Trojaner-Board
Seite 1 von 4 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Win10 Update oder Virus ??? Explorer langsam + weiße Icons (https://www.trojaner-board.de/181449-win10-update-virus-explorer-langsam-weisse-icons.html)

DanielaS 28.08.2016 19:41
Win10 Update oder Virus ??? Explorer langsam + weiße Icons
 
Hallo guten Abend
Ich bin das erste mal hier und von google auf das Forum gestoßen und ich hoffe auf Hilfe.
Ich weiß nicht ob es ein Update ist oder ein Virus.

Seid Freitag dem 26.8.2016 nach dem die letzte Update Suche um 12:00 stattfand
spinnt mein PC TOTAL. Ich versuche es zu erklären.

Mein Speicherstatus wird zwar angezeigt, jedoch braucht das System VIEL zu lange
fast 10-15min oder auch gar nicht um mir meinen Explorer anzuzeigen (Festplatten etc)
Externe Festplatten kann ich jedoch ohne Probleme, mit mühe und Not öffnen!
Es befinden sich auch überall nur weiße Icons auf meinen Dateien.
Videos, Bilder, Musik, Spiele, Dokumente kann ich jedoch alles öffnen.
Aber es sind keine Details mehr zu sehen wie (größe, erstelldatum usw)
Es ist aber so eingestellt!

Ich habe zuerst vermutet das es ein Update sein könnte.
Aber da ich leider nicht sehen kann WANN das letzte Update war kann ich demnach nichts machen.

Ich habe dann versucht den PC auf den vorherigen Tag zurück zu setzen. Hat er NICHT getan!
Gestern habe ich den AVG Tune up Zen die neuste Version durchlaufen lassen. (Hatte damit nie Probleme)
Avira hab ich noch nicht ausprobiert und hab ich auch kein Geld für.
Andere Viren programme kenne ich nicht

Beim ersten Scan kam das der Virus NICHT entfernt werden konnte.
Danach habe ich dann die 1 Klick Warung durchlaufen lassen von 13 Uhr an.
Um 17 Uhr nach 4 Stunden war er immer noch nicht fertig mit der C festplatten defragmentieren x_x
Also gehe ich zu 100% aus das es ein Virus ist.

Leider habe ich absolut kein Geld da PC Reparatur Dienste immer sehr sehr teuer in unserem Ort sind.
Für 1 Tag da lassen is man locker schon 100€ los und in Raten kann man nicht oder auf Rechnung. :(
Leider habe ich keinen Fachmann zu Hause der sich das genauer angucken kann.

Aber das sind die Sachen die ich selbst gemacht habe.
Ich hoffe das ist Hilfreich.

Hier noch einige Bilder.
Meine Treiber und Grafik sind ALLE auf dem Neusten Stand!!!
Ich hoffe sehr sie können mir helfen.
Langsam nervt der Virus x_x

http://fs5.directupload.net/images/160826/259qv2bc.jpg

http://fs5.directupload.net/images/160826/qspss3x4.jpg

Beispiel der weißen ICONS und langes laden vom Explorer!

http://fs5.directupload.net/images/160826/4pmgjv3f.jpg

Deathkid535 29.08.2016 07:52
:hallo:

Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen.

Bitte beachte, dass es ein paar Regeln gibt:
  • Bitte lies meine Posts komplett durch bevor du sie abarbeitest
  • Wenn ein Problem auftauchen sollte, unterbreche deine Arbeit, poste die entstandenen Logs und schildere dieses so genau wie möglich.
  • Bitte kein Crossposting
  • Installiere oder Deinstalliere keine Software ohne Aufforderung
  • Bitte verwende nur die Tools welche hier im Thread erwähnt werden
  • Antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
  • Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen

Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM!

Posten in CODE-Tags

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307


Nur die Ruhe und tief durchatmen, wir schauen mal genauer nach :)

Los gehts!

Schritt # 1: FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Schritt # 2: Bitte Posten
  • Die FRST.txt
  • Die Addition.txt

DanielaS 29.08.2016 09:35
Hallo vielen dank für die schnelle Antwort und hiermit melde ich mich mit beiden Dateien zurück
Ich hoffe es war so richtig diese Häkchen waren vorab gesetzt :)

http://fs5.directupload.net/images/160829/eob226ny.jpg

FIRST

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2016
durchgeführt von Michiyo (Administrator) auf MICHIYO-PC (29-08-2016 10:18:34)
Gestartet von C:\Users\Michiyo\Desktop
Geladene Profile: Michiyo (Verfügbare Profile: Michiyo & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Windows\System32\atwtusb.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\System32\atwtusb.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\System32\AtwtusbIcon.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\40.3.4\ScriptHelper.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [AtwtusbIcon] => C:\WINDOWS\system32\AtwtusbIcon.exe [3593728 2012-09-10] ()
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Live! Central] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe [438381 2009-06-05] (Creative Technology Ltd.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-12] (Raptr, Inc)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [204560 2016-08-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2178120 2016-08-27] ()
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [4886136 2011-03-07] (SlySoft, Inc.)
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-01-06]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2014-12-13]

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{86916325-c1ab-4869-a177-2fbf32564dab}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130859355493535952&GUID=9EC4EDB1-5F00-4682-8EB6-D81E4A9B890C
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?pc=UE01&ocid=UE01DHP
URLSearchHook: HKU\S-1-5-21-1262878346-956153297-733536101-1001 - (Kein Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - Keine Datei
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> {BFFED5CA-8BDF-47CC-AED0-23F4E6D77732} URL = hxxp://start.iminent.com/?appId=8CF6A15D-677F-4B48-9B65-61B3FAB6F25C&ref=toolbox&q={searchTerms}
SearchScopes: HKLM-x32 -> {F66BFC25-B41D-4A17-A66C-2D338F452675} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.iminent.com/?appId=8CF6A15D-677F-4B48-9B65-61B3FAB6F25C&ref=toolbox&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {6ECB41EC-A7AC-4224-8D1E-44C44B4639E2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AEEDE363-46A7-4B7A-9092-EEDB31E079DE} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NS&chn=oem&geo=DE&ver=22&locale=de_DE&gct=kwd&qsrc=2869
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C2EE27DF-5090-4D18-8930-B7403474FB06} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C8ABDA6A-F499-4674-8C39-FDE573ABBEDE} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {D16EFC19-2554-4D94-B6A1-7B098BFCBD25} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll => Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-27] (AVG)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> Keine Datei
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll => Keine Datei
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-27] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll Keine Datei
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll Keine Datei
Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH)
IE Session Restore: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> ist aktiviert.
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> hxxp://go.web.de/tb/ie_startpage

FireFox:
========
FF ProfilePath: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default
FF DefaultSearchEngine: Yahoo! Powered
FF SelectedSearchEngine: Yahoo! Powered
FF Homepage: hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
FF Keyword.URL: user_pref("keyword.URL", true);
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-27] ()
FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-27] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.4\\npsitesafety.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1262878346-956153297-733536101-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Michiyo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
FF user.js: detected! => C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\user.js [2015-03-18]
FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml [2016-08-27]
FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\yahoo! powered.xml [2016-08-25]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\StartWeb.xml [2014-10-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-08-27]
FF Extension: (AVG Web TuneUp) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\avg@toolbar.xpi [2016-08-27]
FF Extension: (DVDVideoSoft YouTube MP3 and Video Download) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-11-17] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
FF Extension: (Norton Identity Safe) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon [2016-08-12]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-03-06] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR StartupUrls: Default -> "hxxp://www.google.de/","hxxp://start.mysearchdial.com/?f=1&a=dsites_14_12_ch&cd=2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyBtCzy0A0EyD0ByEtG0DzztA0EtG0Azz0EtAtGyD0F0EzztGyC0FyBtCtD0BtAtB0DtCtByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyC0E0DyDtC0F0DtG0EtC0BtBtGyE0EyC0DtGzztD0AyEtGtAtA0E0F0BzyyC0BzyyDyDyE2Q&cr=1732920521&ir=","hxxp://www.mystartsearch.com/?type=hp&ts=1429528029&from=cor&uid=HGSTXHTS545050A7E680_TM8514TFHB0T4RHB0T4RX","hxxp://de.search.yahoo.com/?fr=hp-ddc-bd&type=bg_276_bl-is-21__alt__ddc_dsssyc_bd_com","hxxp://www.yessearches.com/?mode=nnnb&ptid=dam&uid=53A9CC2763490B4B37942D2A338B992E&v=20160108&ts=AHEpAXYoAH8nAE.."
CHR Profile: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Unblock embedded Youtube videos) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aajjpnimaghinaladfeongfnojpooegf [2016-03-11]
CHR Extension: (Google Drive) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (AVG Secure Search) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-08-27]
CHR Extension: (Google-Suche) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Docs Offline) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Proxmate) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2016-08-25]
CHR Extension: (Norton Identity Safe) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-03-18]
CHR Extension: (Skype) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-08-12]
CHR Extension: (Pink Lake) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkikaplkcnkehkocaeaddjiicklloajh [2016-03-12]
CHR Extension: (TumTaster) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2016-03-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01]
CHR Extension: (Google Mail) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-19]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden>
CHR HKLM\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1262878346-956153297-733536101-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1262878346-956153297-733536101-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (YouTube Unblocker) - C:\Users\Michiyo\AppData\Roaming\Opera Software\Opera Stable\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2016-05-10]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-06-24] () [Datei ist nicht signiert]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.)
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.)
S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-11-17] (Digital Wave Ltd.)
S4 GlobalUpdater; C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe [378152 2014-10-30] () [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (HP Inc.)
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.7.1.32\NIS.exe [289080 2016-08-16] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-03-29] (Electronic Arts)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-12-21] ()
S4 SProtection; C:\Program Files (x86)\Common Files\Umbrella\Umbrella260.exe [3797664 2014-10-30] () [Datei ist nicht signiert]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4878096 2016-08-19] (AVG Technologies CZ, s.r.o.)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
R2 vToolbarUpdater40.3.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe [1347144 2016-08-27] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
R2 WTService; C:\WINDOWS\system32\atwtusb.exe [581120 2012-10-19] () [Datei ist nicht signiert]
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980040 2016-08-27] ()

