7 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.1.3 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0005 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.4924.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0027 - ASUS)
AVS Video Converter 9.1 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.1.4.574 - Online Media Technologies Ltd.)
Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
congstar Internet-Manager (HKLM-x32\...\{27D28586-BEF1-4E06-8787-3B1FC3A41489}) (Version: 1.0.0.3 - ZTE CORPORATION)
Contents (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
CopyTrans Control Center deinstallieren (HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\CopyTrans Suite) (Version: 4.004 - WindSolutions)
Corel FastFlick (HKLM-x32\...\_{10EC8494-8A92-49D8-9677-2483EB01F7F1}) (Version: 1.0.0.101 - Corel Corporation)
Corel KPT Collection (HKLM-x32\...\_{B16DC136-9583-4C54-BE27-F001BBC546B1}) (Version: 1.0.0.109 - Corel Corporation)
Corel KPT Collection (x32 Version: 1.0.0.109 - Ihr Firmenname) Hidden
Corel PaintShop Pro X7  (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.3.0.30 - Corel Corporation)
Corel PaintShop Pro X7 (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden
Creative Content (x32 Version: 1.0.0.114 - Ihr Firmenname) Hidden
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 14.4.19 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.57.1 - Dropbox, Inc.) Hidden
Emsisoft Internet Security (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.0 - Emsisoft Ltd.)
Filters Unlimited 2.0 (HKLM-x32\...\Filters Unlimited_is1) (Version:  - )
Filzip 3.06 (HKLM-x32\...\Filzip 3.0.6.93_is1) (Version: 3.0.6 - Philipp Engel)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.15.281 - SurfRight B.V.)
Hotspot Shield 5.4.11 (HKLM-x32\...\HotspotShield) (Version: 5.4.11 - AnchorFree Inc.)
Hotspot Shield 5.4.11 Embedded (x32 Version: 5.4.11.9772 - Buildbot) Hidden
ICA (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
ICA (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.15 - Intel) Hidden
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.36354 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
Intel(R) Product Improvement Program (x32 Version: 2.1.27.3 - Intel) Hidden
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{1b09c4de-9cae-4122-b17c-65d395062b50}) (Version: 2.4.0.15 - Intel)
IPM_PSP_COM (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_PSP_COM64 (Version: 17.3.0.30 - Corel Corporation) Hidden
IPM_VS_Pro (x32 Version: 1.0 - Corel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)
Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Ihr Firmenname)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version:  - Crystal Rich Ltd)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.4.0.6115 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
MultiTranse European 6.6 special build (HKLM-x32\...\MultiTranse European_is1) (Version:  - Tialsoft Software)
MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
NVIDIA GeForce Experience 2.11.2.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.2.46 - NVIDIA Corporation)
NVIDIA Grafiktreiber 359.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 359.46 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plugin Commander Light 1.62 (HKLM-x32\...\Plugin Commander Light 1.62_is1) (Version: 1.60 - The Plugin Site)
PSPPContent (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPHelp (x32 Version: 17.3.0.30 - Corel Corporation) Hidden
PSPPro64 (Version: 17.3.0.30 - Corel Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.38.115.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7514 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.8400.39029 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Revo Uninstaller Pro 3.1.6 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.6 - VS Revo Group, Ltd.)
Schmaili 9.0 (HKLM-x32\...\Schmaili_is1) (Version:  - )
Setup (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Setup (x32 Version: 17.3.0.30 - Ihr Firmenname) Hidden
Share (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SpywareBlaster 5.2 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.2.0 - BrightFort LLC)
Sqirlz Morph (HKLM-x32\...\Sqirlz Morph) (Version: 2.1 - xiberpix)
