Frst.txt Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25-01-2017 01
durchgeführt von Marco (Administrator) auf MARCO-PC (27-01-2017 16:15:36)
Gestartet von C:\Users\Marco\Downloads\Tronjaner
Geladene Profile: Marco (Verfügbare Profile: UpdatusUser & Marco)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\VSCore_15_5\mcapexe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(McAfee, Inc.) C:\Program Files\McAfee\MAT\McPvTray.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Hollie-Soft) C:\Program Files (x86)\Klebezettel NG\klebez.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
() C:\Users\Marco\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
() C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe
(Dropbox, Inc.) C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
() C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\2.2.351.0\McCSPServiceHost.exe
(Dell Inc.) C:\Program Files (x86)\Dell Update\DellUpTray.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Security) C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6611048 2011-02-19] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [609144 2011-04-13] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-06-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4500640 2011-03-11] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] ()
HKLM\...\Run: [DellStage] => C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe [2195824 2012-02-01] ()
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [NeroLauncher] => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe [1117528 2010-08-26] (Dell, Inc.)
HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] => C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [AccuWeatherWidget] => C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Run: [Klebezettel NG] => C:\Program Files (x86)\Klebezettel NG\klebez.exe [4418048 2014-02-20] (Hollie-Soft)
HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Run: [] => [X]
HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Run: [Amazon Music] => C:\Users\Marco\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-11-19] ()
HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6482200 2014-09-26] (Piriform Ltd)
HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Run: [Dropbox Update] => C:\Users\Marco\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Winlogon: [Userinit] C:\Users\Marco\AppData\Roaming\loadit.exe
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll [2017-01-18] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-01-25]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2015-11-20]
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-01-23]
ShortcutTarget: Dropbox.lnk -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2017-01-06]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2E76C483-9589-4119-93BF-DCF1AD3D04A8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8FF7DD6F-63A7-48BD-8DB4-C64A76A8C510}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2927632426-222128767-489340468-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {88E99C6F-C024-4685-ABFE-32D84AC3CDFE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {88E99C6F-C024-4685-ABFE-32D84AC3CDFE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2927632426-222128767-489340468-1001 -> {6BA604A0-5AC0-4CEE-BF00-9D63073558C7} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE0D20150117&p={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-01-09] (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-12-11] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-01-09] (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-11] (Oracle Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-01-09] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-01-09] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2017-01-09] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2017-01-09] (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies S.A.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2016-11-18] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2016-11-18] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\ieifa8i8.default-1448042876886 [2017-01-27]
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2017-01-25]
FF SearchPlugin: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\ieifa8i8.default-1448042876886\searchplugins\McSiteAdvisor.xml [2016-03-09]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2016-11-18] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2016-11-18] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2016-11-18] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2016-11-24] [ist nicht signiert]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2015-01-18]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-11] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2012-08-14] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-11-18] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2012-08-14] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-11] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2012-08-14] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-11] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-11-18] ()
FF Plugin-x32: @mcafee.com/MVT -> C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-04-19] ( )
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-10-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-10-02] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2012-08-14] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2927632426-222128767-489340468-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2012-08-14] (Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2012-08-14] (Tracker Software Products (Canada) Ltd.)
Chrome:
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://de.search.yahoo.com/search?fr=mcafee&type=C211DE0D20150117&p={searchTerms}
CHR DefaultSearchKeyword: Default -> McAfee
CHR Profile: C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default [2017-01-02]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2016-12-18]
CHR Extension: (Download Button) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\iccodbepgnkhafhjajchdjkadbflkijl [2015-11-15]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-19]
CHR Extension: (Chrome Media Router) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-29]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [901184 2010-12-14] (Intel Corporation) [Datei ist nicht signiert]
R3 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2010-12-14] (Intel Corporation) [Datei ist nicht signiert]
R2 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [974912 2010-12-14] (Intel Corporation) [Datei ist nicht signiert]
R2 DellUpdate; C:\Program Files (x86)\Dell Update\DellUpService.exe [237272 2015-08-27] (Dell Inc.)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [603752 2016-10-14] (McAfee, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [188352 2017-01-09] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_15_5\McAPExe.exe [963176 2016-10-07] (McAfee, Inc.)
R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [603752 2016-10-14] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.500\McCHSvc.exe [329480 2017-01-19] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.2.351.0\\McCSPServiceHost.exe [1934968 2016-10-17] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [603752 2016-10-14] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [603752 2016-10-14] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [1307752 2016-10-20] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [603752 2016-10-14] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [603752 2016-10-14] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [242704 2016-09-08] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [384016 2016-09-08] (McAfee, Inc.)
R3 mfevtp; C:\Windows\system32\mfevtps.exe [331280 2016-09-08] (McAfee, Inc.)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1473128 2016-10-07] (McAfee, Inc.)
S3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [603752 2016-10-14] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-06-16] ()
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1041512 2016-09-08] (Intel Security, Inc.)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [88120 2016-09-09] (McAfee, Inc.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2017-01-20] ()
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [216704 2016-08-02] (McAfee, Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176584 2017-01-27] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-01-27] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251848 2017-01-27] (Malwarebytes)
R2 McPvDrv; C:\Windows\system32\drivers\McPvDrv.sys [87928 2016-08-01] (McAfee, Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [477752 2016-09-09] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [364088 2016-09-09] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [512056 2016-09-09] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [884792 2016-09-09] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [527496 2016-09-09] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109336 2016-09-09] (McAfee, Inc.)