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [305392 2016-01-22] (Advanced Micro Devices)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-09-18] (Advanced Micro Devices)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [313088 2016-07-20] (AVG Technologies CZ, s.r.o.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20150521.001\BHDrvx64.sys [1640152 2015-06-04] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1607010.020\ccSetx64.sys [174328 2016-06-02] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-08-07] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-08-07] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-11-10] (Disc Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-06-16] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-06-16] (Symantec Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20150519.100\IDSVia64.sys [684248 2015-06-04] (Symantec Corporation)
S3 INIDVD; C:\Windows\System32\drivers\inidvd.sys [19488 2012-11-02] (Initio Corporation)
R3 moufiltr; C:\Windows\System32\drivers\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 RLDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\livecamv.sys [49664 2007-02-05] ()
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1607010.020\SRTSP64.SYS [773360 2016-08-10] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1607010.020\SRTSPX64.SYS [48888 2016-06-02] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NISx64\1607010.020\SYMEFASI64.SYS [1627352 2016-06-02] (Symantec Corporation)
S4 SymELAM; C:\Windows\system32\drivers\NISx64\1607010.020\SymELAM.sys [24192 2015-07-11] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-08-11] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1607010.020\Ironx64.SYS [291056 2016-06-02] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1607010.020\SYMNETS.SYS [567536 2016-06-02] (Symantec Corporation)
S3 TabletFilter; C:\Windows\System32\drivers\TabletFilter.sys [7680 2012-08-15] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.)
R3 V0540Dev; C:\Windows\system32\DRIVERS\V0540Vid.sys [321376 2009-06-15] (Creative Technology Ltd.)
R3 vhidmini; C:\Windows\System32\drivers\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\EX64.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-29 10:18 - 2016-08-29 10:19 - 00043219 _____ C:\Users\Michiyo\Desktop\FRST.txt
2016-08-29 10:17 - 2016-08-29 10:18 - 00000000 ____D C:\FRST
2016-08-29 10:17 - 2016-08-29 10:17 - 02396672 _____ (Farbar) C:\Users\Michiyo\Desktop\FRST64.exe
2016-08-28 01:14 - 2016-08-28 17:28 - 2613934989 _____ C:\Users\Michiyo\Downloads\[SOFCJ-Raws] Dragon Ball Z Resurrection F – Future Trunks Special Edition Extended (SUT 1280x720 x264 10bit AAC).mp4
2016-08-27 12:49 - 2016-08-27 12:49 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Michiyo\Documents\AVG_Protection_Free_1606.exe
2016-08-27 12:34 - 2016-08-27 12:35 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AVG Web TuneUp
2016-08-27 12:34 - 2016-08-27 12:34 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2016-08-27 12:32 - 2016-08-27 12:36 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2016-08-27 12:32 - 2016-08-27 12:32 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2016-08-27 12:31 - 2016-08-27 12:32 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-08-27 11:18 - 2016-08-27 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-08-27 11:18 - 2016-08-27 11:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AVG
2016-08-27 11:17 - 2016-08-27 11:17 - 00000000 ___HD C:\$AVG
2016-08-27 11:16 - 2016-08-29 10:05 - 00000000 ____D C:\ProgramData\MFAData
2016-08-27 11:16 - 2016-08-27 11:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\MFAData
2016-08-27 11:00 - 2016-08-29 02:54 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-08-27 11:00 - 2016-08-27 11:00 - 01198049 _____ C:\WINDOWS\unins000.exe
2016-08-27 11:00 - 2016-08-27 11:00 - 00010826 _____ C:\WINDOWS\unins000.dat
2016-08-27 11:00 - 2016-08-27 11:00 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-08-27 11:00 - 2016-08-27 11:00 - 00001409 _____ C:\AiOLog.txt
2016-08-27 11:00 - 2016-08-27 11:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2016-08-27 11:00 - 2016-01-28 18:44 - 01261568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll
2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll
2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll
2016-08-27 11:00 - 2015-07-10 10:51 - 00456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll
2016-08-27 11:00 - 2015-07-08 09:29 - 03477818 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll
2016-08-27 11:00 - 2014-01-31 02:14 - 01055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll
2016-08-27 11:00 - 2014-01-25 13:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll
2016-08-27 11:00 - 2013-12-23 14:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomctl.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomct2.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshflxgd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\system32\comct332.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatgrd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msflxgrd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatlst.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabctl32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\system32\richtx32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dblist32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mci32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmask32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\system32\comct232.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinet.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstdfmt.dll
2016-08-27 11:00 - 2013-12-20 00:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswinsck.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomm32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstkprp.dll
2016-08-27 11:00 - 2013-12-20 00:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\system32\picclp32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysinfo.ocx
2016-08-27 11:00 - 2012-06-14 14:36 - 00107520 _____ C:\WINDOWS\system32\zlib1.dll
2016-08-27 11:00 - 2012-04-03 16:11 - 00138752 _____ C:\WINDOWS\system32\libpng15.dll
2016-08-27 11:00 - 2011-10-12 03:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll
2016-08-27 11:00 - 2011-10-01 08:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2016-08-27 11:00 - 2011-10-01 08:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll
2016-08-27 11:00 - 2011-01-12 13:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll
2016-08-27 11:00 - 2011-01-12 13:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll
2016-08-27 11:00 - 2011-01-12 12:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll
2016-08-27 11:00 - 2010-06-27 17:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll
2016-08-27 11:00 - 2010-03-18 20:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdia100.dll
2016-08-27 11:00 - 2008-08-26 06:40 - 00162304 _____ C:\WINDOWS\system32\libpng13.dll
2016-08-27 11:00 - 2007-02-01 22:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll
2016-08-27 11:00 - 2007-02-01 19:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll
2016-08-27 11:00 - 2007-01-30 22:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll
2016-08-27 11:00 - 2006-08-26 00:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll
2016-08-27 11:00 - 2006-08-26 00:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll
2016-08-27 11:00 - 2006-08-25 23:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll
2016-08-27 11:00 - 2005-05-06 13:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll
2016-08-27 11:00 - 2005-01-20 19:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll
2016-08-27 11:00 - 2002-01-05 05:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll
2016-08-27 11:00 - 1996-01-12 03:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll
2016-08-27 11:00 - 1996-01-12 03:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll
2016-08-27 11:00 - 1994-11-17 13:00 - 00210944 _____ C:\WINDOWS\system\msvcrt10.dll
2016-08-27 11:00 - 1993-05-11 19:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll
2016-08-27 11:00 - 1992-10-21 00:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll
2016-08-27 11:00 - 1991-05-10 01:00 - 00271264 _____ C:\WINDOWS\system\vbrun100.dll
2016-08-27 10:57 - 2016-08-27 10:57 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Sun
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\ProgramData\Oracle
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Program Files\Java
2016-08-27 10:53 - 2016-08-27 11:01 - 00632904 _____ (O&O Software GmbH) C:\Users\Michiyo\Documents\OOSU10.exe
2016-08-27 10:49 - 2016-08-27 10:49 - 00203114 _____ C:\Users\Michiyo\Documents\OOSU10.zip
2016-08-27 10:48 - 2016-08-27 10:53 - 377130076 _____ (Sereby Corporation) C:\Users\Michiyo\Documents\aio-runtimes_v2.3.8.exe
2016-08-26 16:16 - 2016-08-26 16:16 - 00000000 ____D C:\$SysReset
2016-08-26 15:34 - 2016-08-26 15:34 - 00000017 _____ C:\Users\Michiyo\AppData\Local\resmon.resmoncfg
2016-08-26 13:18 - 2016-08-26 15:24 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-08-26 11:10 - 2016-08-26 11:10 - 00003340 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-08-26 10:29 - 2016-08-26 10:29 - 00003404 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-08-26 10:28 - 2016-08-26 10:28 - 00280764 _____ C:\WINDOWS\Minidump\082616-97187-01.dmp
2016-08-23 09:34 - 2012-01-01 17:18 - 00000000 ____D C:\Users\Michiyo\Desktop\[Yaoi Fangirl] Lent - Death Note Doujin
2016-08-22 17:22 - 2016-08-22 18:07 - 00327998 _____ C:\Users\Michiyo\Documents\Digimon Adventure - Leb deine Träume.pds
2016-08-20 00:00 - 2016-08-20 00:00 - 79449510 _____ C:\Users\Michiyo\Desktop\『HiGH&LOW THE MOVIE』Best Action Scenes Special Trailer.mp4
2016-08-13 10:23 - 2016-08-13 10:26 - 00000000 ____D C:\Users\Michiyo\Documents\Die Sims 4
2016-08-12 18:08 - 2016-08-12 18:11 - 42013312 _____ (Skype Technologies S.A.) C:\Users\Michiyo\Documents\SkypeSetupFull.exe
2016-08-12 16:58 - 2016-08-26 10:27 - 739168023 _____ C:\WINDOWS\MEMORY.DMP
2016-08-12 11:13 - 2016-08-13 19:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Die Sims 4
2016-08-12 09:02 - 2016-08-12 09:05 - 00002503 _____ C:\Users\Michiyo\Documents\Norton Internet Security.lnk
2016-08-12 01:07 - 2016-08-12 01:07 - 08892696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 08738920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 07115928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00479368 _____ C:\WINDOWS\system32\amdmiracast.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00164280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00159088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00154920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00138688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00138176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00123120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00123104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 48819200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 38266368 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 32555512 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 27489280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 26639360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 21641216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 15729152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 14320128 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 08830456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 08627704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 07076352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02376704 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02286584 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02147328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 01837568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00883192 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00751616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00627192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00459776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00402944 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00350208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00292352 _____ C:\WINDOWS\system32\dgtrayicon.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00287744 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00275968 _____ C:\WINDOWS\system32\GameManager64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00270336 _____ C:\WINDOWS\system32\clinfo.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00268792 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00249336 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00241152 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00234496 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00231424 _____ C:\WINDOWS\system32\atieah64.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00222208 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00209408 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00202744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00201728 _____ C:\WINDOWS\system32\amdhdl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00181760 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00176640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00159736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00137208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00130560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00123896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00118784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00113664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00111616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00104448 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00083960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00079864 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00073216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00069632 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00068608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00068096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00067584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00066560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00060920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00055800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00021496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2016-08-11 14:38 - 2016-08-11 14:38 - 00000000 ____D C:\Users\Michiyo\Documents\Electronic Arts
2016-08-11 14:26 - 2016-08-28 19:05 - 00002187 _____ C:\Users\Michiyo\Desktop\Die Sims 4 Digital Deluxe Edition 64 Bit.lnk
2016-08-11 14:07 - 2016-08-27 12:15 - 00000000 ____D C:\Program Files (x86)\Die Sims 4
2016-08-11 13:58 - 2016-08-11 14:02 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2
2016-08-11 12:39 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-08-11 12:39 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-08-11 12:39 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-08-11 12:39 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-08-11 12:39 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-08-11 12:39 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-08-11 12:39 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-08-11 12:39 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-11 12:39 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-11 12:39 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-08-11 12:39 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-08-11 12:39 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-11 12:39 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-08-11 12:39 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-08-11 12:39 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-08-11 12:39 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2016-08-11 12:39 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-11 12:39 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-08-11 12:39 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-08-11 12:39 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-08-11 12:39 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-08-11 12:39 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-08-11 12:39 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-08-11 12:39 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2016-08-11 12:39 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2016-08-11 12:39 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-11 12:39 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-11 12:39 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-08-11 12:39 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-11 12:39 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-08-11 12:39 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-08-11 12:39 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-11 12:39 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-08-11 12:39 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-11 12:39 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2016-08-11 12:39 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-08-11 12:39 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-11 12:39 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-08-11 12:39 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-08-11 12:39 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-08-11 12:39 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-08-11 12:39 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2016-08-11 12:39 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-08-11 12:39 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-08-11 12:39 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-08-11 12:39 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
2016-08-11 12:39 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-08-11 12:39 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-11 12:39 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-08-11 12:39 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2016-08-11 12:39 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-08-11 12:39 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-08-11 12:39 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2016-08-11 12:39 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-08-11 12:39 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-08-11 12:39 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-08-11 12:39 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-08-11 12:39 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-11 12:38 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-08-11 12:38 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2016-08-11 12:38 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-08-11 12:38 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-08-11 12:38 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-08-11 12:38 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-11 12:38 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-11 12:38 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-08-11 12:38 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-08-11 12:38 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-08-11 12:38 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-08-11 12:38 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-08-11 12:38 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-08-11 12:38 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2016-08-11 12:38 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-08-11 12:38 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-08-11 12:38 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-08-11 12:38 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-11 12:38 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-08-11 12:38 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-11 12:38 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-08-11 12:38 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-08-11 12:38 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-08-11 12:38 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-08-11 12:38 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-08-11 12:38 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-08-11 12:38 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-11 12:38 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-11 12:38 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-08-11 12:38 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-08-11 12:38 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-08-11 12:38 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-08-11 12:38 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-11 12:38 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-08-11 12:38 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-08-11 12:38 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-08-11 12:38 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-08-11 12:38 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-08-11 12:38 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-08-11 12:38 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-08-11 12:38 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-11 12:38 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-11 12:38 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2016-08-11 12:38 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-08-11 12:38 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-11 12:38 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-08-11 12:38 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-11 12:38 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-08-11 12:38 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-11 12:38 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-11 12:38 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-08-11 12:38 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-11 12:38 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-08-11 12:38 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-08-11 12:38 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-08-11 12:38 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-08-11 12:38 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-08-11 12:38 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-11 12:38 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-08-11 11:35 - 2016-08-11 11:46 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2
2016-08-08 12:51 - 2016-08-08 12:53 - 1266484522 _____ C:\Users\Michiyo\Documents\PhotoImpact.13.1.rar
2016-08-07 23:09 - 2016-08-07 23:17 - 529480482 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 054 RAW (THK 1280x720 x264 AAC).mp4
2016-08-07 23:09 - 2016-08-07 23:10 - 389781623 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 053 RAW (THK 1280x720 x264 AAC).mp4
2016-08-06 11:03 - 2016-08-06 11:03 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\29030

