| Ironhammer | 08.09.2017 13:55 |
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017
durchgeführt von Alexander Christen (Administrator) auf DESKTOP-SSC47MC (08-09-2017 14:50:20)
Gestartet von C:\Users\Alexander Christen\Downloads
Geladene Profile: Alexander Christen (Verfügbare Profile: defaultuser0 & Alexander Christen)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Malwarebytes) C:\Games\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Electronic Arts) D:\Games\Origin\OriginWebHelperService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Intel Corporation) C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe
(HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
(HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
() C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.SmartMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Malwarebytes) C:\Games\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Valve Corporation) D:\Games\Steam\Steam.exe
(Valve Corporation) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Alexander Christen\Downloads\FRST64(1).exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9050632 2016-11-07] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => "C:\windows\system32\rundll32.exe" C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Malwarebytes TrayApp] => C:\GAMES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [705784 2016-06-20] (HP Inc.)
HKU\S-1-5-21-2831167691-3386689056-442812474-1001\...\Run: [Steam] => D:\Games\Steam\steam.exe [3071776 2017-09-07] (Valve Corporation)
HKU\S-1-5-21-2831167691-3386689056-442812474-1001\...\MountPoints2: {4cdf78aa-0a7f-11e7-9453-806e6f6e6963} - "F:\setup.exe"
Lsa: [Notification Packages] scecli "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{3ba4d678-722a-4a51-9e8c-83da411fd15e}: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{708434f6-44e2-4b8b-beaa-bb196f60c254}: [DhcpNameServer] 192.168.192.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2831167691-3386689056-442812474-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-2831167691-3386689056-442812474-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {B9582A5A-93E4-4DC5-A2D3-E866507CF674} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-08-30] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-08-30] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-10-12] (HP Inc.)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-10-12] (HP Inc.)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-30] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-30] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-30] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-08-30] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: wq5polgb.default-1496698349931
FF ProfilePath: C:\Users\Alexander Christen\AppData\Roaming\Mozilla\Firefox\Profiles\wq5polgb.default-1496698349931 [2017-09-08]
FF Extension: (Firefox Screenshots) - C:\Users\Alexander Christen\AppData\Roaming\Mozilla\Firefox\Profiles\wq5polgb.default-1496698349931\features\{5e588800-1300-4498-890d-a232f902e58a}\screenshots@mozilla.org.xpi [2017-09-01]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-08-30] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2016-09-01] ()
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lobonlhedgiilkfmbbbfhkaoefacipgj] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AESMService; C:\Program Files\Intel\IntelSGXPSW\bin\x64\Release\aesm_service.exe [3715208 2015-12-14] (Intel Corporation)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1522184 2017-07-04] ()
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424384 2017-08-28] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-16] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-16] (Dropbox, Inc.)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [350064 2016-09-01] (WildTangent)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1309184 2016-10-07] (HP Inc.) [Datei ist nicht signiert]
R2 HPJumpStartBridge; C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-05-23] (HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [631800 2016-06-20] (HP Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17976 2016-09-20] (Intel Corporation)
R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [630048 2016-10-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-11-08] (Intel Corporation)
R2 MBAMService; C:\Games\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 MyWiFiDHCPDNS; c:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-10-06] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-06-21] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-27] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-06-21] (NVIDIA Corporation)
S3 Origin Client Service; D:\Games\Origin\OriginClientService.exe [2098528 2017-08-23] (Electronic Arts)
R2 Origin Web Helper Service; D:\Games\Origin\OriginWebHelperService.exe [2977640 2017-08-23] (Electronic Arts)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-08-01] (Microsoft Corporation)
R2 ZeroConfigService; c:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-10-06] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 iaLPSS2_GPIO2; C:\windows\System32\drivers\iaLPSS2_GPIO2.sys [89912 2016-08-29] (Intel Corporation)
R3 ibtusb; C:\windows\system32\DRIVERS\ibtusb.sys [174600 2017-04-13] (Intel Corporation)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [253856 2017-09-07] (Malwarebytes)
R1 MpKslb6087b7a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2FB43914-C548-4AC1-BCB0-A5A7E1AF18F8}\MpKslb6087b7a.sys [44928 2017-09-07] (Microsoft Corporation)
S3 NetAdapterCx; C:\windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Netwtw04; C:\windows\System32\drivers\Netwtw04.sys [7304960 2016-11-26] (Intel Corporation)