R3 mfeplk; C:\Windows\System32\drivers\mfeplk.sys [110136 2016-09-09] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [252984 2016-09-09] (McAfee, Inc.)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284008 2012-10-08] (NVIDIA Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-01-27 16:10 - 2017-01-27 16:10 - 00002881 _____ C:\Users\Marco\Desktop\AdwCleaner[C0].txt
2017-01-27 15:59 - 2017-01-27 15:59 - 04015056 _____ C:\Users\Marco\Desktop\adwcleaner_6.043.exe
2017-01-27 15:57 - 2017-01-27 16:05 - 00000000 ____D C:\AdwCleaner
2017-01-27 15:41 - 2017-01-27 15:41 - 00003716 _____ C:\Users\Marco\Desktop\mbam.txt
2017-01-27 15:20 - 2017-01-27 16:08 - 00110536 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-27 15:20 - 2017-01-27 16:08 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-27 15:20 - 2017-01-27 16:08 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-27 15:20 - 2017-01-27 15:20 - 00176584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-27 15:20 - 2017-01-27 15:20 - 00001829 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-27 15:20 - 2017-01-27 15:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-27 15:20 - 2017-01-27 15:20 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-27 15:20 - 2017-01-20 07:47 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-01-27 13:28 - 2017-01-27 13:29 - 00093789 _____ C:\Users\Marco\Desktop\LOG 27012017.pdf
2017-01-27 10:11 - 2017-01-27 14:09 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-01-27 10:07 - 2017-01-27 13:50 - 00000000 ____D C:\Users\Marco\Desktop\mbar
2017-01-27 10:03 - 2017-01-27 10:03 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Marco\Desktop\mbar-1.09.3.1001.exe
2017-01-27 09:23 - 2017-01-27 09:23 - 00003030 _____ C:\Windows\System32\Tasks\SystemToolsDailyTest-Retry
2017-01-26 22:01 - 2017-01-26 22:01 - 00166524 _____ C:\Users\Marco\Desktop\LOG.pdf
2017-01-26 21:30 - 2017-01-26 21:30 - 00004020 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse
2017-01-26 21:07 - 2017-01-27 16:15 - 00000000 ____D C:\FRST
2017-01-26 21:05 - 2017-01-27 15:17 - 00000000 ____D C:\Users\Marco\Downloads\Tronjaner
2017-01-25 19:20 - 2017-01-27 13:29 - 00003846 _____ C:\Windows\System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse
2017-01-25 18:48 - 2017-01-25 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-01-25 09:57 - 2017-01-27 14:06 - 00000042 _____ C:\Users\Marco\AppData\Roaming\url.txt
2017-01-23 20:17 - 2017-01-23 20:17 - 00000000 ____D C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-01-21 21:45 - 2017-01-21 21:55 - 509649804 _____ C:\Users\Marco\Downloads\Navy_CIS_Der_Whistleblower_FolgeS14E06_2017-01-17_0100_278300.mp4
2017-01-21 21:45 - 2017-01-21 21:54 - 476108705 _____ C:\Users\Marco\Downloads\Navy_CIS_Philly_FolgeS14E05_2017-01-10_0100_278300.mp4
2017-01-21 21:19 - 2017-01-21 21:31 - 1061503121 _____ C:\Users\Marco\Downloads\Tatort_Land_in_dieser_Zeit_2017-01-08_2015_278300.mp4
2017-01-21 20:04 - 2017-01-21 20:14 - 966430992 _____ C:\Users\Marco\Downloads\Limitless_Starthilfe_Das_Erbe_des_Dschingis_Khan_FolgeS01_2017-01-05_0040_278300.mp4
2017-01-21 19:19 - 2017-01-21 19:39 - 1077557282 _____ C:\Users\Marco\Downloads\Polizeiruf_110_Angst_heiligt_die_Mittel_2017-01-03_0110_278300.mp4
2017-01-21 19:18 - 2017-01-21 19:38 - 1077629098 _____ C:\Users\Marco\Downloads\Polizeiruf_110_Angst_heiligt_die_Mittel_2017-01-01_2015_278300.mp4
2017-01-21 13:14 - 2017-01-21 13:28 - 981823066 _____ C:\Users\Marco\Downloads\Criminal_Minds_Himmel_oder_Hoelle_FolgeS09E23_2017-01-20_0050_278300.mp4
2017-01-21 13:13 - 2017-01-21 13:23 - 511477069 _____ C:\Users\Marco\Downloads\Criminal_Minds_Crimson_King_FolgeS12E01_2017-01-20_0005_278300.mp4
2017-01-21 13:01 - 2017-01-21 13:08 - 474554387 _____ C:\Users\Marco\Downloads\Criminal_Minds_Code_Pfeffer_FolgeS10E23_2017-01-06_0000_278300.mp4
2017-01-21 12:52 - 2017-01-21 12:57 - 487802983 _____ C:\Users\Marco\Downloads\Criminal_Minds_Der_Beschuetzer_FolgeS10E22_2016-12-30_0100_278300.mp4
2017-01-21 12:24 - 2017-01-21 12:30 - 265351175 _____ C:\Users\Marco\Downloads\Family_Guy_Der_letzte_Knall_FolgeS02E03_2016-12-30_1945_278300.mp4
2017-01-21 12:24 - 2017-01-21 12:27 - 227294974 _____ C:\Users\Marco\Downloads\Family_Guy_JOLO_FolgeS13E14_2016-12-28_0225_278300.mp4
2017-01-19 21:25 - 2017-01-19 21:25 - 00187880 _____ C:\Users\Marco\Downloads\Anschreiben_13029103.pdf
2017-01-15 19:25 - 2017-01-26 20:09 - 00093591 _____ C:\Users\Marco\Desktop\Kickerstabelle 141.xlsm
2017-01-15 12:06 - 2017-01-15 12:26 - 1054249389 _____ C:\Users\Marco\Downloads\Tatort_Klingelingeling_2016-12-27_0230_278300.mp4
2017-01-15 12:06 - 2017-01-15 12:26 - 1051719711 _____ C:\Users\Marco\Downloads\Tatort_Klingelingeling_2016-12-26_2015_278300.mp4
2017-01-15 11:09 - 2017-01-15 11:42 - 1039208974 _____ C:\Users\Marco\Downloads\Blindspot_Phase_Eins_FolgeS01E22_2017-01-13_0150_278300.mp4
2017-01-15 11:09 - 2017-01-15 11:32 - 979552970 _____ C:\Users\Marco\Downloads\Blindspot_Gezeichnet_FolgeS01E20_2017-01-06_0140_278300.mp4
2017-01-15 11:08 - 2017-01-15 11:41 - 1015799175 _____ C:\Users\Marco\Downloads\Blindspot_Meisterdiebe_FolgeS01E18_2016-12-30_0145_278300.mp4
2017-01-15 11:08 - 2017-01-15 11:33 - 508367537 _____ C:\Users\Marco\Downloads\Blindspot_Schatzsuche_FolgeS01E17_2016-12-23_0155_278300.mp4
2017-01-15 10:57 - 2017-01-15 11:00 - 270262586 _____ C:\Users\Marco\Downloads\Scrubs_Die_Anfaenger_Mein_voller_Durchblick_FolgeS07E01_2017-01-07_2330_278300.mp4
2017-01-12 19:52 - 2017-01-12 19:52 - 00070549 _____ C:\Users\Marco\Downloads\Kreditberechnung optimal1.xlsx
2017-01-12 00:50 - 2017-01-12 00:50 - 00000142 _____ C:\Windows\wininit.ini
