JRT gibbes kein Log:
FRST: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:31-10-2015
durchgeführt von Tom_admin (Administrator) auf TOM_USER (02-11-2015 14:34:46)
Gestartet von C:\Users\Tom\Desktop
Geladene Profile: Tom & Tom_admin (Verfügbare Profile: Tom & Tom_admin)
Platform: Windows 10 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\CaptureGenPCI.exe
(Hauppauge Computer Works) C:\Program Files (x86)\WinTV\TVServer\CaptureDLNA.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1796056 2014-08-19] (NVIDIA Corporation)
HKLM\...\Run: [HP Color LaserJet CM2320 MFP Series Fax] => C:\Program Files (x86)\HP\HP Color LaserJet CM2320 MFP Series\hppfaxprintersrv.exe [3700736 2009-09-22] (Hewlett-Packard Company)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [571192 2014-08-14] (Acronis)
HKLM-x32\...\Run: [HPPQVideo] => C:\Program Files (x86)\HP\ScheduledLaunch\HP Color LaserJet CM2320 MFP Series\bin\hppschlnch.exe [106496 2007-05-07] (Hewlett-Packard)
HKLM-x32\...\Run: [ToolBoxFX] => C:\Program Files (x86)\HP\ToolBoxFX\bin\HPTLBXFX.exe [53248 2009-10-22] (HP)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310064 2014-06-14] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [PMBVolumeWatcher] => D:\PlayMemories\PMBVolumeWatcher.exe [2711576 2014-10-03] (Sony Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5270504 2014-10-22] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [606096 2014-10-17] (Acronis International GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKLM\...\RunOnce: [*EmptyTemp] => cmd /c rd /q/s C:\FRST\Temp
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2015-10-05] (Malwarebytes)
HKU\S-1-5-21-3917217520-1086647508-2083587260-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403192 2015-09-11] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-3917217520-1086647508-2083587260-1001\...\Winlogon: [Userinit] C:\Users\Tom\AppData\Roaming\loadit.exe
HKU\S-1-5-21-3917217520-1086647508-2083587260-1007\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403192 2015-09-11] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-3917217520-1086647508-2083587260-1007\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3917217520-1086647508-2083587260-1007\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-07-10] (Microsoft Corporation)
HKU\S-1-5-21-3917217520-1086647508-2083587260-1007\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[C1].txt [10815 2015-11-02] ()
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403192 2015-09-11] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutoStart IR.lnk [2015-06-15]
ShortcutTarget: AutoStart IR.lnk -> C:\Program Files (x86)\WinTV\Ir.exe (Hauppauge Computer Works)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-11-08]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinTV Recording Status.lnk [2015-06-15]
ShortcutTarget: WinTV Recording Status.lnk -> C:\Program Files (x86)\WinTV\WinTV7\WinTVTray.exe (Hauppauge Computer Works, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-11-09]
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{21ec3c04-5c06-4488-ab39-a8293e1a4a77}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-20] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-20] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2015-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-05-11] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-05-11] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-11-08] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Tom_admin\AppData\Roaming\Mozilla\Firefox\Profiles\jwjcxdnf.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-16] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-11-08] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-16] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> d:\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-07-03] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> d:\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2013-07-03] (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-05-11] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-05-11] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-02-17] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2014-11-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-17] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2780856 2015-10-07] (Microsoft Corporation)
S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [762272 2015-09-11] (Garmin Ltd. or its subsidiaries)
S2 Hauppauge WinTV Extender; C:\Program Files (x86)\WinTV\Extend\WinTVExtender.exe [59392 2013-08-07] (Hauppauge Computer Works, Inc) [Datei ist nicht signiert]
R2 HauppaugeTVServer; C:\Program Files (x86)\WinTV\TVServer\HauppaugeTVServer.exe [582144 2013-08-31] (Hauppauge Computer Works) [Datei ist nicht signiert]
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-06-01] (HP) [Datei ist nicht signiert]
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2007-11-06] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [139264 2007-11-06] (Hewlett-Packard Co.) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [Datei ist nicht signiert]
S2 PMBDeviceInfoProvider; D:\PlayMemories\PMBDeviceInfoProvider.exe [485400 2014-10-03] (Sony Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [Datei ist nicht signiert]
S2 StarMoney 10 OnlineUpdate; C:\Program Files (x86)\StarMoney 10\ouservice\StarMoneyOnlineUpdate.exe [688784 2015-07-27] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
S2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2014-11-09] (Acronis International GmbH)
R3 hcw85cir; C:\Windows\system32\drivers\hcw85cir3.sys [33792 2013-04-08] (Hauppauge Computer Works, Inc.)
R3 i8042HDR; C:\Windows\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1328928 2014-11-09] (Acronis International GmbH)
S3 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [234784 2014-11-09] (Acronis International GmbH)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-11-02 14:34 - 2015-11-02 14:35 - 00017591 _____ C:\Users\Tom\Desktop\FRST.txt
2015-11-02 14:31 - 2015-11-02 14:31 - 00001071 _____ C:\Users\Tom_admin\Desktop\JRT.txt
2015-11-02 14:28 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\Tom_admin\Desktop\JRT.exe
2015-11-02 14:27 - 2015-11-02 14:27 - 01798976 _____ (Malwarebytes) C:\Users\Tom\Desktop\JRT.exe
2015-11-02 14:23 - 2015-11-02 14:23 - 00016148 _____ C:\WINDOWS\system32\TOM_USER_Tom_HistoryPrediction.bin
2015-11-02 14:20 - 2015-11-02 14:20 - 00000000 ____D C:\Users\Tom_admin\AppData\Local\PeerDistRepub
2015-11-02 14:18 - 2015-11-02 14:20 - 00000000 ____D C:\AdwCleaner
2015-11-02 14:16 - 2015-11-02 14:16 - 01708032 _____ C:\Users\Tom\Desktop\AdwCleaner_5.016.exe
2015-11-02 14:15 - 2015-11-02 14:15 - 00013941 _____ C:\Users\Tom\Desktop\mbam.log
2015-11-02 10:34 - 2015-11-02 10:34 - 02198016 _____ (Farbar) C:\Users\Tom\Desktop\FRST64.exe
2015-11-02 07:04 - 2015-11-02 07:04 - 00016148 _____ C:\WINDOWS\system32\TOM_USER_Tom_admin_HistoryPrediction.bin
2015-11-01 18:33 - 2015-11-01 18:33 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2015-11-01 18:27 - 2015-11-01 18:27 - 00000000 ____D C:\Users\Tom_admin\AppData\Local\TileDataLayer
2015-11-01 13:05 - 2015-11-02 14:34 - 00000000 ____D C:\FRST
2015-10-30 17:08 - 2015-10-28 00:38 - 21871616 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-10-30 17:08 - 2015-10-28 00:16 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-10-30 17:08 - 2015-10-21 13:45 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-10-30 17:08 - 2015-10-21 13:44 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-10-30 17:08 - 2015-10-21 13:43 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-10-30 17:08 - 2015-10-21 13:39 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-10-30 17:08 - 2015-10-21 13:00 - 24595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-10-30 17:08 - 2015-10-21 13:00 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-10-30 17:08 - 2015-10-21 12:59 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2015-10-30 17:08 - 2015-10-21 12:57 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-10-30 17:08 - 2015-10-21 12:52 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-10-30 17:08 - 2015-10-21 12:50 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-10-30 17:08 - 2015-10-21 12:48 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-10-30 17:08 - 2015-10-21 12:47 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-10-30 17:08 - 2015-10-21 12:46 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-10-30 17:08 - 2015-10-21 12:46 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-10-30 17:08 - 2015-10-21 12:44 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-10-30 17:08 - 2015-10-21 12:44 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-10-30 17:08 - 2015-10-21 12:43 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2015-10-30 17:08 - 2015-10-21 12:42 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-10-30 17:08 - 2015-10-21 12:41 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-10-30 17:08 - 2015-10-21 12:40 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2015-10-30 17:08 - 2015-10-21 12:38 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-10-30 17:08 - 2015-10-21 06:53 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-10-30 17:08 - 2015-10-21 06:49 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-10-30 17:08 - 2015-10-21 06:13 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-10-30 17:08 - 2015-10-21 06:11 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-10-30 17:08 - 2015-10-21 06:08 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-10-30 17:08 - 2015-10-21 06:05 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-10-30 17:08 - 2015-10-21 06:03 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-10-30 17:08 - 2015-10-21 06:03 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-10-30 17:08 - 2015-10-21 05:58 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2015-10-30 17:08 - 2015-10-21 05:58 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-10-30 17:08 - 2015-10-21 05:55 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-10-23 17:58 - 2015-10-23 17:58 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Solveig Multimedia