R3 nvlddmkm; C:\windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_720d311dd5a89072\nvlddmkm.sys [15625336 2017-06-28] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-06-21] (NVIDIA Corporation)
S3 NVSWCFilter; C:\windows\System32\drivers\nvswcfilter.sys [35272 2016-11-07] (Windows (R) Win 7 DDK provider)
R3 nvvad_WaveExtensible; C:\windows\system32\drivers\nvvad64v.sys [48248 2017-06-21] (NVIDIA Corporation)
R3 nvvhci; C:\windows\System32\drivers\nvvhci.sys [57792 2017-06-28] (NVIDIA Corporation)
R3 rt640x64; C:\windows\System32\drivers\rt640x64.sys [946696 2016-11-11] (Realtek )
R3 RTSUER; C:\windows\system32\Drivers\RtsUer.sys [418784 2016-09-14] (Realsil Semiconductor Corporation)
S2 SecDrv; C:\windows\SysWOW64\drivers\SECDRV.SYS [11376 2003-04-22] () [Datei ist nicht signiert]
R3 sshid; C:\windows\System32\drivers\sshid.sys [45928 2017-01-10] (SteelSeries ApS)
S0 WdBoot; C:\windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-09-08 14:50 - 2017-09-08 14:50 - 002395648 _____ (Farbar) C:\Users\Alexander Christen\Downloads\FRST64(1).exe
2017-09-07 15:38 - 2017-09-07 15:38 - 001790024 _____ (Malwarebytes) C:\Users\Alexander Christen\Downloads\JRT.exe
2017-09-07 15:33 - 2017-09-07 15:36 - 000000000 ____D C:\AdwCleaner
2017-09-07 15:31 - 2017-09-07 15:33 - 008182736 _____ (Malwarebytes) C:\Users\Alexander Christen\Downloads\adwcleaner_7.0.2.1.exe
2017-09-07 14:44 - 2017-09-07 15:36 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-09-07 14:41 - 2017-09-07 14:41 - 016563352 _____ (Malwarebytes Corp.) C:\Users\Alexander Christen\Downloads\mbar-1.09.3.1001(1).exe
2017-09-06 19:17 - 2017-09-06 19:17 - 000000000 ____D C:\Users\Alexander Christen\Downloads\Recount
2017-09-06 19:13 - 2017-09-06 19:13 - 000377513 _____ C:\Users\Alexander Christen\Downloads\Recount-v7.3.0b.7z
2017-09-06 19:05 - 2017-09-06 19:05 - 002087764 _____ C:\Users\Alexander Christen\Downloads\DBM-Core-7.3.2.zip
2017-09-06 19:01 - 2017-09-06 19:02 - 000392511 _____ C:\Users\Alexander Christen\Downloads\Recount-v7.3.0b.zip
2017-09-06 17:09 - 2017-09-06 17:08 - 000544424 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2017-09-06 17:06 - 2017-09-06 17:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-09-06 17:06 - 2017-09-06 17:06 - 000000000 ____D C:\Program Files\VS Revo Group
2017-09-06 17:05 - 2017-09-06 17:06 - 007178424 _____ (VS Revo Group ) C:\Users\Alexander Christen\Downloads\revosetup_v2.0.3.exe
2017-09-06 15:32 - 2017-09-08 14:50 - 000017598 _____ C:\Users\Alexander Christen\Downloads\FRST.txt
2017-09-06 15:32 - 2017-09-06 15:32 - 000055436 _____ C:\Users\Alexander Christen\Downloads\Addition.txt
2017-09-06 15:31 - 2017-09-08 14:50 - 000000000 ____D C:\FRST
2017-09-06 15:31 - 2017-09-06 15:31 - 002395648 _____ (Farbar) C:\Users\Alexander Christen\Downloads\FRST64.exe
2017-09-03 02:34 - 2017-09-03 02:34 - 000000000 ____D C:\Users\Alexander Christen\Documents\My Games
2017-09-03 02:34 - 2017-09-03 02:34 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\Freelancer
2017-09-03 02:33 - 2017-09-03 02:33 - 000000867 _____ C:\Users\Public\Desktop\Freelancer.lnk
2017-09-03 02:33 - 2017-09-03 02:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2017-09-03 02:33 - 2003-04-22 19:04 - 000011376 ____R C:\windows\SysWOW64\Drivers\SECDRV.SYS
2017-08-29 00:52 - 2017-08-04 07:31 - 001564512 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 001214816 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 000629088 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 000544096 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 000335712 _____ (Microsoft Corporation) C:\windows\system32\dcntel.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 000334176 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 000233824 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 000136032 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2017-08-29 00:52 - 2017-08-04 07:31 - 000096608 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2017-08-29 00:52 - 2017-08-04 07:31 - 000034656 _____ (Microsoft Corporation) C:\windows\system32\DeviceCensus.exe
2017-08-29 00:52 - 2017-08-04 06:26 - 000192864 _____ (Microsoft Corporation) C:\windows\SysWOW64\aepic.dll
2017-08-25 23:05 - 2017-08-25 23:05 - 000000000 ____D C:\Users\Alexander Christen\Documents\FeedbackHub
2017-08-25 23:04 - 2017-08-25 23:04 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\ElevatedDiagnostics
2017-08-18 23:13 - 2017-08-18 23:13 - 000000000 ___RD C:\Users\Alexander Christen\AppData\Roaming\Brother
2017-08-14 23:56 - 2017-08-14 23:56 - 000000000 ____D C:\Users\Alexander Christen\AppData\Roaming\Blizzard
2017-08-14 22:23 - 2017-08-14 23:56 - 000000000 ____D C:\Users\Alexander Christen\Documents\Starcraft
2017-08-13 21:48 - 2017-08-13 21:48 - 000000000 ____D C:\Users\Alexander Christen\AppData\Roaming\.mono
2017-08-13 21:48 - 2017-08-13 21:48 - 000000000 ____D C:\Users\Alexander Christen\AppData\LocalLow\Blizzard Entertainment
2017-08-13 21:48 - 2017-08-13 21:48 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\Blizzard
2017-08-13 21:48 - 2017-08-13 21:48 - 000000000 ____D C:\ProgramData\.mono
2017-08-13 21:34 - 2017-08-13 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2017-08-10 17:44 - 2017-08-10 17:44 - 000394238 ____R C:\Users\Alexander Christen\Downloads\Recount-v7.2.5b.zip
2017-08-10 17:43 - 2017-08-10 17:43 - 002079039 ____R C:\Users\Alexander Christen\Downloads\DBM-Core-7.2.16.zip
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-09-08 14:50 - 2016-07-16 13:47 - 000000000 ____D C:\windows\AppReadiness
2017-09-08 14:30 - 2017-03-17 12:04 - 000003360 _____ C:\windows\System32\Tasks\HPCeeScheduleForAlexander Christen
2017-09-08 14:30 - 2017-03-17 12:04 - 000000416 _____ C:\windows\Tasks\HPCeeScheduleForAlexander Christen.job
2017-09-08 14:28 - 2017-02-15 03:45 - 000000000 ____D C:\ProgramData\NVIDIA
2017-09-08 14:26 - 2017-03-16 22:56 - 000000000 ____D C:\Users\Alexander Christen\AppData\LocalLow\Mozilla