2017-01-11 10:41 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 10:41 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 10:41 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 10:41 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-11 10:41 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-11 10:41 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-11 10:41 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 10:41 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 10:41 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 10:41 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 10:41 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 10:41 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-11 10:41 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-08 19:36 - 2017-01-08 19:48 - 1022508159 _____ C:\Users\Marco\Downloads\Tatort_Wendehammer_2016-12-20_0055_278300.mp4
2017-01-08 19:27 - 2017-01-08 19:32 - 497070504 _____ C:\Users\Marco\Downloads\Elementary_Ein_Bombengeschaeft_FolgeS05E01_2017-01-03_0215_278300.mp4
2017-01-08 18:48 - 2017-01-08 19:00 - 537137870 _____ C:\Users\Marco\Downloads\Elementary_Ein_Unterschied_in_der_Art_FolgeS04E24_2016-12-19_2210_278300.mp4
2017-01-08 18:27 - 2017-01-08 18:37 - 514030426 _____ C:\Users\Marco\Downloads\Navy_CIS_New_Orleans_Der_Skandal_FolgeS02E21_2016-12-19_2115_278300.mp4
2017-01-08 18:27 - 2017-01-08 18:35 - 484648437 _____ C:\Users\Marco\Downloads\Navy_CIS_New_Orleans_Blitz_in_der_Kueche_FolgeS02E22_2017-01-03_0135_278300.mp4
2017-01-08 17:41 - 2017-01-08 18:08 - 480630492 _____ C:\Users\Marco\Downloads\Supernatural_Zur_Hoelle_mit_dem_Boesen_Was_sie_trugen_FolgeS10E15_2017-01-03_0330_278300.mp4
2017-01-08 17:41 - 2017-01-08 18:03 - 474947443 _____ C:\Users\Marco\Downloads\Supernatural_Zur_Hoelle_mit_dem_Boesen_Vatertag_FolgeS07E13_2017-01-03_0450_278300.mp4
2017-01-08 17:40 - 2017-01-08 18:07 - 487953909 _____ C:\Users\Marco\Downloads\Supernatural_Zur_Hoelle_mit_dem_Boesen_Das_Lied_vom_Henker_FolgeS10E14_2016-12-20_0210_278300.mp4
2017-01-08 17:40 - 2017-01-08 18:02 - 485111804 _____ C:\Users\Marco\Downloads\Supernatural_Zur_Hoelle_mit_dem_Boesen_Die_Zeit_heilt_keine_Wunden_FolgeS07E12_2017-01-03_0415_278300.mp4
2017-01-08 17:40 - 2017-01-08 18:02 - 479952864 _____ C:\Users\Marco\Downloads\Supernatural_Zur_Hoelle_mit_dem_Boesen_Die_Nacht_der_Abenteuer_FolgeS07E11_2016-12-20_0330_278300.mp4
2017-01-08 17:40 - 2017-01-08 18:02 - 475393708 _____ C:\Users\Marco\Downloads\Supernatural_Zur_Hoelle_mit_dem_Boesen_An_der_Schwelle_FolgeS07E10_2016-12-20_0250_278300.mp4
2017-01-08 17:16 - 2017-01-08 17:33 - 485954712 _____ C:\Users\Marco\Downloads\Navy_CIS_Love_Boat_FolgeS14E04_2017-01-03_0100_278300.mp4
2017-01-08 17:16 - 2017-01-08 17:32 - 514525280 _____ C:\Users\Marco\Downloads\Navy_CIS_Sturz_vom_Dach_FolgeS14E03_2016-12-20_0105_278300.mp4
2017-01-08 17:13 - 2017-01-08 17:35 - 1065019068 _____ C:\Users\Marco\Downloads\Tatort_Wendehammer_2016-12-18_2015_278300.mp4
2017-01-06 18:55 - 2017-01-06 18:55 - 00139712 _____ C:\Users\Marco\Downloads\Angebot-10058582.pdf
2017-01-06 09:51 - 2017-01-06 09:51 - 00070263 _____ C:\Users\Marco\Downloads\Kreditberechnung ohne sonder.xlsx
2017-01-06 09:49 - 2017-01-06 10:51 - 00070533 _____ C:\Users\Marco\Downloads\Kreditberechnung optimal.xlsx
2017-01-06 09:19 - 2017-01-06 09:19 - 00042916 _____ C:\Users\Marco\Downloads\Kreditberechnung 3.xlsx
2017-01-04 19:14 - 2017-01-04 19:15 - 02222740 _____ C:\Users\Marco\Downloads\Samsung-BD-H8909S-1TB-Bedienungsanleitung-fc4517.pdf
2016-12-31 19:56 - 2016-12-31 21:15 - 1381383175 _____ C:\Users\Marco\Downloads\Wolverine_Weg_des_Kriegers_2016-12-12_0330_278300.mp4
2016-12-31 19:56 - 2016-12-31 20:28 - 1446257314 _____ C:\Users\Marco\Downloads\X_Men_Zukunft_ist_Vergangenheit_2016-12-12_0115_278300.mp4
2016-12-31 19:55 - 2016-12-31 20:37 - 1077081919 _____ C:\Users\Marco\Downloads\Tatort_Dunkelfeld_FolgeS01E1003_2016-12-13_0035_278300.mp4
2016-12-31 19:21 - 2016-12-31 20:14 - 1383739873 _____ C:\Users\Marco\Downloads\Wolverine_Weg_des_Kriegers_2016-12-11_2250_278300.mp4
2016-12-31 19:21 - 2016-12-31 19:42 - 1076273711 _____ C:\Users\Marco\Downloads\Tatort_Dunkelfeld_FolgeS01E1003_2016-12-11_2015_278300.mp4
2016-12-29 19:30 - 2017-01-15 11:07 - 00092539 _____ C:\Users\Marco\Desktop\Kickerstabelle 140.xlsm
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-01-27 16:17 - 2009-07-14 05:45 - 00028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-27 16:17 - 2009-07-14 05:45 - 00028352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-27 16:12 - 2010-11-21 07:50 - 00699666 _____ C:\Windows\system32\perfh007.dat
2017-01-27 16:12 - 2010-11-21 07:50 - 00149774 _____ C:\Windows\system32\perfc007.dat
2017-01-27 16:12 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-27 16:12 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-27 16:10 - 2015-02-22 15:41 - 00000000 ___RD C:\Users\Marco\Dropbox
2017-01-27 16:09 - 2016-09-17 19:22 - 00000000 __RSD C:\Users\Marco\Documents\McAfee-Tresore
2017-01-27 16:08 - 2014-10-07 21:22 - 00000436 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2017-01-27 16:07 - 2015-11-20 18:05 - 00251848 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-27 16:07 - 2011-09-28 19:23 - 00000000 ____D C:\Users\Marco\AppData\Local\SoftThinks
2017-01-27 16:07 - 2011-09-23 15:12 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2017-01-27 16:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing
2017-01-27 16:06 - 2013-02-14 18:04 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2017-01-27 16:06 - 2011-09-22 11:29 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-27 16:06 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-27 15:59 - 2016-11-18 13:41 - 00000000 ____D C:\Users\Marco\AppData\LocalLow\Mozilla
2017-01-27 15:50 - 2015-06-13 07:23 - 00001224 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2927632426-222128767-489340468-1001UA.job
2017-01-27 15:26 - 2012-04-01 08:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-27 15:20 - 2015-11-20 18:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-27 14:57 - 2011-09-28 19:53 - 00000000 ____D C:\Users\Marco\AppData\Local\Nero
