Teammalu | 20.02.2016 13:17 | Hier mal meine adware
AdwCleaner Logfile: Code:
# AdwCleaner v5.035 - Bericht erstellt am 20/02/2016 um 12:43:36
# Aktualisiert am 18/02/2016 von Xplode
# Datenbank : 2016-02-16.2 [Lokal]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : kluch - DESKTOP-F9ASC0K
# Gestartet von : F:\AdwCleaner_5.035.exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
Dienst Gefunden : Winsere
***** [ Ordner ] *****
Ordner Gefunden : C:\Program Files (x86)\SearchesToYesbnd
Ordner Gefunden : C:\Program Files (x86)\Winsere
Ordner Gefunden : C:\Program Files (x86)\WinTaske
Ordner Gefunden : C:\ProgramData\3WdM3
Ordner Gefunden : C:\WINDOWS\SysNative\Tasks\WinTaske
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
Geplante Aufgabe Gefunden : WinTaske
***** [ Registrierungsdatenbank ] *****
Wert Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IDSCPRODUCT]
***** [ Internetbrowser ] *****
########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [1008 Bytes] ########## --- --- ---
dann habe ich adw cleaner noch mal laufen lassen, ohne Ergebnis
AdwCleaner Logfile: Code:
# AdwCleaner v5.035 - Bericht erstellt am 20/02/2016 um 13:00:16
# Aktualisiert am 18/02/2016 von Xplode
# Datenbank : 2016-02-16.2 [Lokal]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : kluch - DESKTOP-F9ASC0K
# Gestartet von : F:\AdwCleaner_5.035.exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Internetbrowser ] *****
########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [604 Bytes] ########## --- --- ---
Und hier jetzt mal der letzte Frst Text
FRST Logfile: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:17-02-2016
durchgeführt von kluch (Administrator) auf DESKTOP-F9ASC0K (20-02-2016 13:04:52)
Gestartet von F:\
Geladene Profile: kluch (Verfügbare Profile: kluch)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser nicht gefunden!)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
(AOL Inc.) C:\Program Files (x86)\Common Files\AOL\1450991226\ee\aolsoftware.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8496344 2015-07-06] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945656 2015-12-24] (Synaptics Incorporated)
HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [127528 2015-07-08] (Hewlett-Packard Company)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [654088 2015-02-17] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HostManager] => C:\Program Files (x86)\Common Files\AOL\1450991226\ee\AOLSoftware.exe [41800 2010-03-08] (AOL Inc.)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-23] (CANON INC.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2015-10-29] (CyberLink Corp.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-02-08] (AVAST Software)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-365323482-1659304263-2537558190-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation)
HKU\S-1-5-21-365323482-1659304263-2537558190-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
HKU\S-1-5-21-365323482-1659304263-2537558190-1001\...\RunOnce: [Uninstall C:\Users\kluch\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\kluch\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-02-08] (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{6330c816-a1ba-478a-b021-26af9247e4d4}: [DhcpNameServer] 40.22.1.11
Tcpip\..\Interfaces\{f2d3fa1b-b673-40c5-b45f-107e18b462f8}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-365323482-1659304263-2537558190-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-365323482-1659304263-2537558190-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-365323482-1659304263-2537558190-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.de/
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-08] (AVAST Software)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2016-01-18] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-08] (AVAST Software)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-04-30] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2016-01-18] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-10-19] (Hewlett-Packard Company)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKU\S-1-5-21-365323482-1659304263-2537558190-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-01-18] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2016-01-18] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\kluch\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF NewTab: about:newtab
FF DefaultSearchEngine: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: hxxps://www.google.com/?trackid=sp-006
FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006
FF NetworkProxy: "type", 4
FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-24] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-01-18] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-24] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1223183.dll [2015-12-22] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2016-01-18] (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-06-25] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\kluch\AppData\Roaming\Mozilla\Firefox\Profiles\fzqhddnb.default\searchplugins\google-avast.xml [2016-02-09]