2017-09-08 01:18 - 2017-03-16 22:46 - 000000000 ____D C:\Users\Alexander Christen
2017-09-08 00:13 - 2017-03-16 23:39 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\Battle.net
2017-09-07 22:40 - 2017-02-15 11:13 - 002393642 _____ C:\windows\system32\perfh007.dat
2017-09-07 22:40 - 2017-02-15 11:13 - 000643916 _____ C:\windows\system32\perfc007.dat
2017-09-07 22:40 - 2016-07-29 14:37 - 005116010 _____ C:\windows\system32\PerfStringBackup.INI
2017-09-07 22:35 - 2017-06-05 22:56 - 000253856 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2017-09-07 22:34 - 2016-07-29 14:32 - 000000006 ____H C:\windows\Tasks\SA.DAT
2017-09-07 22:34 - 2016-07-29 14:32 - 000000000 ____D C:\windows\system32\SleepStudy
2017-09-07 15:44 - 2017-05-04 22:26 - 000000000 ____D C:\Users\Alexander Christen\Desktop\Kofferraum
2017-09-07 15:36 - 2016-07-16 08:04 - 000262144 _____ C:\windows\system32\config\BBI
2017-09-07 15:35 - 2017-03-17 02:25 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\Downloaded Installations
2017-09-07 14:59 - 2017-06-05 22:57 - 000109272 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMChameleon.sys
2017-09-07 14:45 - 2017-06-05 22:56 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-07 14:45 - 2017-03-16 22:52 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\CrashDumps
2017-09-07 14:39 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-06 17:11 - 2017-03-16 23:06 - 000000000 ____D C:\ProgramData\Avira
2017-09-06 17:11 - 2017-02-15 02:35 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-05 14:44 - 2016-07-16 13:45 - 000000000 ____D C:\windows\INF
2017-09-04 16:18 - 2016-07-16 13:47 - 000000000 ____D C:\windows\rescache
2017-09-03 13:06 - 2016-07-29 14:32 - 000333224 _____ C:\windows\system32\FNTCACHE.DAT
2017-09-03 02:34 - 2017-03-17 01:09 - 000020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\dplaysvr.exe
2017-09-03 02:34 - 2016-07-16 13:43 - 000471040 _____ (Microsoft Corporation) C:\windows\system32\dpnet.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000395264 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnet.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000220672 _____ (Microsoft Corporation) C:\windows\SysWOW64\dplayx.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000068096 _____ (Microsoft Corporation) C:\windows\system32\dpnathlp.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnathlp.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpwsockx.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000027136 _____ (Microsoft Corporation) C:\windows\system32\dpnsvr.exe
2017-09-03 02:34 - 2016-07-16 13:43 - 000025088 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpmodemx.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnsvr.exe
2017-09-03 02:34 - 2016-07-16 13:43 - 000010240 _____ (Microsoft Corporation) C:\windows\system32\dpnhupnp.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000010240 _____ (Microsoft Corporation) C:\windows\system32\dpnhpast.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhupnp.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000008704 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnhpast.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000006144 _____ (Microsoft Corporation) C:\windows\system32\dpnlobby.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000006144 _____ (Microsoft Corporation) C:\windows\system32\dpnaddr.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnlobby.dll
2017-09-03 02:34 - 2016-07-16 13:43 - 000005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\dpnaddr.dll
2017-09-03 02:34 - 2016-07-16 13:36 - 000000000 ____D C:\windows\CbsTemp
2017-09-02 20:16 - 2017-03-17 23:39 - 000000000 ____D C:\Users\Alexander Christen\AppData\Roaming\TS3Client
2017-08-31 12:30 - 2017-02-15 02:39 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-08-30 22:48 - 2016-07-16 13:47 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-08-28 12:00 - 2017-03-17 23:42 - 000000000 ____D C:\Users\Alexander Christen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-08-28 11:57 - 2017-06-05 23:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-28 11:57 - 2017-06-05 23:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-15 22:54 - 2017-03-16 22:46 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\NVIDIA Corporation
2017-08-14 22:23 - 2017-03-16 23:35 - 000000000 ____D C:\Users\Alexander Christen\AppData\Local\Blizzard Entertainment
2017-08-14 01:53 - 2017-03-16 23:39 - 000000000 ____D C:\ProgramData\Origin
2017-08-13 23:49 - 2017-03-16 23:40 - 000000000 ____D C:\Users\Alexander Christen\AppData\Roaming\Origin
Einige Dateien in TEMP:
====================
2017-03-16 22:49 - 2017-02-23 10:17 - 000754168 _____ (NVIDIA Corporation) C:\Users\Alexander Christen\AppData\Local\Temp\nvSCPAPI.dll
2017-03-16 22:49 - 2017-02-23 10:17 - 000868152 _____ (NVIDIA Corporation) C:\Users\Alexander Christen\AppData\Local\Temp\nvSCPAPI64.dll
2017-03-17 01:03 - 2017-02-23 10:17 - 000354176 _____ (NVIDIA Corporation) C:\Users\Alexander Christen\AppData\Local\Temp\nvStInst.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-09-06 15:03
==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-08-2017
durchgeführt von Alexander Christen (08-09-2017 14:50:45)
Gestartet von C:\Users\Alexander Christen\Downloads
Windows 10 Home Version 1607 (X64) (2017-03-16 20:44:17)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2831167691-3386689056-442812474-500 - Administrator - Disabled)
Alexander Christen (S-1-5-21-2831167691-3386689056-442812474-1001 - Administrator - Enabled) => C:\Users\Alexander Christen