2017-01-27 12:14 - 2011-09-23 17:44 - 00000000 ____D C:\ProgramData\Sonic
2017-01-27 09:50 - 2015-06-13 07:23 - 00001172 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2927632426-222128767-489340468-1001Core.job
2017-01-26 19:46 - 2011-12-22 11:30 - 00000000 ____D C:\Users\Marco\AppData\Roaming\vlc
2017-01-25 19:08 - 2016-09-17 19:17 - 00000000 ____D C:\Program Files (x86)\McAfee
2017-01-25 18:48 - 2015-11-11 20:33 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-01-25 18:48 - 2015-07-22 20:17 - 00001926 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-01-25 10:04 - 2016-07-22 12:22 - 00003484 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2017-01-23 20:17 - 2015-02-22 15:37 - 00000000 ____D C:\Users\Marco\AppData\Roaming\Dropbox
2017-01-21 22:24 - 2015-12-05 20:48 - 00048028 _____ C:\Users\Marco\Documents\Serien.xlsx
2017-01-19 18:10 - 2016-02-12 06:14 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-13 16:26 - 2016-09-17 19:19 - 00003068 _____ C:\Windows\System32\Tasks\McAfeeLogon
2017-01-13 16:26 - 2015-12-08 20:41 - 00000000 ____D C:\Windows\System32\Tasks\McAfee
2017-01-13 14:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-13 12:14 - 2014-12-26 16:25 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-12 00:48 - 2013-07-12 17:11 - 00000000 ____D C:\Windows\system32\MRT
2017-01-12 00:39 - 2011-10-02 12:04 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-11 13:26 - 2014-01-01 13:23 - 00000000 ____D C:\ProgramData\McAfee
2017-01-11 09:53 - 2014-08-17 17:32 - 00000000 ____D C:\Users\Marco\AppData\Local\Adobe
2017-01-11 09:53 - 2012-04-01 08:17 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-11 09:53 - 2012-04-01 08:17 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-11 09:53 - 2011-11-16 16:38 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-11 09:53 - 2011-09-22 21:52 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-11 09:53 - 2011-09-22 21:52 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-10 09:14 - 2016-11-20 12:40 - 00000000 ____D C:\Users\Marco\Documents\Blutdruck
2017-01-08 19:24 - 2011-12-15 19:30 - 00000000 ____D C:\Users\Marco\AppData\Roaming\UseNeXT
2017-01-08 19:10 - 2011-12-15 19:30 - 00000000 ____D C:\Users\Marco\Documents\UseNeXT
2017-01-01 01:21 - 2015-12-23 16:12 - 00000000 ____D C:\Users\Marco\Downloads\Copy
2016-12-31 18:33 - 2011-09-28 19:23 - 00000000 ___SD C:\Users\Marco\AppData\Roaming\Microsoft
2016-12-29 12:29 - 2016-12-12 19:38 - 00090891 _____ C:\Users\Marco\Desktop\Kickerstabelle 139.xlsm
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2012-09-17 22:01 - 2012-09-17 22:01 - 4096000 _____ () C:\Program Files (x86)\GUTE87.tmp
2011-12-15 19:43 - 2013-05-15 19:09 - 0099384 _____ () C:\Users\Marco\AppData\Roaming\inst.exe
2011-12-15 19:43 - 2013-05-15 19:09 - 0007859 _____ () C:\Users\Marco\AppData\Roaming\pcouffin.cat
2011-12-15 19:43 - 2013-05-15 19:09 - 0001167 _____ () C:\Users\Marco\AppData\Roaming\pcouffin.inf
2011-12-15 19:43 - 2013-05-15 19:10 - 0000055 _____ () C:\Users\Marco\AppData\Roaming\pcouffin.log
2011-12-15 19:43 - 2013-05-15 19:09 - 0082816 _____ (VSO Software) C:\Users\Marco\AppData\Roaming\pcouffin.sys
2017-01-25 09:57 - 2017-01-27 14:06 - 0000042 _____ () C:\Users\Marco\AppData\Roaming\url.txt
2011-12-15 19:36 - 2013-06-24 18:23 - 0001057 _____ () C:\Users\Marco\AppData\Roaming\vso_ts_preview.xml
2016-09-17 18:58 - 2016-09-17 18:58 - 0007606 _____ () C:\Users\Marco\AppData\Local\Resmon.ResmonCfg
2011-12-21 14:19 - 2011-12-21 14:19 - 0000000 _____ () C:\Users\Marco\AppData\Local\rx_image32.Cache
Einige Dateien in TEMP:
====================
2016-12-27 13:48 - 2016-12-27 13:48 - 0001536 _____ () C:\Users\Marco\AppData\Local\Temp\NOSEventMessages.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-01-23 10:35
==================== Ende von FRST.txt ============================
Addition.txt Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25-01-2017 01
durchgeführt von Marco (27-01-2017 16:19:21)
Gestartet von C:\Users\Marco\Downloads\Tronjaner
Windows 7 Home Premium Service Pack 1 (X64) (2011-09-28 18:23:05)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2927632426-222128767-489340468-500 - Administrator - Disabled)
Gast (S-1-5-21-2927632426-222128767-489340468-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2927632426-222128767-489340468-1003 - Limited - Enabled)
Marco (S-1-5-21-2927632426-222128767-489340468-1001 - Administrator - Enabled) => C:\Users\Marco
UpdatusUser (S-1-5-21-2927632426-222128767-489340468-1000 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {B10D5953-051E-97F6-F53B-3839EFD98259}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: McAfee Anti-Virus und Anti-Spyware (Disabled - Up to date) {0A6CB8B7-2324-9878-CF8B-034B945EC8E4}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Enabled) {8936D876-4F71-96AE-DE64-910C110AC522}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated)
Adobe Flash Player 24 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
ALDI NORD Bestellsoftware (HKLM-x32\...\ALDI NORD Bestellsoftware) (Version: 4.15.4. - ORWO_Net)
Amazon Music (HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Amazon Amazon Music) (Version: 3.7.0.693 - Amazon Services LLC)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Blu-ray Converter Ultimate 1.4.0.8 (HKLM-x32\...\Blu-ray Converter Ultimate_is1) (Version: 1.4.0.8 - VSO-Software SARL)
calibre (HKLM-x32\...\{50179884-9D17-4BC1-A685-3E99E55CE918}) (Version: 2.54.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
ConvertXtoDVD 4.1.19.365 (HKLM-x32\...\{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1) (Version: 4.1.19.365 - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.57 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.57 - Dell Inc.)
Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}) (Version: 1.5.201.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.3.6855.61 - Dell)
Dell System Detect (HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\58d94f3ce2c27db0) (Version: 7.9.0.10 - Dell)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1209.101.204 - ALPS ELECTRIC CO., LTD.)
Dell Update (HKLM-x32\...\{DB82968B-57A4-4397-81A5-ECAB21B5DFCD}) (Version: 1.7.1015.0 - Dell Inc.)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
Diablo III (HKLM-x32\...\Diablo III) (Version: 1.0.6.13644 - Blizzard Entertainment)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Dropbox (HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\Dropbox) (Version: 18.4.32 - Dropbox, Inc.)
DVDx 4.0 (HKLM-x32\...\DVDx 4.0) (Version: 4.0 - labDV)
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
Free Mp3 Wma Converter V 2.2 (HKLM-x32\...\Free Mp3 Wma Converter_is1) (Version: 2.2.0.0 - Koyote Soft)
Free YouTube to MP3 Converter version 3.11.24.608 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.24.608 - DVDVideoSoft Ltd.)
FreeDoko 0.7.11 (HKLM-x32\...\FreeDoko) (Version: 0.7.11 - Borg Enders und Diether Knof)
Gameforge Live 1.9.0 "Legend" (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 1.9.0 - Gameforge)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Intel PROSet Wireless (x32 Version: - ) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2345 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{5A80B0BA-79AF-4B11-B851-CCB9F7977AC0}) (Version: 1.0.1.0489 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{451A5ECC-C9A5-4944-B28D-23656C9E03D0}) (Version: 14.1.2000 - Intel Corporation)
Intel(R) WiDi (HKLM-x32\...\{03703CBB-563D-45CE-8B35-CB04CAB258BE}) (Version: 2.1.38.0 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - )
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Klebezettel NG (Version 2.9.14) (HKLM-x32\...\{4F81901F-3655-4340-8227-F687F69A3C79}}_is1) (Version: - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.500.3 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.209 - McAfee, Inc.)
McAfee® Total Protection (HKLM-x32\...\MSC) (Version: 15.0.2063 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
Mozilla Thunderbird 12.0.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 12.0.1 (x86 de)) (Version: 12.0.1 - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.30.0 - Nokia)
Nokia Suite (x32 Version: 3.8.30.0 - Nokia) Hidden
NVIDIA 3D Vision Treiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Grafiktreiber 306.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 306.97 - NVIDIA Corporation)
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.205.0 - Tracker Software Products Ltd)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
PokerTH (HKLM-x32\...\PokerTH 0.9.3) (Version: 0.9.3 - www.pokerth.net)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.15 - Dell Inc.)
ratDVD 0.78.1444 (HKLM-x32\...\ratDVD) (Version: 0.78.1444 - ratDVD)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6312 - Realtek Semiconductor Corp.)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Runes of Magic (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 6.0.2.2662 - Gameforge Productions GmbH)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Skype Toolbars (HKLM-x32\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
StarMoney (x32 Version: 2.0 - StarFinanz) Hidden
StarMoney 7.0 (HKLM-x32\...\{1374A039-1089-4FB1-A185-F6151AC8A188}) (Version: 7.0 - Star Finanz GmbH)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.14900 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.0.0.45 - VSO-Software SARL)
VSO CopyTo 5 (HKLM-x32\...\{870F1750-BA89-11DA-A94D-0800200C9A66}_is1) (Version: 5.0.0.18 - VSO Software)
VSO DVD Converter Ultimate 2 (HKLM-x32\...\{7BC02A8D-DAE7-400C-BD07-F5C33034FDB5}_is1) (Version: 2.1.1.20 - VSO-Software SARL)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 4.11 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.11.0 - win.rar GmbH)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
WISO steuer:Sparbuch 2016 (HKLM-x32\...\{751C549A-E76B-44C7-803E-80322CCAB4F2}) (Version: 23.00.1146 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{11F45077-559A-4E3F-8039-DCCD76A8E3E1}) (Version: 21.00.8480 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{EE57312C-39B7-488E-B927-BDAFCF651C64}) (Version: 22.00.8811 - Buhl Data Service GmbH)
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2927632426-222128767-489340468-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0B3F25A8-973C-43FA-BA6F-AFFB1AF134F8} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [2016-10-11] (McAfee, Inc.)
Task: {1BCF7514-C182-4726-AC6F-59C205D9FE5E} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: {4071E5F0-EABA-432A-8AC9-051B87F1DE04} - System32\Tasks\GoogleUpdateTaskMachineCore1cef1d8c85e687b => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {4B301373-AEEE-4A0B-8EB5-E4FDC805509E} - System32\Tasks\GoogleUpdateTaskMachineUA1cec4b11e26c234 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {542F95B5-F15B-4FF4-B571-7765DA801394} - System32\Tasks\SystemToolsDailyTest-Retry => uaclauncher.exe
Task: {6C0880F0-5E9F-409A-927F-216085DD824A} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell\SupportAssist\uaclauncher.exe [2016-09-13] (PC-Doctor, Inc.)
Task: {74C7802C-B3A8-45FB-B7C6-8CC7C9CC007D} - System32\Tasks\Intel Security DAT Reputation (AMCore) Post DAT update endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\54.0\mcdatrep.exe [2016-01-27] (McAfee, Inc.)
Task: {78652760-6D4B-481E-8303-484997871D14} - System32\Tasks\Intel Security DAT Reputation (AMCore) periodic endpoint safety pulse => C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\54.0\mcdatrep.exe [2016-01-27] (McAfee, Inc.)