2015-10-23 17:57 - 2015-10-23 17:57 - 00001385 _____ C:\Users\Tom_admin\Desktop\SolveigMM Video Splitter Home Edition.lnk
2015-10-23 17:57 - 2015-10-23 17:57 - 00000840 _____ C:\Users\Public\Desktop\SolveigMM AVI Trimmer+.lnk
2015-10-23 17:57 - 2015-10-23 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solveig Multimedia
2015-10-23 17:57 - 2015-10-23 17:57 - 00000000 ____D C:\Program Files (x86)\Solveig Multimedia
2015-10-18 21:37 - 2015-10-18 21:37 - 00000000 ____D C:\Users\Tom\AppData\Local\MicrosoftEdge
2015-10-18 19:38 - 2015-10-23 07:54 - 00002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-18 19:38 - 2015-10-18 19:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-14 13:09 - 2015-10-10 08:12 - 00078528 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-10-14 13:09 - 2015-10-06 04:03 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-10-14 13:09 - 2015-10-06 03:46 - 13027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-10-14 13:09 - 2015-10-01 05:01 - 01294352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-10-14 13:09 - 2015-10-01 05:01 - 01123400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-10-14 13:09 - 2015-10-01 05:01 - 01018568 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-10-14 13:09 - 2015-10-01 05:01 - 00858408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-10-14 13:09 - 2015-10-01 05:00 - 08020320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-10-14 13:09 - 2015-10-01 04:03 - 00757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-10-14 13:09 - 2015-09-25 05:01 - 02573768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2015-10-14 13:09 - 2015-09-25 05:01 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2015-10-14 13:09 - 2015-09-25 04:56 - 22322624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-10-14 13:09 - 2015-09-25 04:52 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2015-10-14 13:09 - 2015-09-25 04:33 - 01997336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2015-10-14 13:09 - 2015-09-25 04:26 - 20858360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-10-14 13:09 - 2015-09-25 04:11 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2015-10-14 13:09 - 2015-09-25 04:11 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneCallHistoryApis.dll
2015-10-14 13:09 - 2015-09-25 04:09 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-10-14 13:09 - 2015-09-25 04:07 - 01276416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-10-14 13:09 - 2015-09-25 04:04 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-10-14 13:09 - 2015-09-25 04:04 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2015-10-14 13:09 - 2015-09-25 04:03 - 00796160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2015-10-14 13:09 - 2015-09-25 04:03 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-10-14 13:09 - 2015-09-25 04:02 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2015-10-14 13:09 - 2015-09-25 04:02 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-10-14 13:09 - 2015-09-25 04:02 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2015-10-14 13:09 - 2015-09-25 04:01 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-10-14 13:09 - 2015-09-25 04:01 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-10-14 13:09 - 2015-09-25 04:00 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2015-10-14 13:09 - 2015-09-25 04:00 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-10-14 13:09 - 2015-09-25 04:00 - 00856576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContactApis.dll
2015-10-14 13:09 - 2015-09-25 04:00 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChatApis.dll
2015-10-14 13:09 - 2015-09-25 03:59 - 01205248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-10-14 13:09 - 2015-09-25 03:59 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmailApis.dll
2015-10-14 13:09 - 2015-09-25 03:59 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentApis.dll
2015-10-14 13:09 - 2015-09-25 03:59 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2015-10-14 13:09 - 2015-09-25 03:59 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\PimIndexMaintenance.dll
2015-10-14 13:09 - 2015-09-25 03:59 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\CallHistoryClient.dll
2015-10-14 13:09 - 2015-09-25 03:58 - 01871360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2015-10-14 13:09 - 2015-09-25 03:47 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2015-10-14 13:09 - 2015-09-25 03:47 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhoneCallHistoryApis.dll
2015-10-14 13:09 - 2015-09-25 03:38 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-10-14 13:09 - 2015-09-25 03:38 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-10-14 13:09 - 2015-09-25 03:38 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2015-10-14 13:09 - 2015-09-25 03:38 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-10-14 13:09 - 2015-09-25 03:37 - 00766976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-10-14 13:09 - 2015-09-25 03:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2015-10-14 13:09 - 2015-09-25 03:37 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2015-10-14 13:09 - 2015-09-25 03:36 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-10-14 13:09 - 2015-09-25 03:36 - 05454848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2015-10-14 13:09 - 2015-09-25 03:34 - 00928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-10-14 13:09 - 2015-09-25 03:34 - 00625152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContactApis.dll
2015-10-14 13:09 - 2015-09-25 03:34 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentApis.dll
2015-10-14 13:09 - 2015-09-25 03:34 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ChatApis.dll
2015-10-14 13:09 - 2015-09-25 03:34 - 00525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EmailApis.dll
2015-10-14 13:09 - 2015-09-25 03:33 - 00131072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CallHistoryClient.dll
2015-10-14 13:09 - 2015-09-25 03:32 - 01594368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2015-10-14 13:09 - 2015-09-25 03:32 - 00466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2015-10-09 08:32 - 2015-10-09 08:32 - 00001451 _____ C:\WINDOWS\IE11_main.log
2015-10-08 18:14 - 2015-10-08 18:14 - 00000000 ____D C:\Users\Tom\AppData\Roaming\Apple Computer
2015-10-08 18:14 - 2015-10-08 18:14 - 00000000 ____D C:\Users\Tom\AppData\Local\Apple Computer
2015-10-08 18:13 - 2015-10-08 18:13 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-10-08 18:13 - 2015-10-08 18:13 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2015-10-08 18:13 - 2015-10-08 18:13 - 00002507 _____ C:\Users\Public\Desktop\Safari.lnk
2015-10-08 18:13 - 2015-10-08 18:13 - 00000000 ____D C:\Users\Tom_admin\AppData\Local\Apple
2015-10-08 18:13 - 2015-10-08 18:13 - 00000000 ____D C:\ProgramData\Apple Computer
2015-10-08 18:13 - 2015-10-08 18:13 - 00000000 ____D C:\ProgramData\Apple
2015-10-08 18:13 - 2015-10-08 18:13 - 00000000 ____D C:\Program Files (x86)\Safari