DefaultAccount (S-1-5-21-2831167691-3386689056-442812474-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-2831167691-3386689056-442812474-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-2831167691-3386689056-442812474-501 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 16.04 (HKLM-x32\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Age of Mythology: Extended Edition (HKLM\...\Steam App 266840) (Version: - SkyBox Labs)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.76 - NVIDIA Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefleet Gothic: Armada (HKLM\...\Steam App 363680) (Version: - Tindalos Interactive)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops II - Zombies (HKLM\...\Steam App 212910) (Version: - )
Command & Conquer™ and The Covert Operations™ (HKLM-x32\...\{050E298D-C9B8-4582-A332-26201268A297}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Command & Conquer™ Renegade (HKLM-x32\...\{24DFBE4C-FD7F-48F2-A7D9-D1A0929B2113}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.5.7103 - CyberLink Corp.)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.2.3426 - CyberLink Corp.)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Freelancer (HKLM-x32\...\Freelancer 1.0) (Version: - )
Half-Life 2 (HKLM\...\Steam App 220) (Version: - Valve)
Half-Life 2: Episode One (HKLM\...\Steam App 380) (Version: - Valve)
Half-Life 2: Episode Two (HKLM\...\Steam App 420) (Version: - Valve)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
HP Audio Switch (HKLM-x32\...\{0C5D69BD-B518-46DB-8471-506CD27F9478}) (Version: 1.0.138.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.2 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{5b1a1d22-bd59-44e0-a954-e2f18ec43a23}) (Version: 5.2.20454 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{EB0912FF-C311-4E0F-A6B1-420FDD3C295E}) (Version: 1.3.0.407 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{859F3766-ABD1-44BF-A99C-2541B451306A}) (Version: 1.1.217.0 - HP Inc.)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8361.5688 - HP Inc.)
HP Support Assistant (HKLM-x32\...\{DFBDDDB3-D753-4454-84E9-2D3D96E89EFF}) (Version: 8.4.19.3 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{11B7269C-6904-485C-9875-F23AAE32E671}) (Version: 12.7.27.15 - HP Inc.)
HP Sure Connect (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 1.0.0.29 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{29E20347-C62F-4657-938E-876A182B67F1}) (Version: 1.4.14 - HP Inc.)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.19.108.1 - Intel Security)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1039 - Intel Corporation)
Intel(R) PRO/Wireless Driver (HKLM\...\{62895482-f4fc-47fb-aa43-60a03291452b}) (Version: 19.20.0006.5353 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{8C739F03-60D4-45DE-96FE-6A18D943826F}) (Version: 19.11.1641.0703 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Malwarebytes Version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Mass Effect™: Andromeda (HKLM-x32\...\{72BBCA87-9350-48BC-9E2F-6DBC1E80C993}) (Version: 1.0.0.10 - Electronic Arts)
Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.8326.2096 - Microsoft Corporation)
Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.8326.2096 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2831167691-3386689056-442812474-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
Mozilla Firefox 55.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 55.0.3 (x86 de)) (Version: 55.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.3 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 384.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.76 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.7.0.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.7.0.81 - NVIDIA Corporation)
NVIDIA Grafiktreiber 384.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.76 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.7.0.81 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.6.1.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8326.2096 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2096 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2096 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.8326.2096 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.8326.2096 - Microsoft Corporation) Hidden
OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.2.49155 - Electronic Arts, Inc.)
PLAYERUNKNOWN'S BATTLEGROUNDS (HKLM\...\Steam App 578080) (Version: - Bluehole, Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.12.1007.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7977 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0380 - NVIDIA Corporation) Hidden
StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellaris (HKLM\...\Steam App 281990) (Version: - Paradox Development Studio)
Synergy (HKLM\...\Steam App 17520) (Version: - Synergy Team)
TeamSpeak 3 Client (HKU\S-1-5-21-2831167691-3386689056-442812474-1001\...\TeamSpeak 3 Client) (Version: 3.1.1 - TeamSpeak Systems GmbH)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WestwoodChat (HKLM-x32\...\{7CAE6A67-AF7B-4A6A-8705-8AFACA45BB60}) (Version: 1.0.0.0 - WestwoodChat)
WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline)
WildTangent Games App für HP (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.1.1.14 - WildTangent)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Games\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Games\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Games\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\windows\system32\nvshext.dll [2017-06-27] (NVIDIA Corporation)
ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Games\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Games\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {04D70FB3-3643-4780-A7AB-70F87528A314} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-10-13] (Intel(R) Corporation)
Task: {06D18D80-BBE3-4075-87F4-9AD1B06CBDDF} - System32\Tasks\HPCeeScheduleForAlexander Christen => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-05-12] (HP Development Company, L.P.)
