Trojaner-Board - Werbung bei Klick auf Links und Icons verschwunden bei Windows 10

Danke für die schnelle Rückmeldung :)

Hier die FRST.txt

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015

durchgeführt von P7279_000 (Administrator) auf ROB-PC (08-12-2015 14:00:01)

Gestartet von C:\Users\P7279_000\Downloads

Geladene Profile: P7279_000 & UpdatusUser (Verfügbare Profile: P7279_000 & UpdatusUser)

Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: IE)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\nsbu.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\nsbu.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

(Microsoft Corporation) C:\Windows\System32\browser_broker.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-09-24] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-10-13] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)

HKLM-x32\...\Run: [TrayServer] => C:\Program Files (x86)\MAGIX\Video_deluxe_17_Plus_Sonderedition\Trayserver.exe [90112 2008-08-07] (MAGIX AG)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\Run: [Spotify Web Helper] => C:\Users\P7279_000\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2345584 2015-12-03] (Spotify Ltd)

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\Run: [Spotify] => C:\Users\P7279_000\AppData\Roaming\Spotify\Spotify.exe [8270448 2015-12-03] (Spotify Ltd)

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50748544 2015-12-01] (Skype Technologies S.A.)

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\RunOnce: [Uninstall C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\RunOnce: [Uninstall C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\RunOnce: [Uninstall C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\RunOnce: [Uninstall C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"

HKU\S-1-5-21-1197019360-2250170530-3591322323-1004\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-07-10] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)

ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\P7279_000\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()

ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\P7279_000\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()

ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\P7279_000\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()

ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\P7279_000\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()

ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\P7279_000\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()

ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\P7279_000\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

AutoConfigURL: [S-1-5-21-1197019360-2250170530-3591322323-1001] => hxxp://unstopp.me/wpad.dat?6a6e150b43ee34bfed568cb7ed8c4fea2283662

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0

Tcpip\..\Interfaces\{56e90d65-71f4-4fcb-a863-11e8f1e2b9a1}: [DhcpNameServer] 192.168.1.1 0.0.0.0

Tcpip\..\Interfaces\{f198ec10-06bc-4d47-98d5-54622095c5b0}: [DhcpNameServer] 192.168.1.1 0.0.0.0
 

Internet Explorer:

==================

BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-09-07] (Oracle Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-07] (Oracle Corporation)

BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\P7279_000\AppData\Roaming\Mozilla\Firefox\Profiles\m8bhy14d.default-1449438866665

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-11-10] ()

FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)

FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-07] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-07] (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-10] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll [2014-12-02] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()

FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)

FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1197019360-2250170530-3591322323-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\P7279_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-18] (Unity Technologies ApS)

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08]

FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2014-11-26] [ist nicht signiert]

FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.2.15\coFFAddon

FF Extension: Norton Identity Safe - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.2.15\coFFAddon [2015-12-01] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.2.15\coFFAddon
 

Chrome: 

=======

CHR Profile: C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Präsentationen) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-22]

CHR Extension: (Google Docs) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-20]

CHR Extension: (Google Drive) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]

CHR Extension: (YouTube) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]

CHR Extension: (Facebook) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2015-09-25]

CHR Extension: (Adblock Plus) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-09-25]

CHR Extension: (Norton Security Toolbar) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2015-10-06]

CHR Extension: (Ad-blocker for Gmail™) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coibnogmjcpbccgjofoiklnfpbbjbapo [2015-09-25]

CHR Extension: (Google-Suche) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]

CHR Extension: (Frame two pages) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\eldgpcphflnopbjadiaonofideekgdgm [2015-09-25]

CHR Extension: (Google Tabellen) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-22]

CHR Extension: (Earthy) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhflopcljabdklmedgglmkihdnongdaa [2015-09-25]

CHR Extension: (Rechtschreibprüfung) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gehceilhofkogkifpjmgdhciddpbcboo [2015-09-25]

CHR Extension: (Google Text & Tabellen Offline) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-20]

CHR Extension: (Norton Identity Safe) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-03-22]

CHR Extension: (Google Play) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-09-25]

CHR Extension: (Skype Click to Call) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-10-21]

CHR Extension: (Google Mail-Checker) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-09-25]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-25]

CHR Extension: (Google Mail) - C:\Users\P7279_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-25]

CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]

CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]

CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)

R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-10-19] (Digital Wave Ltd.)

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [245544 2015-07-31] (EasyAntiCheat Ltd)

R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Datei ist nicht signiert]

S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Datei ist nicht signiert]

S3 jswpsapi; C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe [954368 2013-03-12] (Wireless) [Datei ist nicht signiert]

R2 NSBU; C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\NSBU.exe [282016 2015-11-20] (Symantec Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2078216 2015-10-14] (Electronic Arts)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5436176 2015-02-17] (TeamViewer GmbH)

R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 BHDrvx64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.2.15\Definitions\BASHDefs\20151113.001\BHDrvx64.sys [1665608 2015-10-08] (Symantec Corporation)

R1 ccSet_NSBU; C:\Windows\system32\drivers\NSBUx64\1605050.00F\ccSetx64.sys [173808 2015-07-11] (Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-18] (Symantec Corporation)

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-18] (Symantec Corporation)

S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-08-03] (LogMeIn Inc.)

R1 IDSVia64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.2.15\Definitions\IPSDefs\20151204.001\IDSvia64.sys [767224 2015-10-20] (Symantec Corporation)

S3 LoopBeMidi1; C:\Windows\system32\drivers\loopbe1.sys [13824 2011-04-09] (nerds.de) [Datei ist nicht signiert]

S3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [49272 2014-12-29] (Visicom Media Inc.)

S3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35960 2014-12-29] (Visicom Media Inc.)

R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()

R3 NAVENG; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.2.15\Definitions\VirusDefs\20151207.001\ENG64.SYS [138488 2015-11-03] (Symantec Corporation)

R3 NAVEX15; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.2.15\Definitions\VirusDefs\20151207.001\EX64.SYS [2148080 2015-11-03] (Symantec Corporation)

R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )

R3 RtlWlanu; C:\Windows\System32\drivers\rtwlanu.sys [3772632 2015-07-10] (Realtek Semiconductor Corporation                           )

S3 sparkocam; C:\Windows\system32\DRIVERS\sparkocam.sys [25904 2015-07-27] (Sparkosoft)

R1 SRTSP; C:\Windows\System32\Drivers\NSBUx64\1605050.00F\SRTSP64.SYS [928496 2015-11-12] (Symantec Corporation)

R1 SRTSPX; C:\Windows\system32\drivers\NSBUx64\1605050.00F\SRTSPX64.SYS [50936 2015-07-11] (Symantec Corporation)

S3 sthid; C:\Windows\System32\drivers\sthid.sys [21216 2015-07-23] (Splashtop Inc.)

R0 SymEFASI; C:\Windows\System32\drivers\NSBUx64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-12] (Symantec Corporation)

S0 SymELAM; C:\Windows\System32\drivers\NSBUx64\1605050.00F\SymELAM.sys [24192 2015-07-11] (Symantec Corporation)

R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-09-17] (Symantec Corporation)

R1 SymIRON; C:\Windows\system32\drivers\NSBUx64\1605050.00F\Ironx64.SYS [297720 2015-07-11] (Symantec Corporation)

R1 SymNetS; C:\Windows\System32\Drivers\NSBUx64\1605050.00F\SYMNETS.SYS [577768 2015-11-12] (Symantec Corporation)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-12-08 13:54 - 2015-12-08 13:54 - 00016148 _____ C:\WINDOWS\system32\ROB-PC_P7279_000_HistoryPrediction.bin

2015-12-07 18:54 - 2015-12-07 18:54 - 00000000 _____ C:\Users\P7279_000\defogger_reenable

2015-12-07 18:51 - 2015-12-07 18:51 - 00050477 _____ C:\Users\P7279_000\Downloads\Defogger.exe

2015-12-07 16:37 - 2015-12-07 18:59 - 00058387 _____ C:\Users\P7279_000\Downloads\Shortcut.txt

2015-12-07 16:34 - 2015-12-07 18:59 - 00056524 _____ C:\Users\P7279_000\Downloads\Addition.txt