2015-10-08 18:13 - 2015-10-08 18:13 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-10-06 12:30 - 2015-10-06 12:30 - 00002146 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-10-06 12:30 - 2015-10-06 12:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-10-06 02:05 - 2015-10-16 04:10 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-10-06 02:05 - 2015-10-16 04:10 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-05 20:49 - 2015-10-05 20:49 - 03337432 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 02218936 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 02119296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 01456472 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 01403096 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 01141200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00905048 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00889888 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00765128 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00610136 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00545824 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00479992 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00393480 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00352904 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00352904 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00267984 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00235040 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00232712 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00220136 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00182888 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00176480 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00168936 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00085096 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2015-10-05 20:49 - 2015-10-05 20:49 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-10-05 20:49 - 2015-10-05 20:49 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-10-05 20:49 - 2015-10-05 20:49 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-10-05 20:49 - 2015-10-05 20:49 - 00000000 ____D C:\Program Files\Realtek
2015-10-05 20:48 - 2015-10-05 20:49 - 00978208 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 72130592 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2015-10-05 20:48 - 2015-10-05 20:48 - 14065952 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 13243904 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 13108552 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 07181616 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 07104896 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 06273344 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 05836400 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 05804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
2015-10-05 20:48 - 2015-10-05 20:48 - 05464672 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 05344904 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 04585728 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2015-10-05 20:48 - 2015-10-05 20:48 - 03653631 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2015-10-05 20:48 - 2015-10-05 20:48 - 03309264 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 03270464 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 03200501 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat
2015-10-05 20:48 - 2015-10-05 20:48 - 03019040 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 02955008 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 02856712 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 02720000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2015-10-05 20:48 - 2015-10-05 20:48 - 02662632 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 02522728 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 02453480 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 02058880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01991776 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01985568 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01804928 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01768192 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01624752 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01613712 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01530872 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01416832 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01354808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01351688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01231256 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01183360 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01015616 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 01012560 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00982248 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00962432 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00940640 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00940328 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00891160 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00840048 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00759208 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00742536 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00723232 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00713912 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00693024 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00692520 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00659872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00632352 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00588624 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00583168 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL
2015-10-05 20:48 - 2015-10-05 20:48 - 00527824 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00517464 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00513712 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00461272 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00460448 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00458016 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00453848 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00440736 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00399456 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00374096 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00366976 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00355496 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00352424 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00342280 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00339136 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00333288 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00333288 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00322032 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00283928 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00264968 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00264896 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00263944 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00242768 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00225504 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00205640 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00161960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00144192 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00131024 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00128504 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00127296 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00120712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00114008 _____ C:\WINDOWS\system32\audioLibVc.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00100544 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00097976 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00097912 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00094176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00093152 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2015-10-05 20:48 - 2015-10-05 20:48 - 00032400 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2015-10-05 20:48 - 2015-08-17 22:43 - 00608048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-10-05 20:45 - 2015-10-05 20:45 - 31523968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 24209024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 23000760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 17721656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 16278496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 15302784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 14633424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 14047120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 13957792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 11379416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 11316168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 04254520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 03996472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 02857720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 01917240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434181.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 01565368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434181.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 00954168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 00917304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 00912184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-10-05 20:45 - 2015-10-05 20:45 - 00878720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-10-04 09:23 - 2015-10-04 09:23 - 00004088 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1443947012