Task: {7B663FB3-37BE-40DB-B4D5-823CAACDC821} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2927632426-222128767-489340468-1001Core => C:\Users\Marco\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {8490D72C-FB06-41D4-BDBA-1480AB527C52} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {8674B057-9E17-4300-B40C-49C926BCBA0E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)
Task: {89572EAB-5BE9-4B14-B13C-C3BFD63DD6EE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-11] (Adobe Systems Incorporated)
Task: {A08195F6-1830-4BAF-95EF-84004DF857C5} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2927632426-222128767-489340468-1001
Task: {BF34CFE7-8B00-46A5-9EF3-14B6D3816AD4} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {C4C7EE6C-3CCB-48F4-8B5E-711B6FE9D173} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2927632426-222128767-489340468-1001UA => C:\Users\Marco\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {D8DB45D5-E4BF-4E14-941E-90A459D1421D} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe [2016-09-13] (PC-Doctor, Inc.)
Task: {F6B76989-6CE0-4CE5-8A15-3A6F8D25FB26} - System32\Tasks\McAfee\McAfee Idle Detection Task
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2927632426-222128767-489340468-1001Core.job => C:\Users\Marco\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2927632426-222128767-489340468-1001UA.job => C:\Users\Marco\AppData\Local\Dropbox\Update\DropboxUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-06-16 17:37 - 2011-06-16 17:37 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2013-12-15 15:42 - 2012-10-02 20:51 - 00086888 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-01-27 15:20 - 2017-01-20 07:47 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-27 15:20 - 2017-01-20 07:47 - 02254800 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-01-27 15:20 - 2017-01-20 07:47 - 02829776 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2011-09-23 15:12 - 2011-07-08 16:12 - 02749248 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2011-09-22 18:25 - 2011-03-27 00:29 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-06-16 17:37 - 2011-06-16 17:37 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-06-28 01:26 - 2011-06-28 01:26 - 02022976 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
2014-08-28 13:16 - 2014-11-19 01:55 - 06277952 _____ () C:\Users\Marco\AppData\Local\Amazon Music\Amazon Music Helper.exe
2011-06-29 14:52 - 2011-06-29 14:52 - 00474176 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2014-03-31 19:59 - 2014-05-19 09:42 - 01428248 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe
2012-08-21 13:20 - 2012-08-21 13:20 - 00067496 _____ () C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe
2010-11-17 16:35 - 2010-11-17 16:35 - 00514544 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
2012-02-01 10:50 - 2012-02-01 10:50 - 00968048 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
2014-09-25 19:44 - 2014-09-25 19:44 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2011-11-17 17:09 - 2009-10-06 15:36 - 00205312 _____ () C:\Program Files (x86)\StarMoney 7.0\ouservice\PATCHW32.dll
2010-03-17 02:28 - 2010-03-17 02:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 21:52 - 2010-03-22 21:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-17 02:28 - 2010-03-17 02:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-17 02:28 - 2010-03-17 02:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-25 05:20 - 2011-06-25 05:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-06-28 01:25 - 2011-06-28 01:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-06-25 05:32 - 2011-06-25 05:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-12 01:52 - 2010-03-12 01:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 21:07 - 2010-03-05 21:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 21:07 - 2010-03-05 21:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-12 01:52 - 2010-03-12 01:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 08507232 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 02354016 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 01014624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00364384 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 02480992 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 01346912 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00206176 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 02653024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00033120 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qgif4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00035680 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qico4.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00207200 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qjpeg4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 11166560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00276832 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll
2013-04-15 12:26 - 2013-04-15 12:26 - 00391600 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll
2013-04-15 12:26 - 2013-04-15 12:26 - 00059280 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll
2013-04-19 00:45 - 2013-04-19 00:45 - 00438624 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00446304 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00520544 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00720736 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll
2013-04-19 00:44 - 2013-04-19 00:44 - 00606560 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll
2013-04-19 00:46 - 2013-04-19 00:46 - 00093024 _____ () C:\Program Files (x86)\Nokia\Nokia Suite\qjson.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 09779992 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wgui14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 00035608 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsdcom48.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 00309016 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rscorewinapi48.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 00322840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsguiwinapi48.dll
2014-03-31 19:56 - 2014-05-19 09:44 - 03874584 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wcore14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 00136472 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsodbc48.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 02708760 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfvie14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 02048280 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wsteu14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01932568 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wreli14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 04324120 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wauff14.dll
2014-03-31 19:56 - 2014-02-11 10:53 - 01043456 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-core.dll
2014-03-31 19:56 - 2014-02-11 10:53 - 00094720 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-shared.dll
2014-03-31 19:56 - 2014-02-11 10:53 - 00250368 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-contribs-lib.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01557784 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wmain14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 05158680 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae114.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01691928 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae214.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01807128 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae314.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01626392 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae414.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01115416 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau114.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01334552 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau214.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01258264 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wwerb14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 07329048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wkont14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01283352 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wimp14.dll
2014-03-31 19:56 - 2014-05-19 09:42 - 01330456 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfabu14.dll