Task: {1E4AC7E1-AAD5-4B4A-9DE5-E3C71638146B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ACHTUNG
Task: {1FA51DE5-E99D-42B8-BD31-1A7C32ABD6E4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-06-21] (NVIDIA Corporation)
Task: {220359F3-8CEE-4F1A-AE1D-497CCAAD3B3D} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2016-08-31] ()
Task: {2AD154E2-0372-4752-B112-22DF30F5F344} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-08-28] (Microsoft Corporation)
Task: {37AEB426-8FE8-4BCA-B8A9-2CC382B5095C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {3C2376BB-95FF-4450-8BD1-0A48E320DB59} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [2016-11-03] ()
Task: {3D250138-CA45-46CE-80A7-76E4D2FBECEC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.)
Task: {4E8769F1-7B9B-4987-B1F1-EE07C4A98DF9} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [2016-10-04] (HP Inc.)
Task: {5B8124E2-E56B-4A31-AE46-10AD93EB467C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-08-30] ()
Task: {6A8001D0-1151-44C8-8C16-1044E5B60061} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {6B8DA480-18E3-4D12-A9DE-D35F4A3AEA61} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-06-21] (NVIDIA Corporation)
Task: {73033586-9CF1-4208-9514-8D758DCB9D2B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-09-01] (HP Inc.)
Task: {80990505-18B1-4A42-9C9E-17D81F46F51C} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {82371104-2E41-41BD-A1CF-F8CA737C3646} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-21] (NVIDIA Corporation)
Task: {91615037-3856-4828-B7E6-12B3F2AB41B0} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-16] (Dropbox, Inc.)
Task: {9165BA11-FDFC-4EC8-B28D-59395758CD4C} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-08-28] (Microsoft Corporation)
Task: {9848C796-ED9E-4553-BD0E-A16C9FD519DA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ACHTUNG
Task: {998EEEE3-5382-4C68-AC3A-E25A29BB4F05} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {A1455BC9-56F0-49BD-88BC-C08F67815A04} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {ADD00139-FA62-4E11-ACF0-8C1AD9E7C8DB} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {AE72CA2C-B46C-49F5-AE0B-038606F04F3C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ACHTUNG
Task: {B2556DAF-BDD0-41C9-8166-CF8E1EB884D8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-08-14] (HP Inc.)
Task: {C3CDFBE7-CC24-431E-BC5D-8770C03AC803} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-16] (Dropbox, Inc.)
Task: {DE195056-FF89-43D7-9376-8A4BC3907E56} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {E22A44C3-96EF-4B78-990A-2AB89656B111} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {ECC5C19E-E647-4811-97C0-BF0EDD16DE67} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.)
Task: {EF295B0D-580C-4CE3-BC5B-4B96B8AB6EEC} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-06-21] (NVIDIA Corporation)
Task: {F405BD17-27EB-44E3-B658-0324FD8BFF39} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-08-01] (Microsoft Corporation) <==== ACHTUNG
Task: {F7EF0EE4-6C75-4A83-9E90-819740023925} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-08-14] (HP Inc.)
Task: {F8BC28F0-F336-4F9B-A01A-BC797A329AC5} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-08-30] ()
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForAlexander Christen.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2017-03-17 00:48 - 2017-06-21 09:07 - 001267320 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\windows\SYSTEM32\ism32k.dll
2017-07-12 15:38 - 2017-06-21 09:48 - 002681200 _____ () C:\windows\System32\CoreUIComponents.dll
2016-11-03 12:01 - 2016-11-03 12:01 - 000456544 _____ () C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
2017-02-15 11:27 - 2017-02-15 11:27 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-17 01:07 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-17 01:08 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-17 01:08 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-17 01:08 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-08-08 19:59 - 2017-03-04 08:05 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-08-08 19:59 - 2017-08-01 20:26 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-08-08 19:59 - 2017-08-01 20:31 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-08-09 18:43 - 2017-08-09 18:43 - 000156672 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\13be08c1597a5535f76f5281ee78b384\BRIDGECommon.ni.dll
2017-08-09 18:44 - 2017-08-09 18:44 - 000331776 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\CleanStartController\7f4287b4bd61f9c33269673e53f5b926\CleanStartController.ni.dll
2017-08-09 18:44 - 2017-08-09 18:44 - 000116736 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\BridgeExtension\4fe1d922a12f08aa4c588692bf637816\BridgeExtension.ni.dll
2017-08-09 18:44 - 2017-08-09 18:44 - 000070656 _____ () C:\windows\assembly\NativeImages_v4.0.30319_32\NativeInterop\e0412c27df51995ff3210acf6266b98a\NativeInterop.ni.dll
2016-11-08 20:40 - 2016-11-08 20:40 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-03-17 00:48 - 2017-06-21 09:07 - 001040504 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-03-17 00:48 - 2017-06-21 09:06 - 066837112 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2017-08-30 21:29 - 2017-08-04 23:19 - 000678176 _____ () D:\Games\Steam\SDL2.dll
2017-03-16 23:39 - 2016-09-01 03:02 - 004969248 _____ () D:\Games\Steam\v8.dll