2015-12-07 16:33 - 2015-12-08 14:00 - 00025490 _____ C:\Users\P7279_000\Downloads\FRST.txt

2015-12-07 16:32 - 2015-12-08 13:59 - 00000000 ____D C:\FRST

2015-12-07 16:31 - 2015-12-07 16:32 - 02369024 _____ (Farbar) C:\Users\P7279_000\Downloads\FRST64.exe

2015-12-07 00:52 - 2015-12-07 00:52 - 00004034 _____ C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SnippingTool.lnk

2015-12-07 00:38 - 2015-12-07 00:38 - 00001463 _____ C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SketchUp.lnk

2015-12-07 00:36 - 2015-12-07 00:16 - 00145050 _____ C:\Users\P7279_000\Desktop\Intaminseat.skb

2015-12-07 00:16 - 2015-12-07 00:36 - 00126611 _____ C:\Users\P7279_000\Desktop\Intaminseat.skp

2015-12-06 23:12 - 2015-12-06 23:15 - 00000000 ____D C:\AdwCleaner

2015-12-06 23:11 - 2015-12-06 23:11 - 01736704 _____ C:\Users\P7279_000\Downloads\adwcleaner_5.023.exe

2015-12-06 22:57 - 2015-12-06 22:57 - 00001361 _____ C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\firefox.lnk

2015-12-06 22:19 - 2015-12-06 22:19 - 00001601 _____ C:\Users\P7279_000\Desktop\FL64 - Shortcut.lnk

2015-12-06 21:15 - 2015-12-06 21:16 - 00000000 ___HD C:\$SysReset

2015-12-06 21:09 - 2015-12-06 22:54 - 00000000 ____D C:\Users\P7279_000\Desktop\Alte Firefox-Daten

2015-12-06 21:08 - 2015-12-06 21:08 - 00000960 _____ C:\Users\P7279_000\Desktop\JRT.txt

2015-12-06 21:00 - 2015-12-06 21:00 - 01599080 _____ (Malwarebytes) C:\Users\P7279_000\Downloads\JRT80.exe

2015-12-06 21:00 - 2015-12-06 21:00 - 00000000 ____D C:\Users\P7279_000\Desktop\JRT_NewerVersion

2015-12-06 20:12 - 2015-12-06 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-12-06 20:09 - 2015-12-06 20:10 - 01504384 _____ (Skype Technologies S.A.) C:\Users\P7279_000\Downloads\SkypeSetup.exe

2015-12-06 04:13 - 2015-12-06 22:51 - 00000000 ____D C:\Users\P7279_000\AppData\Local\NPE

2015-12-06 04:02 - 2015-12-06 04:02 - 00051712 _____ C:\Users\P7279_000\Downloads\Rope(1).FBX

2015-12-06 03:59 - 2015-12-06 03:59 - 00051712 _____ C:\Users\P7279_000\Downloads\Rope.FBX

2015-12-06 03:56 - 2015-12-06 03:56 - 00286048 _____ C:\Users\P7279_000\Documents\sstower.skp

2015-12-06 02:50 - 2015-12-06 02:50 - 00110907 _____ C:\Users\P7279_000\Downloads\fixed.pdf

2015-12-05 17:26 - 2015-12-06 16:11 - 00000000 ____D C:\WINDOWS\Panther

2015-12-04 21:32 - 2015-12-04 21:33 - 04389046 _____ C:\Users\P7279_000\Desktop\The Beast.skb

2015-12-04 19:57 - 2015-12-06 01:29 - 04399434 _____ C:\Users\P7279_000\Desktop\The Beast.skp

2015-12-04 17:44 - 2015-12-04 17:44 - 00000244 _____ C:\Users\P7279_000\Desktop\Deep Stab.mid

2015-12-04 17:18 - 2015-12-04 17:20 - 45175114 _____ C:\Users\P7279_000\Desktop\Deep Piano Track.wav

2015-12-04 16:44 - 2015-12-04 16:44 - 00023129 _____ C:\Users\P7279_000\AppData\Local\recently-used.xbel

2015-12-04 15:53 - 2015-12-04 16:44 - 00000000 ____D C:\Users\P7279_000\Desktop\Basic Shots

2015-12-03 00:12 - 2015-12-06 04:09 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BreakDanceNo1

2015-12-03 00:12 - 2015-12-03 00:12 - 00000000 ____D C:\Users\P7279_000\Documents\Break Dancer No.1 Kinzler

2015-12-02 23:38 - 2015-12-03 00:12 - 168017563 _____ () C:\Users\P7279_000\Downloads\BreakDanceNo1 Setup.exe

2015-12-02 22:42 - 2015-12-02 22:43 - 17108355 _____ C:\Users\P7279_000\Downloads\Parades-of-Europa-Par2k.rar

2015-12-02 22:39 - 2015-12-02 22:40 - 12908318 _____ C:\Users\P7279_000\Downloads\Parades-of-Europa-Park.rar

2015-12-02 14:33 - 2015-12-02 14:33 - 00707681 _____ C:\Users\P7279_000\Documents\Berg.xcf

2015-12-02 13:21 - 2015-12-02 13:21 - 00000000 ____D C:\Users\P7279_000\Documents\DVDVideoSoft

2015-12-02 00:49 - 2015-12-02 00:49 - 00067479 _____ C:\Users\P7279_000\Downloads\timetable_toxicator_2015.pdf

2015-12-02 00:27 - 2015-12-02 01:20 - 445635558 _____ C:\Users\P7279_000\Desktop\Arthur Poppy Tower EP 2.MP4

2015-12-01 21:53 - 2015-12-06 23:22 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Security with Backup

2015-12-01 21:52 - 2015-12-01 21:52 - 00003410 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration

2015-12-01 17:25 - 2015-12-01 17:26 - 31945114 _____ C:\Users\P7279_000\Desktop\Gladiator neoversion 01.12.15.wav

2015-12-01 16:18 - 2015-12-01 16:18 - 00670290 _____ C:\Users\P7279_000\Desktop\Gladiator Backwards.wav

2015-12-01 15:52 - 2015-12-01 15:53 - 00064876 _____ C:\Users\P7279_000\Desktop\Rainbow.flp

2015-12-01 15:05 - 2015-10-06 18:23 - 00000000 ____D C:\Users\P7279_000\Desktop\[99 Sounds] MGF Audio

2015-12-01 14:32 - 2014-07-28 20:16 - 00000000 ____D C:\Users\P7279_000\Desktop\[99Sounds] Cinematic Sound Effects

2015-12-01 14:30 - 2015-12-01 14:30 - 00000000 ____D C:\Users\P7279_000\Desktop\[99Sounds] White Noise SFX

2015-12-01 13:56 - 2015-12-01 13:56 - 00136586 _____ C:\Users\P7279_000\Downloads\starter_full_01.flp

2015-11-30 01:38 - 2015-12-02 01:20 - 00002552 _____ C:\Users\P7279_000\Desktop\GOPR7815_mp4.HDP

2015-11-30 01:38 - 2015-11-30 07:42 - 445629570 _____ C:\Users\P7279_000\Desktop\Arthur Poppy Tower EP.MP4

2015-11-30 01:22 - 2015-12-02 01:20 - 00002552 _____ C:\Users\P7279_000\Desktop\GOPR7820_mp4.HDP

2015-11-30 00:53 - 2015-11-30 07:44 - 00282432 _____ C:\Users\P7279_000\Desktop\GOPR7820_mp4.H0

2015-11-29 23:59 - 2015-11-28 12:52 - 237700758 ____N C:\Users\P7279_000\Desktop\GOPR7815.MP4

2015-11-29 23:27 - 2015-11-28 12:55 - 710405632 ____N C:\Users\P7279_000\Desktop\GOPR7820.MP4

2015-11-28 00:30 - 2015-11-28 00:30 - 02842687 _____ C:\Users\P7279_000\Downloads\CityCard 2015.pdf

2015-11-27 18:32 - 2015-11-27 18:45 - 119263914 _____ C:\Users\P7279_000\Desktop\Gladiator neoversion 27.11.15.wav

2015-11-27 15:34 - 2015-11-27 16:14 - 00000000 ____D C:\Users\P7279_000\Desktop\TorturedTrap_Mini_SP