Sqirlz Water Reflections (HKLM-x32\...\Sqirlz Water Reflections) (Version: 2.6 - xiberpix)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version:  - Code Sector)
Toon Boom Studio 8.1 (HKLM-x32\...\{A3A336BA-61CF-4B0F-83D7-690A8FB23A5D}) (Version:  - Toon Boom Animation Inc.)
Unchecky v1.0.1 (HKLM-x32\...\Unchecky) (Version: 1.0.1 - RaMMicHaeL)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSClassic (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
VSPro (x32 Version: 1.0.0.101 - Corel Corporation) Hidden
Vulkan Run Time Libraries 1.0.5.1 (HKLM\...\VulkanRT1.0.5.1) (Version: 1.0.5.1 - LunarG, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Driver Package - ASUS (ATP) Mouse  (01/10/2013 1.0.0.170) (HKLM\...\4A9DE1E9EBC800B7F01739D4DE7363EF6751BDF5) (Version: 01/10/2013 1.0.0.170 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0D519269-A2CA-4148-9725-9B9129C8D398} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {13632090-F92D-42BF-9252-44F3F7958819} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {1584372C-BE27-42D3-9C29-0B7B050F0676} - System32\Tasks\{DFE56015-71E1-4F3C-B92C-4BC78BB43DCF} => pcalua.exe -a "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12\signcrtr.exe" -d "C:\Users\Susanne\Desktop\SignatureCreator1.12\Signature Creator v1.12"
Task: {1DE75A1E-B3F6-410F-9D0A-6C724DC5D7BA} - System32\Tasks\{3A681209-9B28-4FB4-B434-90C78D19AA76} => pcalua.exe -a C:\Users\Susanne\Desktop\win64_153342.exe -d C:\Users\Susanne\Desktop
Task: {1F93A434-BC9F-4437-AA95-0868BAB8E7D1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd)
Task: {278FB095-70F3-41AF-86E1-ACDCC3DFCD4F} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-02-26] (ASUSTeK Computer Inc.)
Task: {384F7404-E4A7-4AF6-BFC2-0E966AB9A65A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {46CE1FA1-950E-4406-BE83-9B8278BE36FE} - System32\Tasks\Intel\Intel Telemetry 2 (x86) => C:\Program Files (x86)\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {568A8D83-61EE-417F-B2F4-D8E199F65D47} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {65E4B102-42C8-4272-BE24-C07ECF847106} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
Task: {6C3DD3AD-739B-4B44-AEC6-9844F7E1D814} - System32\Tasks\{2175E4B1-B401-419C-B3FC-7F5CFDE77152} => pcalua.exe -a E:\SETUP.EXE -d E:\ -c /AUTORUN
Task: {7004ABEF-4FB5-4DB9-9D07-BBEE825C98A6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-08-24] (ASUS)
Task: {749335FC-4206-4E47-864C-4C789D3DB14B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
Task: {7535A508-68C4-4552-B25C-041DB8F71935} - System32\Tasks\ASUS InstantOn Config => C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe [2013-01-22] (ASUS)
Task: {875E6F2B-4C80-4C1F-BDDF-F8D0ADDD352A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {937F2797-535D-4D7E-865E-DF6460A3E660} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-11-28] (ASUS)
Task: {9C8D2AEE-2E56-486A-8603-FD26811BF306} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-03-07] (Dropbox, Inc.)
Task: {A143A7AF-E6A4-41CB-A24F-4682A328495A} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
Task: {B500B226-A848-48AC-AD89-FC46DD40726A} - System32\Tasks\{C34BCC4B-E192-4B85-9591-5B9275232FC4} => pcalua.exe -a "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90\unins000.exe" -d "F:\Susanne´s Dateien vom Läppi\Susanne\C\Schmaili\Schmaili90"
Task: {D65C524D-CC2D-4D37-AB73-7D79DD3F9F7E} - System32\Tasks\ASUS Touchpad Launcher (x64) => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-04-16] (AsusTek)
Task: {DF4E779D-E89D-43BF-BFEA-92AFBD12A035} - System32\Tasks\USER_ESRV_SVC_WILLAMETTE => Wscript.exe //B //NoLogo "C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\task.vbs"
Task: {E7DB6F04-0E5F-49F6-82E1-C45912A304B9} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {E833CAEB-5DC4-47B3-8051-EF7AA579E8AD} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {EB9F98C6-FED1-40F0-BFD1-4272F4DE9576} - System32\Tasks\{D52E5E0D-7B83-453B-B34F-8346DD360FFF} => pcalua.exe -a "C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe" -c -r -m -nrg2709
Task: {EF2C2CD6-5F9B-43F9-A3B4-87DE57826197} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {FE9FAC54-D116-4F35-8188-88E83F570501} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2000-01-01] (Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Susanne\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Meine Websites auf MSN\target.lnk -> hxxp://www.msnusers.com