2017-09-08 14:25 - 2017-09-07 06:51 - 002505504 _____ () D:\Games\Steam\video.dll
2017-03-16 23:39 - 2016-01-27 09:49 - 002549760 _____ () D:\Games\Steam\libavcodec-56.dll
2017-03-16 23:39 - 2016-01-27 09:49 - 000491008 _____ () D:\Games\Steam\libavformat-56.dll
2017-03-16 23:39 - 2016-01-27 09:49 - 000332800 _____ () D:\Games\Steam\libavresample-2.dll
2017-03-16 23:39 - 2016-01-27 09:49 - 000442880 _____ () D:\Games\Steam\libavutil-54.dll
2017-03-16 23:39 - 2016-01-27 09:49 - 000485888 _____ () D:\Games\Steam\libswscale-3.dll
2017-03-16 23:39 - 2016-09-01 03:02 - 001563936 _____ () D:\Games\Steam\icui18n.dll
2017-03-16 23:39 - 2016-09-01 03:02 - 001195296 _____ () D:\Games\Steam\icuuc.dll
2017-09-08 14:26 - 2017-09-07 06:51 - 000885024 _____ () D:\Games\Steam\bin\chromehtml.DLL
2017-03-16 23:39 - 2016-07-05 00:17 - 000266560 _____ () D:\Games\Steam\openvr_api.dll
2017-08-30 21:29 - 2017-07-18 00:50 - 073115424 _____ () D:\Games\Steam\bin\cef\cef.win7\libcef.dll
2017-06-10 06:07 - 2017-05-17 03:54 - 000678176 _____ () D:\Games\Steam\bin\cef\cef.win7\SDL2.dll
2017-03-16 23:39 - 2015-09-25 01:52 - 000119208 _____ () D:\Games\Steam\winh264.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2016-07-16 13:47 - 2016-07-16 13:45 - 000000824 _____ C:\windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2831167691-3386689056-442812474-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Alexander Christen\Pictures\fotos 4\DSCN1349.JPG
DNS Servers: 192.168.192.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{A813366E-A56C-4DA9-93F7-2F8B98F3E440}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BEF03698-0CA5-4869-8BAB-C15DE44B3FCF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7B732B8B-6D92-44B5-88BF-29B6A62555CD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BD1E132A-D7CF-4B69-AA58-F01504F24B93}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2F314EB3-569A-4DD4-8D4A-D6D8ECDF23B0}] => (Allow) c:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{9AF28E06-4382-4BB8-AFA8-EB05881E54D1}] => (Allow) C:\Program Files\CyberLink\PowerDirector14\PDR10.EXE
FirewallRules: [{4EEE74B4-0CD5-49EF-9C10-7D48DF4B8E2E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe
FirewallRules: [{15F9C9C3-4581-4696-A09D-FE1429A9F0F3}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe
FirewallRules: [{E6D172EA-D277-4C89-AC44-6AF2367C67EA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe
FirewallRules: [{750CFEB7-628B-44D0-BCD8-0C1DDBF0C2F1}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe
FirewallRules: [{45FCC82C-B25B-4B3C-B181-EA16E133D66A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{CB70A377-0EB7-4573-8E5D-418190C659EF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{36CE427C-6F40-4478-AB4D-664648DF84EE}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{89BBBF32-1379-4D65-93AB-9473DCF720C5}] => (Allow) C:\Games\Steam\Steam.exe
FirewallRules: [{DDB40012-71E3-4467-8C33-86395C43727B}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{6E48BE8D-65CC-43BD-8511-D8AC09A5642F}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{6FA01F84-FB05-4000-B7AE-070DB61D1F7D}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{698A9541-7747-414F-8F62-235D8A4C2BEB}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{F1F78FE8-5458-4D0A-964C-FE6F2FB6EE2A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{3A86516B-2AF6-4C37-B65F-33EEC1EDE922}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{FFE76E75-4EE6-48E3-BCB5-077F95C4350B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{0BF329C7-9AB3-4E98-A365-F7AE4315902A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F92668CD-1B09-4497-9AAE-F920649A33B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F4076F31-B67C-4DB7-B0CC-528D7C45B318}] => (Allow) D:\Games\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{41595F88-ECD9-4FB2-9B2F-A1609E67C5D9}] => (Allow) D:\Games\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{278327A8-7A88-49F4-B04A-521BF79A4044}] => (Allow) C:\Users\Alexander Christen\AppData\Local\Temp\pft31C0.tmp\fsetup.exe
FirewallRules: [{577D53E5-6C0B-468A-B9B8-8629E9E47A66}] => (Allow) C:\Users\Alexander Christen\AppData\Local\Temp\pft31C0.tmp\fsetup.exe
FirewallRules: [{FA18F201-F3A0-459D-82BC-1CC9DA40F891}] => (Allow) D:\Games\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{AA2AE88B-8FD8-4014-A796-21C22807C861}] => (Allow) D:\Games\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{A7581AD6-5DCB-4A41-ADD3-9988B9B8013A}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{346D7791-74A2-4D94-9562-FA1D0A39172B}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{B33D0A73-A98B-4041-AF5D-9BCB492B70DF}D:\games\starcraft ii\versions\base53644\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base53644\sc2_x64.exe
FirewallRules: [UDP Query User{44D4A6CD-7BCD-4ADF-8D29-F698642C66AE}D:\games\starcraft ii\versions\base53644\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base53644\sc2_x64.exe
FirewallRules: [TCP Query User{E84679AC-6BA3-4791-8F8E-E6AA3D321697}D:\games\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{3DD608F4-1A40-41B1-ACEF-525280C63B52}D:\games\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base53965\heroesofthestorm_x64.exe