2015-11-25 22:45 - 2015-11-25 22:51 - 00002383 _____ C:\Users\P7279_000\Desktop\fickdichdochamkduscheißfuckinghexagondrecksgeburt.svg

2015-11-25 22:28 - 2015-11-25 22:45 - 00002867 _____ C:\Users\P7279_000\Desktop\Hexagon.svg

2015-11-25 20:30 - 2015-11-25 20:30 - 00003423 _____ C:\Users\P7279_000\Desktop\Octagon.svg

2015-11-25 19:26 - 2015-11-25 19:26 - 00000000 ____D C:\Users\P7279_000\AppData\Local\SpacialAudio

2015-11-25 19:25 - 2015-12-06 04:09 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SAM Cast

2015-11-25 19:25 - 2015-11-25 19:25 - 07300568 _____ C:\Users\P7279_000\Downloads\samcast.exe

2015-11-25 19:25 - 2015-11-25 19:25 - 00005027 _____ C:\ProgramData\ubzyegls.kzt

2015-11-25 19:25 - 2015-11-25 19:25 - 00000000 ____D C:\Program Files (x86)\SpacialAudio

2015-11-25 19:18 - 2015-11-25 19:19 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\obs-studio

2015-11-25 19:17 - 2015-12-06 04:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Multiplatform

2015-11-25 19:17 - 2015-11-25 19:17 - 00000000 ____D C:\Program Files (x86)\obs-studio

2015-11-25 19:15 - 2015-11-25 19:17 - 36052296 _____ C:\Users\P7279_000\Downloads\OBS-MP-0.12.2-Installer.exe

2015-11-25 18:18 - 2015-11-25 18:32 - 119263914 _____ C:\Users\P7279_000\Desktop\Gladiator neoversion 25.11.15.wav

2015-11-25 01:28 - 2015-11-25 01:28 - 05301056 _____ C:\Users\P7279_000\Desktop\Gamer Sweep.wav

2015-11-25 00:57 - 2015-11-29 23:11 - 00005137 _____ C:\Users\P7279_000\Desktop\Entschuldigung für Robin Pfeiffer.odt

2015-11-24 22:56 - 2015-11-27 17:17 - 00000000 ____D C:\Users\P7279_000\Desktop\Gladiator Neo Version

2015-11-24 22:56 - 2015-11-25 13:09 - 00000000 ____D C:\Users\P7279_000\Desktop\Up And Away

2015-11-24 22:54 - 2015-11-24 22:57 - 26964914 _____ C:\Users\P7279_000\Desktop\Gladiator neoversion.wav

2015-11-23 00:55 - 2015-12-06 04:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2015-11-23 00:54 - 2015-11-23 00:55 - 00000000 ____D C:\Program Files\iTunes

2015-11-23 00:54 - 2015-11-23 00:54 - 00000000 ____D C:\Program Files\iPod

2015-11-23 00:54 - 2015-11-23 00:54 - 00000000 ____D C:\Program Files (x86)\iTunes

2015-11-23 00:52 - 2015-11-23 00:52 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple

2015-11-23 00:52 - 2015-11-23 00:52 - 00000000 ____D C:\Program Files\Bonjour

2015-11-23 00:52 - 2015-11-23 00:52 - 00000000 ____D C:\Program Files (x86)\Bonjour

2015-11-23 00:52 - 2015-11-23 00:52 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

2015-11-23 00:51 - 2015-11-23 00:54 - 00000000 ____D C:\Program Files\Common Files\Apple

2015-11-22 18:47 - 2015-11-23 00:50 - 167839512 _____ (Apple Inc.) C:\Users\P7279_000\Downloads\iTunes6464Setup.exe

2015-11-22 16:49 - 2015-11-26 22:17 - 89969058 _____ C:\Users\P7279_000\Desktop\Up and Away Original Mix 22.11.15.wav

2015-11-22 02:28 - 2015-11-22 02:28 - 00010979 _____ C:\Users\P7279_000\Desktop\copy.nl2elem

2015-11-20 15:28 - 2015-11-20 15:29 - 00000000 ____D C:\Users\P7279_000\AppData\Local\ArmA 2 OA

2015-11-20 15:28 - 2015-11-20 15:28 - 00000000 ____D C:\ProgramData\Bohemia Interactive Studio

2015-11-20 15:06 - 2015-11-20 15:30 - 00000000 ____D C:\Users\P7279_000\Documents\ArmA 2

2015-11-20 15:06 - 2015-11-20 15:07 - 00000000 ____D C:\Users\P7279_000\AppData\Local\ArmA 2

2015-11-20 15:06 - 2015-11-20 15:06 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

2015-11-19 18:40 - 2015-11-19 18:40 - 00380575 _____ C:\Users\P7279_000\Documents\Party Animals.xcf

2015-11-19 17:35 - 2015-11-19 17:35 - 00027482 _____ C:\Users\P7279_000\Documents\Party Animals Icons.xcf

2015-11-16 07:10 - 2015-11-16 07:10 - 00269231 _____ C:\Users\P7279_000\Downloads\airtime.wordpress.2015-11-16.xml

2015-11-16 00:23 - 2015-11-16 00:23 - 00865332 _____ C:\Users\P7279_000\Downloads\lame3.99.5-64.zip

2015-11-15 12:43 - 2015-11-15 12:45 - 11189350 _____ C:\Users\P7279_000\Downloads\WAProd_Free_EDM_Big_Snares.zip

2015-11-15 11:49 - 2015-12-06 04:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DayZLauncher

2015-11-15 11:49 - 2015-11-15 12:01 - 00000000 ____D C:\Program Files (x86)\DayZLauncher

2015-11-15 11:18 - 2015-11-15 11:48 - 14967177 _____ (Maca134 ) C:\Users\P7279_000\Downloads\setup_dzlauncher.exe

2015-11-14 22:34 - 2015-11-14 22:34 - 13885099 _____ C:\Users\P7279_000\Downloads\KSHMR-Top-20-Samples-Splice-Sounds(1).zip

2015-11-13 06:32 - 2015-11-13 06:33 - 13885099 _____ C:\Users\P7279_000\Downloads\KSHMR-Top-20-Samples-Splice-Sounds.zip

2015-11-12 14:29 - 2015-12-06 04:09 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mixxx

2015-11-12 14:28 - 2015-11-12 14:28 - 00000000 ____D C:\Users\P7279_000\AppData\Local\Mixxx

2015-11-12 14:12 - 2015-11-12 14:28 - 31801654 _____ C:\Users\P7279_000\Downloads\mixxx-1.11.0-win64.exe

2015-11-12 14:12 - 2015-11-12 14:28 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Mp3tag

2015-11-12 14:10 - 2015-11-12 14:10 - 02910856 _____ C:\Users\P7279_000\Downloads\mp3tagv272setup.exe

2015-11-12 14:10 - 2015-11-12 14:10 - 00000000 ____D C:\Program Files (x86)\Mp3tag

2015-11-12 06:35 - 2015-11-12 06:35 - 00027809 _____ C:\Users\P7279_000\Downloads\EPIC EDM 2 Soundbank(1).zip

2015-11-12 06:35 - 2015-11-12 06:35 - 00015402 _____ C:\Users\P7279_000\Downloads\Amidy's Secret Weapons(1).zip

2015-11-12 06:30 - 2015-11-12 06:30 - 00027809 _____ C:\Users\P7279_000\Downloads\EPIC EDM 2 Soundbank.zip

2015-11-11 02:00 - 2015-11-05 06:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2015-11-11 02:00 - 2015-11-05 06:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll

2015-11-11 02:00 - 2015-11-05 06:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2015-11-11 02:00 - 2015-11-05 06:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2015-11-11 02:00 - 2015-11-05 06:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2015-11-11 02:00 - 2015-11-05 06:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-11-11 02:00 - 2015-11-05 06:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll

2015-11-11 02:00 - 2015-11-05 06:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2015-11-11 02:00 - 2015-11-05 05:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2015-11-11 02:00 - 2015-11-05 05:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys

2015-11-11 02:00 - 2015-11-05 05:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2015-11-11 02:00 - 2015-11-05 05:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2015-11-11 02:00 - 2015-11-05 05:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-11-11 02:00 - 2015-11-05 05:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll

2015-11-11 02:00 - 2015-11-05 05:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2015-11-11 02:00 - 2015-11-05 05:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-11-11 02:00 - 2015-11-05 05:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-11-11 02:00 - 2015-11-05 05:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2015-11-11 02:00 - 2015-11-05 05:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2015-11-11 02:00 - 2015-11-05 05:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2015-11-11 02:00 - 2015-11-05 05:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll

2015-11-11 02:00 - 2015-11-05 05:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2015-11-11 02:00 - 2015-11-05 05:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-11-11 02:00 - 2015-11-05 05:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2015-11-11 02:00 - 2015-11-05 05:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2015-11-11 02:00 - 2015-11-05 05:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll

2015-11-11 02:00 - 2015-11-05 05:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2015-11-11 02:00 - 2015-11-05 05:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2015-11-11 02:00 - 2015-11-05 05:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-11-11 02:00 - 2015-11-05 05:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2015-11-11 02:00 - 2015-11-05 05:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2015-11-11 02:00 - 2015-11-05 05:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll

2015-11-11 02:00 - 2015-11-05 05:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2015-11-11 02:00 - 2015-11-05 04:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-11-11 02:00 - 2015-11-05 04:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2015-11-11 02:00 - 2015-11-05 04:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-11-11 02:00 - 2015-11-05 04:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2015-11-11 02:00 - 2015-11-05 04:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-11-11 02:00 - 2015-11-05 04:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll

2015-11-11 02:00 - 2015-11-05 04:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll

2015-11-11 02:00 - 2015-11-05 04:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-11-11 02:00 - 2015-11-05 04:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2015-11-11 02:00 - 2015-11-05 04:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2015-11-11 02:00 - 2015-11-05 04:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-11-11 02:00 - 2015-11-05 04:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2015-11-11 02:00 - 2015-11-05 04:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll

2015-11-11 02:00 - 2015-11-05 04:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2015-11-11 02:00 - 2015-11-05 04:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2015-11-11 02:00 - 2015-11-05 04:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2015-11-11 02:00 - 2015-11-05 04:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-11-11 02:00 - 2015-11-05 04:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2015-11-11 02:00 - 2015-11-05 04:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2015-11-11 02:00 - 2015-11-05 04:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll

2015-11-10 22:03 - 2015-11-10 22:03 - 00000000 ____D C:\Users\P7279_000\Downloads\CloudDownloaderVersion_2.9

2015-11-10 22:02 - 2015-11-10 22:03 - 05553741 _____ C:\Users\P7279_000\Downloads\CloudDownloaderVersion_2.9.zip

2015-11-10 21:49 - 2015-11-10 22:16 - 933707897 _____ C:\Users\P7279_000\Downloads\BeatportRemixPackage-MatthewKoma-SoFuckinRomantic.zip

2015-11-08 03:15 - 2015-12-07 16:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-11-08 01:05 - 2015-11-08 01:05 - 00000000 ____D C:\Users\P7279_000\Downloads\TL-WN822N_V3_140918

2015-11-08 01:04 - 2015-11-08 01:05 - 06391222 _____ C:\Users\P7279_000\Downloads\TL-WN822N_V3_140918.zip
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-12-08 13:58 - 2014-10-25 19:00 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{93FCFF6A-1EA4-4A25-A4D0-7657FEDFA741}

2015-12-08 13:55 - 2015-03-22 22:56 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2015-12-07 19:20 - 2015-08-01 15:08 - 00000000 ____D C:\Users\P7279_000

2015-12-07 19:18 - 2014-10-26 18:47 - 09057280 ___SH C:\Users\P7279_000\Desktop\Thumbs.db

2015-12-07 18:58 - 2015-07-10 10:05 - 00000000 ____D C:\Windows

2015-12-07 18:34 - 2014-10-26 23:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-12-07 18:30 - 2015-03-22 22:56 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2015-12-07 16:23 - 2014-10-26 15:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-12-07 01:05 - 2015-08-02 04:30 - 00000000 ____D C:\Users\P7279_000\AppData\Local\MicrosoftEdge

2015-12-07 00:52 - 2014-10-26 16:16 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Skype

2015-12-07 00:38 - 2014-11-04 18:05 - 00000000 ____D C:\Users\P7279_000\AppData\Local\CrashDumps

2015-12-06 23:17 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-12-06 23:16 - 2015-07-10 10:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2015-12-06 22:55 - 2015-08-01 15:30 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-12-06 22:55 - 2015-07-10 17:34 - 00771100 _____ C:\WINDOWS\system32\perfh007.dat

2015-12-06 22:55 - 2015-07-10 17:34 - 00153964 _____ C:\WINDOWS\system32\perfc007.dat

2015-12-06 22:55 - 2015-07-10 12:02 - 00000000 ____D C:\WINDOWS\INF

2015-12-06 22:18 - 2014-11-02 02:02 - 00000000 ____D C:\Program Files (x86)\Image-Line

2015-12-06 22:17 - 2014-12-29 02:55 - 00000000 ____D C:\ProgramData\McAfee Security Scan

2015-12-06 21:18 - 2014-10-25 17:11 - 00000000 ____D C:\ProgramData\Norton

2015-12-06 20:12 - 2014-10-26 16:19 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-12-06 20:12 - 2014-10-26 16:19 - 00000000 ____D C:\ProgramData\Skype

2015-12-06 20:12 - 2014-10-26 16:16 - 00000000 ____D C:\Users\P7279_000\AppData\Local\Skype

2015-12-06 16:34 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-12-06 16:06 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT

2015-12-06 04:10 - 2015-08-01 15:08 - 00000000 ____D C:\Users\UpdatusUser

2015-12-06 04:09 - 2015-10-03 00:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreePIE

2015-12-06 04:09 - 2015-10-01 16:30 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeTrack v2.1

2015-12-06 04:09 - 2015-09-17 22:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security with Backup

2015-12-06 04:09 - 2015-07-26 23:28 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync

2015-12-06 04:09 - 2015-07-26 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sylenth1 Demo

2015-12-06 04:09 - 2015-07-13 22:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mystery Maze of Balthasar Castle

2015-12-06 04:09 - 2015-06-02 18:49 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software

2015-12-06 04:09 - 2015-03-22 22:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-12-06 04:09 - 2015-03-19 21:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJUCED 18

2015-12-06 04:09 - 2015-03-14 20:16 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server

2015-12-06 04:09 - 2015-03-14 19:56 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner

2015-12-06 04:09 - 2015-03-14 19:41 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haunt 1.0

2015-12-06 04:09 - 2015-03-14 19:41 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\ParanormalDev

2015-12-06 04:09 - 2015-03-10 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue

2015-12-06 04:09 - 2015-02-27 13:11 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ

2015-12-06 04:09 - 2015-02-27 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJUCED 40

2015-12-06 04:09 - 2015-02-27 12:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJUCED

2015-12-06 04:09 - 2015-02-18 23:11 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2

2015-12-06 04:09 - 2015-02-18 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line

2015-12-06 04:09 - 2015-02-11 10:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape 0.91

2015-12-06 04:09 - 2015-02-01 20:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX Online Druck Service

2015-12-06 04:09 - 2014-12-07 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft

2015-12-06 04:09 - 2014-12-06 18:07 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2015-12-06 04:09 - 2014-12-01 21:42 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-12-06 04:09 - 2014-11-15 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2015-12-06 04:09 - 2014-11-15 18:32 - 00000000 ____D C:\Program Files (x86)\Steam

2015-12-06 04:09 - 2014-11-14 14:48 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

2015-12-06 04:09 - 2014-11-11 18:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office

2015-12-06 04:09 - 2014-11-10 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2015

2015-12-06 04:09 - 2014-11-02 02:06 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line

2015-12-06 04:09 - 2014-11-01 23:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

2015-12-06 04:09 - 2014-10-26 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-12-06 02:56 - 2015-09-16 19:57 - 00000000 ___RD C:\Users\P7279_000\3D Objects

2015-12-05 16:00 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps

2015-12-05 01:35 - 2014-12-27 05:15 - 00000000 ____D C:\Users\P7279_000\Documents\com.nolimitscoaster.nolimits2