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-29 10:19 - 2014-11-08 19:05 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-29 10:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-08-29 10:14 - 2016-04-18 09:31 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AE24DCEB-E6C7-487B-AFB9-782C90AB2FBD}
2016-08-29 10:07 - 2014-11-08 19:05 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-29 10:05 - 2009-07-14 04:34 - 00000555 _____ C:\WINDOWS\win.ini
2016-08-29 02:57 - 2014-11-09 15:20 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AbiSuite
2016-08-29 02:57 - 2014-11-08 15:38 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\vlc
2016-08-29 01:26 - 2014-11-08 14:42 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Skype
2016-08-28 21:06 - 2014-12-03 10:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\uTorrent
2016-08-28 19:05 - 2016-06-11 11:49 - 00002039 _____ C:\Users\Michiyo\Desktop\Dragonball Xenoverse.lnk
2016-08-28 17:57 - 2016-04-04 18:53 - 00000000 ____D C:\Users\Michiyo\Desktop\gucken heute
2016-08-28 12:39 - 2014-11-13 20:23 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Audacity
2016-08-28 10:47 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-08-27 17:08 - 2015-12-21 13:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-08-27 17:08 - 2015-12-21 13:18 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-08-27 17:08 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-08-27 13:06 - 2016-06-05 15:29 - 00000000 ____D C:\WINDOWS\Minidump
2016-08-27 13:06 - 2016-01-06 07:27 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\HpUpdate
2016-08-27 12:52 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AvgSetupLog
2016-08-27 12:34 - 2014-11-12 18:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-27 12:31 - 2014-12-26 18:22 - 00000000 ____D C:\Users\Michiyo\Documents\AnyDVD HD 6.7.9.0 Fimal
2016-08-27 11:20 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-08-27 11:18 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Avg
2016-08-27 11:18 - 2014-11-12 18:13 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\TuneUp Software
2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\ProgramData\Avg
2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\Program Files (x86)\AVG
2016-08-27 11:17 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System
2016-08-27 10:59 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-27 10:59 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-08-27 10:57 - 2015-03-18 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-27 10:56 - 2015-03-18 13:45 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-08-27 10:55 - 2015-03-18 13:45 - 00000000 ____D C:\Program Files (x86)\Java
2016-08-26 16:47 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-08-26 16:16 - 2014-11-12 17:49 - 00000000 ____D C:\Users\Michiyo\AppData\Local\CrashDumps
2016-08-26 13:17 - 2014-11-25 15:51 - 00000000 ____D C:\WINDOWS\pss
2016-08-26 12:45 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Seisei Suruhodo, Aishiteru
2016-08-26 11:25 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Ie Uru Onna
2016-08-26 11:10 - 2015-08-04 11:18 - 00002437 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-26 11:10 - 2015-08-04 11:18 - 00000000 ___RD C:\Users\Michiyo\OneDrive
2016-08-26 10:30 - 2013-12-16 20:32 - 00000000 ____D C:\WINDOWS\system32\Drivers\NISx64
2016-08-25 21:34 - 2014-11-11 20:14 - 00000132 _____ C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs
2016-08-25 16:56 - 2016-03-30 09:53 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2016-08-24 13:18 - 2016-03-11 18:39 - 00002549 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-08-23 07:41 - 2015-05-11 12:42 - 00000000 ____D C:\Users\Michiyo\FanFics - Geschichten
2016-08-21 20:02 - 2016-06-08 11:33 - 00000000 ____D C:\Users\Michiyo\Desktop\Video
2016-08-21 10:27 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\AMD
2016-08-19 16:35 - 2016-03-11 18:39 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe
2016-08-16 20:19 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Suki na Hito ga Iru Koto
2016-08-14 15:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-08-14 01:43 - 2015-12-21 13:21 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-08-14 01:43 - 2015-10-30 20:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat
2016-08-14 01:43 - 2015-10-30 20:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat
2016-08-14 01:43 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-08-13 17:25 - 2015-08-04 11:15 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Packages
2016-08-13 01:07 - 2015-12-21 13:22 - 00000000 ____D C:\Users\Michiyo
2016-08-12 18:11 - 2014-11-08 14:41 - 00000000 ____D C:\ProgramData\Skype
2016-08-12 15:05 - 2014-11-08 19:10 - 00000000 ____D C:\Program Files (x86)\AMD
2016-08-12 15:02 - 2015-12-21 13:17 - 00000000 ____D C:\Program Files\AMD
2016-08-12 14:29 - 2015-07-01 22:23 - 00000000 ____D C:\Users\Michiyo\AppData\Local\JDownloader 2.0
2016-08-12 09:08 - 2015-08-04 11:15 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-08-12 09:05 - 2015-07-15 19:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2016-08-12 09:01 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-12 01:07 - 2016-01-22 14:05 - 07258160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2016-08-12 01:07 - 2016-01-22 14:04 - 00137224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 09340136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 09131736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 01273928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 00152800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 10995344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 10317568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 01547544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 00183952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2016-08-12 01:06 - 2016-01-22 14:00 - 00521728 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2016-08-12 01:06 - 2016-01-22 14:00 - 00287232 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2016-08-12 01:06 - 2016-01-22 13:59 - 01323008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2016-08-12 01:06 - 2015-10-07 17:19 - 26706432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2016-08-12 01:06 - 2015-10-07 17:19 - 00518656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2016-08-11 17:19 - 2013-12-16 20:33 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2016-08-11 17:19 - 2013-12-16 20:33 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2016-08-11 16:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2016-08-11 16:01 - 2013-12-17 10:23 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-08-11 15:53 - 2013-12-17 10:23 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-08-09 08:20 - 2014-11-08 19:05 - 00002483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-09 08:20 - 2014-11-08 19:05 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-08 22:13 - 2015-01-02 15:06 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-08-08 11:25 - 2014-11-08 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-08-03 21:08 - 2016-03-11 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-08-03 17:31 - 2016-03-06 14:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-07-31 17:30 - 2016-05-19 17:32 - 00000000 ____D C:\Users\Michiyo\Downloads\extracted

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-04 11:23 - 2015-08-04 11:23 - 0000000 _____ () C:\Program Files (x86)\Common Files\AMD
2014-11-11 20:14 - 2016-08-25 21:34 - 0000132 _____ () C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-12-24 02:38 - 2014-12-24 02:38 - 0003584 _____ () C:\Users\Michiyo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-08-26 15:34 - 2016-08-26 15:34 - 0000017 _____ () C:\Users\Michiyo\AppData\Local\resmon.resmoncfg
2014-12-26 19:39 - 2014-12-26 19:39 - 0000040 ___SH () C:\ProgramData\.zreglib
2014-12-26 19:46 - 2014-12-26 19:46 - 0028672 _____ () C:\ProgramData\data.dll
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\data.dll
C:\ProgramData\winiml.dat
C:\Users\Michiyo\VisualBoyAdvance.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-08-20 15:54

==================== Ende von FRST.txt ============================

DanielaS 29.08.2016 09:35
Addition

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-08-2016
durchgeführt von Michiyo (29-08-2016 10:19:59)
Gestartet von C:\Users\Michiyo\Desktop
Windows 10 Home Version 1511 (X64) (2015-12-21 11:45:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1262878346-956153297-733536101-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1262878346-956153297-733536101-503 - Limited - Disabled)
Gast (S-1-5-21-1262878346-956153297-733536101-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1262878346-956153297-733536101-1003 - Limited - Enabled)
Michiyo (S-1-5-21-1262878346-956153297-733536101-1001 - Administrator - Enabled) => C:\Users\Michiyo