FirewallRules: [{07817D72-D457-45EB-807C-BC83375167E2}] => (Allow) D:\Games\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{C38DB388-BAA3-43C8-AFFA-DF5B86B248E2}] => (Allow) D:\Games\Steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [TCP Query User{8DC40E8C-7D8A-4E36-950E-AA02FCB21380}D:\games\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{2E7E118C-1ADD-43AB-AD2B-0C9CD64C2696}D:\games\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base54339\heroesofthestorm_x64.exe
FirewallRules: [{95B10836-5AFA-43F8-A404-4033785FA051}] => (Allow) D:\Program Files (x86)\Origin Games\Renegade\RenegadeLauncher.exe
FirewallRules: [{D669D0C0-0810-4A91-8417-36A48E9D367A}] => (Allow) D:\Program Files (x86)\Origin Games\Renegade\RenegadeLauncher.exe
FirewallRules: [TCP Query User{EBFFFD95-527E-4BD5-B155-7E439FB13F41}D:\program files (x86)\origin games\renegade\game.exe] => (Allow) D:\program files (x86)\origin games\renegade\game.exe
FirewallRules: [UDP Query User{65BBCCCE-D0E2-4E7C-AFDC-15FC3904A1F5}D:\program files (x86)\origin games\renegade\game.exe] => (Allow) D:\program files (x86)\origin games\renegade\game.exe
FirewallRules: [TCP Query User{6AD1FD97-7A03-4B69-B3A9-1582652D0614}D:\games\starcraft ii\versions\base54518\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base54518\sc2_x64.exe
FirewallRules: [UDP Query User{26D73C0A-3389-4240-A134-3CC7E8CF0996}D:\games\starcraft ii\versions\base54518\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base54518\sc2_x64.exe
FirewallRules: [TCP Query User{067CCCFB-5079-4A92-B87E-C62B574E1D2C}D:\games\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{F43BF094-F940-4847-8169-7E7D854E8D24}D:\games\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base54968\heroesofthestorm_x64.exe
FirewallRules: [{38089CD3-0A90-4A69-837A-9C1CA8258043}] => (Allow) D:\Program Files (x86)\Origin Games\CNC and The Covert Operations\CNC95Launcher.exe
FirewallRules: [{8BEFA382-4FF4-4E33-ACED-67EC0709408F}] => (Allow) D:\Program Files (x86)\Origin Games\CNC and The Covert Operations\CNC95Launcher.exe
FirewallRules: [TCP Query User{68F72279-4AF6-4EE2-86AB-D9CF2DB305F7}D:\games\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe] => (Block) D:\games\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{B5482ACF-0E6B-44C9-888C-FA24C55EFA41}D:\games\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe] => (Block) D:\games\heroes of the storm\versions\base55010\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{3D146C86-EB5D-4CB7-B5E3-E1FAE0018442}D:\games\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\games\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [UDP Query User{642BEE67-D52D-417A-A896-250848F8BF0F}D:\games\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\games\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [{17CA288F-4633-4183-A5C7-35067C7B73C5}] => (Allow) D:\Games\Steam\steamapps\common\Battlefleet Gothic Armada\BattleFleetGothic.exe
FirewallRules: [{7F81B006-7BE3-456A-BEF2-8C97B1750C3C}] => (Allow) D:\Games\Steam\steamapps\common\Battlefleet Gothic Armada\BattleFleetGothic.exe
FirewallRules: [TCP Query User{AFC056CE-3471-4DC8-9087-4AD2E5DDA705}D:\games\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Allow) D:\games\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe
FirewallRules: [UDP Query User{88F4CDB2-5811-4C48-A32F-D01E73B3A777}D:\games\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Allow) D:\games\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe
FirewallRules: [{CDC6839D-F356-480F-BEC4-F324B46A90C0}] => (Allow) D:\Games\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{24EB7659-CBEA-4C49-98DE-1308850EED76}] => (Allow) D:\Games\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [TCP Query User{C24A6D5B-4FC2-4515-9C69-77006961658C}D:\games\starcraft ii\versions\base55505\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base55505\sc2_x64.exe
FirewallRules: [UDP Query User{1F14165E-7E03-4656-95C9-9BDE05C9C051}D:\games\starcraft ii\versions\base55505\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base55505\sc2_x64.exe
FirewallRules: [{AF6285D1-1721-4880-91E4-432F443B763B}] => (Allow) D:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{C85177A5-7C91-4C24-A7AE-FD0F5E4A2972}] => (Allow) D:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{5BD2D680-2DB1-4045-B0F4-D21997CEAAAD}] => (Allow) D:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{AAC11A9F-2A80-419E-A337-660C09982E2E}] => (Allow) D:\Program Files (x86)\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{26491233-7600-43D1-9D0A-CF77E871D2F8}] => (Allow) D:\Games\Steam\steamapps\common\Age of Mythology\Launcher.exe
FirewallRules: [{3A138E79-9775-4F31-B06B-CFB0F1367FC2}] => (Allow) D:\Games\Steam\steamapps\common\Age of Mythology\Launcher.exe
FirewallRules: [{6340AC62-E6BC-421C-A330-F3AC209653E0}] => (Allow) D:\Games\Steam\steamapps\common\Age of Mythology\aomx.exe
FirewallRules: [{EE7CC2D4-48E5-44F9-AEFC-EFB9B3A39B2F}] => (Allow) D:\Games\Steam\steamapps\common\Age of Mythology\aomx.exe
FirewallRules: [TCP Query User{FB0FDF5B-DD77-4F25-A04F-1C9F9BB78060}D:\games\heroes of the storm\versions\base56361\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base56361\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{E6064E6F-CAC9-4C41-BBFB-561F269DDA2A}D:\games\heroes of the storm\versions\base56361\heroesofthestorm_x64.exe] => (Allow) D:\games\heroes of the storm\versions\base56361\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{3846E4B9-A261-4154-9805-74B8DDFDB157}D:\games\hearthstone\hearthstone.exe] => (Allow) D:\games\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{92125F3B-04FC-4D71-8D0D-8F8811B14742}D:\games\hearthstone\hearthstone.exe] => (Allow) D:\games\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{ADB26319-7E27-4F35-B338-DFEDAD6E5A24}D:\games\starcraft ii\versions\base55958\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base55958\sc2_x64.exe