2015-10-04 09:23 - 2015-10-04 09:23 - 00000700 _____ C:\Users\Tom\Desktop\Opera.lnk
2015-10-04 09:23 - 2015-10-04 09:23 - 00000700 _____ C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-10-04 09:23 - 2015-10-04 09:23 - 00000000 ____D C:\Users\Tom\AppData\Local\Opera Software
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-11-02 14:33 - 2015-06-06 19:34 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-11-02 14:26 - 2015-09-12 22:11 - 01994140 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-02 14:26 - 2015-07-10 17:34 - 00848086 _____ C:\WINDOWS\system32\perfh007.dat
2015-11-02 14:26 - 2015-07-10 17:34 - 00186362 _____ C:\WINDOWS\system32\perfc007.dat
2015-11-02 14:24 - 2015-07-24 08:34 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-02 14:23 - 2014-11-09 00:09 - 00001342 _____ C:\WINDOWS\Tasks\RGR.job
2015-11-02 14:23 - 2014-11-09 00:08 - 00001344 _____ C:\WINDOWS\Tasks\GZOP.job
2015-11-02 14:22 - 2015-09-12 22:09 - 00000000 ____D C:\ProgramData\NVIDIA
2015-11-02 14:22 - 2015-09-12 22:05 - 00013492 _____ C:\WINDOWS\PFRO.log
2015-11-02 14:22 - 2015-07-10 13:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-11-02 14:22 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-02 14:21 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-11-02 14:21 - 2015-07-10 10:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-11-02 13:51 - 2015-07-24 08:34 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-02 12:15 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache
2015-11-02 11:53 - 2015-03-28 16:21 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-11-02 11:52 - 2015-03-28 16:21 - 00001187 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-11-02 11:52 - 2015-03-28 16:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-02 11:52 - 2015-03-28 16:21 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-02 07:03 - 2015-09-12 22:12 - 00000000 ____D C:\Users\Tom
2015-11-01 18:28 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-11-01 18:27 - 2015-09-12 22:11 - 00000000 ___RD C:\Users\Tom_admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-11-01 09:29 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-01 00:08 - 2014-12-06 09:03 - 00000000 ____D C:\Users\Tom\AppData\Local\QuickPar
2015-10-30 22:15 - 2014-11-08 22:04 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0
2015-10-30 20:19 - 2015-06-06 17:47 - 00000000 ____D C:\Program Files (x86)\StarMoney 10
2015-10-30 18:10 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-10-29 19:47 - 2015-06-06 16:54 - 00012632 _____ C:\Users\Tom\Desktop\Max Unterhaltszahlungen.xlsx
2015-10-29 14:43 - 2014-11-08 21:53 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-10-25 22:39 - 2015-07-10 13:20 - 00113554 _____ C:\WINDOWS\setupact.log
2015-10-18 21:58 - 2014-11-09 12:56 - 00001011 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2015-10-18 21:58 - 2014-11-09 12:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2015-10-18 21:58 - 2014-11-09 12:56 - 00000000 ____D C:\Program Files\Calibre2
2015-10-18 20:59 - 2014-11-08 22:45 - 00000000 ____D C:\Users\Tom\AppData\Local\Google
2015-10-18 19:38 - 2015-07-24 08:34 - 00000000 ____D C:\Program Files (x86)\Google
2015-10-15 09:07 - 2014-11-09 11:24 - 00000000 ___RD C:\Users\Tom\Desktop\Foto
2015-10-14 14:31 - 2014-11-08 18:09 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-10-14 14:28 - 2014-11-08 18:08 - 143481208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-10-12 09:44 - 2014-11-08 17:28 - 00000000 ____D C:\Users\Tom\AppData\Local\Packages
2015-10-09 10:32 - 2015-09-23 22:09 - 00001572 _____ C:\Users\Tom\Desktop\BG-Daten.lnk
2015-10-06 02:03 - 2014-11-08 21:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\Provisioning
2015-10-06 02:01 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\L2Schemas
2015-10-05 20:48 - 2014-11-08 18:04 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-10-05 20:48 - 2011-06-29 10:54 - 00000000 ____D C:\temp
2015-10-05 20:45 - 2015-06-29 21:53 - 18806104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-10-05 20:45 - 2015-06-29 21:53 - 12905144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-10-05 20:45 - 2015-06-29 21:53 - 03246664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-10-05 20:45 - 2015-06-29 21:53 - 00026155 _____ C:\WINDOWS\system32\nvinfo.pb
2015-10-05 20:45 - 2014-11-08 18:03 - 00081592 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-10-05 20:45 - 2014-11-08 18:03 - 00069432 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-10-05 09:50 - 2015-03-28 16:21 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-10-05 09:50 - 2015-03-28 16:21 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-10-05 09:50 - 2015-03-28 16:21 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-10-03 10:29 - 2015-10-01 16:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2014-11-09 21:08 - 2014-11-09 21:08 - 0003584 _____ () C:\Users\Tom_admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-05 20:49 - 2015-10-05 20:49 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-11-08 21:48 - 2014-11-08 22:02 - 0001221 _____ () C:\ProgramData\hpzinstall.log
Einige Dateien in TEMP:
====================
C:\Users\Tom\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Tom_admin\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-10-31 08:45
==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:31-10-2015
durchgeführt von Tom_admin (2015-11-02 14:35:47)
Gestartet von C:\Users\Tom\Desktop
Windows 10 Pro (X64) (2015-09-12 21:39:55)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3917217520-1086647508-2083587260-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3917217520-1086647508-2083587260-503 - Limited - Disabled)
Gast (S-1-5-21-3917217520-1086647508-2083587260-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3917217520-1086647508-2083587260-1006 - Limited - Enabled)
Tom (S-1-5-21-3917217520-1086647508-2083587260-1001 - Limited - Enabled) => C:\Users\Tom
Tom_admin (S-1-5-21-3917217520-1086647508-2083587260-1007 - Administrator - Enabled) => C:\Users\Tom_admin
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
64 Bit HP CIO Components Installer (Version: 4.2.1 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Abloadtool (HKLM-x32\...\Abloadtool) (Version: - Tim Demkowsky)
Acronis True Image 2015 (HKLM-x32\...\{F2FEDE47-3088-49C1-AC91-B6F2F1056824}Visible) (Version: 18.0.6055 - Acronis)
Acronis True Image 2015 (x32 Version: 18.0.6055 - Acronis) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 14 (HKLM-x32\...\{91B33C97-7BCF-CDFE-4321-58EBF3E8641C}_is1) (Version: 14.1.2 - Ashampoo GmbH & Co. KG)
BufferChm (x32 Version: 100.0.170.000 - Hewlett-Packard) Hidden
calibre 64bit (HKLM\...\{DBF2A8AA-9EE9-454D-8958-F74F1FCB0789}) (Version: 2.41.0 - Kovid Goyal)
Carcassonne (HKLM-x32\...\{8033CA80-B44F-40F9-8D0A-957211442C19}) (Version: 1.0 - Deep Silver)
Catan (HKLM-x32\...\Catan) (Version: - )
COMPUTER BILD Spionage-Stopper für Windows 10 (HKLM-x32\...\{F9565211-5480-408D-BC7C-1FE7B8366ACE}_is1) (Version: 1.0.0.1 - pXc-coding.com)
Das Telefonbuch Gelbe Seiten Map & Route (HKLM-x32\...\DasTelefonbuch Gelbe Seiten Map & Route) (Version: - TVG Telefonbuch- und Verzeichnisverlag GmbH & Co. KG)
DeviceDiscovery (x32 Version: 100.0.190.000 - Hewlett-Packard) Hidden
DeviceManagementQFolder (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Die Siedler 7 (HKLM-x32\...\{63860309-DA8A-4BAE-9EAE-CE1D6D79340C}) (Version: 1.12.1396 - Ubisoft)
DVBViewer Pro (HKLM-x32\...\DVBViewer Pro_is1) (Version: 5.3.2 - CM&V)
Elevated Installer (x32 Version: 4.1.8.0 - Garmin Ltd or its subsidiaries) Hidden
FormatFactory 3.6.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.6.0.0 - Format Factory)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.1.5.624 - Foxit Corporation)
Free Audio Converter version 5.0.60.713 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.60.713 - DVDVideoSoft Ltd.)
Garmin Express (HKLM-x32\...\{44d9dfc0-3a4a-4439-870f-f97550a9bc8d}) (Version: 4.1.8.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 4.1.8.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 4.1.8.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.15) (Version: 9.15 - Artifex Software Inc.)
Hauppauge WinTV 7 (HKLM-x32\...\Hauppauge WinTV 7) (Version: v7.2.31245 (CD 3.0) - Hauppauge Computer Works)
Hauppauge WinTV Infrared Remote (HKLM-x32\...\Hauppauge WinTV Infrared Remote) (Version: 2.68.29013 - Hauppauge Computer Works, Inc.)