FF SearchPlugin: C:\Users\kluch\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\DD1B66D4.xml [2016-02-08]
FF SearchPlugin: C:\Users\kluch\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\google-avast.xml [2016-02-09]
FF HKLM\...\Firefox\Extensions: [{984C487D-2AB4-4DFC-919E-0F53E15877D2}] - C:\Program Files\shopperz080220160607\Firefox\{984C487D-2AB4-4DFC-919E-0F53E15877D2}.xpi => nicht gefunden
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-02-08]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-02-08]
FF HKLM-x32\...\Firefox\Extensions: [{984C487D-2AB4-4DFC-919E-0F53E15877D2}] - C:\Program Files\shopperz080220160607\Firefox\{984C487D-2AB4-4DFC-919E-0F53E15877D2}.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-02-08]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-02-08]
Opera:
=======
OPR Extension: (vux777) - C:\Users\kluch\AppData\Roaming\Opera Software\Opera Stable\Extensions\bpmgfnikhlpakdkeeahboleoommganka [2016-02-03]
OPR Extension: (Quick History) - C:\Users\kluch\AppData\Roaming\Opera Software\Opera Stable\Extensions\hmnhfgcahjdhfocnolfkmfadlieleijj [2016-01-22]
OPR Extension: (vux777) - C:\Users\kluch\AppData\Roaming\Opera Software\Opera Stable\Extensions\lcoemcffdmjaaomkchpjkmjfkljagidm [2015-12-25]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdaptiveSleepService; c:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2015-07-06] () [Datei ist nicht signiert]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-08] (AVAST Software)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2286848 2015-12-24] (Broadcom Corporation.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2787512 2015-12-22] (Microsoft Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-06-25] (WildTangent)
R2 HPSupportSolutionsFrameworkService; c:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 HPWMISVC; c:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [608520 2015-02-17] (Hewlett-Packard Development Company, L.P.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-07-06] (Realtek Semiconductor)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [452456 2015-12-24] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-12-24] (Synaptics Incorporated)
R2 tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [60432 2015-07-14] (Advanced Micro Devices, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
S2 Amuuiis; "C:\Users\kluch\AppData\Roaming\IuceNuwm\Bosja.exe" -cms [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [18968 2015-07-14] (Advanced Micro Devices, INC.)
S3 amdkmcsp; C:\Windows\system32\DRIVERS\amdkmcsp.sys [101104 2015-07-14] (Advanced Micro Devices, Inc. )
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [73976 2015-07-14] (Advanced Micro Devices, Inc.)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [277240 2015-07-14] (Advanced Micro Devices, Inc. )
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-02-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-02-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-02-08] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-02-08] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-02-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-02-08] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-02-08] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-02-10] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-07-14] (Advanced Micro Devices)
S3 ATWPKT2; C:\WINDOWS\system32\drivers\ATWPKT264.SYS [34520 2014-02-25] (America Online)
S3 ATWPKT2; C:\WINDOWS\SysWOW64\drivers\ATWPKT264.SYS [34520 2014-02-25] (America Online)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [177432 2015-12-01] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7551240 2015-11-24] (Broadcom Corporation)
R3 clwvd6; C:\Windows\system32\DRIVERS\clwvd6.sys [41400 2015-08-31] (CyberLink Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [301784 2015-06-10] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [886528 2015-06-01] (Realtek )
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [402136 2015-06-10] (Realsil Semiconductor Corporation)
R3 SmbDrv; C:\Windows\system32\DRIVERS\Smb_driver_AMDASF.sys [42184 2015-12-24] (Synaptics Incorporated)
S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [33960 2015-07-13] (Synaptics Incorporated)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [214832 2015-12-08] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [30384 2015-06-23] (HP Inc.)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-02-20 12:50 - 2014-04-16 23:08 - 00658000 _____ (WildTangent, Inc.) C:\ProgramData\uninstall3039351.exe
2016-02-20 12:33 - 2016-02-20 12:50 - 00001344 _____ C:\Users\kluch\Desktop\Revo Uninstaller.lnk
2016-02-20 12:33 - 2016-02-20 12:33 - 00000000 ____D C:\Users\kluch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-02-20 12:33 - 2016-02-20 12:33 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-02-19 13:13 - 2016-02-19 13:13 - 00000000 ____H C:\Users\kluch\BITED6D.tmp
2016-02-19 09:54 - 2016-02-20 13:04 - 00000000 ____D C:\FRST
2016-02-17 21:37 - 2016-02-17 21:38 - 00178388 _____ C:\WINDOWS\Minidump\021716-28437-01.dmp
2016-02-17 21:37 - 2016-02-17 21:37 - 505391741 _____ C:\WINDOWS\MEMORY.DMP
2016-02-17 21:37 - 2016-02-17 21:37 - 00000000 ____D C:\WINDOWS\Minidump
2016-02-14 19:15 - 2016-02-14 19:15 - 00000000 ____D C:\$SysReset
2016-02-12 22:28 - 2016-02-12 22:28 - 00000000 ____D C:\Quarantine
2016-02-12 22:04 - 2016-02-14 16:30 - 00000000 ____D C:\EEK
2016-02-11 20:19 - 2016-02-11 20:27 - 00000000 ____D C:\Users\kluch\Downloads\2016_02_11
2016-02-11 20:19 - 2016-02-11 20:19 - 00000000 ___HD C:\ProgramData\CanonIJScan
2016-02-09 21:54 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-09 21:54 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-09 21:54 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-09 21:54 - 2016-01-27 07:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-02-09 21:54 - 2016-01-27 07:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-02-09 21:54 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-09 21:54 - 2016-01-27 07:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-02-09 21:54 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-09 21:54 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-02-09 21:54 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-09 21:54 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-09 21:54 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-02-09 21:54 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-02-09 21:54 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-09 21:54 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-09 21:54 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-09 21:54 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-09 21:54 - 2016-01-27 06:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-02-09 21:54 - 2016-01-27 06:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-02-09 21:54 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-09 21:54 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-09 21:54 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-09 21:54 - 2016-01-27 06:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-02-09 21:54 - 2016-01-27 06:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-02-09 21:54 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-09 21:54 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-09 21:54 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-02-09 21:54 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-02-09 21:54 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-09 21:54 - 2016-01-27 06:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-02-09 21:54 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-09 21:54 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-09 21:54 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-09 21:54 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-09 21:54 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-02-09 21:54 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-02-09 21:54 - 2016-01-27 06:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-02-09 21:54 - 2016-01-27 06:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-02-09 21:54 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-02-09 21:54 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-09 21:54 - 2016-01-27 06:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-02-09 21:54 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-09 21:54 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-09 21:54 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-09 21:54 - 2016-01-27 05:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-02-09 21:54 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-09 21:54 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-02-09 21:54 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-02-09 21:54 - 2016-01-27 05:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-02-09 21:54 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-09 21:54 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-02-09 21:54 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-02-09 21:54 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-09 21:54 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-09 21:54 - 2016-01-27 05:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-02-09 21:54 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-09 21:54 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-09 21:54 - 2016-01-27 05:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-02-09 21:54 - 2016-01-27 05:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-02-09 21:54 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-09 21:54 - 2016-01-27 05:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-02-09 21:54 - 2016-01-27 05:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-02-09 21:54 - 2016-01-27 05:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-02-09 21:54 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-09 21:54 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-09 21:30 - 2016-02-10 21:49 - 00000574 _____ C:\WINDOWS\system32\.crusader
2016-02-09 21:11 - 2016-02-09 21:30 - 00000000 ____D C:\ProgramData\HitmanPro
2016-02-09 21:04 - 2016-02-14 21:50 - 00000547 _____ C:\Users\kluch\Desktop\JRT.txt
2016-02-09 20:14 - 2016-02-20 13:00 - 00000000 ____D C:\AdwCleaner
2016-02-09 20:14 - 2016-02-09 20:13 - 01508352 _____ C:\Users\kluch\Downloads\adwcleaner_5.032.exe
2016-02-09 20:02 - 2016-02-11 20:19 - 00000000 ____D C:\Users\kluch\AppData\Roaming\Canon
2016-02-09 19:27 - 2016-02-09 13:43 - 22908888 _____ (Malwarebytes ) C:\Users\kluch\Downloads\mbam-setup-2.2.0.1024.exe
2016-02-09 06:08 - 2016-02-08 08:14 - 00451073 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20160209-060856.backup
2016-02-08 09:57 - 2016-02-08 09:57 - 00000000 ____D C:\WINDOWS\system32\suiw
2016-02-08 09:47 - 2016-02-19 09:47 - 00004280 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-02-08 09:47 - 2016-02-10 21:36 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2016-02-08 09:47 - 2016-02-08 09:47 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-02-08 09:47 - 2016-02-08 09:47 - 00001974 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-02-08 09:47 - 2016-02-08 09:46 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-02-08 09:47 - 2016-02-08 09:46 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-02-08 09:47 - 2016-02-08 09:46 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-02-08 09:47 - 2016-02-08 09:46 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-02-08 09:47 - 2016-02-08 09:46 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-02-08 09:47 - 2016-02-08 09:46 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-02-08 09:47 - 2016-02-08 09:46 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-02-08 09:46 - 2016-02-08 09:46 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-02-08 09:46 - 2016-02-08 09:46 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-02-08 08:14 - 2016-02-07 18:43 - 00000967 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160208-081459.backup
2016-02-08 08:07 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2016-02-08 07:55 - 2016-02-14 16:49 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-02-08 07:55 - 2016-02-08 22:21 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-02-08 07:55 - 2016-02-08 07:55 - 00001467 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-02-08 07:55 - 2016-02-08 07:55 - 00001455 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-02-08 07:55 - 2016-02-08 07:55 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2016-02-08 07:55 - 2016-02-08 07:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-02-08 07:55 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2016-02-08 07:54 - 2016-02-14 21:20 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-02-08 07:52 - 2016-02-08 07:53 - 00000000 ____D C:\Users\kluch\AppData\Local\Tempfolder
2016-02-08 07:52 - 2016-02-08 07:52 - 00003420 _____ C:\WINDOWS\System32\Tasks\Hittaem
2016-02-08 07:52 - 2016-02-08 07:52 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-02-08 07:52 - 2016-02-08 07:52 - 00000000 ____D C:\Users\kluch\AppData\Local\F727A298-4DB4-456A-AC54-A93EA5F8554D
2016-02-08 07:52 - 2016-02-08 07:52 - 00000000 ____D C:\Users\kluch\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-02-08 07:52 - 2016-02-08 07:52 - 00000000 ____D C:\uninst
2016-02-08 07:22 - 2016-02-08 09:45 - 201900432 _____ (AVAST Software) C:\Users\kluch\Downloads\avast_free2253_antivirus_setup.exe
2016-02-08 07:20 - 2016-02-08 07:54 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\kluch\Downloads\spybot-2.4.40.exe
2016-02-08 07:20 - 2016-02-08 07:21 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\kluch\Downloads\spybot-2.4.40 (1).exe
2016-02-07 21:08 - 2016-02-07 21:08 - 00187904 _____ C:\WINDOWS\rsrcs.dll
2016-02-07 18:49 - 2016-02-07 18:49 - 00022650 _____ C:\WINDOWS\System32\Tasks\{7E0E0C47-7804-7D7D-0C11-7E7D0F0B110C}
2016-02-07 18:49 - 2016-02-07 18:49 - 00000000 ____D C:\ProgramData\f317a191-1cd3-1
2016-02-07 18:49 - 2016-02-07 18:49 - 00000000 ____D C:\ProgramData\f317a191-08d3-0
2016-02-07 18:46 - 2016-02-07 18:43 - 00000967 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-02-07 18:43 - 2016-02-07 18:43 - 00000000 ____D C:\Users\kluch\AppData\Roaming\dlg
2016-02-07 14:11 - 2016-02-07 14:11 - 00001313 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Undelete.lnk
2016-02-07 14:11 - 2016-02-07 14:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glarysoft
2016-02-07 14:11 - 2016-02-07 14:11 - 00000000 ____D C:\Program Files (x86)\Glarysoft
2016-02-07 12:07 - 2016-02-07 13:13 - 00000000 ____D C:\alte Festplatten
2016-02-07 10:52 - 2016-02-07 11:30 - 72859648 _____ C:\Users\kluch\Downloads\calibre-64bit-2.50.1.msi
2016-02-04 18:05 - 2016-02-04 18:06 - 00475350 _____ C:\Users\kluch\Downloads\Thermomix Rezeptwelt - Dinkel-Joghurt Brot - 2016-01-20 (4).pdf
2016-02-04 18:04 - 2016-02-04 18:05 - 00475349 _____ C:\Users\kluch\Downloads\Thermomix Rezeptwelt - Dinkel-Joghurt Brot - 2016-01-20 (3).pdf
2016-02-04 18:04 - 2016-02-04 18:04 - 00475353 _____ C:\Users\kluch\Downloads\Thermomix Rezeptwelt - Dinkel-Joghurt Brot - 2016-01-20 (2).pdf
2016-02-04 18:04 - 2016-02-04 18:04 - 00088669 _____ C:\Users\kluch\Downloads\Thermomix Rezeptwelt - Dinkel-Joghurt Brot - 2016-01-20.pdf
2016-02-04 18:04 - 2016-02-04 18:04 - 00088669 _____ C:\Users\kluch\Downloads\Thermomix Rezeptwelt - Dinkel-Joghurt Brot - 2016-01-20 (1).pdf
2016-02-04 15:51 - 2016-02-04 15:51 - 00000000 ____D C:\ProgramData\Cornelsen
2016-02-02 06:47 - 2015-08-31 08:26 - 00041400 _____ (CyberLink Corporation) C:\WINDOWS\system32\Drivers\clwvd6.sys
2016-02-01 21:35 - 2016-02-01 21:35 - 00000728 _____ C:\Users\kluch\Downloads\Umsaetze_1bis4_KTO3018865_20160201.csv
2016-02-01 21:33 - 2016-02-01 21:33 - 00097534 _____ C:\Users\kluch\Downloads\AZG3018865_012_20151230.pdf
2016-02-01 21:33 - 2016-02-01 21:33 - 00094680 _____ C:\Users\kluch\Downloads\AZG3018865_011_20151130.pdf
2016-02-01 21:33 - 2016-02-01 21:33 - 00094022 _____ C:\Users\kluch\Downloads\AZG3018865_001_20160129.pdf
2016-02-01 21:32 - 2016-02-01 21:32 - 00094660 _____ C:\Users\kluch\Downloads\AZG3018865_010_20151030.pdf
2016-02-01 21:12 - 2016-02-01 21:12 - 00285005 _____ C:\Users\kluch\Downloads\Information_20140613.pdf
2016-02-01 21:12 - 2016-02-01 21:12 - 00145286 _____ C:\Users\kluch\Downloads\Information_20140312.pdf
2016-02-01 21:12 - 2016-02-01 21:12 - 00022086 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20140401.pdf
2016-02-01 21:12 - 2016-02-01 21:12 - 00022012 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20140702.pdf
2016-02-01 21:12 - 2016-02-01 21:12 - 00021872 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20140302.pdf
2016-02-01 21:12 - 2016-02-01 21:12 - 00021816 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20140601.pdf
2016-02-01 21:12 - 2016-02-01 21:12 - 00021815 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20140501.pdf
2016-02-01 21:11 - 2016-02-01 21:12 - 00021666 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20140801.pdf
2016-02-01 21:11 - 2016-02-01 21:11 - 00350493 _____ C:\Users\kluch\Downloads\Information_20150428.pdf
2016-02-01 21:11 - 2016-02-01 21:11 - 00021709 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20150502.pdf
2016-02-01 21:11 - 2016-02-01 21:11 - 00021637 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20150301.pdf
2016-02-01 21:11 - 2016-02-01 21:11 - 00021628 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20150531.pdf
2016-02-01 21:10 - 2016-02-01 21:10 - 00022038 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20151002.pdf
2016-02-01 21:10 - 2016-02-01 21:10 - 00022031 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20151201.pdf
2016-02-01 21:10 - 2016-02-01 21:10 - 00021980 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20150702.pdf
2016-02-01 21:10 - 2016-02-01 21:10 - 00021922 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20151031.pdf
2016-02-01 21:10 - 2016-02-01 21:10 - 00021684 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20150902.pdf
2016-02-01 21:10 - 2016-02-01 21:10 - 00021636 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20150802.pdf
2016-02-01 21:10 - 2016-02-01 21:10 - 00013595 _____ C:\Users\kluch\Downloads\Baufinanzierungsdokumente_20151211.pdf
2016-02-01 21:09 - 2016-02-01 21:09 - 00024217 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20160102.pdf
2016-02-01 21:09 - 2016-02-01 21:09 - 00022188 _____ C:\Users\kluch\Downloads\Direkt_Baufinanzierung_2337679922_Kontoauszug_20160104.pdf
2016-02-01 21:09 - 2016-02-01 21:09 - 00022123 _____ C:\Users\kluch\Downloads\Direkt_Baufinanzierung_2337679921_Kontoauszug_20160104.pdf
2016-02-01 21:09 - 2016-02-01 21:09 - 00020361 _____ C:\Users\kluch\Downloads\Direkt_Baufinanzierung_2000315389_Kontoauszug_20160104.pdf
2016-02-01 21:08 - 2016-02-01 21:09 - 00021975 _____ C:\Users\kluch\Downloads\Girokonto_5407569660_Kontoauszug_20160131.pdf
2016-02-01 20:34 - 2016-02-01 20:34 - 00000000 ____D C:\ProgramData\AMD
2016-01-30 12:17 - 2016-01-30 12:17 - 00559047 _____ C:\Users\kluch\Downloads\haushaltsscheck_19904_version_07.pdf
2016-01-30 12:15 - 2016-01-30 12:16 - 00295138 _____ C:\Users\kluch\Downloads\Arbeitsvertrag.pdf
2016-01-28 07:16 - 2016-01-16 07:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-01-28 07:16 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-01-28 07:15 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-01-28 07:15 - 2016-01-16 07:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-28 07:15 - 2016-01-16 07:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-28 07:15 - 2016-01-16 07:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-28 07:15 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-01-28 07:15 - 2016-01-16 07:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-28 07:15 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-28 07:15 - 2016-01-16 07:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-01-28 07:15 - 2016-01-16 07:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-01-28 07:15 - 2016-01-16 07:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-01-28 07:15 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-01-28 07:15 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-28 07:15 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-01-28 07:15 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-01-28 07:15 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-28 07:15 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-01-28 07:15 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-01-28 07:15 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-01-28 07:15 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-01-28 07:15 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-01-28 07:15 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-01-28 07:15 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-28 07:15 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-01-28 07:15 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-01-28 07:15 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-01-28 07:15 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-01-28 07:15 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-01-28 07:15 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-01-28 07:15 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-01-28 07:15 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-01-28 07:15 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-01-28 07:15 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-01-28 07:15 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-01-28 07:15 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-01-28 07:15 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-01-28 07:15 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-01-28 07:15 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-01-28 07:15 - 2016-01-16 06:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-01-28 07:15 - 2016-01-16 06:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-01-28 07:15 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-01-28 07:15 - 2016-01-16 06:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-01-28 07:15 - 2016-01-16 06:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-28 07:15 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-01-28 07:15 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-01-28 07:15 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-01-28 07:15 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2016-01-28 07:15 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-28 07:15 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-01-28 07:15 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2016-01-28 07:15 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-01-28 07:15 - 2016-01-16 06:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-01-28 07:15 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-01-28 07:15 - 2016-01-16 06:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-01-28 07:15 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
2016-01-28 07:15 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-01-28 07:15 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-01-28 07:15 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-01-28 07:15 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-01-28 07:15 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2016-01-28 07:15 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-01-28 07:15 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-01-28 07:15 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-01-28 07:15 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-01-28 07:15 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2016-01-28 07:15 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-01-28 07:15 - 2016-01-16 06:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-01-28 07:15 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-01-28 07:15 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2016-01-28 07:15 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2016-01-28 07:15 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-01-28 07:15 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-01-28 07:15 - 2016-01-16 06:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-01-28 07:15 - 2016-01-16 06:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-01-28 07:15 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-01-28 07:15 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2016-01-28 07:15 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-01-28 07:15 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-01-28 07:15 - 2016-01-16 06:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-01-28 07:15 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll
2016-01-28 07:15 - 2016-01-16 06:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-01-28 07:15 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2016-01-28 07:15 - 2016-01-16 06:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-01-28 07:15 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-01-28 07:15 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-01-28 07:15 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-01-28 07:15 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-01-28 07:15 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-01-28 07:15 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-01-28 07:15 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-01-28 07:15 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-01-28 07:15 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-01-28 07:15 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-01-28 07:15 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-01-28 07:15 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-01-28 07:15 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-01-28 07:15 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-01-28 07:15 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-01-28 07:15 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-01-28 07:15 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-28 07:15 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-01-28 07:15 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-01-28 07:15 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-28 07:15 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-01-28 07:15 - 2016-01-16 06:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-01-28 07:15 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-01-28 07:15 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-01-26 13:03 - 2016-01-27 19:08 - 00000000 ____D C:\Michael
2016-01-24 21:21 - 2016-01-24 21:21 - 00000000 ____D C:\Users\kluch\AppData\Local\Macromedia
2016-01-24 19:30 - 2016-01-24 19:31 - 05438372 _____ C:\Users\kluch\Downloads\Hausprospekt_DJH_Resort.pdf
2016-01-24 16:14 - 2016-01-24 16:21 - 351156744 _____ (GIANTS Software ) C:\Users\kluch\Downloads\FarmingSimulator2015Patch1.4.1DE (1).exe
2016-01-24 11:34 - 2016-01-24 11:35 - 03996907 _____ C:\Users\kluch\Downloads\Camaro.exe
2016-01-21 21:04 - 2016-01-21 21:04 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-01-21 19:40 - 2016-01-21 19:40 - 01936315 _____ C:\Users\kluch\Downloads\smz20160220.pdf
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-02-20 12:47 - 2015-11-24 09:29 - 02032126 _____ C:\WINDOWS\SysWOW64\rootpa.e2e
2016-02-20 12:46 - 2016-01-16 04:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-20 12:46 - 2016-01-16 04:32 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-02-20 12:46 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-19 13:13 - 2016-01-16 04:36 - 00000000 ____D C:\Users\kluch
2016-02-19 13:13 - 2016-01-05 14:52 - 00003256 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForkluch
2016-02-19 13:13 - 2016-01-05 14:52 - 00000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForkluch.job
2016-02-19 09:57 - 2016-01-16 04:35 - 02003182 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-19 09:57 - 2015-10-30 19:35 - 00853752 _____ C:\WINDOWS\system32\perfh007.dat
2016-02-19 09:57 - 2015-10-30 19:35 - 00187942 _____ C:\WINDOWS\system32\perfc007.dat
2016-02-19 09:57 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-02-14 22:30 - 2015-12-24 21:16 - 00000000 ____D C:\Users\kluch\Documents\Calibre-Bibliothek
2016-02-14 15:49 - 2015-12-24 21:03 - 00000000 ____D C:\Program Files (x86)\Opera
2016-02-14 12:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-12 22:12 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-10 09:56 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-02-10 09:35 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-02-10 09:19 - 2015-07-16 07:05 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-02-10 05:41 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-10 00:16 - 2015-12-24 22:16 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-10 00:11 - 2015-12-24 22:16 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-09 19:41 - 2016-01-10 13:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-09 19:36 - 2015-12-24 19:59 - 00001925 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-02-09 19:36 - 2015-12-24 19:59 - 00001925 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-09 19:20 - 2015-12-24 22:24 - 00000000 ____D C:\Users\kluch\Documents\YouCam
2016-02-09 19:14 - 2015-11-24 09:35 - 00000000 ____D C:\ProgramData\mcafee
2016-02-09 19:13 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-02-09 19:13 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-02-09 19:12 - 2015-12-25 14:20 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2016-02-09 19:11 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2016-02-08 09:57 - 2015-10-30 08:18 - 00535088 _____ C:\WINDOWS\SysWOW64\dnsapi.dll
2016-02-08 09:47 - 2015-12-25 12:07 - 00000000 ____D C:\Users\kluch\AppData\Roaming\AVAST Software
2016-02-08 09:46 - 2015-11-24 09:44 - 00000000 ____D C:\Program Files\AVAST Software
2016-02-08 09:45 - 2015-11-24 09:44 - 00000000 ____D C:\ProgramData\AVAST Software
2016-02-08 07:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-02-08 07:15 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-02-08 06:49 - 2015-11-24 09:22 - 00000000 ____D C:\Program Files\Broadcom
2016-02-08 06:49 - 2015-07-13 17:28 - 00000000 ____D C:\SWSetup
2016-02-07 21:05 - 2015-12-24 21:03 - 00001187 _____ C:\Users\Public\Desktop\Opera.lnk
2016-02-07 21:05 - 2015-12-24 21:03 - 00001127 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-02-07 19:51 - 2016-01-16 04:26 - 00305232 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-02-07 19:48 - 2016-01-16 22:33 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-07 18:18 - 2015-12-24 19:44 - 00000000 ____D C:\Users\kluch\AppData\Local\Packages
2016-02-07 17:14 - 2015-12-25 12:12 - 00000000 ____D C:\Users\kluch\AppData\Roaming\vlc
2016-02-07 11:32 - 2015-12-24 21:15 - 00001006 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2016-02-07 11:32 - 2015-12-24 21:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2016-02-07 11:32 - 2015-12-24 21:15 - 00000000 ____D C:\Program Files\Calibre2
2016-02-06 22:29 - 2016-01-16 04:31 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2016-02-06 22:28 - 2015-11-24 09:49 - 00000000 ____D C:\Program Files\CyberLink
2016-02-06 22:24 - 2015-11-24 09:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-04 16:16 - 2016-01-19 20:16 - 00078730 _____ C:\Users\kluch\Downloads\dvr_fileconverter.zip
2016-02-04 15:48 - 2015-12-24 21:03 - 00003992 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1450987433
2016-02-03 20:05 - 2015-12-24 19:50 - 00002390 _____ C:\Users\kluch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-03 20:05 - 2015-12-24 19:50 - 00000000 ___RD C:\Users\kluch\OneDrive
2016-02-03 20:01 - 2015-10-30 08:26 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-02-03 20:01 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-03 08:39 - 2015-11-24 09:26 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2016-02-02 06:47 - 2015-11-24 09:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2016-02-02 06:47 - 2015-11-24 09:16 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2016-02-02 06:44 - 2015-11-24 09:16 - 00000000 ____D C:\ProgramData\Temp
2016-02-02 06:44 - 2015-11-24 09:16 - 00000000 ____D C:\Program Files (x86)\CyberLink
2016-02-02 06:33 - 2015-11-24 09:16 - 00000000 ____D C:\ProgramData\CyberLink
2016-01-28 15:54 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-01-28 15:54 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-01-28 15:54 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-01-28 15:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-01-28 15:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-28 15:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-28 15:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-25 20:57 - 2016-01-19 19:19 - 00000000 ____D C:\Users\kluch\Documents\Allgemein
2016-01-25 09:27 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2016-01-24 21:16 - 2016-01-18 21:44 - 00000000 ____D C:\Users\kluch\AppData\Local\Adobe
2016-01-24 16:22 - 2015-12-24 21:07 - 00000000 ____D C:\Program Files (x86)\Landwirtschafts Simulator 2015
2016-01-21 15:01 - 2015-11-24 09:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-02-20 12:50 - 2014-04-16 23:08 - 0658000 _____ (WildTangent, Inc.) C:\ProgramData\uninstall3039351.exe
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\uninstall3039351.exe
Einige Dateien in TEMP:
====================
C:\Users\kluch\AppData\Local\Temp\COMAP.EXE
C:\Users\kluch\AppData\Local\Temp\McCSPInstall.dll
C:\Users\kluch\AppData\Local\Temp\mccspuninstall.exe
C:\Users\kluch\AppData\Local\Temp\tu17p84.exe
C:\Users\kluch\AppData\Local\Temp\XZ2T4BI9XF.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll
[2015-10-30 08:18] - [2016-02-08 09:57] - 0535088 ____A () D41D8CD98F00B204E9800998ECF8427E
C:\WINDOWS\SysWOW64\dnsapi.dll => kein Firmenname <===== ACHTUNG
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-02-20 12:15
==================== Ende von FRST.txt ============================ --- --- ---
Vorab schon mal herzlichen Dank für deine Prüfung.
Gruß Michael
[/CODE] |