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-05-24 12:43 - 2016-10-21 13:27 - 01024968 _____ () C:\Program Files\Emsisoft Internet Security\fw64.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-09 19:43 - 2016-03-09 19:43 - 00118424 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe
2016-03-09 19:43 - 2016-03-09 19:43 - 00256152 _____ () C:\Program Files (x86)\Intel Driver Update Utility\SUR\analyzer.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00416408 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00709272 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_modeler.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00130712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_process_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00025752 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_system_power_state_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00059544 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_quality_and_reliability_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00194712 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\acpi_battery_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00159896 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\sema_thermal_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00158360 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\wifi_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00050840 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\devices_use_input.dll
2016-04-28 14:08 - 2016-03-09 19:43 - 00032920 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\intel_disktrace_input.dll
2015-11-23 16:01 - 2016-02-15 08:26 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-09-11 19:02 - 2015-09-11 19:02 - 00803488 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2015-08-28 14:59 - 2012-01-29 15:55 - 00657920 _____ () C:\Program Files\TeraCopy\TeraCopy64.dll
2012-08-24 18:26 - 2012-08-24 18:26 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2013-01-25 01:09 - 2013-01-25 01:09 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-25 01:05 - 2013-01-25 01:05 - 00084992 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-10-01 12:02 - 2013-10-01 12:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-01-25 01:12 - 2013-01-25 01:12 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00220944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-daemon.exe
2016-09-06 16:10 - 2011-11-07 09:52 - 00036624 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\db_daemon.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00460952 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe
2016-04-28 14:08 - 2016-03-09 19:43 - 00188568 _____ () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\foreground_window_input.dll
2016-08-24 00:04 - 2016-08-24 00:04 - 00166520 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2014-03-01 11:32 - 2012-06-25 03:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-12-21 17:36 - 2016-03-24 06:35 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-29 18:12 - 2004-09-08 13:45 - 00368128 _____ () C:\Program Files (x86)\Filzip\fzshext.dll
2015-08-28 14:59 - 2012-01-20 13:55 - 00427520 _____ () C:\Program Files\TeraCopy\TeraCopyExt.dll
2016-09-06 16:10 - 2011-05-06 04:03 - 00594944 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\dbus-1.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00099328 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\itapi.dll
2016-09-06 16:10 - 2011-11-07 09:43 - 00020992 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libctlsvr.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00971776 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libxml2.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00035840 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libConfig.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00027136 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\log.dll
2016-09-06 16:10 - 2011-11-07 09:38 - 00055296 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\coder.dll
2016-09-06 16:10 - 2011-11-07 09:39 - 00043008 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\audio.dll
2016-09-06 16:10 - 2010-10-14 10:37 - 00080688 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\zlib1.dll
2016-09-06 16:10 - 2007-09-09 16:07 - 00151552 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\libexpat.dll
2016-09-06 16:10 - 2011-05-06 04:02 - 00341504 _____ () C:\Program Files (x86)\congstar\Internet-Manager\Bin\sqlite3.dll
2016-05-21 16:03 - 2016-10-10 17:29 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2016-05-21 16:03 - 2016-10-10 17:29 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2016-05-21 15:57 - 2016-10-10 17:29 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00019760 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2016-05-21 15:57 - 2016-10-10 17:29 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2016-05-21 16:03 - 2016-10-10 17:30 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 01682760 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00020808 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00021312 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00052024 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00038696 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2016-11-12 19:42 - 2016-10-10 17:29 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2016-11-12 19:42 - 2016-10-10 17:31 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00381752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00246592 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2016-08-05 19:23 - 2016-10-10 17:30 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2016-11-12 19:42 - 2016-11-07 23:58 - 00020280 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00023376 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror._winffi_winerror.pyd
2016-05-21 15:57 - 2016-11-07 23:59 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet._winffi_wininet.pyd
2016-05-21 16:03 - 2016-10-10 17:31 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2016-05-21 16:03 - 2016-11-07 23:59 - 00022352 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00024392 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2016-11-12 19:42 - 2016-10-10 17:27 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2016-11-12 19:42 - 2016-11-07 23:59 - 00084280 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2016-11-12 19:42 - 2016-11-07 23:59 - 01826096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2016-05-21 15:57 - 2016-10-10 17:29 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00531248 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 03928880 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 01972528 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00133424 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00224056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00207672 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00020288 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32._winffi_user32.pyd
2016-11-12 19:42 - 2016-10-10 17:33 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2016-11-12 19:42 - 2016-10-10 17:34 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2016-11-12 19:42 - 2016-11-07 23:59 - 00042808 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00168760 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00357680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2016-05-21 15:57 - 2016-10-10 17:31 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2016-08-05 19:23 - 2016-11-07 23:59 - 00024904 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2016-11-12 19:42 - 2016-11-07 23:59 - 00546096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2013-04-27 09:24 - 2013-04-27 09:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Susanne\Downloads\CDO AnnaMarine-11-1+:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO GlistenSnowFlakes:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\CDO WinterMagic:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\SNC_CUPIDO COLLAB:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Susanne\Downloads\Sue PSP Stuff:com.dropbox.attributes [168]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\1001movie.com -> 1001movie.com