2017-01-23 20:16 - 2017-01-18 19:39 - 00801600 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-01-23 20:16 - 2016-12-21 09:44 - 00035792 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-01-23 20:16 - 2016-12-21 09:44 - 00100296 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-01-23 20:16 - 2016-12-21 09:44 - 00018888 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\select.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00019776 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-01-23 20:16 - 2016-12-21 09:44 - 00694224 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00020824 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-01-23 20:16 - 2016-12-21 09:45 - 00123856 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 01682768 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00020816 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-01-23 20:16 - 2016-12-21 09:44 - 00145864 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-01-23 20:16 - 2016-12-21 09:45 - 00019408 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2017-01-23 20:16 - 2016-12-21 09:44 - 00116688 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-01-23 20:16 - 2016-12-21 09:46 - 00105928 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00022864 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00052032 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00038712 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-01-23 20:16 - 2016-12-21 09:44 - 00392144 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-01-23 20:16 - 2016-12-21 09:46 - 00020936 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00024528 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-01-23 20:16 - 2016-12-21 09:47 - 00116176 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00381760 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00124880 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00026456 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00024016 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00175560 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00030160 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00043472 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-01-23 20:16 - 2016-12-21 09:47 - 00048592 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00057808 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00024016 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00246608 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00027488 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-01-23 20:16 - 2016-12-21 09:45 - 00241104 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\_jpegtran.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00022336 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-01-23 20:16 - 2016-12-21 09:47 - 00028616 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00025432 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00022872 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00021848 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00022872 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 01826104 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-01-23 20:16 - 2016-12-21 09:45 - 00083912 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\sip.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00531264 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 03928896 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 01972536 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00133432 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00224064 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00207680 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00021840 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-01-23 20:16 - 2016-12-21 09:47 - 00350152 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00023896 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00025936 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-01-23 20:16 - 2016-12-21 09:42 - 00036296 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\librsync.dll
2017-01-23 20:16 - 2017-01-18 19:42 - 00084288 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-01-23 20:16 - 2016-12-21 09:50 - 00017864 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\libEGL.dll
2017-01-23 20:16 - 2016-12-21 09:50 - 01631184 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-01-23 20:16 - 2017-01-18 19:42 - 00042816 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00171336 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00357688 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-01-23 20:16 - 2016-12-21 09:46 - 00060880 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00026456 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-01-23 20:16 - 2017-01-18 19:42 - 00546104 _____ () C:\Users\Marco\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2010-11-25 04:44 - 2010-11-25 04:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
2012-02-01 10:44 - 2012-02-01 10:44 - 08151040 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll
2012-02-01 10:44 - 2012-02-01 10:44 - 02278400 _____ () C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2927632426-222128767-489340468-1001\...\dell.com -> dell.com
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2017-01-25 18:48 - 00000877 ____A C:\Windows\system32\Drivers\etc\hosts
0.0.0.1 mssplus.mcafee.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2927632426-222128767-489340468-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^Users^Marco^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk => C:\Windows\pss\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk.Startup
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{8C5BD71A-58E2-44C2-8863-DA9DD202D949}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{77E05CB8-C6EA-4C3B-8A05-B2CE394C2362}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{154D158D-2DA4-4CBB-9914-C73EB9087788}] => C:\Program Files (x86)\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{D8B4EBAD-BA2B-4AA2-839F-C12A7120CCDE}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{335084D7-22E6-4BD6-A4B0-F94E62FB0F3C}] => c:\Program Files (x86)\Dell\VideoStage\VideoStage.exe
FirewallRules: [{C0DA9B5B-4044-4DB7-958C-9018AC99A6E3}] => LPort=9700
FirewallRules: [{43FB1156-8584-437D-91E3-0B4752C1F402}] => LPort=9701
FirewallRules: [{E8D76FDE-0151-46AF-ADB2-3671715E72C3}] => LPort=9702
FirewallRules: [{DD18F6A1-E223-4E3A-9222-024116534180}] => LPort=9700
FirewallRules: [{E0E1DF41-E6E1-40D9-A604-0E945EBCED88}] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
FirewallRules: [{6CFABBED-A842-4155-8A82-0C72A1FF5187}] => C:\Program Files (x86)\Dell\Stage Remote\InstallerHelp.exe
FirewallRules: [{5D8DAF4C-271C-480A-A970-DB93882CDC40}] => C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
FirewallRules: [{1D0F1769-4298-4940-A0CA-8D1F976D17C2}] => C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
FirewallRules: [{DCD2CD0B-50BE-4CF9-B584-D7D1972EA0D6}] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
FirewallRules: [{7ACE4EE3-DC9D-4C38-89F6-C4F90EF2EECB}] => C:\Program Files (x86)\Dell\Stage Remote\Controller.exe
FirewallRules: [{7E48AEFA-0B38-483C-985A-EA5C5FC8C0B6}] => C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
FirewallRules: [{1F7B9C56-D468-4FC6-A0F0-CC06A1750ECA}] => C:\Program Files (x86)\Dell\Stage Remote\InstallerHelp.exe
FirewallRules: [{75F36CA3-1A13-4FA2-8886-1ABB3FB43385}] => C:\Program Files (x86)\Dell\Stage Remote\DMR.exe
FirewallRules: [{E68C1ED4-66FF-48D8-96E7-868A26785202}] => C:\Program Files (x86)\Dell\Stage Remote\Controller.exe
FirewallRules: [{FB2611B4-C613-45DF-9C13-7A3575F5C714}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{F46CA434-F076-4E5B-87EF-A8FF3CE3F2E4}] => LPort=2869
FirewallRules: [{72AC1344-1807-4984-98FE-A8BDC47D7049}] => LPort=1900
FirewallRules: [{61685606-69A9-4BC1-BB9E-C49D5D11FB0E}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{01F9771F-A11A-4891-950D-9B2E9D3135C0}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{5DE40F1E-0F68-4DC8-AD07-53BA2178CDA0}] => C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{6C2F4D75-7DB8-42F2-BD87-F88151CEA808}] => C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{431A686E-3CF6-4660-BADD-524F202DB233}] => C:\Program Files (x86)\StarMoney 7.0\app\StarMoney.exe
FirewallRules: [{E282437B-980A-46EF-A59D-4E0180ADDA9D}] => C:\Program Files (x86)\StarMoney 7.0\app\StarMoney.exe
FirewallRules: [TCP Query User{C9ED2612-C939-4371-A68B-48A1765D4F23}C:\program files (x86)\klebezettel ng\klebez.exe] => C:\program files (x86)\klebezettel ng\klebez.exe
FirewallRules: [UDP Query User{EB647EFB-8EDC-4153-AE56-F4A4EAC28F0F}C:\program files (x86)\klebezettel ng\klebez.exe] => C:\program files (x86)\klebezettel ng\klebez.exe