FirewallRules: [UDP Query User{A3625319-A53F-4968-8590-550EDF1758B3}D:\games\starcraft ii\versions\base55958\sc2_x64.exe] => (Allow) D:\games\starcraft ii\versions\base55958\sc2_x64.exe
FirewallRules: [TCP Query User{D8A7B4EE-D541-46CB-BFC8-F345E2C43ED5}D:\games\starcraft\starcraft.exe] => (Allow) D:\games\starcraft\starcraft.exe
FirewallRules: [UDP Query User{F65BE692-3DC5-40EA-8F31-A9D81210908E}D:\games\starcraft\starcraft.exe] => (Allow) D:\games\starcraft\starcraft.exe
FirewallRules: [{47C26136-3BD9-435F-AB1D-6412C7DE45C2}] => (Allow) D:\Games\Steam\steamapps\common\Synergy\synergy.exe
FirewallRules: [{4F76BD45-79A3-4EE3-ADE7-E89AE6878484}] => (Allow) D:\Games\Steam\steamapps\common\Synergy\synergy.exe
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (09/08/2017 01:18:15 AM) (Source: IntelDalJhi) (EventID: 4) (User: )
Description: Intel(R) Dynamic Application Loader Host Interface Service initialization failure - the spooler applet is invalid.
Error: (09/08/2017 01:18:15 AM) (Source: IntelDalJhi) (EventID: 4) (User: )
Description: Intel(R) Dynamic Application Loader Host Interface Service initialization failure - the spooler applet is invalid.
Error: (09/07/2017 02:45:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm mbar.exe, Version 1.9.3.1001 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 510
Startzeit: 01d327d699db6a88
Beendigungszeit: 60000
Anwendungspfad: C:\Users\Alexander Christen\Desktop\mbar\mbar.exe
Berichts-ID: 4c6988ec-93ca-11e7-94c5-30e37af29d5f
Vollständiger Name des fehlerhaften Pakets:
Auf das fehlerhafte Paket bezogene Anwendungs-ID:
Error: (09/07/2017 02:45:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mbar.exe, Version: 1.9.3.1001, Zeitstempel: 0x55ca7a8b
Name des fehlerhaften Moduls: mbamcore.dll, Version: 1.2.900.7, Zeitstempel: 0x55ca7a6f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00057e0b
ID des fehlerhaften Prozesses: 0x510
Startzeit der fehlerhaften Anwendung: 0x01d327d699db6a88
Pfad der fehlerhaften Anwendung: C:\Users\Alexander Christen\Desktop\mbar\mbar.exe
Pfad des fehlerhaften Moduls: C:\Users\Alexander Christen\Desktop\mbar\mbamcore.dll
Berichtskennung: 24a17766-fc92-4fb5-bf9f-21e2aed57704
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (09/07/2017 02:38:50 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (09/06/2017 05:02:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2188719
Error: (09/06/2017 05:02:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2188719
Error: (09/06/2017 05:02:28 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/06/2017 05:02:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2187391
Error: (09/06/2017 05:02:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2187391
Systemfehler:
=============
Error: (09/08/2017 02:26:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (09/08/2017 02:26:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
Error: (09/08/2017 02:25:37 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (09/08/2017 02:25:37 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (09/08/2017 02:25:37 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (09/08/2017 01:18:11 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (09/07/2017 10:35:02 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (09/07/2017 10:34:56 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (09/07/2017 10:34:56 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (09/07/2017 10:34:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SecDrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
CodeIntegrity:
===================================
Date: 2017-06-05 23:30:43.190
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-06-05 23:19:56.520
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-06-05 22:15:15.516
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-06-05 22:04:18.611
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-05-21 20:54:28.973
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-04-01 20:39:01.453
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-03-27 20:37:18.499
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-03-27 20:37:06.673
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-03-17 01:22:23.154
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-03-17 01:21:56.083
Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 31%
Installierter physikalischer RAM: 8093.32 MB
Verfügbarer physikalischer RAM: 5543.72 MB
Summe virtueller Speicher: 10781.32 MB
Verfügbarer virtueller Speicher: 7734.16 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:118.01 GB) (Free:60.43 GB) NTFS
Drive d: (DATA) (Fixed) (Total:919.4 GB) (Free:707.94 GB) NTFS
Drive e: (RECOVERY) (Fixed) (Total:12.12 GB) (Free:1.48 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (fl_v1) (CDROM) (Total:0.51 GB) (Free:0 GB) CDFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: C201ED18)
Partition: GPT.
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: D282A015)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
FRST 32-Bit | FRST 64-Bit
Lesestoff:
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
SecurityCheck und:
dann auf 
und dann auf 
. 