Da befinden sich 6091 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Susanne\AppData\Local\Microsoft\Windows\Themes\Rainbows\DesktopBackground\rainbows7.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "egui"
HKLM\...\StartupApproved\Run: => "Corel Update Helper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Digiarty_Software_AirPlayit"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Schmaili"
HKU\S-1-5-21-1794304933-3207535254-2068445666-1002\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{698A6761-A7D7-436A-828F-F5D0B9649607}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{725B442B-AA22-40A6-9A4C-C080895D11B3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{43ED2D84-F0D6-4176-8654-2BF85E93929E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A83C85B4-8237-4A7A-B5CF-F4548CE998C8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B05144DD-2A59-4CE6-AC21-A487450C32BB}] => (Allow) LPort=1900
FirewallRules: [{6E10BE55-BF0B-41CB-874B-35BBAE2A6CC8}] => (Allow) LPort=2869
FirewallRules: [{6FB3AE7A-27BA-4EC1-8459-F674A66F398E}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5732DE92-F2E8-4EFA-8211-59D9C1216D9C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{FB4B5D1F-46F4-4EE4-A9DD-1CC5A993E8B9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{BEBD6992-F474-476F-AA99-813387C3315B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{12619529-46A3-401F-8C45-41DA4469E6B7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{75F78078-FA69-47CD-84C8-ABAF1E6028BA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5F08B6D7-908A-4C10-BE37-07290BAA1FC4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DC5EE5FD-A4A3-4403-A62A-E542DAC852F8}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{0253E503-D67B-4A8C-AF6E-60B041B9957E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\Apowersoft Phone Manager.exe
FirewallRules: [{07DB8C66-1A03-4036-B21D-E47878AE360E}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{F8374132-09A8-413C-90AB-BBDB95A4DDB1}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\ApowersoftAndroidDaemon.exe
FirewallRules: [{43F41AD3-EA64-4AB5-861C-9B99C3F868C3}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{6E936865-405B-44EC-B6AB-CF8C8EE059DE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Phone Manager\iOS Recorder.exe
FirewallRules: [{337EB821-B0AB-4651-95E3-0219CB12024F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{3819976B-9F89-4FB5-8313-54197BBBF34F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Wiederherstellungspunkte =========================