HP Color LaserJet CM2320 MFP Series 3.1 (HKLM\...\{ECF3E482-9188-4e29-9C31-E02FD8DC74C0}) (Version: 3.1 - HP)
HP Imaging Device Functions 10.0 (HKLM\...\HP Imaging Device Functions) (Version: 10.0 - HP)
HP Update (HKLM-x32\...\{11B83AD3-7A46-4C2E-A568-9505981D4C6F}) (Version: 4.000.007.003 - Hewlett-Packard)
hppCLJCM2320 (x32 Version: 003.001.00097 - Hewlett-Packard) Hidden
hppFaxDrvCM2320 (x32 Version: 003.000.00001 - Hewlett-Packard) Hidden
hppFaxUtilityCM2320 (x32 Version: 003.001.00095 - Ihr Firmenname) Hidden
hppFonts (x32 Version: 001.001.00061 - Hewlett-Packard) Hidden
hppLaserJetService (x32 Version: 001.001.0.0 - Hewlett-Packard) Hidden
hppManualsCM2320 (x32 Version: 003.001.00087 - Ihr Firmenname) Hidden
hppPQVideoCM2320 (x32 Version: 003.001.00092 - Ihr Firmenname) Hidden
hppQFolderCM2320 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
hppScanToCM2320 (x32 Version: 003.001.00090 - Ihr Firmenname) Hidden
hppSendFaxCM2320 (x32 Version: 003.000.00001 - Ihr Firmenname) Hidden
hppTLBXFXCM2320 (x32 Version: 001.017.00048 - Hewlett-Packard) Hidden
hpzTLBXFX (x32 Version: 005.003.00171 - Hewlett-Packard) Hidden
Image Data Converter (HKLM-x32\...\{87998E4E-6D9C-411B-AAE9-B8523FFE357D}) (Version: 4.2.04.17271 - Sony Corporation)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
K-Lite Codec Pack 10.3.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.3.5 - )
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MediaMonkey 4.1 (HKLM-x32\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.)
MergeModule_x64 (Version: 9.0.02 - Sony Corporation) Hidden
MergeModule_x86 (x32 Version: 9.0.02 - Sony Corporation) Hidden
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4763.1003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.2.0 - Mozilla)
Mozilla Thunderbird 38.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.3.0 (x86 de)) (Version: 38.3.0 - Mozilla)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
News File Grabber 4.6.0.4 (HKLM-x32\...\News File Grabber_is1) (Version: - RSBR-Software)
NTFS Undelete 3.0.5.506 (HKLM-x32\...\NTFS Undelete_is1) (Version: - Copyright © 2011 eSupport.com • All Rights Reserved)
NVIDIA 3D Vision Treiber 341.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.81 - NVIDIA Corporation)
NVIDIA Grafiktreiber 341.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.81 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4763.1003 - Microsoft Corporation) Hidden
Opera Stable 32.0.1948.69 (HKU\S-1-5-21-3917217520-1086647508-2083587260-1001\...\Opera 32.0.1948.69) (Version: 32.0.1948.69 - Opera Software)
PhotoScape (HKLM-x32\...\PhotoScape) (Version: - )
PlayMemories Home (HKLM-x32\...\{93AA5B49-0994-4EF6-80F3-868C9CEA88ED}) (Version: 4.0.02.10030 - Sony Corporation)
PMB_ModeEditor (x32 Version: 9.0.02 - Sony Corporation) Hidden
PMB_ServiceUploader (x32 Version: 9.0.02 - Sony Corporation) Hidden
POIbase 2.0.9 (HKLM-x32\...\POIbase_is1) (Version: - POIbase)
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7572 - Realtek Semiconductor Corp.)
SABnzbd 0.7.19 (HKLM-x32\...\SABnzbd) (Version: 0.7.19 - The SABnzbd Team)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14113.3 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.14113.3 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Scratch (HKLM-x32\...\Scratch) (Version: 1.4.0.0 - MIT Media Lab Lifelong Kindergarten Group)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SOHLib for PlayMemories Home (Version: 1.0.3.02170 - Sony Corporation) Hidden
SolveigMM AVI Trimmer+ Version 5.0.1509.11 (HKLM-x32\...\SolveigMM AVI Trimmer_is1) (Version: 5.0.1509.11 - Solveig Multimedia)
SolveigMM Video Splitter Home Edition (HKLM-x32\...\SolveigMM Video Splitter Home Edition 5.0.1509.11) (Version: 5.0.1509.11 - Solveig Multimedia)
SpeedCommander 14 (x64) (HKLM\...\SpeedCommander 14 (x64)) (Version: 14.00.6600 - SWE Sven Ritter)
StarMoney (x32 Version: 4.0.0.203 - StarFinanz) Hidden
StarMoney (x32 Version: 5.0.0.226 - StarFinanz) Hidden
StarMoney 10 (HKLM-x32\...\{A75D2CF5-3063-41FF-A32D-9D4F7C6D7BF7}) (Version: 10 - Star Finanz GmbH)
StarMoney 9.0 (HKLM-x32\...\{EB303025-B050-4CDF-9BC5-0C771AF0ECD5}) (Version: 9.0 - Star Finanz GmbH)
SUPER © v2014.build.62+Recorder (2014/09/21) Version v2014.buil (HKLM-x32\...\{8E2A18E2-96AF-8649-4DE7-5C06C90719A4}_is1) (Version: v2014.build.62+Recorder - eRightSoft)
TrayApp (x32 Version: 100.0.170.000 - Hewlett-Packard) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
VideoReDo TVSuite Version 4.20.5.605 (HKLM-x32\...\VideoReDo4_is1) (Version: - DRD Systems, Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (x32 Version: 100.0.170.000 - Hewlett-Packard) Hidden
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{60F006DD-3A59-46E6-8ED7-E4C48929B090}) (Version: 21.00.8480 - Buhl Data Service GmbH)
XMedia Recode Version 3.2.1.7 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.2.1.7 - XMedia Recode)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {085458F0-5E01-41EA-B4D5-1BDB14CE8678} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {0D850E62-A03F-49AE-B309-45F956C18245} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {1B17B1D7-A028-40B2-894D-646475F872A4} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {1CB7047E-25C5-46EF-A12D-1ACDCDEB9847} - System32\Tasks\RGR => C:\Users\Tom\AppData\Roaming\RGR.exe <==== ACHTUNG
Task: {1CC3480A-B2C6-4B74-81F3-4CB5A3CC167B} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2014-01-16] (Sony Corporation)
Task: {20BBF7E5-3619-4B89-A949-C9697AE4CED9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-24] (Google Inc.)