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.30 - GIGABYTE)
µTorrent (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers)
ACP Application (Version: 2015.1204.1152.59 - Advanced Micro Devices, Inc.) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\{C1F3739C-D31D-4062-8788-29261C4A2A68}) (Version: 12.2.4.194 - Adobe Systems, Inc)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.0 - Sereby Corporation)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 6.7.9.0 - SlySoft)
ASUS Turbo Engine v1.7 (HKLM-x32\...\ASUS Turbo Engine_is1) (Version:  - ASUS)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
aTube Catcher Version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
AutoGreen B12.1220.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.1220.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AVG (HKLM\...\AvgZen) (Version: 1.82.2.30772 - AVG Technologies)
AVG (Version: 16.101.7752 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4649 - AVG Technologies) Hidden
AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.52.2.34122 - AVG Technologies)
AVG PC TuneUp (x32 Version: 16.52.2 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.101.7752 - AVG Technologies)
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.3.4.122 - AVG Technologies)
AVG Zen (Version: 1.82.2 - AVG Technologies) Hidden
BlueStacks App Player (HKLM-x32\...\{D7E3588F-25E6-4A93-8B1C-596F7951CA38}) (Version: 0.10.7.5601 - BlueStack Systems, Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Creative Live! Cam Video IM/Video Chat (VF0540) (1.01.03.00) (HKLM\...\Creative VF0540) (Version:  - )
Creative Live! Central (HKLM-x32\...\Creative Live! Central) (Version: 1.00 - Creative Technology Limited)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.2014 - CyberLink Corp.)
CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3625 - CyberLink Corp.)
CyberLink PowerDirector 11 (Version: 11.0.0.3625 - Ihr Firmenname) Hidden
CyberLink PowerDirector 11 Content Pack Essential (HKLM-x32\...\InstallShield_{03AD770A-1530-437E-967F-ADD4E5B23164}) (Version: 11 - CyberLink Corp.)
CyberLink PowerDirector 11 Content Pack Premium (HKLM-x32\...\InstallShield_{37672760-7930-4911-9685-227E29AE2C55}) (Version: 11 - CyberLink Corp.)
CyberLink WaveEditor 2 (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0.3206 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020) (Version:  - )
Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020) (Version:  - )
DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dragonball Xenoverse Incl. Update 7 MULTi2 1.0 (HKLM-x32\...\Dragonball Xenoverse Incl. Update 7 MULTi2 1.0) (Version:  - )
DVDFab 9.1.8.5 (24/01/2015) (HKLM-x32\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)
Easy Tune 6 B13.0125.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B13.0125.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
F4100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F4100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
FileZilla Client 3.17.0 (HKLM-x32\...\FileZilla Client) (Version: 3.17.0 - Tim Kosse)
FMW 1 (Version: 1.122.3 - AVG Technologies) Hidden
Free NicoVideo Download (HKLM-x32\...\Free NicoVideo Download_is1) (Version: 1.0.25.1117 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.26.37 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
IM Lock (HKLM-x32\...\IMLock) (Version:  - Comvigo, Inc.)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)
Java 8 Update 102 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Leawo Blu-ray Player version  1.9.1.4 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.9.1.4 - leawo Software)
Manager (x32 Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 31.0.1889.99 (HKLM-x32\...\Opera 31.0.1889.99) (Version: 31.0.1889.99 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.3.0 - pdfforge GmbH)
PowerDirector (Version: 11.0 - Ihr Firmenname) Hidden
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Stellarium 0.13.3 (HKLM\...\Stellarium_is1) (Version: 0.13.3 - Stellarium team)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.45862 - TeamViewer)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Trust tablet driver (HKLM\...\RmTablet) (Version: 5.01 - )
Ulead PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 1.00.0000 - Corel)
Ulead PhotoImpact X3 (x32 Version: 1.00.0000 - Corel) Hidden
Unity Web Player (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1262878346-956153297-733536101-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {05F213C0-8C4B-4FA4-82DA-1EEB9D4D3080} - System32\Tasks\{1A9A6131-380F-4468-B9CE-9CB2C1E842E5} => pcalua.exe -a C:\Users\Michiyo\AppData\Roaming\omiga-plus\UninstallManager.exe -c  -ptid=smt <==== ACHTUNG
Task: {114F22A2-008C-4777-A2C0-39BF9609C446} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {156382D6-023F-4200-818B-A8C53B69CD19} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {1A4A388B-F3AB-4AC7-B9A6-669C6008A48D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {1C4978E1-2E14-4A7A-BC9C-758E656E4656} - \Norton Internet Security\Norton Error Analyzer -> Keine Datei <==== ACHTUNG
Task: {1DEA7791-1707-4D85-BF6D-D02ACACA92EC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {25938094-632A-4E2E-8C88-2856D095BEBF} - System32\Tasks\TweakBit\FixMyPC\Start FixMyPC оn logon => C:\Program Files (x86)\TweakBit\FixMyPC\FixMyPC.exe <==== ACHTUNG
Task: {2A0BC7CA-71EA-4564-8D16-0AD4D006FFF5} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {2B3BBE82-93F6-42D2-96E9-0D7F95A78A30} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {30E18F1A-840E-493F-8C2A-A0562A662BB2} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2016-06-17] (Symantec Corporation)
Task: {3F457ABC-9367-4B7A-AB11-BBDFE4017628} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {40E7B9D3-FE28-4702-B207-46CA68F181B1} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {4D01937F-EC23-4931-A1C1-6B87C463F2A5} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {4E44534B-1E72-48D6-A063-A08E0E920281} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {50F00039-E0F3-49B0-922B-C5A6C9330F08} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {57E85502-A525-4DAB-89C7-46C9B6DFEC65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {5833E409-3661-4B4C-B954-201CBCB3EB7D} - System32\Tasks\MichiyoNobbleAbsorbsV2 => Rundll32.exe NonrealisticPredefining.dll,main 7 1 <==== ACHTUNG
Task: {5A73ADF3-9DC8-41A2-B2EA-261BA2BF6B5F} - \Norton Internet Security\Norton Autofix -> Keine Datei <==== ACHTUNG
Task: {5FCAE671-3B9B-4E62-A9B4-11AA571E0E37} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6237CAC7-95D3-40D3-B9D6-6E077B097F39} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-27] (Adobe Systems Incorporated)
Task: {63566AF3-8C0F-451C-A91F-A4D4F1517C3D} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2016-08-19] (AVG Technologies CZ, s.r.o.)
Task: {6CF5E4AB-2BE4-4FAD-94BC-D7F1FF8E6BB2} - \Norton Internet Security\Norton Error Processor -> Keine Datei <==== ACHTUNG
Task: {73C2C45F-6FBE-4AA2-A153-D20B51FB945C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {78A1B497-0AE3-4BEB-BAC5-4B0F0834FF38} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {882B1AC2-CD97-408D-9B9A-F363612D003D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-26] (Microsoft Corporation)
Task: {88C74DEC-81D9-4D55-A994-75A890B64031} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {8C83C740-F7D0-48D7-AF62-2F37C5647466} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {8E71E3D0-2229-4D0F-B27D-7850216D032B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {90FB9E3A-4B05-4D38-9AB0-11680FD3CBBC} - System32\Tasks\AdobeAAMUpdater-1.0-Michiyo-PC-Michiyo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {93809E8D-BB23-4EEB-820D-B1038C55C50A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {9457E5B4-5BE3-4414-A28F-15283228C6A7} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {99957B8C-4043-4E0B-A914-B718431B4C7F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {9A9FED19-87AD-437F-8FB4-6F45611583C1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {9D2AB2E1-52CE-4CA1-B679-0F669C197FCC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {9D5B28AB-351C-43D9-A864-101793D47D0C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {A2462474-1AE8-4826-844B-F64E50DD95B2} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {A413446E-0712-47A0-847D-9C734E4E630C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {AA0AD042-E156-4899-8EAF-A907A006AFE4} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {AA690441-0189-4210-8C48-4857BBE1D7F2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {C0206B5E-CA90-4063-8AD7-2F284EC041AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {CCEFE2EE-FD56-483C-9D3A-21EC8CEF3FCB} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2015-12-04] (Advanced Micro Devices, Inc.)
Task: {CFB5EFD0-3189-4BD1-97C9-52182EE4ABBA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {D7BB176A-0F3D-4ED5-9858-BA65E1A028A1} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D7F60755-A8DE-4410-A10B-6E2B64ED5DC0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-11] (Microsoft Corporation)
Task: {D81E9C19-3B27-4E71-B75F-BD8E87F12E37} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)
Task: {D96D743A-70BF-418E-95D0-77B4D1E4E08B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {E77A538F-F474-412E-AFE1-F0E2124E2489} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {EEE72BC1-DBA0-4589-B26A-F6DA943FC712} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F5E89F4E-0776-4E82-9333-7DD6C14DD704} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {F849ADF7-109E-4E9E-976D-6E53D206242C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {F9F3025F-A4E1-4A71-B5B0-7EF73B9DD3DC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {FC29C333-5ADA-498F-B64B-5C20E950F184} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://isearch.omiga-plus.com/?type=sc&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-08-27 12:31 - 2016-08-27 12:29 - 00980040 ____N () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2016-01-22 14:53 - 2012-10-19 12:01 - 00581120 _____ () C:\WINDOWS\system32\atwtusb.exe
2014-11-17 20:32 - 2012-12-21 11:42 - 00390672 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2016-06-24 12:51 - 2016-06-24 12:51 - 00138752 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-08-26 11:09 - 2016-08-26 11:09 - 01864384 _____ () C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2014-05-01 16:13 - 2014-05-01 16:13 - 00470016 _____ () C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll
2016-04-22 15:15 - 2016-04-22 15:15 - 00052912 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2015-12-21 16:23 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-13 10:15 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-07-13 10:13 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-13 10:13 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-13 10:13 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-13 10:13 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-01-22 14:53 - 2012-09-10 14:54 - 03593728 _____ () C:\Windows\System32\AtwtusbIcon.exe
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-08-27 12:32 - 2016-08-27 12:29 - 02178120 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
2015-11-19 13:56 - 2015-11-17 15:34 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-08-26 11:09 - 2016-08-26 11:09 - 01383616 _____ () C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\ClientTelemetry.dll
2014-05-01 16:15 - 2014-05-01 16:15 - 00463360 _____ () C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll
2016-08-09 08:20 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-09 08:20 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
2016-03-11 18:37 - 2016-04-08 18:54 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1262878346-956153297-733536101-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michiyo\Desktop\01082016\231041.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\Services: SProtection => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML.lnk => C:\Windows\pss\IML.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML64.lnk => C:\Windows\pss\IML64.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: Power2GoExpress8 => "C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
HKLM\...\StartupApproved\Run32: => "Live! Central"
HKLM\...\StartupApproved\Run32: => "FileZilla Server Interface"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "AvgUi"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "AnyDVD"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "icq"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_9777924208C03F797011CE1DAB92CB56"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "Personal ID"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{D0FBAFBD-0C72-4261-A5E0-B5ECB2EB6EC8}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{E7CBC7D0-F0F2-4876-8985-C348676E853C}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{6004C78D-ABFB-4116-B0D6-A1A574D92520}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{02E44320-95BD-4B1B-997F-B80AD473D6E0}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{9F2C7241-816D-4F77-B075-DCFBF6159026}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B3D42658-1286-4DCA-A59C-9B3CDF05CA90}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{8436D99B-5C5D-4FC2-8839-DAA7AE3DB3FC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E646E7D0-5D5B-4EEC-BB7E-AEFDB51777F8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3D453ED9-496F-400A-86B0-EB0553854E09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8FFD106B-08E5-47DB-8900-B6298CCDD4C5}] => (Allow) LPort=2869
FirewallRules: [{C4405D1C-BC91-4C20-83AE-3D41523A4ADE}] => (Allow) LPort=1900
FirewallRules: [{6338CFAF-E4B1-497E-95E9-81813A677419}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{4C09832E-4F03-4D28-8DFE-C87B1FCC8C4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C5913D20-818C-4863-AF82-EB6D927CFAEC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{4DA5816D-9F79-419B-882A-AE878A51BCB8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{18346353-AB38-47B0-A2AE-8EA98C08E9D1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{19D7A7E7-FFB2-44C6-B467-70B7447D79B1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{4F0C38F4-E147-4B2E-A41F-13ACFD66846C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{0D273B1E-0510-4D4C-846F-6897007891B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{9EA3948C-015A-41DE-8A52-7E745A26D93F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{66BFDCC1-C966-409A-9275-EC456450877D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{F8102547-AAE8-4047-B31C-2526E4DCE2AD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{7CEB103D-4F3E-4FB5-B937-529B17142D07}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{E006F2C7-201B-45B2-864A-4D0BB6B2565B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{2BB1C4E2-C3A5-43A4-8314-B9A78AE17FF6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{C6459F07-FF33-4D00-ABB9-3DE2D77EDE84}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [TCP Query User{4C3FED9B-A0AC-495A-88FF-2EF1C65D662A}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{EA8A8D48-F52E-4B0F-928A-8569189F3E63}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{18FC0646-1B06-4EEB-AA7F-17C9AEEB1EAF}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3AD55A9F-304A-42C1-BC01-DD5D7B57B3C9}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{26D33A50-2DD0-4ACC-AD51-2FEDA1348156}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6EBD68AE-6A13-4F28-A6A6-EC1C61123163}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B464FBBC-8487-499E-B0F6-883EAF4BE6ED}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe
FirewallRules: [UDP Query User{E5F2ACE9-652E-4E32-ABB6-0A30EF8ED3D8}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe
FirewallRules: [{04D296A4-0F50-471C-853F-AC0936BBA54B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{470C85BD-8FD9-4B98-B572-F643C9D04ADB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{200ED56F-AD5A-4313-9EAF-59976246ABDE}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{734CBD21-7773-43C9-9DEE-E9E506E6E10B}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{3F4F6F8D-A1B3-430A-BCD4-85F0825107D6}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{74B5BF7E-FB48-4F62-80C2-EBE4C931B8C7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{FC923AFA-D2A7-494A-B507-47EB9E3DAA60}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{FD9A1542-6144-4842-A440-53C9A38EA97A}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{69204468-35D6-4012-9E88-EC1738F49588}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe

==================== Wiederherstellungspunkte =========================

28-08-2016 15:39:55 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/29/2016 10:20:45 AM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (788) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 10:20:45 AM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (788) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 10:20:15 AM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (1392) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 10:20:15 AM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (1392) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 10:19:45 AM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (7028) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 10:19:45 AM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (7028) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 10:19:15 AM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (7160) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 10:19:15 AM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (7160) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 10:18:45 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.

Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)

Error: (08/29/2016 10:18:45 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung

Details:
        Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an.  (HRESULT : 0x80040d06) (0x80040d06)


Systemfehler:
=============
Error: (08/29/2016 10:20:45 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1286 Mal passiert.

Error: (08/29/2016 10:20:45 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126

Error: (08/29/2016 10:20:15 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1285 Mal passiert.

Error: (08/29/2016 10:20:15 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126

Error: (08/29/2016 10:20:00 AM) (Source: DCOM) (EventID: 10005) (User: Michiyo-PC)
Description: Fehler "1053" in DCOM, als der Dienst "WSearch" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (08/29/2016 10:20:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (08/29/2016 10:20:00 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (08/29/2016 10:19:55 AM) (Source: DCOM) (EventID: 10005) (User: Michiyo-PC)
Description: Fehler "1053" in DCOM, als der Dienst "WSearch" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{B52D54BB-4818-4EB9-AA80-F9EACD371DF8}

Error: (08/29/2016 10:19:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (08/29/2016 10:19:55 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.


CodeIntegrity:
===================================
  Date: 2016-08-27 12:54:29.036
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-27 10:53:11.017
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.998
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.976
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.939
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.920
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.882
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.828
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.808
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.785
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-6300 Six-Core Processor
Prozentuale Nutzung des RAM: 39%
Installierter physikalischer RAM: 8189.53 MB
Verfügbarer physikalischer RAM: 4972.27 MB
Summe virtueller Speicher: 16381.53 MB
Verfügbarer virtueller Speicher: 12936.19 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:918.97 GB) (Free:294.16 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0049F0A3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=919 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=11 GB) - (Type=27)

==================== Ende von Addition.txt ============================

Deathkid535 29.08.2016 15:12
Hi,

Schritt # 1: AdwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt # 2: FRST

Bitte noch ein frisches FRST-Log.