2015-12-04 21:41 - 2014-12-10 21:29 - 00000000 ____D C:\Users\P7279_000\AppData\Local\Spotify

2015-12-04 18:44 - 2014-12-07 17:48 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\DVDVideoSoft

2015-12-04 16:44 - 2014-11-01 19:11 - 00000000 ____D C:\Users\P7279_000\AppData\Local\gtk-2.0

2015-12-04 16:44 - 2014-10-26 18:43 - 00000000 ____D C:\Users\P7279_000\.gimp-2.8

2015-12-04 16:18 - 2014-12-10 21:27 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Spotify

2015-12-04 01:02 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\NDF

2015-12-02 21:16 - 2015-03-19 21:13 - 00000000 ____D C:\Users\P7279_000\Documents\DJUCED 18

2015-12-02 17:25 - 2015-03-22 22:56 - 00004190 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2015-12-02 17:25 - 2015-03-22 22:56 - 00003958 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2015-12-02 11:13 - 2015-07-10 12:04 - 00000000 ___HD C:\WINDOWS\ELAMBKUP

2015-12-01 21:53 - 2015-09-17 22:00 - 00000000 ____D C:\WINDOWS\system32\Drivers\NSBUx64

2015-12-01 16:13 - 2014-10-26 12:07 - 00000000 __RDO C:\Users\P7279_000\OneDrive

2015-12-01 13:44 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-12-01 13:41 - 2015-07-10 10:05 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM

2015-11-25 19:10 - 2014-10-26 22:32 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\TS3Client

2015-11-25 18:59 - 2014-10-26 16:18 - 00748032 ___SH C:\Users\P7279_000\Downloads\Thumbs.db

2015-11-23 00:56 - 2014-11-02 14:35 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\Apple Computer

2015-11-23 00:55 - 2014-12-05 21:21 - 00000000 ____D C:\Users\P7279_000\AppData\Local\Apple Computer

2015-11-23 00:54 - 2014-11-01 23:09 - 00000000 ____D C:\ProgramData\Apple Computer

2015-11-23 00:52 - 2014-11-01 23:08 - 00000000 ____D C:\ProgramData\Apple

2015-11-22 02:35 - 2014-12-27 05:15 - 00000000 ____D C:\Users\P7279_000\AppData\Roaming\com.nolimitscoaster.nolimits2

2015-11-20 15:28 - 2015-10-01 16:30 - 00000000 ____D C:\Program Files (x86)\FreeTrack

2015-11-15 10:55 - 2014-10-26 22:32 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client

2015-11-13 04:24 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache

2015-11-12 13:54 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser

2015-11-11 05:25 - 2014-11-11 18:39 - 00000000 ____D C:\ProgramData\Microsoft Help

2015-11-11 05:18 - 2014-10-28 02:09 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-11-11 05:04 - 2014-10-28 02:09 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-11-10 20:34 - 2014-10-26 23:41 - 00003870 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-07-31 02:33 - 2015-08-29 02:59 - 0000097 _____ () C:\Users\P7279_000\AppData\Roaming\LauncherSettings_live.cfg

2015-08-28 02:14 - 2015-08-28 02:14 - 0010498 _____ () C:\Users\P7279_000\AppData\Roaming\TheHunterSettings_live.bin

2015-07-31 01:53 - 2015-07-31 01:53 - 0000040 _____ () C:\Users\P7279_000\AppData\Roaming\TheHunterSettings_steam_live.cfg

2015-12-04 16:44 - 2015-12-04 16:44 - 0023129 _____ () C:\Users\P7279_000\AppData\Local\recently-used.xbel

2015-01-04 00:07 - 2015-04-06 00:09 - 0007599 _____ () C:\Users\P7279_000\AppData\Local\Resmon.ResmonCfg

2015-11-25 19:25 - 2015-11-25 19:25 - 0005027 _____ () C:\ProgramData\ubzyegls.kzt
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\Users\P7279_000\Massive.dll
 
 

Einige Dateien in TEMP:

====================

C:\Users\P7279_000\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-12-06 23:08
 

==================== Ende von FRST.txt ============================

--- --- ---

und hier die Addition.txt

Zitat:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-12-2015
durchgeführt von P7279_000 (2015-12-08 14:02:18)
Gestartet von C:\Users\P7279_000\Downloads
Windows 10 Home (X64) (2015-08-01 16:57:54)
Start-Modus: Normal
==========================================================