Task: {25D7C7ED-FCF3-420F-897A-750344832649} - \RegClean Pro -> Keine Datei <==== ACHTUNG
Task: {5210197A-4600-4F78-B0C1-A4F5A955DC18} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2015-09-11] ()
Task: {5E695DE6-979B-45CB-9F46-06C50C6E8874} - System32\Tasks\Opera scheduled Autoupdate 1443947012 => F:\Opera\launcher.exe [2015-09-25] (Opera Software)
Task: {5FBE6E94-913D-4C19-A3A8-DFBD4ACF00D6} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {66B6030A-77DB-4448-A31A-A3D581A8B3FA} - System32\Tasks\{E0BF396A-8664-4C9A-87C6-9F83C078A58D} => pcalua.exe -a F:\Catan\Catan_ks.exe -d f:\Catan
Task: {835B0799-EC85-4DCB-94E8-EB82841A73DD} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-07] (Microsoft Corporation)
Task: {89AE18EA-FEEC-4740-9E46-3D9B97751E80} - \ASP -> Keine Datei <==== ACHTUNG
Task: {8E30B629-8C81-4C2C-816A-3B26BF89233F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-29] (Microsoft Corporation)
Task: {8F888121-A054-40E4-8FC5-C7DCF6818E9B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {CC46ABD5-1C7E-4ECA-80EA-F597EC3702D4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-29] (Microsoft Corporation)
Task: {D0CCEDC3-F926-40FC-BF6F-E51542B65259} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {D18D0609-6792-4973-BF97-220170FC7231} - System32\Tasks\GZOP => C:\Users\Tom\AppData\Roaming\GZOP.exe <==== ACHTUNG
Task: {D9E031AD-26EA-4830-A4E0-AA55AA7894AF} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-14] (Microsoft Corporation)
Task: {FD3F9921-9FDA-440B-A9A4-130C277D492F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-24] (Google Inc.)
Task: {FFF68401-A3AC-40CE-90FC-3ADBCFB3851A} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-16] (Adobe Systems Incorporated)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GZOP.job => C:\Users\Tom\AppData\Roaming\GZOP.exe <==== ACHTUNG
Task: C:\WINDOWS\Tasks\RGR.job => C:\Users\Tom\AppData\Roaming\RGR.exe <==== ACHTUNG
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-09-12 23:00 - 2015-09-12 23:00 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-10-01 19:05 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 19:05 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2014-11-08 21:53 - 2015-10-07 19:28 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-10-01 19:04 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-01 19:05 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-01 19:04 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-01 19:04 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 19:05 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-15 17:48 - 2011-08-23 09:04 - 00057344 _____ () C:\Program Files (x86)\WinTV\TVServer\libhdhomerun.dll
2014-10-22 10:45 - 2014-10-22 10:45 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2014-10-22 10:53 - 2014-10-22 10:53 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2014-10-22 10:46 - 2014-10-22 10:46 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
2014-09-09 11:00 - 2014-09-09 11:00 - 00023576 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Program Files\Calibre2:Win32App
AlternateDataStreams: C:\Program Files\Microsoft Office 15:Win32App
AlternateDataStreams: C:\Program Files\Microsoft Silverlight:Win32App
AlternateDataStreams: C:\Program Files\WinRAR:Win32App
AlternateDataStreams: C:\Program Files (x86)\Business Objects:Win32App
AlternateDataStreams: C:\Program Files (x86)\DVDVideoSoft:Win32App
AlternateDataStreams: C:\Program Files (x86)\Garmin:Win32App
AlternateDataStreams: C:\Program Files (x86)\HP:Win32App
AlternateDataStreams: C:\Program Files (x86)\ImgBurn:Win32App
AlternateDataStreams: C:\Program Files (x86)\K-Lite Codec Pack:Win32App
AlternateDataStreams: C:\Program Files (x86)\Malwarebytes Anti-Malware:Win32App
AlternateDataStreams: C:\Program Files (x86)\MediaMonkey:Win32App
AlternateDataStreams: C:\Program Files (x86)\Mozilla Firefox:Win32App
AlternateDataStreams: C:\Program Files (x86)\News File Grabber:Win32App
AlternateDataStreams: C:\Program Files (x86)\POIbase:Win32App
AlternateDataStreams: C:\Program Files (x86)\StarMoney 10:Win32App
AlternateDataStreams: C:\Program Files (x86)\StarMoney 9.0:Win32App
AlternateDataStreams: C:\Program Files (x86)\WinTV:Win32App
AlternateDataStreams: C:\Program Files\Common Files\DESIGNER:Win32App
AlternateDataStreams: C:\Program Files\Common Files\microsoft shared:Win32App
AlternateDataStreams: C:\ProgramData\regid.1991-06.com.microsoft:Win32App
AlternateDataStreams: C:\ProgramData\Sony Corporation:Win32App
AlternateDataStreams: C:\Users\Tom_admin\AppData\Local\Temp:Win32App
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3917217520-1086647508-2083587260-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
HKU\S-1-5-21-3917217520-1086647508-2083587260-1007\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKLM\...\StartupApproved\Run32: => "ToolBoxFX"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher"
HKLM\...\StartupApproved\Run32: => "HPPQVideo"
HKU\S-1-5-21-3917217520-1086647508-2083587260-1001\...\StartupApproved\Run: => "GarminExpressTrayApp"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [UDP Query User{076AD5CB-B070-4647-BAE0-DA7C753B5210}C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe] => (Block) C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe
FirewallRules: [TCP Query User{CB7CDE47-8411-4B19-867E-40BE2702EF72}C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe] => (Block) C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe
FirewallRules: [{22E4ABF7-7BE3-41A5-9B6E-2892EE050D12}] => (Allow) C:\Program Files (x86)\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{F76C872F-F55F-45AF-B8BA-0BB5B4CFE163}] => (Allow) C:\Program Files (x86)\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{8B32D95F-313F-4136-879B-E1ED71C5ABE4}] => (Allow) C:\Program Files (x86)\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{803DBE0C-ED35-4FD6-A48D-A658D1B2AF4A}] => (Allow) C:\Program Files (x86)\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{88B72FCC-CF71-4B4E-9867-FBFFC2A6A9D3}] => (Allow) C:\Program Files (x86)\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{28D34A29-0DD4-4A66-9E9B-EDEEE414CF78}] => (Allow) C:\Program Files (x86)\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{51BFEECB-A82F-4324-8490-FFF5D9B02B12}] => (Allow) C:\Program Files (x86)\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{FBDF0CE8-2F8F-4C0C-908F-EE87C4DCA247}] => (Allow) C:\Program Files (x86)\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{BE8DB0BD-972A-4D19-BE61-23780EE114FF}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{A3AB53C5-A07D-4E46-8438-EAD53B735F65}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{AD5E03D9-C7ED-4A7D-9DE8-DDA912E1A39A}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{C1732268-AAFB-4DF3-BDD0-44664CABF68E}] => (Allow) C:\Program Files (x86)\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{7FBE77FB-5FE8-4396-9A06-823C52F45643}] => (Allow) F:\DVBViewer\dvbviewer.exe
FirewallRules: [{304814A1-6237-4508-B825-1E0ABB5AD794}] => (Allow) F:\DVBViewer\dvbviewer.exe