29-10-2016 13:23:01 Windows Update
06-11-2016 12:58:40 Geplanter Prüfpunkt
08-11-2016 16:05:42 Prüfpunkt von HitmanPro
13-11-2016 16:54:17 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Bluetooth Audio Device
Description: Bluetooth Audio Device
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_A2DP
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Virtual Bluetooth Support (Include Audio)
Description: Virtual Bluetooth Support (Include Audio)
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: AthBTPort
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Bluetooth LWFLT Device
Description: Bluetooth LWFLT Device
Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}
Manufacturer: Qualcomm Atheros Communications
Service: BTATH_LWFLT
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/15/2016 06:56:45 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: Susanne)
Description: There was an error communicating to the Orion inference server

Error: (11/15/2016 06:56:33 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT)
Description: There was an error communicating to the Orion inference server

Error: (11/15/2016 06:56:21 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)
Description: There was an error with the Windows Location Provider database

Error: (11/15/2016 04:03:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (11/15/2016 04:03:18 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Susanne\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (11/15/2016 09:39:49 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\users\susanne\desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (11/15/2016 09:06:48 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (11/15/2016 09:01:29 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Susanne\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (11/15/2016 09:00:08 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (11/15/2016 08:59:24 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Susanne\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.


Systemfehler:
=============
Error: (11/15/2016 06:57:20 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/15/2016 01:17:41 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/15/2016 01:12:30 PM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/15/2016 01:12:00 PM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/15/2016 10:07:31 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/15/2016 10:07:00 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/15/2016 09:59:12 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{1B1F472E-3221-4826-97DB-2C2324D389AE}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/15/2016 09:58:42 AM) (Source: DCOM) (EventID: 10010) (User: Susanne)
Description: Der Server "{BF6C1E47-86EC-4194-9CE5-13C15DCB2001}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/15/2016 09:02:54 AM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: Susanne)
Description: Fehler beim Lesen der Datei für lokale Hosts.

Error: (11/15/2016 09:00:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.


CodeIntegrity:
===================================
  Date: 2016-11-13 17:18:40.936
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-11-13 17:12:16.854
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-11-13 17:04:16.321
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-23 18:39:48.072
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:47.369
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:45.338
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:44.853
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:41.649
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:38.959
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.

  Date: 2016-07-23 18:39:36.146
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume4\Program Files\Emsisoft Internet Security\a2hooks64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 46%
Installierter physikalischer RAM: 8069.73 MB
Verfügbarer physikalischer RAM: 4309.6 MB
Summe virtueller Speicher: 9733.73 MB
Verfügbarer virtueller Speicher: 4661.34 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:1117.37 GB) (Free:810.74 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:1655.6 GB) (Free:1655.12 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: A523CAED)

Partition: GPT.

==================== Ende von Addition.txt ============================
Was ist jetzt mit den Fehlern vom AdwCleaner? Liegt es an dem Programm? So kann ich nichts feststellen, die vielen Fehler im HitmanPro von Firefox sind m.E. auch weniger geworden. Vielen dank für die Hilfe!!!

M-K-D-B 16.11.2016 15:39
Servus,


führe AdwCleaner nochmal aus. Wird noch was gefunden?

Ich tippe auf einen Fehlalarm.






Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.




http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.




http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.




Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 

Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.




Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.




Optional:
http://filepony.de/icon/adblock_firefox.pngAdblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
http://filepony.de/icon/noscript.png NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .




Abschließend noch ein paar grundsätzliche Bemerkungen:
  • Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
  • Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
  • Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.




Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

JSM 17.11.2016 20:13
AdwCleaner
 
Hallo Matthias,
die Fehler im AdwCleaner sind immer noch vorhanden. Hatte auch noch zusätzlich eine Version von Filepony gedownloaded aber das gleiche und habe die Datein gelöscht. Keine Ahnung ob ich Murks gemacht hatte, ich hatte es als Administrator gestartet?

Dann hatte ich ein Update von meinem Revouninstaller und plötzlich zeigte mir Emisoft ein TrojanScript an. Ich schob dieses sofort in Quarantäne. Danach ging mein Internet nicht mehr da keine Netzwerkverbindungen gefunden wurden so das ich den TrojanScript wiederhergestellt habe aber als Zip Datei gespeichert und diese an Emisoft gesandt.

Trotzdem ging das Internet nicht so das ich einen Wiederherstellungspunkt auswählen musste. Nun wollte ich Cleanup durchführen aber da steht das alle Wiederherstellungspunkte gelöscht werden, ob das dann so richtig wird wegen meiner jetztigen Wiederherstellung?

Sorry ich weiß viel geschrieben aber ist eben heute ne Menge passiert.

M-K-D-B 17.11.2016 21:32
Servus,


dann setze bei DelFix nur den einen Haken, so dass unsere Bereinigungsprogramme entfernt werden, sonst nichts.

JSM 18.11.2016 19:27
Danke
 
Hallo Matthias,

alles so erledigt wie Du gesagt hast, danke schön für die Hilfe.:bussi:

M-K-D-B 18.11.2016 21:53
Ich bin froh, dass wir helfen konnten :abklatsch:

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! :)

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:00 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131