Schritt # 3: Bitte Posten
  • Das Log von AdwCleaner
  • Das frische FRST-Log

DanielaS 29.08.2016 16:28
ADW Cleaner
Code:
# AdwCleaner v6.010 - Bericht erstellt am 29/08/2016 um 17:16:27
# Aktualisiert am 12/08/2016 von ToolsLib
# Datenbank : 2016-08-28.2 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Michiyo - MICHIYO-PC
# Gestartet von : C:\Users\Michiyo\Desktop\AdwCleaner_6.010.exe
# Modus: Löschen
# Unterstützung : https://toolslib.net/forum



***** [ Dienste ] *****

[-] Dienst gelöscht: vToolbarUpdater40.3.4
[-] Dienst gelöscht: GlobalUpdater
[-] Dienst gelöscht: SProtection
[-] Dienst gelöscht: WtuSystemSupport


***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Users\Michiyo\AppData\Local\avg web tuneup
[-] Ordner gelöscht: C:\Users\Michiyo\AppData\Roaming\OpenCandy
[-] Ordner gelöscht: C:\Users\Michiyo\AppData\Roaming\Yahoo!\Companion
[-] Ordner gelöscht: C:\Program Files\avg web tuneup
[-] Ordner gelöscht: C:\Program Files\Common Files\AVG Secure Search
[-] Ordner gelöscht: C:\WINDOWS\SysNative\Tasks\TweakBit
[#] Ordner mit Neustart gelöscht: C:\WINDOWS\SysNative\Tasks\TweakBit
[-] Ordner gelöscht: C:\ProgramData\apn
[-] Ordner gelöscht: C:\ProgramData\TweakBit
[-] Ordner gelöscht: C:\ProgramData\avg web tuneup
[-] Ordner gelöscht: C:\Program Files (x86)\Iminent
[-] Ordner gelöscht: C:\Program Files (x86)\avg web tuneup
[-] Ordner gelöscht: C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Ordner gelöscht: C:\Program Files (x86)\Common Files\IMGUpdater
[-] Ordner gelöscht: C:\Program Files (x86)\Common Files\Umbrella
[-] Ordner gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn


***** [ Dateien ] *****

[-] Datei gelöscht: C:\WINDOWS\SysNative\roboot64.exe
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}.xpi
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\extensions\Avg@toolbar.xpi
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml
[-] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml
[-] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\yahoo! powered.xml
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\StartWeb.xml
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ehhlaekjfiiojlddgndcnefflngfmhen_0.localstorage
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage-journal
[-] Datei gelöscht: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jdkokpcldhneihjdhigfjmoeojkdcbmg_0.localstorage


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\IePluginServices
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\SProtection
[-] Schlüssel gelöscht: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WindowsMangerProtect
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YMERemote.YMECompPlugin
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\YMERemote.YMECompPlugin.1
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\{7D831388-D405-4272-9511-A07440AD2927}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{F51C15D4-3D0A-4DBA-A095-EBCC09F24DA2}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[-] Wert gelöscht: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Iminent
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\OCS
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\PRODUCTSETUP
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Softonic
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\SupHpUISoft
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Yahoo\Companion
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Yahoo\YFriendsBar
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\csastats
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\AppDataLow\Software\Yahoo\Companion
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Iminent
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\OCS
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Softonic
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\SupHpUISoft
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Yahoo\Companion
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Yahoo\YFriendsBar
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\csastats
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Iminent
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Schlüssel gelöscht: HKLM\SOFTWARE\IMGUPDATER
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Iminent
[-] Schlüssel gelöscht: HKLM\SOFTWARE\omiga-plusSoftware
[-] Schlüssel gelöscht: HKLM\SOFTWARE\SupDp
[-] Schlüssel gelöscht: HKLM\SOFTWARE\SupTab
[-] Schlüssel gelöscht: HKLM\SOFTWARE\supWindowsMangerProtect
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Umbrella
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Yahoo\Companion
[-] Schlüssel gelöscht: HKLM\SOFTWARE\AVG Tuneup
[#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\SUPDP
[#] Schlüssel mit Neustart gelöscht: HKLM\SOFTWARE\SUPTAB
[-] Schlüssel gelöscht: HKLM\SOFTWARE\TWEAKBIT
[-] Daten  wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Daten  wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten  wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten  wiederhergestellt: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten  wiederhergestellt: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten  wiederhergestellt: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten  wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten  wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Daten  wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Daten  wiederhergestellt: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
[-] Schlüssel gelöscht: HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Daten  wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A33DB9FD-7A8A-496E-92D3-9CFCF9D9E1C9}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Daten  wiederhergestellt: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\isearch.omiga-plus.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\omiga-plus.com
[-] Wert gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [vProt]
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Schlüssel gelöscht: HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\datamngrCoordinator.exe
[-] Schlüssel gelöscht: HKCU\Software\Google\Chrome\Extensions\chfdnecihphmhljaaejmgoiahnihplgn
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej
[-] Schlüssel gelöscht: HKCU\Software\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej


***** [ Browser ] *****

[-] Firefox Einstellungen bereinigt: "browser.search.defaultenginename" -  "Yahoo! Powered"
[-] Firefox Einstellungen bereinigt: "browser.search.selectedEngine" -  "Yahoo! Powered"
[-] Firefox Einstellungen bereinigt: "browser.startup.homepage" -  "hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome"
[-] [omiga-plus] [Search Provider] Gelöscht: omiga-plus
[-] [mystartsearch] [Search Provider] Gelöscht: mystartsearch
[-] [de.search.yahoo.com] [Search Provider] Gelöscht: de.search.yahoo.com
[-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://start.mysearchdial.com/?f=1&a=dsites_14_12_ch&cd=2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0SzztCtBtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyBtCzy0A0EyD0ByEtG0DzztA0EtG0Azz0EtAtGyD0F0EzztGyC0FyBtCtD0BtAtB0DtCtByC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StAyC0E0DyDtC0F0DtG0EtC0BtBtGyE0EyC0DtGzztD0AyEtGtAtA0E0F0BzyyC0BzyyDyDyE2Q&cr=1732920521&ir=
[-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://www.mystartsearch.com/?type=hp&ts=1429528029&from=cor&uid=HGSTXHTS545050A7E680_TM8514TFHB0T4RHB0T4RX
[-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://www.yessearches.com/?mode=nnnb&ptid=dam&uid=53A9CC2763490B4B37942D2A338B992E&v=20160108&ts=AHEpAXYoAH8nAE..
[-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: chfdnecihphmhljaaejmgoiahnihplgn
[-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: pilplloabdedfmialnfchjomjmpjcoej
[-] [C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default] [homepage] Gelöscht: hxxp://search.conduit.com/?ctid=CT3324066&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPA51CF372-557D-48F6-A8C8-1B1291C8F399&SSPV=


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [18992 Bytes] - [29/08/2016 17:16:27]
C:\AdwCleaner\AdwCleaner[R0].txt - [41053 Bytes] - [13/03/2014 12:37:27]
C:\AdwCleaner\AdwCleaner[R1].txt - [4594 Bytes] - [22/03/2014 20:48:19]
C:\AdwCleaner\AdwCleaner[S0].txt - [35124 Bytes] - [13/03/2014 12:39:56]
C:\AdwCleaner\AdwCleaner[S1].txt - [3267 Bytes] - [22/03/2014 20:51:46]
C:\AdwCleaner\AdwCleaner[S2].txt - [19122 Bytes] - [29/08/2016 17:12:19]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [19434 Bytes] ##########
FRST

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-08-2016
durchgeführt von Michiyo (Administrator) auf MICHIYO-PC (29-08-2016 17:25:51)
Gestartet von C:\Users\Michiyo\Desktop
Geladene Profile: Michiyo (Verfügbare Profile: Michiyo & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
() C:\Windows\System32\atwtusb.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Windows\System32\atwtusb.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
() C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
() C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\System32\AtwtusbIcon.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\CNext\CCCSlim\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\CNext\CCCSlim\CCC.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.486_none_7640e086266ea227\TiWorker.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [AtwtusbIcon] => C:\WINDOWS\system32\AtwtusbIcon.exe [3593728 2012-09-10] ()
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Live! Central] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe [438381 2009-06-05] (Creative Technology Ltd.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-12] (Raptr, Inc)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [204560 2016-08-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2178120 2016-08-29] ()
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [4886136 2011-03-07] (SlySoft, Inc.)
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-01-06]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2014-12-13]

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{86916325-c1ab-4869-a177-2fbf32564dab}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130859355493535952&GUID=9EC4EDB1-5F00-4682-8EB6-D81E4A9B890C
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?pc=UE01&ocid=UE01DHP
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {F66BFC25-B41D-4A17-A66C-2D338F452675} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL =
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {6ECB41EC-A7AC-4224-8D1E-44C44B4639E2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AEEDE363-46A7-4B7A-9092-EEDB31E079DE} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C2EE27DF-5090-4D18-8930-B7403474FB06} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C8ABDA6A-F499-4674-8C39-FDE573ABBEDE} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {D16EFC19-2554-4D94-B6A1-7B098BFCBD25} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll => Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-29] (AVG)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation)
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll => Keine Datei
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-29] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll Keine Datei
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll Keine Datei
Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH)
IE Session Restore: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> ist aktiviert.
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> hxxp://go.web.de/tb/ie_startpage

FireFox:
========
FF ProfilePath: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default
FF SelectedSearchEngine: Yahoo! Powered
FF Homepage: hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_lvrms_16_27&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
FF Keyword.URL: user_pref("keyword.URL", true);
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-27] ()
FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-27] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.4\\npsitesafety.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1262878346-956153297-733536101-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Michiyo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
FF user.js: detected! => C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\user.js [2015-03-18]
FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml [2016-08-29]
FF Extension: (AVG Web TuneUp) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\avg@toolbar.xpi [2016-08-29]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
FF Extension: (Norton Identity Safe) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon [2016-08-12]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-03-06] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR Profile: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Unblock embedded Youtube videos) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aajjpnimaghinaladfeongfnojpooegf [2016-03-11]
CHR Extension: (Google Drive) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (AVG Secure Search) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2016-08-29]
CHR Extension: (Google-Suche) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Docs Offline) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Proxmate) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2016-08-25]
CHR Extension: (Norton Identity Safe) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-03-18]
CHR Extension: (Skype) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-08-12]
CHR Extension: (Pink Lake) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkikaplkcnkehkocaeaddjiicklloajh [2016-03-12]
CHR Extension: (TumTaster) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2016-03-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01]
CHR Extension: (Google Mail) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-19]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden>
CHR HKLM\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1262878346-956153297-733536101-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (YouTube Unblocker) - C:\Users\Michiyo\AppData\Roaming\Opera Software\Opera Stable\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2016-05-10]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-06-24] () [Datei ist nicht signiert]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.)
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.)
S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-11-17] (Digital Wave Ltd.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (HP Inc.)
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.7.1.32\NIS.exe [289080 2016-08-16] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-03-29] (Electronic Arts)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-12-21] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4878096 2016-08-19] (AVG Technologies CZ, s.r.o.)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
R2 vToolbarUpdater40.3.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe [1347144 2016-08-29] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
R2 WTService; C:\WINDOWS\system32\atwtusb.exe [581120 2012-10-19] () [Datei ist nicht signiert]
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980040 2016-08-29] ()