==================== Konten: =============================

Administrator (S-1-5-21-1197019360-2250170530-3591322323-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1197019360-2250170530-3591322323-503 - Limited - Disabled)
Gast (S-1-5-21-1197019360-2250170530-3591322323-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1197019360-2250170530-3591322323-1006 - Limited - Enabled)
P7279_000 (S-1-5-21-1197019360-2250170530-3591322323-1001 - Administrator - Enabled) => C:\Users\P7279_000
UpdatusUser (S-1-5-21-1197019360-2250170530-3591322323-1004 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton Security mit Backup (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Security mit Backup (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Security mit Backup (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 17.0.0.124 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.5.155 - Adobe Systems, Inc.)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version: - Frictional Games)
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ARIA Engine v1.8.3.9 (HKLM\...\ARIA Engine_is1) (Version: v1.8.3.9 - Plogue Art et Technologie, Inc)
Arma 2 (HKLM-x32\...\Steam App 33910) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead (HKLM-x32\...\Steam App 33930) (Version: - Bohemia Interactive)
Arma 2: Operation Arrowhead Beta (Obsolete) (HKLM-x32\...\Steam App 219540) (Version: - )
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )
BIGROOMKIXSYNTH (HKLM-x32\...\BIGROOMKIXSYNTH) (Version: 1.1 - Alan Hinton)
Bing Bar (HKLM-x32\...\{16793295-2366-40F7-A045-A3E42A81365E}) (Version: 7.1.362.0 - Microsoft Corporation)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Counter-Strike Nexon: Zombies (HKLM-x32\...\Steam App 273110) (Version: - Nexon)
CPUID CPU-Z 1.72.1 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Dailymotion Mass Uploader (HKLM-x32\...\com.dailymotion.massuploader) (Version: 0.1.1 - Dailymotion)
Dailymotion Mass Uploader (x32 Version: 0.1.1 - Dailymotion) Hidden
DayZLauncher version 0.0.2.1 (HKLM-x32\...\{E31045B4-9DB5-9EBD-44DF-BD4E6CFD40DF}_is1) (Version: 0.0.2.1 - Maca134)
DJC Sample Pack V2 (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\DJC Sample Pack V2) (Version: - )
DJC Sample Pack V3 (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\DJC Sample Pack V3) (Version: - )
DJUCED 18° (HKLM-x32\...\{34F730A3-77BA-4741-A02A-D40762FEF274}) (Version: 1.0.99 - Guillemot)
DJUCED 40 (HKLM-x32\...\{D9CC23A3-1BF6-4B2F-95EA-4296CD2CAC74}) (Version: 2.0.99 - Guillemot)
Dropbox (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
Escape (HKLM-x32\...\Steam App 365050) (Version: - Stephane Bottin)
FileZilla Client 3.9.0.6 (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}) (Version: 2.1.27.0 - MAGIX AG)
FL Studio 11.5 (HKLM-x32\...\FL Studio 11.5) (Version: - Image-Line)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Free Studio (HKLM-x32\...\Free Studio_is1) (Version: 6.5.8.1019 - DVDVideoSoft Ltd.)
Free YouTube Download (HKLM-x32\...\Free YouTube Download_is1) (Version: 4.0.3.1019 - DVDVideoSoft Ltd.)
FreePIE (HKLM-x32\...\{0A709759-7B4E-4D46-998E-B628E52557DA}) (Version: 1.9.611.0 - FreePIE)
FreeTrack v2.1.2 (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\FreeTrack v2.1.2) (Version: - )
Frozen Hearth (HKLM-x32\...\Steam App 257890) (Version: - Epiphany Games)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.73 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GoPro Studio 2.5.4 (HKLM-x32\...\GoPro Studio) (Version: 2.5.4 - GoPro, Inc.)
Grand Theft Auto: San Andreas (HKLM-x32\...\Steam App 12120) (Version: - Rockstar Games)
Haunt 1.0 64bit (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\Haunt 1.0 64bit) (Version: - )
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Inkscape 0.91 (HKLM\...\{81922150-317E-4BB0-A31D-FF1C14F707C5}) (Version: 0.91 - inkscape.org)
Intugame VR (HKLM\...\{9C0EC32A-C14F-4DB1-A0C4-E336F5A2CDAE}) (Version: 1.0.0 - Intugame Ltd.)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
MAGIX Media Manager 2004 silver (HKLM-x32\...\MAGIX Media Manager 2004 silver) (Version: 2.0.7.0 - MAGIX AG)
MAGIX music studio 2005 deLuxe (HKLM-x32\...\MAGIX music studio 2005 deLuxe) (Version: 1.0.2.545 - MAGIX AG)
MAGIX Online Druck Service (HKLM-x32\...\MAGIX Online Druck Service) (Version: - Silverwire Software GmbH)
MAGIX Screenshare (HKLM-x32\...\{E6AA1679-93CC-4019-AF6F-81DA02BF20A5}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{E615EB85-3E84-4F91-8C24-E37DF4608588}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 17 Plus Sonderedition (HKLM-x32\...\MAGIX_MSI_Videodeluxe17_plus) (Version: 10.0.11.0 - MAGIX AG)
MAGIX Video deluxe 17 Plus Sonderedition (x32 Version: 10.0.11.0 - MAGIX AG) Hidden
MAGIX Video deluxe 2015 Plus (HKLM\...\MX.{0797C499-48E8-46E2-9C97-90034F46F5E6}) (Version: 14.0.0.140 - MAGIX Software GmbH)
MAGIX Video deluxe 2015 Plus (Version: 14.0.0.140 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2015 Plus Update (Version: 14.0.0.172 - MAGIX Software GmbH) Hidden
MAGIX Video deluxe 2015 Premium (HKLM\...\MX.{EAC79752-A0A4-45DB-9F99-9F6445920F77}) (Version: 14.0.0.159 - MAGIX Software GmbH)
MAGIX Video deluxe 2015 Premium (Version: 14.0.0.159 - MAGIX Software GmbH) Hidden
MediaInfo 0.7.71 (HKLM\...\MediaInfo) (Version: 0.7.71 - MediaArea.net)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mixxx 1.11.0 (64-bit) (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\Mixxx (1.11.0)) (Version: 1.11.0 - The Mixxx Development Team)
Mp3tag v2.72 (HKLM-x32\...\Mp3tag) (Version: v2.72 - Florian Heidenreich)
MSI Afterburner 3.0.0 (HKLM-x32\...\Afterburner) (Version: 3.0.0 - MSI Co., LTD)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
Mystery Maze of Balthasar Castle Version 1.0 (HKLM-x32\...\{3F2CA417-90AD-4105-90B7-AB2C2E49F59D}_is1) (Version: 1.0 - Mack Media GmbH & CO. KG)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.4.2.419 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.5.9.132 - Native Instruments)
NewBlue PremiumEffects (HKLM-x32\...\NewBlue PremiumEffects) (Version: 1.0 - NewBlue)
NoLimits 2 Roller Coaster Simulation (HKLM-x32\...\Steam App 301320) (Version: - Ole Lange)
Norton Security mit Backup (HKLM-x32\...\NSBU) (Version: 22.5.5.15 - Symantec Corporation)
NVIDIA 3D Vision Controller-Treiber 295.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 295.73 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.12.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.12.0 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Update 1.7.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.7.11 - NVIDIA Corporation)
OBS Multiplatform (HKLM-x32\...\OBS Multiplatform) (Version: 0.12.2 - OBS Project)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.5.3.636 - Electronic Arts, Inc.)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Plogue AlterEgo v1.039 (HKLM\...\__ARIA_1019___is1) (Version: v1.039 - Plogue)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RivaTuner Statistics Server 6.1.2 (HKLM-x32\...\RTSS) (Version: 6.1.2 - Unwinder)
Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)
RollerCoaster Tycoon 2 (HKLM-x32\...\{72DF62BD-FF36-424E-AA5F-D89BAFF2C249}) (Version: - )
RollerCoaster Tycoon 2: Time Twister (HKLM-x32\...\{BA1E1AFD-D1F2-4C52-88C3-186FC5E61604}) (Version: 1.00.000 - )
RollerCoaster Tycoon 2: Wacky Worlds (HKLM-x32\...\{B1AD83A0-DC92-41E3-B111-E9472349768C}) (Version: - )
SAM Cast 2015.4 (HKLM-x32\...\SAMCast) (Version: 2015.4 - Spacial Audio Solutions, LLC)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SketchUp 2015 (HKLM\...\{F7751E54-9A5A-4A97-BA31-5D78505CB0D1}) (Version: 15.0.9350 - Trimble Navigation Limited)
Ski Region Simulator (HKLM-x32\...\Steam App 270950) (Version: - Giants Software)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)
Skype™ 7.16 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.16.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\Spotify) (Version: 1.0.19.106.gb8a7150f - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Sylenth1 Demo v2.20 (HKLM\...\Sylenth1Demo_is1) (Version: - )
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.39052 - TeamViewer)
theHunter (HKLM-x32\...\Steam App 253710) (Version: - Expansive Worlds)
TP-LINK TL-WN821N(C)_TL-WN822N_TL-WN823N Driver (HKLM-x32\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
TrinusVR version 2.0.3 (HKLM-x32\...\{A66AD08F-FC5B-4583-9A7D-4636F5637B2C}_is1) (Version: 2.0.3 - Odd Sheep Ltd.)
Unity (HKLM-x32\...\Unity) (Version: 5.1.3f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\UnityWebPlayer) (Version: 5.1.3f1 - Unity Technologies ApS)
Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)
VirtualDJ 8 (HKLM-x32\...\{9652ACA0-38A4-4BF8-B15E-2317D41D0AE3}) (Version: 8.0.2139.0 - Atomix Productions)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Webocton - Scriptly 0.8.95.6 (HKLM-x32\...\Webocton - Scriptly_is1) (Version: 0.8.95.6 - Webocton)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012 - GoPro)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Zumas Revenge (HKLM-x32\...\{0B153CAB-792B-4CA2-B2A5-AB0BBAF2FFA9}) (Version: 1.0.5.600 - PopCap Games)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\P7279_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1197019360-2250170530-3591322323-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

19-11-2015 19:00:46 Geplanter Prüfpunkt
23-11-2015 00:52:42 Installed iTunes
01-12-2015 17:49:47 Geplanter Prüfpunkt
06-12-2015 21:04:37 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0657141E-8839-4048-B7A0-CA26491BC20B} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {073F81FB-899D-4C6A-8254-F25585E0DC7B} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {1BF6A926-DD8C-4EEB-9D61-50C93CE40794} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {1EBAF81F-AAEE-4D9F-A19C-218526F7EE91} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {36B76393-E55D-48A1-B30B-0F7858ADAB9E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-22] (Google Inc.)
Task: {3E3A222B-A058-43EE-8B7C-E255445B6C0A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {3EAD240F-5109-4315-85AA-0E780D2E7AE0} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {41C6F8AF-34CB-4D64-A4AD-84D9078D26CC} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\WSCStub.exe [2015-11-20] (Symantec Corporation)
Task: {45756D66-8165-4D20-BABA-854BA7F4D27F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {4DFDF923-8424-4AA6-B776-B2FF9D120CFF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {523F1BA3-1F09-405D-912F-71824936D708} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-03-22] (Google Inc.)
Task: {53D6A55C-D577-47E6-8D57-03A8A2309B16} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-10] (Adobe Systems Incorporated)
Task: {5D9D6A75-0B54-4E56-97A9-B25783BFE1AF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {67220420-0112-4F38-B0BB-BB9C3BFC3FEA} - System32\Tasks\Norton Security with Backup\Norton Autofix => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {7F0DB2EB-E700-4252-A61E-C8D69FADFA0D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {84154800-1BA8-4BBA-812D-53AFAF24E536} - System32\Tasks\Norton Security with Backup\Norton Error Processor => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {A53F1132-8EE8-447F-A76A-C9E9DA546D82} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {C7436433-2F92-459B-97FB-B66229817DCD} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-11] (Microsoft Corporation)
Task: {EFB21FCE-0B2C-4E6B-9765-2B4F2425337B} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F26479C0-0C41-4AA2-9B1C-C10BE9370115} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {F2EA2FB1-1849-472F-8763-977F848B9D62} - System32\Tasks\Norton Security with Backup\Norton Error Analyzer => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {FA4C2959-7D00-4F95-8F13-C52245774DF5} - System32\Tasks\{0EA9B2D4-A83F-4228-9DAC-24E0545D8854} => pcalua.exe -a D:\CDSETUP.EXE -d D:\
Task: {FE54602F-E981-4037-9482-3E9BF8DAA9CB} - System32\Tasks\{94C25678-5715-426C-AA86-73F6201D26E8} => pcalua.exe -a D:\Setup.exe -d D:\