FirewallRules: [{58247BC4-D447-41C4-8D44-9C292D26D7AB}] => C:\program files (x86)\klebezettel ng\klebez.exe
FirewallRules: [{80857F8B-13AD-47F9-8A0F-D695832CA8F7}] => C:\program files (x86)\klebezettel ng\klebez.exe
FirewallRules: [{BD4D9003-F43F-457A-885C-64589250998F}] => C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{66DBD661-729B-43BE-BDD9-4332927C0112}] => C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{3E99A547-73EE-4BF2-B188-BF7A4DD25CFA}] => C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{691070D5-B330-4F78-AC3D-BE599DD94475}] => C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{A686E456-0E7E-404D-A33F-055747FAEECE}] => C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{16313D1B-4FF9-4D87-B050-C57A9F7CE577}] => C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{8C4102F2-0841-483C-8782-7D5BBBE102CD}] => C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{ED88C5FD-093D-402C-9641-18F5A452115D}] => C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{80E40720-5DB2-4F69-91E8-866289898745}] => C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{25500E77-D25C-4D61-B90A-C76353B823F5}] => C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{1FA5E39B-5950-40EA-9976-2EF34FDDD7FB}] => C:\Program Files (x86)\Common Files\Nero\BDCore\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{3149619B-17FA-44A4-B59E-9DB59D0FBE96}] => C:\Program Files (x86)\Common Files\Nero\BDCore\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{593ABF3D-81DA-4199-9FC3-06C09552F27D}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{C0CE64EC-250B-467E-8CBA-1F69EAA8FCB6}] => C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{36289E82-CE78-4907-A496-FF48AEDB19C5}] => C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe
FirewallRules: [{504D623C-E6FD-414D-8AAA-B0027F04B69F}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C3669235-F9B4-4A1C-9585-CCE84C88E6D4}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{199CB38E-85F2-4B2B-8BA1-968C192BB500}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{56F90757-5BA4-4C9B-987A-78D01F0F54E6}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CA3C2BBB-BE31-4479-BAD2-08865BF3B08F}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D6AF06A5-C48A-4049-BBF5-E4A65661869A}] => C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7CA15965-2B67-4A32-B780-56E1F072DD21}] => C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{39DAED96-BF9C-43D1-8275-264FCB59AFA5}C:\users\marco\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\marco\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{39530DC6-294A-4339-9FBF-BD62D18128E2}C:\users\marco\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\marco\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{E09F237A-F765-4796-92A4-6DCE7789E1BF}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F46F5D9F-6D1E-4E38-997F-FCFFBDA5C501}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{121DEA3A-267A-4C03-9793-D605902DE857}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
18-01-2017 14:43:14 Geplanter Prüfpunkt
27-01-2017 12:02:21 Malwarebytes Anti-Rootkit Restore Point
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/27/2017 04:07:23 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (01/27/2017 02:41:41 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (01/27/2017 02:11:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (01/27/2017 02:06:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 50.1.0.6186, Zeitstempel: 0x584a057c
Name des fehlerhaften Moduls: mozglue.dll, Version: 50.1.0.6186, Zeitstempel: 0x5849ff8b
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000ec79
ID des fehlerhaften Prozesses: 0x1ec0
Startzeit der fehlerhaften Anwendung: 0x01d2789bec2c0c8d
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\mozglue.dll
Berichtskennung: 74a9282a-e491-11e6-8ded-ac7289865091
Error: (01/27/2017 12:12:06 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (01/27/2017 09:22:17 AM) (Source: Dell System Detect) (EventID: 0) (User: )
Description: <Exception><Type>eSupport.Common.Client.Core.DriversDataNotFoundException</Type><Message><![CDATA[Data is unavailable url-https://downloads.dell.com/Published/Data/OSInfo/OSCodeInfo.gz ]]></Message><Source><![CDATA[DellSystemDetect.Core]]></Source><StackTrace><![CDATA[ bei eSupport.Common.Client.Core.DownloadHelper.GetXmlDocument(String downloadURL)
bei A.cfa225d52c5d09e6cb436129be8e65a5b.c3cd729ae9d74ec0c33f8bc020e083b79()]]></StackTrace><Type>System.Net.WebException</Type><Message><![CDATA[Der Remotename konnte nicht aufgelöst werden: 'downloads.dell.com']]></Message><Source><![CDATA[DellSystemDetect.Core]]></Source><StackTrace><![CDATA[ bei eSupport.Common.Client.Core.DownloadHelper.DownloadXmlDocument(String downloadURL, Boolean canRetry, CustomWebClient wClient)
bei eSupport.Common.Client.Core.DownloadHelper.GetXmlDocument(String downloadURL)]]></StackTrace><Data><![CDATA]></Data><SysInfo STag="21N6TQ1" SMBIOSMajVer="2" SMBIOSMinVer="6" SMBIOSBIOSVer="A06" SMBIOSPresent="True" Rel_Date="20110722000000.000000+000" DSDVersion="7.9.0.10" Vendor="Dell Inc." PName="Dell System Inspiron N7110" Ident_Num="MARCO-PC" TimeZone="(UTC+01:00) Amsterdam, Berlin, Bern, Rom, Stockholm, Wien" OSName="Microsoft Windows 7 Home Premium"/><Method>SynchronizeOSInfoConfigNew</Method><HostIP>127.0.0.1</HostIP></Exception>
Error: (01/27/2017 09:22:09 AM) (Source: Dell System Detect) (EventID: 0) (User: )
Description: <Exception><Type>eSupport.Common.Client.Core.DriversDataNotFoundException</Type><Message><![CDATA[Data is unavailable url-https://downloads.dell.com/Published/Data/OSInfo/OSInfo.gz ]]></Message><Source><![CDATA[DellSystemDetect.Core]]></Source><StackTrace><![CDATA[ bei eSupport.Common.Client.Core.DownloadHelper.GetXmlDocument(String downloadURL)
bei A.cfa225d52c5d09e6cb436129be8e65a5b.c933657f7b452cf1d02ad768cba425785()]]></StackTrace><Type>System.Net.WebException</Type><Message><![CDATA[Der Remotename konnte nicht aufgelöst werden: 'downloads.dell.com']]></Message><Source><![CDATA[DellSystemDetect.Core]]></Source><StackTrace><![CDATA[ bei eSupport.Common.Client.Core.DownloadHelper.DownloadXmlDocument(String downloadURL, Boolean canRetry, CustomWebClient wClient)
bei eSupport.Common.Client.Core.DownloadHelper.GetXmlDocument(String downloadURL)]]></StackTrace><Data><![CDATA]></Data><SysInfo STag="21N6TQ1" SMBIOSMajVer="2" SMBIOSMinVer="6" SMBIOSBIOSVer="A06" SMBIOSPresent="True" Rel_Date="20110722000000.000000+000" DSDVersion="7.9.0.10" Vendor="Dell Inc." PName="Dell System Inspiron N7110" Ident_Num="MARCO-PC" TimeZone="(UTC+01:00) Amsterdam, Berlin, Bern, Rom, Stockholm, Wien" OSName="Microsoft Windows 7 Home Premium"/><Method>SynchronizeOSInfoConfig</Method><HostIP>127.0.0.1</HostIP></Exception>
Error: (01/27/2017 09:19:47 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (01/27/2017 06:56:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Error: (01/26/2017 07:12:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.
Systemfehler:
=============
Error: (01/27/2017 04:11:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
Error: (01/27/2017 04:11:10 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
Anmeldung fehlgeschlagen: Das angegebene Kennwort des Kontos ist abgelaufen.
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (01/27/2017 04:05:40 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (01/27/2017 04:04:59 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.
Error: (01/27/2017 04:04:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/27/2017 04:04:34 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/27/2017 04:04:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (01/27/2017 04:04:34 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (01/27/2017 04:04:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dell Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (01/27/2017 04:04:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ServiceLayer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 57%
Installierter physikalischer RAM: 3990.17 MB
Verfügbarer physikalischer RAM: 1687.34 MB
Summe virtueller Speicher: 7978.52 MB
Verfügbarer virtueller Speicher: 4935.07 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:576.54 GB) (Free:16.93 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 596.2 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=19.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=576.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
Jetzt bin ich gespannt.:daumenhoc |
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
+ R Taste und schreibe notepad in das Ausführen Fenster.
Hast du noch irgendwelche Probleme mit deinem Rechner? 