FirewallRules: [{9E782326-0169-4F49-8E81-FFB4DB2EEF04}] => (Allow) C:1\TV-Aufnahme\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{9F6D0164-8326-46CE-AE39-D12C8AFE59B0}] => (Allow) C:1\TV-Aufnahme\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{D7747FBE-4902-4040-9B71-4A77BEE04916}] => (Allow) C:1\TV-Aufnahme\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{F69C655D-6DC3-4762-8911-60673CF4A02A}] => (Allow) C:1\TV-Aufnahme\WinTV\Extend\WinTVExtender.exe
FirewallRules: [{53D58512-35DE-4547-AB7F-4E04D50B3CF6}] => (Allow) C:1\TV-Aufnahme\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{95BEF785-4537-461C-81F0-0854D3BEE6E8}] => (Allow) C:1\TV-Aufnahme\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{A592F08C-8A51-4A23-A3EA-2AD85E42D3B1}] => (Allow) C:1\TV-Aufnahme\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{39D7D6FA-37CE-4C09-8C5F-FAD5E8ACA149}] => (Allow) C:1\TV-Aufnahme\WinTV\TVServer\CaptureDCR.exe
FirewallRules: [{1DB3C7AB-2781-427F-8E94-B281773558C8}] => (Allow) C:1\TV-Aufnahme\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{36EA9213-C0B6-40A5-AB8E-A63975A39975}] => (Allow) C:1\TV-Aufnahme\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{BC5C2A3A-05BB-412E-B3F1-C7743707DB5C}] => (Allow) C:1\TV-Aufnahme\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{1A51B91A-6A9B-4BED-B82F-5081CE9C4F35}] => (Allow) C:1\TV-Aufnahme\WinTV\WinTV7\WinTV7.exe
FirewallRules: [{B118BA27-69AB-470F-816D-6DBD90C1903B}] => (Allow) C:\Program Files (x86)\StarMoney 10\app\StarMoney.exe
FirewallRules: [{0DE0DBF9-7F73-4CFF-B8E1-6F495A18FCEE}] => (Allow) C:\Program Files (x86)\StarMoney 10\app\StarMoney.exe
FirewallRules: [{32C3A422-845D-4259-A02B-7DBD3B2AE6AF}] => (Allow) C:\Program Files (x86)\StarMoney 10\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{5978C52E-694E-4A17-B3AB-DC7FC9F9B9EC}] => (Allow) C:\Program Files (x86)\StarMoney 10\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{8763B152-8343-4484-849D-826FE5713F55}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{B2F1B3D1-D712-49E3-AFE2-31652F879923}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [UDP Query User{D5C2E834-76BC-4022-879B-C2C356E4F892}F:\carcassonne\carcassonne.exe] => (Allow) F:\carcassonne\carcassonne.exe
FirewallRules: [TCP Query User{1E3B5730-90B6-499D-89AD-F6E358287A8F}F:\carcassonne\carcassonne.exe] => (Allow) F:\carcassonne\carcassonne.exe
FirewallRules: [UDP Query User{33FEB13D-13D7-4E02-822C-95212CF511C1}C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe] => (Allow) C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe
FirewallRules: [TCP Query User{ED4CF5F9-CA8B-4648-94DB-31CA1BF26E8C}C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe] => (Allow) C:\program files (x86)\mediamonkey\mediamonkey (non-skinned).exe
FirewallRules: [UDP Query User{B0FD758D-E477-4975-9CB9-66A2F065CB9C}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{EBC71D60-40B2-4122-88B2-8E67FF96CCC5}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{9F489DE8-2255-4DDA-BB53-13CE8C33A75F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{97301C1C-527D-421E-B867-A5EA6B1BD480}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{ED035971-CF62-4380-9167-77B3F78F22DB}D:\sabnzbd\sabnzbd.exe] => (Allow) D:\sabnzbd\sabnzbd.exe
FirewallRules: [TCP Query User{42DB68C8-9150-437C-A0A6-220130187775}D:\sabnzbd\sabnzbd.exe] => (Allow) D:\sabnzbd\sabnzbd.exe
FirewallRules: [UDP Query User{5F7E26F2-D923-4CEE-9E3C-49B2029DCBAF}F:\sabnzbd\sabnzbd.exe] => (Allow) F:\sabnzbd\sabnzbd.exe
FirewallRules: [TCP Query User{958A2FD4-AC54-4D71-B2A8-5DE4D03AE880}F:\sabnzbd\sabnzbd.exe] => (Allow) F:\sabnzbd\sabnzbd.exe
FirewallRules: [{73770087-4C3C-4C1F-9B8D-9B5986AE9BC3}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{C50977B0-B5C5-4D59-97D2-06C27BBD5683}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{8AF51410-B84A-42C0-9B0C-8F6C356BCF1B}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{81CD2F16-B2B9-4CF6-BBCC-CCC56C667A7F}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [UDP Query User{B30DB224-02A0-4CEC-80D2-51DCB326FD12}D:\sabnzbd\sabnzbd.exe] => (Allow) D:\sabnzbd\sabnzbd.exe
FirewallRules: [TCP Query User{8C49512B-CCDC-46E4-A06D-F425ADD78844}D:\sabnzbd\sabnzbd.exe] => (Allow) D:\sabnzbd\sabnzbd.exe
FirewallRules: [{C7B3F46A-06A1-401A-AC3D-597F55695DFA}] => (Allow) D:\Die Siedler 7\Data\Base\_Dbg\Bin\Release\Settlers7R.exe
FirewallRules: [{D9A38352-00C8-400A-A227-57B712D8F166}] => (Allow) D:\Die Siedler 7\Data\Base\_Dbg\Bin\Release\Settlers7R.exe
FirewallRules: [{E7B98108-26B9-422B-8735-F2C539C22B4F}] => (Allow) D:\PlayMemories\PMBBrowser.exe
FirewallRules: [{EF57A879-A07E-4205-85DE-C3636540A351}] => (Allow) D:\PlayMemories\PMBBrowser.exe
FirewallRules: [{FCB66013-0A37-4511-AE53-0B98430D963C}] => (Allow) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
FirewallRules: [{64C5A57F-5AEC-462F-9CE7-24B6625F95F1}] => (Allow) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
FirewallRules: [{78701AA8-1E3C-466F-8EEC-A1C61061BFEC}] => (Allow) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
FirewallRules: [{77CDE078-50B9-4FFE-98C1-12FE9629EA0D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{D7F82A12-DE29-4CDF-8CF7-C83627AB6F25}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{AF0CAC0D-44BA-438B-96AE-754422BB8632}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{FA457DC1-E579-475B-935B-7B89ADCC886F}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{7F81DC66-5992-4177-B3CA-1DD18737695A}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\app\StarMoney.exe
FirewallRules: [{6676D071-92B3-470E-9957-8B8257D64B81}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{F32D9419-4E5C-4309-AFD6-3DE42C175E17}] => (Allow) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
FirewallRules: [{BC649F1E-BE52-4B19-972B-9927A38FD6EE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/02/2015 02:02:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpfService64.exe, Version: 1.3.0.9090, Zeitstempel: 0x4e684dec
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c59f92
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002526e
ID des fehlerhaften Prozesses: 0x930
Startzeit der fehlerhaften Anwendung: 0xSpfService64.exe0
Pfad der fehlerhaften Anwendung: SpfService64.exe1
Pfad des fehlerhaften Moduls: SpfService64.exe2
Berichtskennung: SpfService64.exe3
Vollständiger Name des fehlerhaften Pakets: SpfService64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpfService64.exe5
Error: (11/02/2015 12:20:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpfService64.exe, Version: 1.3.0.9090, Zeitstempel: 0x4e684dec
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c59f92
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000003e4c5
ID des fehlerhaften Prozesses: 0x24c
Startzeit der fehlerhaften Anwendung: 0xSpfService64.exe0
Pfad der fehlerhaften Anwendung: SpfService64.exe1
Pfad des fehlerhaften Moduls: SpfService64.exe2
Berichtskennung: SpfService64.exe3
Vollständiger Name des fehlerhaften Pakets: SpfService64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpfService64.exe5