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-01 15:50 - 2015-08-01 15:50 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-01-04 04:20 - 2015-01-20 10:45 - 00020240 _____ () C:\WINDOWS\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2015-08-20 18:48 - 2015-08-11 10:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 00085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-10-01 12:24 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2014-05-01 15:13 - 2014-05-01 15:13 - 00470016 _____ () C:\Users\P7279_000\AppData\Local\MEGAsync\ShellExtX64.dll
2015-10-01 12:24 - 2015-09-17 07:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-01 12:23 - 2015-09-17 06:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 11:59 - 2015-07-10 11:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-10-01 12:24 - 2015-09-17 06:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-01 12:23 - 2015-09-17 06:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-01 12:23 - 2015-09-17 06:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-01 12:24 - 2015-09-17 06:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 12:00 - 2015-07-10 17:45 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2014-12-07 17:51 - 2015-10-19 17:13 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2014-12-07 17:52 - 2015-10-19 17:13 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2014-12-07 17:52 - 2015-10-19 17:13 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2014-12-07 17:52 - 2015-10-19 17:13 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2014-12-07 17:52 - 2015-10-19 17:13 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2014-12-07 17:52 - 2015-10-19 17:13 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm
AlternateDataStreams: C:\ProgramData\TEMP:054203E4

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\P7279_000\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
HKU\S-1-5-21-1197019360-2250170530-3591322323-1004\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "GoPro Importer.lnk"
HKLM\...\StartupApproved\StartupFolder: => "TP-LINK Wireless Configuration Utility.lnk"
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "TrayServer"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1197019360-2250170530-3591322323-1001\...\StartupApproved\Run: => "OneDrive"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{642D5CBA-AA92-41CC-9C74-26185073B9CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{D128887D-BBBA-4BE2-9EF4-03A3A19E2348}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto San Andreas\gta-sa.exe
FirewallRules: [{13A23774-ECFE-4A46-9733-A87D51F8CA92}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{B10CC524-9CA3-4475-82D8-E0851DE514C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Robocraft\Robocraft.exe
FirewallRules: [{41D22B5B-4F91-4A8E-8704-BB2D9E588B6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe
FirewallRules: [{1458A5D0-3BA9-4246-BD64-BB5EC2F0B1AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe
FirewallRules: [{28BC7E8F-9754-452E-BD50-7CEAB600248B}] => (Allow) C:\Program Files (x86)\Origin Games\Zuma's Revenge\ZumasRevenge.exe
FirewallRules: [{63A3FBF2-9296-4150-A9F4-67291ADC571F}] => (Allow) C:\Program Files (x86)\Origin Games\Zuma's Revenge\ZumasRevenge.exe
FirewallRules: [{5B79CFA0-B971-4583-A13B-DB25D495514B}] => (Allow) C:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{91AF4512-6E39-43AD-A2FD-50AD56A50691}] => (Allow) C:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe
FirewallRules: [{15824D17-5E96-4EB5-9E3E-3A2AFC190921}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Escape (2D Game)\Escape.exe
FirewallRules: [{60E11683-F46B-43FC-B7B2-04F97DA75E10}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Escape (2D Game)\Escape.exe
FirewallRules: [{B06CE039-18F1-4EBF-BD5F-E04EEF61C5C0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{5C54EEB0-F24F-459F-A7D5-4B6E2EE9C855}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{79B08252-9986-4D9A-8F32-E98C62135B60}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{64C853C5-8F65-43E5-BE84-AC00A76D3836}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{2318A35B-FBD4-493C-A2B8-ED5229BFC091}] => (Allow) C:\Program Files\MAGIX\Video deluxe 2015 Plus\Videodeluxe.exe
FirewallRules: [UDP Query User{6293482C-3815-4A14-81B4-60FF11D7F877}C:\program files (x86)\image-line\fl studio 11.5 beta\fl64.exe] => (Block) C:\program files (x86)\image-line\fl studio 11.5 beta\fl64.exe
FirewallRules: [TCP Query User{162D2994-0272-4439-A329-D55AEC01DFC0}C:\program files (x86)\image-line\fl studio 11.5 beta\fl64.exe] => (Block) C:\program files (x86)\image-line\fl studio 11.5 beta\fl64.exe
FirewallRules: [{F76FD480-D60F-41E7-B587-D7A46338E96F}] => (Allow) C:\Program Files\MAGIX\Video deluxe 2015 Premium\Videodeluxe.exe
FirewallRules: [{366B4BD6-9360-42C8-B784-4ADDF2308129}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NoLimits 2\64bit\nolimits2stm.exe
FirewallRules: [{C40D37AE-1498-4A9C-AE66-417FD7AD8195}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NoLimits 2\64bit\nolimits2stm.exe
FirewallRules: [{FAFB7BF9-AFAB-425B-AAE7-F1FCD05744D3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{3AF84DC9-B5C6-4499-92C5-469E0AA87D79}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{1BB528EA-6406-4115-87E9-9932E063ACB0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{51627ACB-03A1-4358-8D61-FC9D2CDBF97C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{1BAB74EA-7DB7-434B-A118-29448E01CD3C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{2B2EFF87-30E7-41E0-9AE9-6CD81954B638}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [UDP Query User{CFCE1ED7-8861-4219-BC9B-2583D655D267}C:\users\p7279_000\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\p7279_000\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{992314A6-5EAD-497F-8200-553D93E0BE7B}C:\users\p7279_000\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\p7279_000\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{9F54200A-D307-4A00-A1DC-1FD94677627E}C:\program files (x86)\image-line\fl studio 11\fl64.exe] => (Allow) C:\program files (x86)\image-line\fl studio 11\fl64.exe
FirewallRules: [TCP Query User{3CAC90BA-BB78-43A0-9BA6-DAA67B40332F}C:\program files (x86)\image-line\fl studio 11\fl64.exe] => (Allow) C:\program files (x86)\image-line\fl studio 11\fl64.exe
FirewallRules: [{210DCC62-FD93-432B-A9C9-2CA1845F7F16}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{C20AEF23-0205-4AD4-95DE-B1ED8E1868C5}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{FAA1D045-45EE-4EFE-A9A9-5E2D238DCC0E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{88239BE4-A57F-484D-A1F5-19D610797566}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{5DC0F325-8E78-43A5-9E10-2BBE9E7EF78D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{14D0A4EC-4741-4676-9160-F18322A4BA46}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{81008BD4-1747-4EED-9B79-9D8D55796A31}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ski Region Simulator\SkiRegionSimulator2012Game.exe
FirewallRules: [{E81D23E1-09D1-42D2-ADB8-BBA73C2B4E61}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Ski Region Simulator\SkiRegionSimulator2012Game.exe
FirewallRules: [UDP Query User{CF65CE30-0CEF-402C-B969-A6C811DA3C08}C:\users\p7279_000\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\p7279_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5C1AB648-210A-4DC8-92DE-BC045C4CF395}C:\users\p7279_000\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\p7279_000\appdata\roaming\spotify\spotify.exe
FirewallRules: [{9314C0C6-F2E6-48BE-BDF3-6B16C67CFE2A}] => (Allow) C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{8B7C3F1E-7782-4C8D-BF36-0828A4419A63}] => (Allow) C:\Users\P7279_000\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{08BE3CAC-E1B7-49BE-A13E-5C58281214F0}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{9851BBB7-A8A6-48C7-94FD-058F48D222D7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{D39465AA-6C26-4673-8994-8DB57EC21406}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E154747C-67DB-4EF8-961C-508334D9457E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [UDP Query User{0B80BB45-A33D-4D18-9F78-945406DAED64}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{C8F7BEE7-D79D-46F6-84C1-4174EA9CD5F8}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{EABBCAF8-3F75-4DDE-80B0-9CCBC4B8CE9B}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{5BB3F799-2B8B-4E90-AFE7-9860457FA0B1}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{7DED7549-1456-4641-9264-A7DE3CB647E8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{5E63DD32-A22A-4A0D-BF17-EBD9E13BCAFC}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{A8750923-BADF-4169-9571-03AD9195DDEF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{73C78BBD-0A94-4E42-A83E-2090955A0E61}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [TCP Query User{A761BFA4-33DD-4472-AB66-397C5BAC65DA}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [UDP Query User{E888A949-8A21-4781-9BF1-84057D53E724}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [TCP Query User{BCA859FB-BEF4-4689-BB06-96F289A912AF}C:\users\p7279_000\desktop\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\p7279_000\desktop\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [UDP Query User{425290AB-F373-4522-B1F0-B31BD368732F}C:\users\p7279_000\desktop\windowsnoeditor\engine\binaries\win64\ue4game.exe] => (Allow) C:\users\p7279_000\desktop\windowsnoeditor\engine\binaries\win64\ue4game.exe
FirewallRules: [{BF6A0B44-7DF5-47A6-93A4-D040FEA37C7D}] => (Allow) C:\UDK\35ANORETURN\Binaries\Win32\UDK.exe
FirewallRules: [{624F034A-EF6E-499A-8DEF-486FB5860D99}] => (Allow) C:\UDK\35ANORETURN\Binaries\Win32\UDK.exe
FirewallRules: [TCP Query User{000CE808-208D-4D99-A418-212A999960DC}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [UDP Query User{7078DFD5-6853-4AA5-908F-E73A85478EE7}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [TCP Query User{D578209F-1B9F-4AEA-B717-F7966F3B2D7B}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [UDP Query User{ED282F2C-4A0D-4D57-945B-00300681DA82}C:\program files (x86)\unity\editor\unity.exe] => (Allow) C:\program files (x86)\unity\editor\unity.exe
FirewallRules: [TCP Query User{561EBE9B-1F43-46EB-8D8C-ECC684BA4DB0}C:\program files\unity\monodevelop\bin\monodevelop.exe] => (Block) C:\program files\unity\monodevelop\bin\monodevelop.exe
FirewallRules: [UDP Query User{B3AB0BBE-D1D0-4711-B7EC-4F89C520F63C}C:\program files\unity\monodevelop\bin\monodevelop.exe] => (Block) C:\program files\unity\monodevelop\bin\monodevelop.exe
FirewallRules: [{78C2817F-CAEB-47AB-A077-90EF32831627}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{8D8804FE-AB01-4148-9035-EC4BBCCD763C}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{06412820-43D5-461C-87D0-55EA2F5E821A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\theHunter\launcher\launcher.exe
FirewallRules: [{59256EF8-7AF2-4536-ADCB-F27A677C0EB4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\theHunter\launcher\launcher.exe
FirewallRules: [{397E2968-7F44-4E46-B05A-01860E3947E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{E7C5E0DE-0C7C-4660-81A5-5E80AF9DF9DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{50E41843-6414-478E-B2EE-15B173D3E9DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{E8103A8E-3267-464C-961B-EC60FA930854}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{E8B6F3B9-DCE9-497A-A1BA-82303D491AFB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{2BC3D53B-7D8C-4BC5-9146-FB6D8F506F7C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{40214EE6-0A81-43FA-BE00-8E19C90A268D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{ACD9C8A7-076B-4FE3-85C0-E24C80ACE27D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{80AABFB0-A8E9-4B3A-A8B1-1312D71205BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2\arma2.exe
FirewallRules: [{1C3D7893-8C6D-46C8-9781-3FC825CAE190}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2\arma2.exe
FirewallRules: [{38B8B0FE-71DB-4497-8DAE-AF547C1DE03C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\Expansion\beta\Arma2OA.exe
FirewallRules: [{A1DD3250-0690-4715-A642-8DF628715836}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2 Operation Arrowhead\Expansion\beta\Arma2OA.exe
FirewallRules: [{98EF7E80-265E-4BBE-9884-50319634077E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{FD675E75-CD7C-44D9-9384-907F5512A3E0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{647D7A17-9492-4E44-80D1-226B178CAA3B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{2745862F-6A1E-420B-8D67-3FF026BDD57A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{48CDF7DF-3215-44CD-8154-E79A8DA33D38}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{E8C961A1-57C9-4CDF-AD46-DEE26E8D49B7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{1CAD7103-2953-4B56-BCF8-911D9A9E1D44}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{C55F251C-3A72-4302-9E57-B2038A2E81D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\theHunter\launcher\launcher.exe
FirewallRules: [{8257D016-F98D-46AA-9E55-15F8A36426C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\theHunter\launcher\launcher.exe
FirewallRules: [{BD4BE13D-C93E-490B-B429-991D9C3E4B03}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/08/2015 01:53:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 66827578

Error: (12/08/2015 01:53:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 66827578

Error: (12/08/2015 01:53:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/07/2015 07:19:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ROB-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2015 07:19:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ROB-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2015 06:28:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ROB-PC)
Description: Bei der Aktivierung der App „Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2015 01:41:05 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ROB-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2015 01:41:05 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ROB-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/07/2015 12:38:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 10.0.10240.16384, Zeitstempel: 0x559f39e9
Name des fehlerhaften Moduls: vorbis.acm, Version: 0.0.3.6, Zeitstempel: 0x50a51541
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001f4f
ID des fehlerhaften Prozesses: 0x1d04
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Vollständiger Name des fehlerhaften Pakets: DllHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DllHost.exe5

Error: (12/07/2015 12:38:19 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 10.0.10240.16384, Zeitstempel: 0x559f39e9
Name des fehlerhaften Moduls: vorbis.acm, Version: 0.0.3.6, Zeitstempel: 0x50a51541
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001f4f
ID des fehlerhaften Prozesses: 0x1700
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Vollständiger Name des fehlerhaften Pakets: DllHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DllHost.exe5

Systemfehler:
=============
Error: (12/08/2015 01:57:13 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (12/08/2015 01:56:43 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.

Error: (12/08/2015 01:56:43 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 10. Der Windows-SChannel-Fehlerstatus lautet: 10.

Error: (12/07/2015 07:19:56 PM) (Source: DCOM) (EventID: 10010) (User: ROB-PC)
Description: CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mca

Error: (12/07/2015 07:19:56 PM) (Source: DCOM) (EventID: 10010) (User: ROB-PC)
Description: App.AppXw3qcpc7p849541dp39vvqd01bn7z9ybh.mca

Error: (12/07/2015 07:19:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2015 07:19:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2015 07:19:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2015 07:19:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/07/2015 06:34:16 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "PET-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{56E90D65-71F4-4FCB-A863-11E8F1E2B9A1}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

CodeIntegrity:
===================================
Date: 2015-09-15 14:39:49.538
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-09-13 14:33:53.203
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-09-03 16:43:43.431
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-08-21 16:07:16.201
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-08-04 00:50:31.615
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2015-08-01 19:10:31.646
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-4100 Quad-Core Processor
Prozentuale Nutzung des RAM: 59%
Installierter physikalischer RAM: 4078.11 MB
Verfügbarer physikalischer RAM: 1665.34 MB
Summe virtueller Speicher: 6254.11 MB
Verfügbarer virtueller Speicher: 3646.03 MB

==================== Laufwerke ================================

Drive c: (BOOT1TB2014) (Fixed) (Total:930.73 GB) (Free:12.7 GB) NTFS
Drive e: (WD-500GB) (Fixed) (Total:465.76 GB) (Free:40.33 GB) NTFS
Drive f: (WD2-500GB) (Fixed) (Total:465.76 GB) (Free:42.76 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: E4B5DACF)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 879AB2C6)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 06320631)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================