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [305392 2016-01-22] (Advanced Micro Devices)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-09-18] (Advanced Micro Devices)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [313088 2016-07-20] (AVG Technologies CZ, s.r.o.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20150521.001\BHDrvx64.sys [1640152 2015-06-04] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1607010.020\ccSetx64.sys [174328 2016-06-02] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-08-07] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-08-07] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-11-10] (Disc Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-06-16] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-06-16] (Symantec Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20150519.100\IDSVia64.sys [684248 2015-06-04] (Symantec Corporation)
S3 INIDVD; C:\Windows\System32\drivers\inidvd.sys [19488 2012-11-02] (Initio Corporation)
R3 moufiltr; C:\Windows\System32\drivers\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 RLDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\livecamv.sys [49664 2007-02-05] ()
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1607010.020\SRTSP64.SYS [773360 2016-08-10] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1607010.020\SRTSPX64.SYS [48888 2016-06-02] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NISx64\1607010.020\SYMEFASI64.SYS [1627352 2016-06-02] (Symantec Corporation)
S4 SymELAM; C:\Windows\system32\drivers\NISx64\1607010.020\SymELAM.sys [24192 2015-07-11] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-08-11] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1607010.020\Ironx64.SYS [291056 2016-06-02] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1607010.020\SYMNETS.SYS [567536 2016-06-02] (Symantec Corporation)
S3 TabletFilter; C:\Windows\System32\drivers\TabletFilter.sys [7680 2012-08-15] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.)
R3 V0540Dev; C:\Windows\system32\DRIVERS\V0540Vid.sys [321376 2009-06-15] (Creative Technology Ltd.)
R3 vhidmini; C:\Windows\System32\drivers\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\EX64.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-29 17:25 - 2016-08-29 17:26 - 00035882 _____ C:\Users\Michiyo\Desktop\FRST.txt
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AVG Web TuneUp
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-08-29 17:15 - 2016-08-29 17:15 - 00003738 _____ C:\WINDOWS\System32\Tasks\AVG-SSU_0516piz_DELETE
2016-08-29 17:15 - 2016-08-29 17:15 - 00003180 _____ C:\WINDOWS\System32\Tasks\AVG-SSU_0516piz
2016-08-29 17:15 - 2016-08-29 17:15 - 00000000 ____D C:\ProgramData\Avg_Update_0516piz
2016-08-29 17:07 - 2016-08-29 17:08 - 03826240 _____ C:\Users\Michiyo\Desktop\AdwCleaner_6.010.exe
2016-08-29 10:38 - 2016-08-29 10:47 - 00000000 ____D C:\Users\Michiyo\Desktop\HIGH & LOW THE LIVE
2016-08-29 10:17 - 2016-08-29 17:25 - 00000000 ____D C:\FRST
2016-08-29 10:17 - 2016-08-29 10:17 - 02396672 _____ (Farbar) C:\Users\Michiyo\Desktop\FRST64.exe
2016-08-28 01:14 - 2016-08-28 17:28 - 2613934989 _____ C:\Users\Michiyo\Downloads\[SOFCJ-Raws] Dragon Ball Z Resurrection F – Future Trunks Special Edition Extended (SUT 1280x720 x264 10bit AAC).mp4
2016-08-27 12:49 - 2016-08-27 12:49 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Michiyo\Documents\AVG_Protection_Free_1606.exe
2016-08-27 11:18 - 2016-08-27 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-08-27 11:18 - 2016-08-27 11:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AVG
2016-08-27 11:17 - 2016-08-27 11:17 - 00000000 ___HD C:\$AVG
2016-08-27 11:16 - 2016-08-29 17:19 - 00000000 ____D C:\ProgramData\MFAData
2016-08-27 11:16 - 2016-08-27 11:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\MFAData
2016-08-27 11:00 - 2016-08-29 16:54 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-08-27 11:00 - 2016-08-27 11:00 - 01198049 _____ C:\WINDOWS\unins000.exe
2016-08-27 11:00 - 2016-08-27 11:00 - 00010826 _____ C:\WINDOWS\unins000.dat
2016-08-27 11:00 - 2016-08-27 11:00 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-08-27 11:00 - 2016-08-27 11:00 - 00001409 _____ C:\AiOLog.txt
2016-08-27 11:00 - 2016-08-27 11:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2016-08-27 11:00 - 2016-01-28 18:44 - 01261568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll
2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll
2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll
2016-08-27 11:00 - 2015-07-10 10:51 - 00456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll
2016-08-27 11:00 - 2015-07-08 09:29 - 03477818 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll
2016-08-27 11:00 - 2014-01-31 02:14 - 01055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll
2016-08-27 11:00 - 2014-01-25 13:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll
2016-08-27 11:00 - 2013-12-23 14:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomctl.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomct2.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshflxgd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\system32\comct332.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatgrd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msflxgrd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatlst.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabctl32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\system32\richtx32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dblist32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mci32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmask32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\system32\comct232.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinet.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstdfmt.dll
2016-08-27 11:00 - 2013-12-20 00:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswinsck.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomm32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstkprp.dll
2016-08-27 11:00 - 2013-12-20 00:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\system32\picclp32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysinfo.ocx
2016-08-27 11:00 - 2012-06-14 14:36 - 00107520 _____ C:\WINDOWS\system32\zlib1.dll
2016-08-27 11:00 - 2012-04-03 16:11 - 00138752 _____ C:\WINDOWS\system32\libpng15.dll
2016-08-27 11:00 - 2011-10-12 03:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll
2016-08-27 11:00 - 2011-10-01 08:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2016-08-27 11:00 - 2011-10-01 08:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll
2016-08-27 11:00 - 2011-01-12 13:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll
2016-08-27 11:00 - 2011-01-12 13:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll
2016-08-27 11:00 - 2011-01-12 12:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll
2016-08-27 11:00 - 2010-06-27 17:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll
2016-08-27 11:00 - 2010-03-18 20:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdia100.dll
2016-08-27 11:00 - 2008-08-26 06:40 - 00162304 _____ C:\WINDOWS\system32\libpng13.dll
2016-08-27 11:00 - 2007-02-01 22:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll
2016-08-27 11:00 - 2007-02-01 19:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll
2016-08-27 11:00 - 2007-01-30 22:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll
2016-08-27 11:00 - 2006-08-26 00:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll
2016-08-27 11:00 - 2006-08-26 00:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll
2016-08-27 11:00 - 2006-08-25 23:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll
2016-08-27 11:00 - 2005-05-06 13:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll
2016-08-27 11:00 - 2005-01-20 19:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll
2016-08-27 11:00 - 2002-01-05 05:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll
2016-08-27 11:00 - 1996-01-12 03:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll
2016-08-27 11:00 - 1996-01-12 03:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll
2016-08-27 11:00 - 1994-11-17 13:00 - 00210944 _____ C:\WINDOWS\system\msvcrt10.dll
2016-08-27 11:00 - 1993-05-11 19:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll
2016-08-27 11:00 - 1992-10-21 00:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll
2016-08-27 11:00 - 1991-05-10 01:00 - 00271264 _____ C:\WINDOWS\system\vbrun100.dll
2016-08-27 10:57 - 2016-08-27 10:57 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Sun
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\ProgramData\Oracle
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Program Files\Java
2016-08-27 10:53 - 2016-08-27 11:01 - 00632904 _____ (O&O Software GmbH) C:\Users\Michiyo\Documents\OOSU10.exe
2016-08-27 10:49 - 2016-08-27 10:49 - 00203114 _____ C:\Users\Michiyo\Documents\OOSU10.zip
2016-08-27 10:48 - 2016-08-27 10:53 - 377130076 _____ (Sereby Corporation) C:\Users\Michiyo\Documents\aio-runtimes_v2.3.8.exe
2016-08-26 16:16 - 2016-08-26 16:16 - 00000000 ____D C:\$SysReset
2016-08-26 15:34 - 2016-08-26 15:34 - 00000017 _____ C:\Users\Michiyo\AppData\Local\resmon.resmoncfg
2016-08-26 13:18 - 2016-08-26 15:24 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-08-26 11:10 - 2016-08-26 11:10 - 00003340 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-08-26 10:29 - 2016-08-26 10:29 - 00003404 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-08-26 10:28 - 2016-08-26 10:28 - 00280764 _____ C:\WINDOWS\Minidump\082616-97187-01.dmp
2016-08-23 09:34 - 2012-01-01 17:18 - 00000000 ____D C:\Users\Michiyo\Desktop\[Yaoi Fangirl] Lent - Death Note Doujin
2016-08-22 17:22 - 2016-08-22 18:07 - 00327998 _____ C:\Users\Michiyo\Documents\Digimon Adventure - Leb deine Träume.pds
2016-08-20 00:00 - 2016-08-20 00:00 - 79449510 _____ C:\Users\Michiyo\Desktop\『HiGH&LOW THE MOVIE』Best Action Scenes Special Trailer.mp4
2016-08-13 10:23 - 2016-08-13 10:26 - 00000000 ____D C:\Users\Michiyo\Documents\Die Sims 4
2016-08-12 18:08 - 2016-08-12 18:11 - 42013312 _____ (Skype Technologies S.A.) C:\Users\Michiyo\Documents\SkypeSetupFull.exe
2016-08-12 16:58 - 2016-08-26 10:27 - 739168023 _____ C:\WINDOWS\MEMORY.DMP
2016-08-12 11:13 - 2016-08-13 19:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Die Sims 4
2016-08-12 09:02 - 2016-08-12 09:05 - 00002503 _____ C:\Users\Michiyo\Documents\Norton Internet Security.lnk
2016-08-12 01:07 - 2016-08-12 01:07 - 08892696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 08738920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 07115928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00479368 _____ C:\WINDOWS\system32\amdmiracast.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00164280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00159088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00154920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00138688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00138176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00123120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00123104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 48819200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 38266368 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 32555512 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 27489280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 26639360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 21641216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 15729152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 14320128 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 08830456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 08627704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 07076352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02376704 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02286584 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02147328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 01837568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00883192 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00751616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00627192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00459776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00402944 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00350208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00292352 _____ C:\WINDOWS\system32\dgtrayicon.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00287744 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00275968 _____ C:\WINDOWS\system32\GameManager64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00270336 _____ C:\WINDOWS\system32\clinfo.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00268792 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00249336 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00241152 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00234496 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00231424 _____ C:\WINDOWS\system32\atieah64.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00222208 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00209408 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00202744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00201728 _____ C:\WINDOWS\system32\amdhdl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00181760 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00176640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00159736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00137208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00130560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00123896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00118784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00113664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00111616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00104448 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00083960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00079864 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00073216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00069632 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00068608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00068096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00067584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00066560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00060920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00055800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00021496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2016-08-11 14:38 - 2016-08-11 14:38 - 00000000 ____D C:\Users\Michiyo\Documents\Electronic Arts
2016-08-11 14:26 - 2016-08-28 19:05 - 00002187 _____ C:\Users\Michiyo\Desktop\Die Sims 4 Digital Deluxe Edition 64 Bit.lnk
2016-08-11 14:07 - 2016-08-27 12:15 - 00000000 ____D C:\Program Files (x86)\Die Sims 4
2016-08-11 13:58 - 2016-08-11 14:02 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2
2016-08-11 12:39 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-08-11 12:39 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-08-11 12:39 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-08-11 12:39 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-08-11 12:39 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-08-11 12:39 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-08-11 12:39 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-08-11 12:39 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-11 12:39 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-11 12:39 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-08-11 12:39 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-08-11 12:39 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-11 12:39 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-08-11 12:39 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-08-11 12:39 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-08-11 12:39 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2016-08-11 12:39 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-11 12:39 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-08-11 12:39 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-08-11 12:39 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-08-11 12:39 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-08-11 12:39 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-08-11 12:39 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-08-11 12:39 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2016-08-11 12:39 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2016-08-11 12:39 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-11 12:39 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-11 12:39 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-08-11 12:39 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-11 12:39 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-08-11 12:39 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-08-11 12:39 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-11 12:39 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-08-11 12:39 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-11 12:39 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2016-08-11 12:39 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-08-11 12:39 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-11 12:39 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-08-11 12:39 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-08-11 12:39 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-08-11 12:39 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-08-11 12:39 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2016-08-11 12:39 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-08-11 12:39 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-08-11 12:39 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-08-11 12:39 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
2016-08-11 12:39 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-08-11 12:39 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-11 12:39 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-08-11 12:39 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2016-08-11 12:39 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-08-11 12:39 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-08-11 12:39 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2016-08-11 12:39 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-08-11 12:39 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-08-11 12:39 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-08-11 12:39 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-08-11 12:39 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-11 12:38 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-08-11 12:38 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2016-08-11 12:38 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-08-11 12:38 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-08-11 12:38 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-08-11 12:38 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-11 12:38 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-11 12:38 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-08-11 12:38 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-08-11 12:38 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-08-11 12:38 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-08-11 12:38 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-08-11 12:38 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-08-11 12:38 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2016-08-11 12:38 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-08-11 12:38 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-08-11 12:38 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-08-11 12:38 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-11 12:38 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-08-11 12:38 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-11 12:38 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-08-11 12:38 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-08-11 12:38 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-08-11 12:38 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-08-11 12:38 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-08-11 12:38 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-08-11 12:38 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-11 12:38 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-11 12:38 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-08-11 12:38 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-08-11 12:38 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-08-11 12:38 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-08-11 12:38 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-11 12:38 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-08-11 12:38 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-08-11 12:38 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-08-11 12:38 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-08-11 12:38 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-08-11 12:38 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-08-11 12:38 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-08-11 12:38 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-11 12:38 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-11 12:38 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2016-08-11 12:38 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-08-11 12:38 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-11 12:38 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-08-11 12:38 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-11 12:38 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-08-11 12:38 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-11 12:38 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-11 12:38 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-08-11 12:38 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-11 12:38 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-08-11 12:38 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-08-11 12:38 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-08-11 12:38 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-08-11 12:38 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-08-11 12:38 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-11 12:38 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-08-11 11:35 - 2016-08-11 11:46 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2
2016-08-08 12:51 - 2016-08-08 12:53 - 1266484522 _____ C:\Users\Michiyo\Documents\PhotoImpact.13.1.rar
2016-08-07 23:09 - 2016-08-07 23:17 - 529480482 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 054 RAW (THK 1280x720 x264 AAC).mp4
2016-08-07 23:09 - 2016-08-07 23:10 - 389781623 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 053 RAW (THK 1280x720 x264 AAC).mp4
2016-08-06 11:03 - 2016-08-06 11:03 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\29030

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-29 17:25 - 2014-11-08 14:42 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Skype
2016-08-29 17:20 - 2014-11-08 19:05 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-29 17:18 - 2015-12-21 13:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-08-29 17:18 - 2009-07-14 04:34 - 00000555 _____ C:\WINDOWS\win.ini
2016-08-29 17:17 - 2015-12-21 13:18 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-08-29 17:17 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-08-29 17:16 - 2016-07-05 17:34 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-08-29 17:16 - 2014-03-13 12:37 - 00000000 ____D C:\AdwCleaner
2016-08-29 17:15 - 2014-11-11 15:00 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Yahoo!
2016-08-29 16:21 - 2016-04-18 09:31 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AE24DCEB-E6C7-487B-AFB9-782C90AB2FBD}
2016-08-29 16:18 - 2014-11-08 19:05 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-29 15:25 - 2014-11-09 15:20 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AbiSuite
2016-08-29 12:59 - 2014-11-08 15:38 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\vlc
2016-08-29 10:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-08-28 21:06 - 2014-12-03 10:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\uTorrent
2016-08-28 19:05 - 2016-06-11 11:49 - 00002039 _____ C:\Users\Michiyo\Desktop\Dragonball Xenoverse.lnk
2016-08-28 17:57 - 2016-04-04 18:53 - 00000000 ____D C:\Users\Michiyo\Desktop\gucken heute
2016-08-28 12:39 - 2014-11-13 20:23 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Audacity
2016-08-28 10:47 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-08-27 13:06 - 2016-06-05 15:29 - 00000000 ____D C:\WINDOWS\Minidump
2016-08-27 13:06 - 2016-01-06 07:27 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\HpUpdate
2016-08-27 12:52 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AvgSetupLog
2016-08-27 12:34 - 2014-11-12 18:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-27 12:31 - 2014-12-26 18:22 - 00000000 ____D C:\Users\Michiyo\Documents\AnyDVD HD 6.7.9.0 Fimal
2016-08-27 11:20 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-08-27 11:18 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Avg
2016-08-27 11:18 - 2014-11-12 18:13 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\TuneUp Software
2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\ProgramData\Avg
2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\Program Files (x86)\AVG
2016-08-27 11:17 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System
2016-08-27 10:59 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-27 10:59 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-08-27 10:57 - 2015-03-18 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-27 10:56 - 2015-03-18 13:45 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-08-27 10:55 - 2015-03-18 13:45 - 00000000 ____D C:\Program Files (x86)\Java
2016-08-26 16:47 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-08-26 16:16 - 2014-11-12 17:49 - 00000000 ____D C:\Users\Michiyo\AppData\Local\CrashDumps
2016-08-26 13:17 - 2014-11-25 15:51 - 00000000 ____D C:\WINDOWS\pss
2016-08-26 12:45 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Seisei Suruhodo, Aishiteru
2016-08-26 11:25 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Ie Uru Onna
2016-08-26 11:10 - 2015-08-04 11:18 - 00002437 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-26 11:10 - 2015-08-04 11:18 - 00000000 ___RD C:\Users\Michiyo\OneDrive
2016-08-26 10:30 - 2013-12-16 20:32 - 00000000 ____D C:\WINDOWS\system32\Drivers\NISx64
2016-08-25 21:34 - 2014-11-11 20:14 - 00000132 _____ C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs
2016-08-25 16:56 - 2016-03-30 09:53 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2016-08-24 13:18 - 2016-03-11 18:39 - 00002549 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-08-23 07:41 - 2015-05-11 12:42 - 00000000 ____D C:\Users\Michiyo\FanFics - Geschichten
2016-08-21 20:02 - 2016-06-08 11:33 - 00000000 ____D C:\Users\Michiyo\Desktop\Video
2016-08-21 10:27 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\AMD
2016-08-19 16:35 - 2016-03-11 18:39 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe
2016-08-16 20:19 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Suki na Hito ga Iru Koto
2016-08-14 15:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-08-14 01:43 - 2015-12-21 13:21 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-08-14 01:43 - 2015-10-30 20:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat
2016-08-14 01:43 - 2015-10-30 20:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat
2016-08-14 01:43 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-08-13 17:25 - 2015-08-04 11:15 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Packages
2016-08-13 01:07 - 2015-12-21 13:22 - 00000000 ____D C:\Users\Michiyo
2016-08-12 18:11 - 2014-11-08 14:41 - 00000000 ____D C:\ProgramData\Skype
2016-08-12 15:05 - 2014-11-08 19:10 - 00000000 ____D C:\Program Files (x86)\AMD
2016-08-12 15:02 - 2015-12-21 13:17 - 00000000 ____D C:\Program Files\AMD
2016-08-12 14:29 - 2015-07-01 22:23 - 00000000 ____D C:\Users\Michiyo\AppData\Local\JDownloader 2.0
2016-08-12 09:08 - 2015-08-04 11:15 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-08-12 09:05 - 2015-07-15 19:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2016-08-12 09:01 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-12 01:07 - 2016-01-22 14:05 - 07258160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2016-08-12 01:07 - 2016-01-22 14:04 - 00137224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 09340136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 09131736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 01273928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 00152800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 10995344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 10317568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 01547544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 00183952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2016-08-12 01:06 - 2016-01-22 14:00 - 00521728 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2016-08-12 01:06 - 2016-01-22 14:00 - 00287232 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2016-08-12 01:06 - 2016-01-22 13:59 - 01323008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2016-08-12 01:06 - 2015-10-07 17:19 - 26706432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2016-08-12 01:06 - 2015-10-07 17:19 - 00518656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2016-08-11 17:19 - 2013-12-16 20:33 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2016-08-11 17:19 - 2013-12-16 20:33 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2016-08-11 16:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2016-08-11 16:01 - 2013-12-17 10:23 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-08-11 15:53 - 2013-12-17 10:23 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-08-09 08:20 - 2014-11-08 19:05 - 00002483 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-09 08:20 - 2014-11-08 19:05 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-08 22:13 - 2015-01-02 15:06 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-08-08 11:25 - 2014-11-08 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-08-03 21:08 - 2016-03-11 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-08-03 17:31 - 2016-03-06 14:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-07-31 17:30 - 2016-05-19 17:32 - 00000000 ____D C:\Users\Michiyo\Downloads\extracted

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-04 11:23 - 2015-08-04 11:23 - 0000000 _____ () C:\Program Files (x86)\Common Files\AMD
2014-11-11 20:14 - 2016-08-25 21:34 - 0000132 _____ () C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-12-24 02:38 - 2014-12-24 02:38 - 0003584 _____ () C:\Users\Michiyo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-08-26 15:34 - 2016-08-26 15:34 - 0000017 _____ () C:\Users\Michiyo\AppData\Local\resmon.resmoncfg
2014-12-26 19:39 - 2014-12-26 19:39 - 0000040 ___SH () C:\ProgramData\.zreglib
2014-12-26 19:46 - 2014-12-26 19:46 - 0028672 _____ () C:\ProgramData\data.dll
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\data.dll
C:\ProgramData\winiml.dat
C:\Users\Michiyo\VisualBoyAdvance.exe


Einige Dateien in TEMP:
====================
C:\Users\Michiyo\AppData\Local\Temp\libeay32.dll
C:\Users\Michiyo\AppData\Local\Temp\msvcr120.dll
C:\Users\Michiyo\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-08-20 15:54

==================== Ende von FRST.txt ============================

DanielaS 29.08.2016 16:29
Addition

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-08-2016
durchgeführt von Michiyo (29-08-2016 17:26:57)
Gestartet von C:\Users\Michiyo\Desktop
Windows 10 Home Version 1511 (X64) (2015-12-21 11:45:04)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1262878346-956153297-733536101-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1262878346-956153297-733536101-503 - Limited - Disabled)
Gast (S-1-5-21-1262878346-956153297-733536101-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1262878346-956153297-733536101-1003 - Limited - Enabled)
Michiyo (S-1-5-21-1262878346-956153297-733536101-1001 - Administrator - Enabled) => C:\Users\Michiyo