Error: (11/02/2015 11:36:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpfService64.exe, Version: 1.3.0.9090, Zeitstempel: 0x4e684dec
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c59f92
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ea28c
ID des fehlerhaften Prozesses: 0x4d8
Startzeit der fehlerhaften Anwendung: 0xSpfService64.exe0
Pfad der fehlerhaften Anwendung: SpfService64.exe1
Pfad des fehlerhaften Moduls: SpfService64.exe2
Berichtskennung: SpfService64.exe3
Vollständiger Name des fehlerhaften Pakets: SpfService64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpfService64.exe5
Error: (11/02/2015 11:16:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpfService64.exe, Version: 1.3.0.9090, Zeitstempel: 0x4e684dec
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c59f92
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002526e
ID des fehlerhaften Prozesses: 0x12ac
Startzeit der fehlerhaften Anwendung: 0xSpfService64.exe0
Pfad der fehlerhaften Anwendung: SpfService64.exe1
Pfad des fehlerhaften Moduls: SpfService64.exe2
Berichtskennung: SpfService64.exe3
Vollständiger Name des fehlerhaften Pakets: SpfService64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpfService64.exe5
Error: (11/02/2015 10:54:43 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpfService64.exe, Version: 1.3.0.9090, Zeitstempel: 0x4e684dec
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c59f92
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002526e
ID des fehlerhaften Prozesses: 0x8a8
Startzeit der fehlerhaften Anwendung: 0xSpfService64.exe0
Pfad der fehlerhaften Anwendung: SpfService64.exe1
Pfad des fehlerhaften Moduls: SpfService64.exe2
Berichtskennung: SpfService64.exe3
Vollständiger Name des fehlerhaften Pakets: SpfService64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpfService64.exe5
Error: (11/02/2015 07:34:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpfService64.exe, Version: 1.3.0.9090, Zeitstempel: 0x4e684dec
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c59f92
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002526e
ID des fehlerhaften Prozesses: 0x10b0
Startzeit der fehlerhaften Anwendung: 0xSpfService64.exe0
Pfad der fehlerhaften Anwendung: SpfService64.exe1
Pfad des fehlerhaften Moduls: SpfService64.exe2
Berichtskennung: SpfService64.exe3
Vollständiger Name des fehlerhaften Pakets: SpfService64.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SpfService64.exe5
Error: (11/01/2015 01:13:43 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "select * from __InstanceModificationEvent where targetinstance isa '__ArbitratorConfiguration'" konnte im Namespace "//./root" aufgrund des Fehlers "0x80041033" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (11/01/2015 01:13:43 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __TimerEvent" zu registrieren, deren Zielklasse "__TimerEvent" im Namespace "//./root" nicht vorhanden ist. Die Abfrage wird ignoriert.
Error: (11/01/2015 01:13:43 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __SystemEvent" zu registrieren, deren Zielklasse "__SystemEvent" im Namespace "//./root" nicht vorhanden ist. Die Abfrage wird ignoriert.
Error: (11/01/2015 01:13:43 PM) (Source: Microsoft-Windows-WMI) (EventID: 24) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "$Core" wurde versucht, die Abfrage "select * from __NamespaceOperationEvent" zu registrieren, deren Zielklasse "__NamespaceOperationEvent" im Namespace "//./root" nicht vorhanden ist. Die Abfrage wird ignoriert.
Systemfehler:
=============
Error: (11/02/2015 02:29:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Acronis Sync Agent Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/02/2015 02:29:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "VAIO Entertainment Common Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/02/2015 02:29:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Sony Digital Media Server" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/02/2015 02:29:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "StarMoney 10 OnlineUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/02/2015 02:29:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "StarMoney 9.0 OnlineUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/02/2015 02:29:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PMBDeviceInfoProvider" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/02/2015 02:29:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Acronis Nonstop Backup Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/02/2015 02:29:35 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HauppaugeTVServer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (11/02/2015 02:29:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HP LaserJet Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/02/2015 02:29:35 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Acronis Scheduler2 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===================================
Date: 2015-10-18 21:07:00.267
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-10-18 21:07:00.235
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:47.955
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:47.888
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:47.074
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:46.986
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:46.906
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:46.823
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:46.738
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2015-09-16 17:39:46.658
Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5 CPU 750 @ 2.67GHz
Prozentuale Nutzung des RAM: 17%
Installierter physikalischer RAM: 8183.12 MB
Verfügbarer physikalischer RAM: 6711.17 MB
Summe virtueller Speicher: 9463.12 MB
Verfügbarer virtueller Speicher: 7877.67 MB
==================== Laufwerke ================================
Drive c: (Systemplatte) (Fixed) (Total:99.61 GB) (Free:64.47 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (System) (Fixed) (Total:24.87 GB) (Free:14.71 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: (Volume) (Fixed) (Total:195.31 GB) (Free:144.44 GB) NTFS
Drive f: (Programme) (Fixed) (Total:19.53 GB) (Free:14.73 GB) NTFS
Drive g: (Spiele) (Fixed) (Total:156.25 GB) (Free:16.41 GB) NTFS
Drive h: (Daten) (Fixed) (Total:32.23 GB) (Free:9.29 GB) NTFS
Drive i: (Volume) (Fixed) (Total:99.61 GB) (Free:74.57 GB) NTFS
Drive j: (DRIVE_W) (Fixed) (Total:98.87 GB) (Free:41.96 GB) NTFS
Drive k: (Volume) (Fixed) (Total:126.95 GB) (Free:73.07 GB) NTFS
Drive l: (Volume) (Fixed) (Total:143.37 GB) (Free:135.55 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 17B32199)
Partition 1: (Active) - (Size=99.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=99.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=98.9 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 25B304D0)
Partition 1: (Active) - (Size=24.9 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=208 GB) - (Type=05)
==================== Ende von Addition.txt ============================
|
Malwarebytes Anti-Malware 
SecurityCheck und: