tschack666 | 19.04.2016 12:28 | Jetzt aber...... Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-04-2016
durchgeführt von M.Klug (Administrator) auf NB-MKLUG (19-04-2016 12:40:07)
Gestartet von C:\Users\M.Klug.LEISS\Desktop
Geladene Profile: M.Klug & UpdatusUser (Verfügbare Profile: M.Klug & Administrator & UpdatusUser & M.Klug)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Softex Inc.) C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(%CFullName%) C:\Program Files\Lenovo\Fingerprint Manager Pro\opvapp.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\klnagent.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(3Dconnexion) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\Mgl3DCtlrRPCService.exe
() C:\Program Files (x86)\MySQL\1300\Program\bin\mysqld-nt.exe
(Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe
() C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(SHARP CORPORATION) C:\Program Files\SHARP\SHARP Touch Panel Driver\SHTSV.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Tobit Software) C:\Program Files (x86)\Tobit InfoCenter\David\Apps\Replica\CODE\replica.exe
(Tobit Software) C:\Program Files (x86)\Tobit InfoCenter\David\Code\SL.EXE
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\vapm.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(3Dconnexion, INC) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\3DxService.exe
(LITE-ON TECHNOLOGY CORP.) C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\Skdaemon.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Password Manager\password_manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(3Dconnexion) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\3dxpiemenus.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dropbox, Inc.) C:\Users\M.Klug.LEISS\AppData\Local\Dropbox\Update\DropboxUpdate.exe
() C:\Users\M.Klug.LEISS\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\pwm_ie_helper_desktop.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(SHARP CORPORATION) C:\Program Files (x86)\SHARP\SHARP Pen Software\PrsnSptTool.exe
(SHARP CORPORATION) C:\Program Files\SHARP\SHARP Touch Panel Driver\TPUtility.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe
(Dropbox, Inc.) C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(silex technology, Inc.) C:\Program Files\silex technology\NetDA Manager\Connect.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(SunplusIT, Inc.) C:\Program Files (x86)\Integrated Camera\Monitor.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Tobit.Software) C:\Program Files (x86)\Tobit InfoCenter\DVWIN32.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo Corporation) C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(BayHubTech/O2Micro International) C:\Windows\System32\drivers\o2flash.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(DPT SARL) C:\Program Files\think3\2015.2\thinkdesign\bin\tdesign.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(DPT SARL) C:\Program Files\think3\2015.2\PLM\thinkteam\api\com\release\TTComApi.exe
(DPT SARL) C:\Program Files\think3\2015.2\PLM\common\utilities\T3Tracer\T3TraceSrv.exe
(DPT SARL) C:\Program Files\think3\2015.2\PLM\thinkteam\api\com\release\PyServers\TTConnection.exe
(DPT SARL) C:\Program Files\think3\2015.2\PLM\common\tteam.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Top-In-Form GmbH) C:\Program Files (x86)\schubertRatio\BDETerminal\BDE_Terminal.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Program Files (x86)\schubertRatio\RatioPlus\bin\RatioPlus.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\SnagIt 9\SnagIt32.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\SnagIt 9\TscHelp.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\SnagIt 9\SnagPriv.exe
(TechSmith Corporation) C:\Program Files (x86)\TechSmith\SnagIt 9\SnagItEditor.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184632 2013-11-13] (Motorola Solutions, Inc.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [555760 2015-03-23] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [295664 2014-12-08] (Lenovo Group Limited)
HKLM\...\Run: [3DxWare Service] => C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\3DxService.exe [1990016 2014-11-13] (3Dconnexion, INC)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [PSQLLauncher] => C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [86312 2013-03-05] (Authentec Inc.)
HKLM\...\Run: [Enhanced Performance Keyboard] => C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\SKDaemon.exe [4013056 2014-08-17] (LITE-ON TECHNOLOGY CORP.)
HKLM\...\Run: [PasswordManager] => C:\Program Files\Lenovo\Password Manager\password_manager.exe [1792800 2014-10-21] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2823848 2015-02-05] (Synaptics Incorporated)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3113592 2015-08-26] (Logitech, Inc.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-12-03] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor
HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe /boot
HKLM-x32\...\Run: [Integrated Camera_Monitor] => C:\Program Files (x86)\Integrated Camera\monitor.exe [1723040 2014-09-01] (SunplusIT, Inc.)
HKLM-x32\...\Run: [AVP] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [1193536 2015-04-10] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\...\Run: [Dropbox Update] => C:\Users\M.Klug.LEISS\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\...\Run: [Amazon Music] => C:\Users\M.Klug.LEISS\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-12-15] ()
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\...\MountPoints2: {8abc1af5-52f8-11e4-a48c-806e6f6e6963} - Q:\LenovoQDrive.exe
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\DAVIDC~1.SCR
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [245872 2013-10-29] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [201576 2013-10-29] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\david®.LNK [2016-04-18]
ShortcutTarget: david®.LNK -> C:\Program Files (x86)\Tobit InfoCenter\DVWIN32.EXE (Tobit.Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Presentation Support Tool.lnk [2016-04-18]
ShortcutTarget: Presentation Support Tool.lnk -> C:\Program Files (x86)\SHARP\SHARP Pen Software\PrsnSptTool.exe (SHARP CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SHARP Touch-Panel-Hilfsprogramm.lnk [2016-04-18]
ShortcutTarget: SHARP Touch-Panel-Hilfsprogramm.lnk -> C:\Program Files\SHARP\SHARP Touch Panel Driver\TPUtility.exe (SHARP CORPORATION)
Startup: C:\Users\M.Klug.LEISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-04-18]
ShortcutTarget: Dropbox.lnk -> C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\M.Klug.LEISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NetDA Manager.lnk [2016-04-18]
ShortcutTarget: NetDA Manager.lnk -> C:\Program Files\silex technology\NetDA Manager\Connect.exe (silex technology, Inc.)
Startup: C:\Users\M.Klug.LEISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-04-18]
ShortcutTarget: Dropbox.lnk -> C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\M.Klug.LEISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NetDA Manager.lnk [2016-04-18]
ShortcutTarget: NetDA Manager.lnk -> C:\Program Files\silex technology\NetDA Manager\Connect.exe (silex technology, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicyScripts: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
ProxyEnable: [S-1-5-21-1060284298-1326574676-1801674531-1129] => Proxy ist aktiviert.
ProxyServer: [S-1-5-21-1060284298-1326574676-1801674531-1129] => localhost:21320
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.1.1.41 192.1.1.42
Tcpip\..\Interfaces\{E06193FA-3D29-4AA8-B5D6-D4F9972D7695}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{F630331D-4E74-42EE-B76E-29F569380EBD}: [DhcpNameServer] 192.1.1.41 192.1.1.42
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1060284298-1326574676-1801674531-1129 -> DefaultScope {91F160EF-6AC2-4B98-8E10-E2403C52E2C3} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1060284298-1326574676-1801674531-1129 -> {91F160EF-6AC2-4B98-8E10-E2403C52E2C3} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 9\DLLx64\SnagItBHO64.dll [2008-09-22] (TechSmith Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\SnagIt 9\SnagItBHO.dll [2008-09-22] (TechSmith Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-08-26] (Logitech, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 9\DLLx64\SnagItIEAddin64.dll [2008-09-22] (TechSmith Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
Toolbar: HKLM-x32 - SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\SnagIt 9\SnagItIEAddin.dll [2008-09-22] (TechSmith Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)
Toolbar: HKU\S-1-5-21-1060284298-1326574676-1801674531-1129 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)
FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-03] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2014-05-15] (Nitro PDF)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-10-28] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-10-28] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2016-01-21] [ist nicht signiert]
FF HKU\S-1-5-21-1060284298-1326574676-1801674531-1129\...\Firefox\Extensions: [{FCF36B88-1BBA-487f-B64B-D2E8980A9293}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension
FF Extension: Kein Name - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension [2015-05-19] [ist nicht signiert]
Chrome:
=======
CHR Profile: C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-29]
CHR Extension: (Google Präsentationen) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-29]
CHR Extension: (Google Drive) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-29]
CHR Extension: (Google-Suche) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Google Präsentationen) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-29]
CHR Extension: (Google Präsentationen) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-17]
CHR Extension: (Google Präsentationen) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpdfbkehegfmedglgemnhbnpmfmioggj [2015-09-29]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Google Mail) - C:\Users\M.Klug.LEISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-29]
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avp; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avp.exe [1193536 2015-04-10] (Kaspersky Lab ZAO)
R2 avpsus; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Endpoint Security 10 for Windows SP1\avpsus.exe [2065568 2015-04-10] (Kaspersky Lab ZAO)
R2 DavidReplica; C:\Program Files (x86)\Tobit InfoCenter\David\Apps\Replica\CODE\replica.exe [1666048 2012-10-05] (Tobit Software) [Datei ist nicht signiert]
R2 DavidServiceLayer; C:\Program Files (x86)\Tobit InfoCenter\David\Code\SL.EXE [2785080 2015-09-14] (Tobit Software)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [10571056 2014-06-02] (DisplayLink Corp.)
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [319536 2015-04-17] (Lenovo.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4630352 2015-05-21] (SafeNet Inc.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-03] (Intel Corporation)
R2 klnagent; C:\Program Files (x86)\Kaspersky Lab\NetworkAgent\klnagent.exe [105960 2014-11-19] (Kaspersky Lab ZAO)
S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [Datei ist nicht signiert]
S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [197360 2014-12-08] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [115184 2014-07-08] (Lenovo Group Limited)
R2 lnvDiscoveryWinSvc; C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe [21552 2014-02-21] (Lenovo)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272864 2016-01-08] (Lenovo)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 Mgl3DCtlrRPCService; C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\Mgl3DCtlrRPCService.exe [57856 2014-11-13] (3Dconnexion) [Datei ist nicht signiert]
R2 mysql_3306; C:\Program Files (x86)\MySQL\1300\Program\bin\mysqld-nt.exe [4444160 2006-07-31] () [Datei ist nicht signiert]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2014-12-04] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2014-11-17] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-05-15] (Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800 2014-05-15] ()
R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [65536 2014-03-07] (BayHubTech/O2Micro International)
R2 omniserv; C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe [103936 2015-04-02] (Softex Inc.) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2014-11-17] (Hewlett-Packard) [Datei ist nicht signiert]
S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [61232 2014-12-05] (Lenovo Group Limited)
R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [317224 2014-12-05] (Lenovo Group Limited)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SHTSV; C:\Program Files\SHARP\SHARP Touch Panel Driver\SHTSV.exe [115200 2012-12-19] (SHARP CORPORATION) [Datei ist nicht signiert]
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2014-12-18] (SolidWorks) [Datei ist nicht signiert]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2015-11-11] ()
S3 ThunderboltService; C:\Program Files\Intel\Thunderbolt Software\tbtsvc.exe [1179944 2014-03-06] (Intel Corporation)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-01-29] (Synaptics Incorporated)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [203088 2011-10-11] (X-Rite Inc.)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3820960 2014-12-04] (Intel® Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 3dxhid; C:\Windows\System32\DRIVERS\3dxhid.sys [38672 2014-11-07] (3Dconnexion SAM)
R3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [69208 2015-05-21] (SafeNet Inc.)
R3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [72664 2015-05-21] (SafeNet Inc.)
R3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [312344 2015-05-21] (SafeNet Inc.)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [140600 2013-11-07] (Motorola Solutions, Inc.)
S3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1419576 2013-12-11] (Motorola Solutions, Inc.)
S3 DisplayLinkUsbIo_x64; C:\Windows\System32\DRIVERS\DisplayLinkUsbIo_x64_7.6.55673.0.sys [46384 2014-06-03] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-12-18] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [378136 2015-03-24] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-04-18] ()
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2015-04-10] (Sony Mobile Communications)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [340336 2015-05-21] (SafeNet Inc.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-15] (Intel Corporation)
S3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [169680 2014-04-02] (Intel Corporation)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [103112 2014-11-11] (Kaspersky Lab ZAO)
R1 KLFLTDEV; C:\Windows\System32\DRIVERS\klfltdev.sys [29792 2013-12-03] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [681672 2014-12-29] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30920 2014-11-20] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [57032 2014-10-09] (Kaspersky Lab ZAO)
R3 KMJHidMini; C:\Windows\System32\DRIVERS\3dxkmj.sys [18944 2013-10-08] (3Dconnextion Inc.)
R3 KMJShim; C:\Windows\System32\DRIVERS\3dxshim.sys [7168 2013-10-08] (3Dconnextion Inc.)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [176840 2014-09-10] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-19] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100824 2013-12-03] (Intel Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3437848 2014-12-08] (Intel Corporation)
R3 O2FJ2RDR; C:\Windows\System32\DRIVERS\O2FJ2w7x64.sys [209720 2014-03-25] (BayHubTech/O2Micro )
R1 OMNISMI; C:\Windows\SysWOW64\drivers\omnismi.sys [14776 2014-03-31] ()
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
S3 shtmd702; C:\Windows\System32\DRIVERS\shtmd702.sys [34656 2011-08-22] (SHARP CORPORATION)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32936 2015-02-05] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [58792 2009-09-17] (SafeNet, Inc.)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [682272 2014-09-04] (Sunplus)
R2 sxhidflt; C:\Windows\System32\DRIVERS\sxhidflt.sys [34744 2011-11-02] (silex technology, Inc.)
R2 sxuptp; C:\Windows\System32\DRIVERS\sxuptp.sys [303928 2011-11-02] (silex technology, Inc.)
R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [206744 2013-06-20] (Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Datei ist nicht signiert]
R3 WinDriver6; C:\Windows\System32\drivers\NE_UsbDriver_Win64.sys [254976 2011-12-01] (Jungo)
S3 gwiopm; \??\C:\Program Files (x86)\Slotman\gwiopm.sys [X]
S3 TDKLIB; \??\C:\Users\MKLUG~1.LEI\AppData\Local\Temp\TdkLib64.sys [X]
S3 tpflhlp; \??\C:\PROGRA~3\Lenovo\SYSTEM~1\session\REPOSI~1\gnuj18us\securedfolder\tpflhlp.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-04-19 12:40 - 2016-04-19 12:40 - 00040600 _____ C:\Users\M.Klug.LEISS\Desktop\FRST.txt
2016-04-19 12:40 - 2016-04-19 12:40 - 00000000 ____D C:\FRST
2016-04-19 12:39 - 2016-04-19 12:39 - 02375680 _____ (Farbar) C:\Users\M.Klug.LEISS\Desktop\FRST64.exe
2016-04-19 08:54 - 2016-04-19 08:54 - 00008379 _____ C:\Users\M.Klug.LEISS\Downloads\Mitgliederdaten1461048872036.csv
2016-04-19 08:52 - 2016-04-19 08:52 - 84893696 _____ C:\Users\M.Klug\Documents\060280216_Z.e3.3.bak
2016-04-19 08:45 - 2016-04-19 08:45 - 00319488 _____ C:\Users\M.Klug\Documents\060280216_B.e2.2.bak
2016-04-19 08:45 - 2016-04-19 08:45 - 00315392 _____ C:\Users\M.Klug\Documents\060280216_B.e2.1.bak
2016-04-19 08:44 - 2016-04-19 08:44 - 02641920 _____ C:\Users\M.Klug\Documents\060280216_A.e2.2.bak
2016-04-19 08:43 - 2016-04-19 08:43 - 85053440 _____ C:\Users\M.Klug\Documents\060280216_Z.e3.2.bak
2016-04-19 08:41 - 2016-04-19 08:41 - 02646016 _____ C:\Users\M.Klug\Documents\060280216_A.e2.1.bak
2016-04-19 08:39 - 2016-04-19 08:39 - 84901888 _____ C:\Users\M.Klug\Documents\060280216_Z.e3.1.bak
2016-04-19 07:45 - 2016-04-19 07:45 - 00008009 _____ C:\Users\M.Klug.LEISS\Downloads\JRT.txt
2016-04-19 07:39 - 2016-04-19 07:39 - 01610352 _____ (Malwarebytes) C:\Users\M.Klug.LEISS\Desktop\JRT_8.0.4.exe
2016-04-18 23:02 - 2016-04-18 19:45 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20160418-230210.backup
2016-04-18 22:23 - 2016-04-18 22:23 - 00000000 ____D C:\Program Files\Common Files\AV
2016-04-18 22:23 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2016-04-18 22:19 - 2016-04-18 23:03 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-04-18 22:19 - 2016-04-18 22:27 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-04-18 22:19 - 2016-04-18 22:19 - 00001406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-04-18 22:19 - 2016-04-18 22:19 - 00001394 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2016-04-18 22:19 - 2016-04-18 22:19 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2016-04-18 22:19 - 2016-04-18 22:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-04-18 22:19 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2016-04-18 22:09 - 2016-04-18 22:11 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\M.Klug.LEISS\Downloads\spybot-2.4.40.exe
2016-04-18 21:46 - 2016-04-18 21:47 - 11430296 _____ (SurfRight B.V.) C:\Users\M.Klug\Downloads\hitmanpro_x64.exe
2016-04-18 21:45 - 2016-04-18 21:58 - 00000000 ____D C:\Users\M.Klug\AppData\Roaming\Panda Security
2016-04-18 21:45 - 2016-04-18 21:46 - 00002262 _____ C:\Users\M.Klug\Desktop\Google Chrome.lnk
2016-04-18 21:45 - 2016-04-18 21:45 - 00000000 ____D C:\Users\M.Klug\AppData\Roaming\Tobit
2016-04-18 21:45 - 2016-04-18 21:45 - 00000000 ____D C:\Users\M.Klug\AppData\Roaming\Logitech
2016-04-18 21:45 - 2016-04-18 21:45 - 00000000 ____D C:\Users\M.Klug\AppData\Roaming\3Dconnexion
2016-04-18 21:45 - 2016-04-18 21:45 - 00000000 ____D C:\Users\M.Klug\AppData\LocalLow\pandasecuritytb
2016-04-18 21:45 - 2016-04-18 21:45 - 00000000 ____D C:\Users\M.Klug\AppData\Local\Google
2016-04-18 21:45 - 2016-04-18 21:45 - 00000000 ____D C:\Users\M.Klug\AppData\Local\3Dconnexion
2016-04-18 20:24 - 2016-04-18 20:24 - 11430296 _____ (SurfRight B.V.) C:\Users\M.Klug.LEISS\Downloads\hitmanpro_x64 (3).exe
2016-04-18 20:13 - 2016-04-18 20:13 - 00000000 ____D C:\ProgramData\panda_url_filtering
2016-04-18 20:12 - 2016-04-18 21:58 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Roaming\Panda Security
2016-04-18 20:11 - 2016-04-18 20:11 - 00245648 _____ (Kaspersky Lab ZAO) C:\Users\M.Klug.LEISS\Downloads\zbotkiller.exe
2016-04-18 20:08 - 2016-04-18 21:57 - 00000000 ____D C:\ProgramData\Panda Security
2016-04-18 20:07 - 2016-04-18 20:07 - 02252720 _____ (Panda Security, S.L.) C:\Users\M.Klug.LEISS\Downloads\PANDAFREEAV.exe
2016-04-18 19:45 - 2016-04-18 19:45 - 1092548714 _____ C:\Windows\MEMORY.DMP
2016-04-18 19:45 - 2016-04-18 19:45 - 00309808 _____ C:\Windows\Minidump\041816-17440-01.dmp
2016-04-18 19:40 - 2016-04-18 19:59 - 00001569 _____ C:\bdlog.txt
2016-04-18 18:56 - 2016-04-18 18:56 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2016-04-18 18:56 - 2016-04-18 18:56 - 00000385 _____ C:\Users\M.Klug.LEISS\AppData\Roaminguser_gensett.xml
2016-04-18 18:55 - 2016-04-18 18:55 - 00000000 ____D C:\ProgramData\BDLogging
2016-04-18 18:55 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2016-04-18 18:36 - 2016-04-18 18:37 - 04069672 _____ (Bytelayer AB ) C:\Users\M.Klug.LEISS\Downloads\TrojanHunterSetup_6.0.1038.exe
2016-04-18 18:36 - 2016-04-18 18:36 - 06324336 _____ C:\Users\M.Klug.LEISS\Downloads\bitdefender_isecurity_qs.exe
2016-04-18 18:36 - 2016-04-18 18:36 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2016-04-18 18:35 - 2016-04-18 18:35 - 00039480 _____ C:\Users\M.Klug.LEISS\Downloads\qsinstaller.exe
2016-04-18 18:35 - 2016-04-18 18:35 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Roaming\QuickScan
2016-04-18 18:10 - 2016-04-18 18:10 - 02870984 _____ (ESET) C:\Users\M.Klug.LEISS\Downloads\esetsmartinstaller_deu.exe
2016-04-18 18:07 - 2016-04-18 18:07 - 00000000 _____ C:\autoexec.bat
2016-04-18 18:05 - 2016-04-18 18:05 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2016-04-18 18:04 - 2016-04-18 18:04 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\M.Klug.LEISS\Downloads\SpyHunter-Installer.exe
2016-04-18 17:46 - 2016-04-18 17:47 - 11441744 _____ (SurfRight B.V.) C:\Users\M.Klug.LEISS\Downloads\HitmanPro_x64 (2).exe
2016-04-18 17:46 - 2016-04-18 17:46 - 11441744 _____ (SurfRight B.V.) C:\Users\M.Klug.LEISS\Downloads\HitmanPro_x64 (1).exe
2016-04-18 13:57 - 2016-04-19 09:58 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-04-18 13:57 - 2016-04-18 17:28 - 00001111 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-18 13:57 - 2016-04-18 13:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-18 13:57 - 2016-04-18 13:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-04-18 13:57 - 2016-04-18 13:57 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-18 13:57 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-04-18 13:57 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-04-18 13:57 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-04-18 13:55 - 2016-04-18 13:56 - 22851472 _____ (Malwarebytes ) C:\Users\M.Klug.LEISS\Downloads\mbam-setup-2.2.1.1043.exe
2016-04-18 13:21 - 2016-04-18 13:22 - 03683904 _____ C:\Users\M.Klug.LEISS\Downloads\adwcleaner_5.112 (1).exe
2016-04-18 13:03 - 2016-04-18 13:04 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Roaming\Tobit
2016-04-18 12:59 - 2016-04-18 12:59 - 03683904 _____ C:\Users\M.Klug.LEISS\Downloads\adwcleaner_5.112.exe
2016-04-18 12:56 - 2016-04-18 12:56 - 00237056 _____ (SC BitDefender , Romania) C:\Users\M.Klug.LEISS\Downloads\ZbotRemovalTool (1).exe
2016-04-18 12:53 - 2016-04-18 12:53 - 00237056 _____ (SC BitDefender , Romania) C:\Users\M.Klug.LEISS\Downloads\ZbotRemovalTool.exe
2016-04-18 12:44 - 2016-04-18 12:55 - 00000000 ____D C:\ProgramData\HitmanPro
2016-04-18 12:43 - 2016-04-18 12:44 - 11441744 _____ (SurfRight B.V.) C:\Users\M.Klug.LEISS\Downloads\hitmanpro_x64.exe
2016-04-18 11:45 - 2016-04-18 11:45 - 47267840 _____ C:\Users\M.Klug\Documents\060300216_PZ.e3.2.bak
2016-04-18 10:59 - 2016-04-18 10:59 - 47267840 _____ C:\Users\M.Klug\Documents\060300216_PZ.e3.1.bak
2016-04-18 10:48 - 2016-04-18 10:48 - 66899968 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.11.bak
2016-04-18 10:04 - 2016-04-18 10:05 - 26483057 _____ C:\Users\M.Klug.LEISS\Downloads\20160413_084559.mp4
2016-04-18 08:33 - 2016-04-18 08:33 - 02179072 _____ C:\Users\M.Klug\Documents\Blasdornblock komplett.e3.2.bak
2016-04-18 08:21 - 2016-04-18 08:21 - 02203648 _____ C:\Users\M.Klug\Documents\Blasdornblock komplett.e3.1.bak
2016-04-18 08:01 - 2016-04-18 08:01 - 03215360 _____ C:\Users\M.Klug\Documents\Blasdornblock komplett_60.e3.1.bak
2016-04-15 17:35 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2016-04-15 17:34 - 2016-04-15 17:34 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Local\posterXXL Designer
2016-04-15 17:24 - 2016-04-15 17:31 - 175300924 _____ C:\Users\M.Klug.LEISS\Downloads\posterXXL.zip
2016-04-15 12:36 - 2016-04-15 12:36 - 00286720 _____ C:\Users\M.Klug\Documents\060370216_Q.e2.3.bak
2016-04-15 12:34 - 2016-04-15 12:34 - 10039296 _____ C:\Users\M.Klug\Documents\060370216_P.e2.4.bak
2016-04-15 12:32 - 2016-04-15 12:32 - 08593408 _____ C:\Users\M.Klug\Documents\060370216_P.e2.3.bak
2016-04-15 11:36 - 2016-04-15 11:36 - 185196544 _____ C:\Users\M.Klug\Documents\060370216_Z.e3.74.bak
2016-04-15 11:35 - 2016-04-15 11:35 - 08589312 _____ C:\Users\M.Klug\Documents\060370216_P.e2.2.bak
2016-04-15 11:32 - 2016-04-15 11:32 - 08585216 _____ C:\Users\M.Klug\Documents\060370216_P.e2.1.bak
2016-04-15 11:20 - 2016-04-15 11:20 - 00282624 _____ C:\Users\M.Klug\Documents\060370216_Q.e2.2.bak
2016-04-15 11:11 - 2016-04-15 11:11 - 00262144 _____ C:\Users\M.Klug\Documents\060370216_Q.e2.1.bak
2016-04-15 10:44 - 2016-04-15 10:44 - 01728512 _____ C:\Users\M.Klug\Documents\020210212_P.e2.1.bak
2016-04-15 10:13 - 2016-04-15 10:13 - 66777088 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.10.bak
2016-04-15 09:50 - 2016-04-15 09:50 - 73674752 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.9.bak
2016-04-15 08:34 - 2016-04-15 08:34 - 73674752 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.8.bak
2016-04-15 08:19 - 2016-04-15 08:20 - 66637824 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.7.bak
2016-04-15 07:14 - 2016-04-15 07:14 - 66646016 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.6.bak
2016-04-15 06:44 - 2016-04-15 06:44 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-04-14 16:01 - 2016-04-14 16:01 - 66641920 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.5.bak
2016-04-14 16:00 - 2016-04-14 16:00 - 66215936 _____ C:\Users\M.Klug\Documents\060370216_PZ_2.e3.1.bak
2016-04-14 15:56 - 2016-04-14 15:56 - 67530752 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.4.bak
2016-04-14 15:28 - 2016-04-14 15:28 - 67510272 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.3.bak
2016-04-14 15:07 - 2016-04-14 15:07 - 67510272 _____ C:\Users\M.Klug\Documents\060370216_PZ.e3.2.bak
2016-04-14 15:00 - 2016-04-14 15:00 - 00307200 _____ C:\Users\M.Klug\Documents\060370216_F.e2.1.bak
2016-04-14 14:58 - 2016-04-14 14:58 - 185204736 _____ C:\Users\M.Klug\Documents\060370216_Z.e3.73.bak
2016-04-14 14:56 - 2016-04-14 14:56 - 66801664 _____ C:\Users\M.Klug\Documents\060290216_Z.e3.36.bak
2016-04-14 14:56 - 2016-04-14 14:56 - 00262144 _____ C:\Users\M.Klug\Documents\060290216_F.e2.3.bak
2016-04-14 14:54 - 2016-04-14 14:54 - 00274432 _____ C:\Users\M.Klug\Documents\060300216_F.e2.1.bak
2016-04-14 14:53 - 2016-04-14 14:53 - 81788928 _____ C:\Users\M.Klug\Documents\060300216_Z.e3.50.bak
2016-04-14 14:31 - 2016-04-14 14:31 - 87896064 _____ C:\Users\M.Klug\Documents\051081015_PZ.e3.1.bak
2016-04-14 10:08 - 2016-04-14 10:08 - 00704512 _____ C:\Users\M.Klug\Documents\ballon.e3.1.bak
2016-04-13 12:03 - 2016-03-18 01:04 - 05551336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-04-13 12:03 - 2016-03-18 01:04 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-04-13 12:03 - 2016-03-18 01:04 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-04-13 12:03 - 2016-03-18 01:04 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-04-13 12:03 - 2016-03-18 01:01 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-04-13 12:03 - 2016-03-18 01:01 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-04-13 12:03 - 2016-03-18 00:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-04-13 12:03 - 2016-03-18 00:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-04-13 12:03 - 2016-03-18 00:57 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-04-13 12:03 - 2016-03-18 00:57 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-04-13 12:03 - 2016-03-18 00:57 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-04-13 12:03 - 2016-03-18 00:57 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-04-13 12:03 - 2016-03-18 00:57 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-04-13 12:03 - 2016-03-18 00:56 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-04-13 12:03 - 2016-03-18 00:56 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-04-13 12:03 - 2016-03-18 00:54 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-04-13 12:03 - 2016-03-18 00:54 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-04-13 12:03 - 2016-03-18 00:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-04-13 12:03 - 2016-03-18 00:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-04-13 12:03 - 2016-03-18 00:53 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-04-13 12:03 - 2016-03-18 00:53 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-04-13 12:03 - 2016-03-18 00:53 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-04-13 12:03 - 2016-03-18 00:53 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:36 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-04-13 12:03 - 2016-03-18 00:36 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-04-13 12:03 - 2016-03-18 00:33 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-04-13 12:03 - 2016-03-18 00:31 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-04-13 12:03 - 2016-03-18 00:31 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-04-13 12:03 - 2016-03-18 00:31 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-04-13 12:03 - 2016-03-18 00:31 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-04-13 12:03 - 2016-03-18 00:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-04-13 12:03 - 2016-03-18 00:30 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-04-13 12:03 - 2016-03-18 00:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-04-13 12:03 - 2016-03-18 00:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-04-13 12:03 - 2016-03-18 00:29 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-04-13 12:03 - 2016-03-18 00:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-04-13 12:03 - 2016-03-18 00:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-04-13 12:03 - 2016-03-18 00:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-04-13 12:03 - 2016-03-18 00:27 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-04-13 12:03 - 2016-03-18 00:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-04-13 12:03 - 2016-03-18 00:27 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-04-13 12:03 - 2016-03-18 00:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-04-13 12:03 - 2016-03-18 00:26 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-04-13 12:03 - 2016-03-18 00:25 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-04-13 12:03 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-04-13 12:03 - 2016-03-17 23:53 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-04-13 12:03 - 2016-03-17 23:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-04-13 12:03 - 2016-03-17 23:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-04-13 12:03 - 2016-03-17 23:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-04-13 12:03 - 2016-03-17 23:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-04-13 12:03 - 2016-03-17 23:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-04-13 12:03 - 2016-03-17 23:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-04-13 12:03 - 2016-03-17 23:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-04-13 12:03 - 2016-03-17 23:37 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-04-13 12:03 - 2016-03-17 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-04-13 12:03 - 2016-03-17 23:35 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-04-13 12:03 - 2016-03-17 23:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-04-13 12:03 - 2016-03-17 23:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-04-13 12:03 - 2016-03-17 23:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-04-13 12:03 - 2016-03-17 23:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-04-13 12:03 - 2016-03-17 23:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-04-13 12:03 - 2016-03-17 23:29 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-04-13 12:03 - 2016-03-17 23:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-04-13 12:03 - 2016-03-17 23:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-04-13 12:03 - 2016-03-17 23:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-04-13 12:03 - 2016-03-17 23:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-04-13 12:03 - 2016-03-16 20:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-04-13 12:03 - 2016-03-16 20:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-04-13 12:03 - 2016-03-16 20:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-04-13 12:03 - 2016-03-06 20:53 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2016-04-13 12:03 - 2016-03-06 20:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2016-04-13 12:03 - 2016-03-06 20:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2016-04-13 12:03 - 2016-03-06 20:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2016-04-13 12:02 - 2016-03-29 19:53 - 03216896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-04-13 12:02 - 2016-03-16 02:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2016-04-13 12:02 - 2016-03-16 02:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2016-04-13 12:02 - 2016-03-16 01:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2016-04-13 12:00 - 2016-03-31 21:25 - 00394952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-04-13 12:00 - 2016-03-31 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-04-13 12:00 - 2016-03-31 02:54 - 25817600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-04-13 12:00 - 2016-03-31 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-04-13 12:00 - 2016-03-31 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-04-13 12:00 - 2016-03-31 02:31 - 02892800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-04-13 12:00 - 2016-03-31 02:28 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-04-13 12:00 - 2016-03-31 02:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-04-13 12:00 - 2016-03-31 02:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-04-13 12:00 - 2016-03-31 02:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-04-13 12:00 - 2016-03-31 02:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-04-13 12:00 - 2016-03-31 02:25 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-04-13 12:00 - 2016-03-31 02:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-04-13 12:00 - 2016-03-31 02:21 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-04-13 12:00 - 2016-03-31 02:19 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-04-13 12:00 - 2016-03-31 02:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-04-13 12:00 - 2016-03-31 02:17 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-04-13 12:00 - 2016-03-31 02:17 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-04-13 12:00 - 2016-03-31 02:17 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-04-13 12:00 - 2016-03-31 02:11 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-04-13 12:00 - 2016-03-31 02:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-04-13 12:00 - 2016-03-31 02:03 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-04-13 12:00 - 2016-03-31 02:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-04-13 12:00 - 2016-03-31 02:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-04-13 12:00 - 2016-03-31 01:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-04-13 12:00 - 2016-03-31 01:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-04-13 12:00 - 2016-03-31 01:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-04-13 12:00 - 2016-03-31 01:55 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-04-13 12:00 - 2016-03-31 01:53 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-04-13 12:00 - 2016-03-31 01:53 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-04-13 12:00 - 2016-03-31 01:52 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-04-13 12:00 - 2016-03-31 01:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-04-13 12:00 - 2016-03-31 01:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-04-13 12:00 - 2016-03-31 01:52 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-04-13 12:00 - 2016-03-31 01:51 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-04-13 12:00 - 2016-03-31 01:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-04-13 12:00 - 2016-03-31 01:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-04-13 12:00 - 2016-03-31 01:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-04-13 12:00 - 2016-03-31 01:45 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-04-13 12:00 - 2016-03-31 01:45 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-04-13 12:00 - 2016-03-31 01:45 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-04-13 12:00 - 2016-03-31 01:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-04-13 12:00 - 2016-03-31 01:43 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-04-13 12:00 - 2016-03-31 01:43 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-04-13 12:00 - 2016-03-31 01:42 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-04-13 12:00 - 2016-03-31 01:42 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-04-13 12:00 - 2016-03-31 01:39 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-04-13 12:00 - 2016-03-31 01:38 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-04-13 12:00 - 2016-03-31 01:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-04-13 12:00 - 2016-03-31 01:33 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-04-13 12:00 - 2016-03-31 01:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-04-13 12:00 - 2016-03-31 01:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-04-13 12:00 - 2016-03-31 01:30 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-04-13 12:00 - 2016-03-31 01:30 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-04-13 12:00 - 2016-03-31 01:30 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-04-13 12:00 - 2016-03-31 01:29 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-04-13 12:00 - 2016-03-31 01:24 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-04-13 12:00 - 2016-03-31 01:23 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-04-13 12:00 - 2016-03-31 01:23 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-04-13 12:00 - 2016-03-31 01:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-04-13 12:00 - 2016-03-31 01:21 - 13811712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-04-13 12:00 - 2016-03-31 01:18 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-04-13 12:00 - 2016-03-31 01:06 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-04-13 12:00 - 2016-03-31 01:05 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-04-13 12:00 - 2016-03-31 01:02 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-04-13 12:00 - 2016-03-31 01:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-04-13 08:45 - 2016-04-13 08:45 - 00262144 _____ C:\Users\M.Klug\Documents\060290216_F.e2.2.bak
2016-04-13 08:40 - 2016-04-13 08:40 - 01318912 _____ C:\Users\M.Klug\Documents\060290216_G.e2.4.bak
2016-04-13 08:38 - 2016-04-13 08:38 - 00229376 _____ C:\Users\M.Klug\Documents\060290216_A.e2.5.bak
2016-04-13 08:36 - 2016-04-13 08:36 - 01241088 _____ C:\Users\M.Klug\Documents\060290216_B.e2.4.bak
2016-04-13 08:34 - 2016-04-13 08:34 - 01851392 _____ C:\Users\M.Klug\Documents\060290216_H.e2.4.bak
2016-04-13 08:11 - 2016-04-13 08:11 - 01847296 _____ C:\Users\M.Klug\Documents\060290216_H.e2.3.bak
2016-04-12 14:28 - 2016-04-12 14:28 - 66781184 _____ C:\Users\M.Klug\Documents\060290216_Z.e3.35.bak
2016-04-12 10:12 - 2016-04-12 10:12 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-04-12 10:10 - 2016-04-12 10:11 - 28849904 _____ C:\Users\M.Klug.LEISS\Downloads\vlc-2.2.1-win32.exe
2016-04-12 10:07 - 2016-04-12 10:07 - 00000036 ____H C:\Users\M.Klug.LEISS\AppData\Roaming\swk.ini
2016-04-11 13:13 - 2016-04-11 13:13 - 00037304 _____ C:\Users\M.Klug.LEISS\Downloads\HEB_Z160103634040206M11602000000.zip
2016-04-08 12:00 - 2016-04-04 20:14 - 00038120 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-04-08 12:00 - 2016-04-04 20:02 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-04-08 12:00 - 2016-04-02 15:08 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-04-08 07:41 - 2016-04-08 07:41 - 01126324 _____ C:\Users\M.Klug.LEISS\Downloads\HEB_Z160103634080206M11601000000 (1).zip
2016-04-08 07:33 - 2016-04-08 07:33 - 00037372 _____ C:\Users\M.Klug.LEISS\Downloads\HEB_Z160103634080206M11601000000.zip
2016-04-01 12:00 - 2016-03-23 16:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-04-01 12:00 - 2016-03-17 20:04 - 00698368 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-04-01 12:00 - 2016-03-17 20:04 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-04-01 12:00 - 2016-03-17 20:04 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-04-01 12:00 - 2016-03-17 20:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-04-01 11:44 - 2016-04-01 11:44 - 00115336 _____ C:\Users\M.Klug.LEISS\Downloads\Sommerreifenpreise 2016 klug.pdf
2016-03-24 17:09 - 2016-03-24 17:09 - 00109156 _____ C:\Users\M.Klug.LEISS\Downloads\Organigramm TC Ludwigsstadt (1).pdf
2016-03-24 14:47 - 2016-03-24 14:47 - 00002166 _____ C:\Users\M.Klug.LEISS\Downloads\contacts (1).csv
2016-03-24 12:47 - 2016-03-24 12:47 - 00007038 _____ C:\Users\M.Klug.LEISS\Downloads\contacts.csv
2016-03-24 08:16 - 2016-03-24 08:16 - 01742364 _____ C:\Users\M.Klug.LEISS\Downloads\BND_DeLonghi_Brueheinheit.pdf
2016-03-24 08:15 - 2016-03-24 08:15 - 02544339 _____ C:\Users\M.Klug.LEISS\Downloads\BND_DELONGHI_ESAM_THERMOBLOCK.pdf
2016-03-24 08:15 - 2016-03-24 08:15 - 02126626 _____ C:\Users\M.Klug.LEISS\Downloads\BND_DELONGHI_TECHNIK.pdf
2016-03-23 16:11 - 2016-03-23 16:11 - 00000000 ____D C:\trn
2016-03-23 16:11 - 1998-01-23 13:20 - 00305664 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-04-19 12:35 - 2015-06-19 06:34 - 00001240 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1060284298-1326574676-1801674531-1129UA.job
2016-04-19 12:35 - 2014-12-05 10:08 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-19 12:00 - 2014-12-01 16:13 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-04-19 12:00 - 2014-12-01 16:13 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-19 11:46 - 2014-11-21 14:09 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-04-19 11:28 - 2014-11-21 20:18 - 00000120 _____ C:\Windows\system32\config\netlogon.ftl
2016-04-19 10:35 - 2015-06-19 06:34 - 00001188 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1060284298-1326574676-1801674531-1129Core.job
2016-04-19 08:07 - 2014-10-14 04:35 - 00702890 _____ C:\Windows\system32\perfh007.dat
2016-04-19 08:07 - 2014-10-14 04:35 - 00150498 _____ C:\Windows\system32\perfc007.dat
2016-04-19 08:07 - 2009-07-14 07:13 - 01628108 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-19 08:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-04-19 08:06 - 2009-07-14 06:45 - 00031904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-19 08:06 - 2009-07-14 06:45 - 00031904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-19 07:59 - 2015-09-23 14:01 - 00000685 _____ C:\Windows\Tobit.ini
2016-04-19 07:59 - 2014-11-27 14:21 - 00000000 ___RD C:\Users\M.Klug.LEISS\Dropbox
2016-04-19 07:59 - 2014-10-13 19:03 - 00000000 ____D C:\ProgramData\Validity
2016-04-19 07:59 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-19 07:58 - 2014-10-13 19:00 - 00000000 ____D C:\ProgramData\NVIDIA
2016-04-19 07:14 - 2014-11-21 15:03 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Local\CrashDumps
2016-04-18 22:01 - 2009-07-14 06:45 - 00514288 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-18 21:45 - 2014-11-21 20:09 - 00134672 _____ C:\Users\M.Klug\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-18 20:12 - 2014-11-21 13:23 - 00134672 _____ C:\Users\M.Klug.LEISS\AppData\Local\GDIPFONTCACHEV1.DAT
2016-04-18 20:01 - 2015-04-14 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEGO Company
2016-04-18 20:01 - 2015-04-14 20:43 - 00000000 ____D C:\Program Files (x86)\LEGO Company
2016-04-18 20:01 - 2015-01-22 13:40 - 00000000 ____D C:\Program Files (x86)\Slotman
2016-04-18 19:58 - 2015-06-19 06:34 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Local\Dropbox
2016-04-18 19:45 - 2015-05-19 16:09 - 00000000 ____D C:\Windows\Minidump
2016-04-18 18:07 - 2014-11-21 13:23 - 00000000 ____D C:\Users\M.Klug.LEISS
2016-04-18 17:29 - 2015-10-13 09:09 - 00002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-04-18 17:29 - 2015-09-29 14:18 - 00002186 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-18 17:29 - 2015-05-19 15:51 - 00001729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mouse Properties (Touchpad Clickpad Trackpad TrackPoint Mouse Pointer Pointing Pad).lnk
2016-04-18 17:29 - 2015-02-12 11:30 - 00001299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-04-18 17:29 - 2014-10-14 04:33 - 00001729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Ultranav (Touchpad Clickpad Trackpad TrackPoint Mouse).lnk
2016-04-18 17:29 - 2014-10-13 19:05 - 00002021 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) WiDi.lnk
2016-04-18 17:29 - 2014-10-13 19:05 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2016-04-18 17:29 - 2014-10-13 19:04 - 00002040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo PC Experience.lnk
2016-04-18 17:29 - 2014-10-13 19:03 - 00001931 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 9.lnk
2016-04-18 17:29 - 2014-10-13 19:02 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-04-18 17:29 - 2014-10-13 18:48 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-04-18 17:29 - 2014-10-13 18:48 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-04-18 17:29 - 2009-07-14 06:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-04-18 17:29 - 2009-07-14 06:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-04-18 17:29 - 2009-07-14 06:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-04-18 17:29 - 2009-07-14 06:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-04-18 17:29 - 2009-07-14 06:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-04-18 17:28 - 2016-02-18 09:22 - 00001996 _____ C:\Users\Public\Desktop\Lenovo Solution Center.lnk
2016-04-18 17:28 - 2016-01-29 19:05 - 00002132 _____ C:\Users\Public\Desktop\Smart Switch.lnk
2016-04-18 17:28 - 2015-12-10 21:32 - 00000995 _____ C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk
2016-04-18 17:28 - 2015-12-10 21:32 - 00000980 _____ C:\Users\Public\Desktop\dm-Fotowelt.lnk
2016-04-18 17:28 - 2015-11-02 09:33 - 00001030 _____ C:\Users\Public\Desktop\IGEMS R2015.lnk
2016-04-18 17:28 - 2015-10-21 11:10 - 00002335 _____ C:\Users\Public\Desktop\Toolmaker 2016 (64-bit).lnk
2016-04-18 17:28 - 2015-10-21 11:10 - 00002279 _____ C:\Users\Public\Desktop\PowerSHAPE 2016 (64-bit).lnk
2016-04-18 17:28 - 2015-09-03 11:33 - 00001857 _____ C:\Users\Public\Desktop\ThinkDesign 2015.2 (64-bit).lnk
2016-04-18 17:28 - 2015-08-25 07:46 - 00002139 _____ C:\Users\Public\Desktop\PowerMILL 2016 (64-bit).lnk
2016-04-18 17:28 - 2015-07-31 06:56 - 00001064 _____ C:\Users\Public\Desktop\ScanStudio.lnk
2016-04-18 17:28 - 2015-04-29 14:54 - 00002257 _____ C:\Users\Public\Desktop\EliteCAD 13 ME-2D.lnk
2016-04-18 17:28 - 2015-03-31 08:36 - 00001485 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2016-04-18 17:28 - 2015-03-05 11:18 - 00002097 _____ C:\Users\Public\Desktop\Exchange 2015 R2 (64-bit).lnk
2016-04-18 17:28 - 2015-02-12 11:30 - 00001293 _____ C:\Users\Public\Desktop\paint.net.lnk
2016-04-18 17:28 - 2014-12-18 17:00 - 00001816 _____ C:\Users\Public\Desktop\EliteViewer 12.lnk
2016-04-18 17:28 - 2014-12-18 15:31 - 00002024 _____ C:\Users\Public\Desktop\SnagIt 9.lnk
2016-04-18 17:28 - 2014-12-18 15:31 - 00001100 _____ C:\Users\Public\Desktop\SnagIt 9 Editor.lnk
2016-04-18 17:28 - 2014-12-18 08:13 - 00003031 _____ C:\Users\Public\Desktop\SolidWorks Explorer 2014.lnk
2016-04-18 17:28 - 2014-12-18 08:13 - 00002443 _____ C:\Users\Public\Desktop\SolidWorks Composer Player 2014 - x64 Edition.lnk
2016-04-18 17:28 - 2014-12-18 08:10 - 00002167 _____ C:\Users\Public\Desktop\eDrawings 2014 x64 Edition.lnk
2016-04-18 17:28 - 2014-12-18 08:07 - 00002779 _____ C:\Users\Public\Desktop\SolidWorks 2014 x64 Edition.lnk
2016-04-18 17:28 - 2014-12-03 14:16 - 00001223 _____ C:\Users\Public\Desktop\BDE-Terminal.lnk
2016-04-18 17:28 - 2014-12-01 16:03 - 00002144 _____ C:\Users\Public\Desktop\Overlay mode Pen Software.lnk
2016-04-18 17:28 - 2014-12-01 16:03 - 00001192 _____ C:\Users\Public\Desktop\Pen Software.lnk
2016-04-18 17:28 - 2014-11-21 14:47 - 00002232 _____ C:\Users\Public\Desktop\RatioPlus.lnk
2016-04-18 17:27 - 2016-01-13 21:55 - 00003077 _____ C:\Users\M.Klug.LEISS\Desktop\Nik Collection.lnk
2016-04-18 17:27 - 2015-12-14 07:47 - 00001349 _____ C:\Users\M.Klug.LEISS\Desktop\Urlaubsplan 2016.lnk
2016-04-18 17:27 - 2015-12-14 07:44 - 00001065 _____ C:\Users\M.Klug.LEISS\Desktop\Stichwörter.lnk
2016-04-18 17:27 - 2014-12-25 19:41 - 00001087 _____ C:\Users\M.Klug.LEISS\Desktop\tiptoi.lnk
2016-04-18 17:27 - 2014-12-08 07:47 - 00002002 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2016-04-18 17:27 - 2014-12-03 14:10 - 00000839 _____ C:\Users\M.Klug.LEISS\Desktop\Stunden.lnk
2016-04-18 17:27 - 2014-12-03 14:03 - 00001328 _____ C:\Users\M.Klug.LEISS\Desktop\Volumen Artikeldaten.lnk
2016-04-18 17:27 - 2014-12-01 17:49 - 00001192 _____ C:\Users\M.Klug.LEISS\Desktop\OpenOffice 4.1.1.lnk
2016-04-18 17:27 - 2014-12-01 15:51 - 00001225 _____ C:\Users\M.Klug.LEISS\Desktop\NetDA Manager.lnk
2016-04-18 17:27 - 2014-11-21 13:23 - 00002192 _____ C:\Users\M.Klug.LEISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2016-04-18 17:27 - 2014-11-21 13:23 - 00001436 _____ C:\Users\M.Klug.LEISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-04-18 17:27 - 2014-10-13 19:03 - 00001471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Free Skype voice and video calls.lnk
2016-04-18 17:27 - 2014-10-13 19:02 - 00002330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Evernote Installer.lnk
2016-04-18 17:27 - 2009-07-14 07:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-04-18 17:27 - 2009-07-14 06:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-04-18 17:26 - 2016-01-13 17:05 - 00002207 _____ C:\Users\M.Klug.LEISS\Desktop\chrome.lnk
2016-04-18 17:26 - 2015-12-23 12:55 - 00001098 _____ C:\Users\M.Klug.LEISS\Desktop\Amazon Music.lnk
2016-04-18 17:26 - 2015-12-14 07:48 - 00001124 _____ C:\Users\M.Klug.LEISS\Desktop\Kundenwünsche.lnk
2016-04-18 17:26 - 2015-12-14 07:48 - 00000981 _____ C:\Users\M.Klug.LEISS\Desktop\Modell_Erstellung.lnk
2016-04-18 17:26 - 2015-12-14 07:48 - 00000946 _____ C:\Users\M.Klug.LEISS\Desktop\Einbautiefen.lnk
2016-04-18 17:26 - 2015-12-14 07:46 - 00001067 _____ C:\Users\M.Klug.LEISS\Desktop\Bodenstandfläche.lnk
2016-04-18 17:26 - 2015-12-14 07:45 - 00001114 _____ C:\Users\M.Klug.LEISS\Desktop\Com-Buch.lnk
2016-04-18 17:26 - 2015-12-14 07:45 - 00000917 _____ C:\Users\M.Klug.LEISS\Desktop\3er Liste.lnk
2016-04-18 17:26 - 2015-12-14 07:44 - 00000747 _____ C:\Users\M.Klug.LEISS\Desktop\Datenblätter PDF.lnk
2016-04-18 17:26 - 2015-12-14 07:44 - 00000706 _____ C:\Users\M.Klug.LEISS\Desktop\Endkontrolle.lnk
2016-04-18 17:26 - 2015-10-12 08:40 - 00001833 _____ C:\Users\M.Klug.LEISS\Desktop\Anfragen.lnk
2016-04-18 17:26 - 2015-09-24 06:35 - 00002196 _____ C:\Users\M.Klug.LEISS\Desktop\david® Client.LNK
2016-04-18 17:26 - 2015-07-09 06:46 - 00002253 _____ C:\Users\M.Klug.LEISS\Desktop\Kalkulation.lnk
2016-04-18 17:26 - 2015-04-27 13:10 - 00004519 _____ C:\Users\M.Klug.LEISS\Desktop\filezilla.exe - Verknüpfung.lnk
2016-04-18 17:26 - 2015-04-09 07:54 - 00001050 _____ C:\Users\M.Klug.LEISS\Desktop\Capture One 8.lnk
2016-04-18 17:26 - 2014-12-04 09:34 - 00001097 _____ C:\Users\M.Klug.LEISS\Desktop\Meusburger Katalog.lnk
2016-04-18 17:26 - 2014-12-04 09:12 - 00002613 _____ C:\Users\M.Klug.LEISS\Desktop\Festo Produktkatalog.lnk
2016-04-18 17:26 - 2014-12-03 14:05 - 00001011 _____ C:\Users\M.Klug.LEISS\Desktop\Anforderungsschein.lnk
2016-04-18 17:26 - 2014-12-01 15:42 - 00002391 _____ C:\Users\M.Klug.LEISS\Desktop\CatalystEX 4.3.lnk
2016-04-18 17:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\L2Schemas
2016-04-18 13:05 - 2014-10-13 19:00 - 00000000 ____D C:\Users\UpdatusUser
2016-04-18 10:46 - 2014-11-21 20:09 - 00000000 ____D C:\Users\M.Klug
2016-04-18 10:46 - 2014-11-21 13:25 - 00000000 ____D C:\Users\Administrator
2016-04-17 19:46 - 2015-04-09 07:55 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Local\CaptureOne
2016-04-15 18:48 - 2015-09-20 17:37 - 00000000 ____D C:\ProgramData\tmp
2016-04-15 06:45 - 2014-11-27 14:17 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Roaming\Dropbox
2016-04-14 16:08 - 2015-09-23 14:12 - 16034296 ____H C:\Users\M.Klug.LEISS\AppData\Local\IconCache.db.backup
2016-04-14 11:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-04-14 10:32 - 2014-12-18 08:14 - 00000000 ____D C:\ProgramData\Simpoe
2016-04-14 09:59 - 2015-10-21 11:11 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Roaming\PowerSHAPE
2016-04-14 08:50 - 2014-12-04 16:47 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Roaming\Nitro PDF
2016-04-13 06:37 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-04-12 10:32 - 2014-12-18 08:26 - 00000000 ____D C:\Users\M.Klug.LEISS\AppData\Local\TempSWSicherungsverzeichnis
2016-04-08 12:00 - 2014-12-11 07:35 - 00000000 ____D C:\Windows\system32\appraiser
2016-04-08 10:35 - 2014-12-05 10:08 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-04-08 10:35 - 2014-12-05 10:08 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-04-08 10:35 - 2014-12-05 10:08 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-04-06 10:18 - 2010-11-21 05:27 - 00453280 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-04-06 06:49 - 2014-12-18 08:03 - 00000000 ____D C:\Users\M.Klug.LEISS\Documents\SolidWorks Downloads
2016-03-29 08:39 - 2014-12-04 09:34 - 00000000 ____D C:\Program Files (x86)\Meusburger Katalog
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-04-12 10:07 - 2016-04-12 10:07 - 0000036 ____H () C:\Users\M.Klug.LEISS\AppData\Roaming\swk.ini
2014-12-17 08:57 - 2015-10-29 15:11 - 0007619 _____ () C:\Users\M.Klug.LEISS\AppData\Local\Resmon.ResmonCfg
2014-12-04 15:51 - 2015-12-07 08:38 - 0000102 _____ () C:\ProgramData\authlic.dat
2014-11-21 15:04 - 2014-11-21 15:04 - 0000011 _____ () C:\ProgramData\cladm.ini
2014-10-13 18:58 - 2014-10-13 18:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-09-17 11:46 - 2015-09-17 11:50 - 0000974 _____ () C:\ProgramData\hpzinstall.log
2014-12-04 15:51 - 2014-12-04 15:51 - 0000027 _____ () C:\ProgramData\ms32win_.log
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\authlic.dat
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-04-18 16:00
==================== Ende von FRST.txt ============================ |