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.30 - GIGABYTE)
µTorrent (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\uTorrent) (Version: 3.4.8.42449 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers)
ACP Application (Version: 2015.1204.1152.59 - Advanced Micro Devices, Inc.) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\{C1F3739C-D31D-4062-8788-29261C4A2A68}) (Version: 12.2.4.194 - Adobe Systems, Inc)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.0 - Sereby Corporation)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 6.7.9.0 - SlySoft)
ASUS Turbo Engine v1.7 (HKLM-x32\...\ASUS Turbo Engine_is1) (Version:  - ASUS)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.7 - Atheros Communications Inc.)
aTube Catcher Version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
AutoGreen B12.1220.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B12.1220.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AVG (HKLM\...\AvgZen) (Version: 1.82.2.30772 - AVG Technologies)
AVG (Version: 16.101.7752 - AVG Technologies) Hidden
AVG 2016 (Version: 16.0.4649 - AVG Technologies) Hidden
AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.52.2.34122 - AVG Technologies)
AVG PC TuneUp (x32 Version: 16.52.2 - AVG Technologies) Hidden
AVG Protection (HKLM\...\AVG) (Version: 2016.101.7752 - AVG Technologies)
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.3.4.122 - AVG Technologies)
AVG Zen (Version: 1.82.2 - AVG Technologies) Hidden
BlueStacks App Player (HKLM-x32\...\{D7E3588F-25E6-4A93-8B1C-596F7951CA38}) (Version: 0.10.7.5601 - BlueStack Systems, Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Catalyst Control Center Next Localization BR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Cheat Engine 6.3 (HKLM-x32\...\Cheat Engine 6.3_is1) (Version:  - Cheat Engine)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Creative Live! Cam Video IM/Video Chat (VF0540) (1.01.03.00) (HKLM\...\Creative VF0540) (Version:  - )
Creative Live! Central (HKLM-x32\...\Creative Live! Central) (Version: 1.00 - Creative Technology Limited)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.0.2014 - CyberLink Corp.)
CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3625 - CyberLink Corp.)
CyberLink PowerDirector 11 (Version: 11.0.0.3625 - Ihr Firmenname) Hidden
CyberLink PowerDirector 11 Content Pack Essential (HKLM-x32\...\InstallShield_{03AD770A-1530-437E-967F-ADD4E5B23164}) (Version: 11 - CyberLink Corp.)
CyberLink PowerDirector 11 Content Pack Premium (HKLM-x32\...\InstallShield_{37672760-7930-4911-9685-227E29AE2C55}) (Version: 11 - CyberLink Corp.)
CyberLink WaveEditor 2 (HKLM-x32\...\InstallShield_{324F76CC-D8DD-4D87-B77D-D4AF5E1AA7B3}) (Version: 2.0.3206 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation)
Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2 1.20.60.1020) (Version:  - )
Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020 (HKLM-x32\...\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2 1.20.60.1020) (Version:  - )
DJ_AIO_NS_LP_DocCD (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
DJ_AIO_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DJ_AIO_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
DJ_AIO_Software_min (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dragonball Xenoverse Incl. Update 7 MULTi2 1.0 (HKLM-x32\...\Dragonball Xenoverse Incl. Update 7 MULTi2 1.0) (Version:  - )
DVDFab 9.1.8.5 (24/01/2015) (HKLM-x32\...\DVDFab 9_is1) (Version:  - Fengtao Software Inc.)
Easy Tune 6 B13.0125.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B13.0125.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
F4100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F4100_Help (x32 Version: 90.0.222.000 - Hewlett-Packard) Hidden
FileZilla Client 3.17.0 (HKLM-x32\...\FileZilla Client) (Version: 3.17.0 - Tim Kosse)
FMW 1 (Version: 1.122.3 - AVG Technologies) Hidden
Free NicoVideo Download (HKLM-x32\...\Free NicoVideo Download_is1) (Version: 1.0.25.1117 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.26.37 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
IM Lock (HKLM-x32\...\IMLock) (Version:  - Comvigo, Inc.)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.450 - Oracle)
Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)
Java 8 Update 102 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2-1) (Version: 2.0 - AppWork GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Leawo Blu-ray Player version  1.9.1.4 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.9.1.4 - leawo Software)
Manager (x32 Version: 4.0.1.25166 - 2015 pdfforge GmbH. All rights reserved) Hidden
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 36.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.1 (x86 de)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0.1 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Newblue Art Effects for PowerDirector (HKLM\...\NewBlue Art Effects for PowerDirector) (Version: 2.0 - NewBlue)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 31.0.1889.99 (HKLM-x32\...\Opera 31.0.1889.99) (Version: 31.0.1889.99 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.12.26604 - pdfforge GmbH) Hidden
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.3.0 - pdfforge GmbH)
PowerDirector (Version: 11.0 - Ihr Firmenname) Hidden
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.)
SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Stellarium 0.13.3 (HKLM\...\Stellarium_is1) (Version: 0.13.3 - Stellarium team)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.45862 - TeamViewer)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Trust tablet driver (HKLM\...\RmTablet) (Version: 5.01 - )
Ulead PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 1.00.0000 - Corel)
Ulead PhotoImpact X3 (x32 Version: 1.00.0000 - Corel) Hidden
Unity Web Player (HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.11 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1262878346-956153297-733536101-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {114F22A2-008C-4777-A2C0-39BF9609C446} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {156382D6-023F-4200-818B-A8C53B69CD19} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {1A4A388B-F3AB-4AC7-B9A6-669C6008A48D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {1C4978E1-2E14-4A7A-BC9C-758E656E4656} - \Norton Internet Security\Norton Error Analyzer -> Keine Datei <==== ACHTUNG
Task: {1DEA7791-1707-4D85-BF6D-D02ACACA92EC} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {25938094-632A-4E2E-8C88-2856D095BEBF} - \TweakBit\FixMyPC\Start FixMyPC оn logon -> Keine Datei <==== ACHTUNG
Task: {2A0BC7CA-71EA-4564-8D16-0AD4D006FFF5} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {2B3BBE82-93F6-42D2-96E9-0D7F95A78A30} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {30E18F1A-840E-493F-8C2A-A0562A662BB2} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2016-06-17] (Symantec Corporation)
Task: {3F457ABC-9367-4B7A-AB11-BBDFE4017628} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {40E7B9D3-FE28-4702-B207-46CA68F181B1} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {4D01937F-EC23-4931-A1C1-6B87C463F2A5} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {4E44534B-1E72-48D6-A063-A08E0E920281} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {50F00039-E0F3-49B0-922B-C5A6C9330F08} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {57E85502-A525-4DAB-89C7-46C9B6DFEC65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {5833E409-3661-4B4C-B954-201CBCB3EB7D} - System32\Tasks\MichiyoNobbleAbsorbsV2 => Rundll32.exe NonrealisticPredefining.dll,main 7 1 <==== ACHTUNG
Task: {5A73ADF3-9DC8-41A2-B2EA-261BA2BF6B5F} - \Norton Internet Security\Norton Autofix -> Keine Datei <==== ACHTUNG
Task: {5FCAE671-3B9B-4E62-A9B4-11AA571E0E37} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6237CAC7-95D3-40D3-B9D6-6E077B097F39} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-27] (Adobe Systems Incorporated)
Task: {63566AF3-8C0F-451C-A91F-A4D4F1517C3D} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2016-08-19] (AVG Technologies CZ, s.r.o.)
Task: {6CF5E4AB-2BE4-4FAD-94BC-D7F1FF8E6BB2} - \Norton Internet Security\Norton Error Processor -> Keine Datei <==== ACHTUNG
Task: {73C2C45F-6FBE-4AA2-A153-D20B51FB945C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {78A1B497-0AE3-4BEB-BAC5-4B0F0834FF38} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {7FD9DBB4-266E-464D-803D-C602BD65E742} - System32\Tasks\AVG-SSU_0516piz_DELETE => C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe [2016-05-03] ()
Task: {882B1AC2-CD97-408D-9B9A-F363612D003D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-26] (Microsoft Corporation)
Task: {88C74DEC-81D9-4D55-A994-75A890B64031} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {8C83C740-F7D0-48D7-AF62-2F37C5647466} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {8E71E3D0-2229-4D0F-B27D-7850216D032B} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {90FB9E3A-4B05-4D38-9AB0-11680FD3CBBC} - System32\Tasks\AdobeAAMUpdater-1.0-Michiyo-PC-Michiyo => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {93809E8D-BB23-4EEB-820D-B1038C55C50A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {9457E5B4-5BE3-4414-A28F-15283228C6A7} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {99957B8C-4043-4E0B-A914-B718431B4C7F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {9A9FED19-87AD-437F-8FB4-6F45611583C1} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {9D2AB2E1-52CE-4CA1-B679-0F669C197FCC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {9D5B28AB-351C-43D9-A864-101793D47D0C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {A2462474-1AE8-4826-844B-F64E50DD95B2} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {A413446E-0712-47A0-847D-9C734E4E630C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {AA0AD042-E156-4899-8EAF-A907A006AFE4} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {AA690441-0189-4210-8C48-4857BBE1D7F2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {C0206B5E-CA90-4063-8AD7-2F284EC041AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {CCEFE2EE-FD56-483C-9D3A-21EC8CEF3FCB} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2015-12-04] (Advanced Micro Devices, Inc.)
Task: {CE94F35A-66F0-41A5-9B61-1DBE024AFFEC} - System32\Tasks\AVG-SSU_0516piz => C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe [2016-05-03] ()
Task: {CFB5EFD0-3189-4BD1-97C9-52182EE4ABBA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {D7BB176A-0F3D-4ED5-9858-BA65E1A028A1} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D7F60755-A8DE-4410-A10B-6E2B64ED5DC0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-11] (Microsoft Corporation)
Task: {D81E9C19-3B27-4E71-B75F-BD8E87F12E37} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)
Task: {D96D743A-70BF-418E-95D0-77B4D1E4E08B} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {E77A538F-F474-412E-AFE1-F0E2124E2489} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {EEE72BC1-DBA0-4589-B26A-F6DA943FC712} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F5E89F4E-0776-4E82-9333-7DD6C14DD704} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {F849ADF7-109E-4E9E-976D-6E53D206242C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {F9F3025F-A4E1-4A71-B5B0-7EF73B9DD3DC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {FC29C333-5ADA-498F-B64B-5C20E950F184} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://isearch.omiga-plus.com/?type=sc&ts=1415623352&from=smt&uid=ST1000DM003-1CH162_Z1D8NH1PXXXXZ1D8NH1P

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-08-29 17:16 - 2016-08-29 17:16 - 00980040 ____N () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
2014-11-17 20:32 - 2012-12-21 11:42 - 00390672 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2016-01-22 14:53 - 2012-10-19 12:01 - 00581120 _____ () C:\WINDOWS\system32\atwtusb.exe
2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-08-29 17:15 - 2016-05-03 09:53 - 01986632 _____ () C:\ProgramData\Avg_Update_0516piz\AVG-Secure-Search-Update_0516piz.exe
2016-07-13 10:13 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-08-26 11:09 - 2016-08-26 11:09 - 01864384 _____ () C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2014-05-01 16:13 - 2014-05-01 16:13 - 00470016 _____ () C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll
2016-04-22 15:15 - 2016-04-22 15:15 - 00052912 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2015-12-21 16:23 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-13 10:15 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-07-13 10:13 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-13 10:13 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-13 10:13 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-13 10:13 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-01-22 14:53 - 2012-09-10 14:54 - 03593728 _____ () C:\Windows\System32\AtwtusbIcon.exe
2015-06-25 17:34 - 2015-06-25 17:34 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 17:37 - 2015-06-25 17:37 - 00739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 17:35 - 2015-06-25 17:35 - 00014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 17:38 - 2015-06-25 17:38 - 00071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 16:53 - 2015-06-25 16:53 - 00011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 16:51 - 2015-06-25 16:51 - 02013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-06-24 12:51 - 2016-06-24 12:51 - 00017408 _____ () C:\Program Files\ATI Technologies\ATI.ACE\a4\AS4.NativeProxy.dll
2016-08-29 17:16 - 2016-08-29 17:16 - 02178120 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
2016-06-24 12:51 - 2016-06-24 12:51 - 00138752 _____ () C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
2016-04-19 10:52 - 2016-04-19 10:52 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-11-19 13:56 - 2015-11-17 15:34 - 00253800 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00295272 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-11-19 13:56 - 2015-11-17 15:34 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-08-09 08:20 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll
2016-08-09 08:20 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll
2016-04-19 10:52 - 2016-04-19 10:52 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 10:52 - 2016-04-19 10:52 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1262878346-956153297-733536101-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Michiyo\Desktop\01082016\231041.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML.lnk => C:\Windows\pss\IML.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^IML64.lnk => C:\Windows\pss\IML64.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: CLMLServer_For_P2G8 => "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
MSCONFIG\startupreg: CLVirtualDrive => "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: Power2GoExpress8 => "C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: Ulead AutoDetector v2 => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
HKLM\...\StartupApproved\Run32: => "Live! Central"
HKLM\...\StartupApproved\Run32: => "FileZilla Server Interface"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "AvgUi"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "AnyDVD"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "icq"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_9777924208C03F797011CE1DAB92CB56"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\StartupApproved\Run: => "Personal ID"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{D0FBAFBD-0C72-4261-A5E0-B5ECB2EB6EC8}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{E7CBC7D0-F0F2-4876-8985-C348676E853C}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{6004C78D-ABFB-4116-B0D6-A1A574D92520}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{02E44320-95BD-4B1B-997F-B80AD473D6E0}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{9F2C7241-816D-4F77-B075-DCFBF6159026}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B3D42658-1286-4DCA-A59C-9B3CDF05CA90}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{8436D99B-5C5D-4FC2-8839-DAA7AE3DB3FC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E646E7D0-5D5B-4EEC-BB7E-AEFDB51777F8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{3D453ED9-496F-400A-86B0-EB0553854E09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8FFD106B-08E5-47DB-8900-B6298CCDD4C5}] => (Allow) LPort=2869
FirewallRules: [{C4405D1C-BC91-4C20-83AE-3D41523A4ADE}] => (Allow) LPort=1900
FirewallRules: [{6338CFAF-E4B1-497E-95E9-81813A677419}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{4C09832E-4F03-4D28-8DFE-C87B1FCC8C4C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C5913D20-818C-4863-AF82-EB6D927CFAEC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{4DA5816D-9F79-419B-882A-AE878A51BCB8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{18346353-AB38-47B0-A2AE-8EA98C08E9D1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{19D7A7E7-FFB2-44C6-B467-70B7447D79B1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{4F0C38F4-E147-4B2E-A41F-13ACFD66846C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{0D273B1E-0510-4D4C-846F-6897007891B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{9EA3948C-015A-41DE-8A52-7E745A26D93F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{66BFDCC1-C966-409A-9275-EC456450877D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{F8102547-AAE8-4047-B31C-2526E4DCE2AD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{7CEB103D-4F3E-4FB5-B937-529B17142D07}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{E006F2C7-201B-45B2-864A-4D0BB6B2565B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{2BB1C4E2-C3A5-43A4-8314-B9A78AE17FF6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{C6459F07-FF33-4D00-ABB9-3DE2D77EDE84}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [TCP Query User{4C3FED9B-A0AC-495A-88FF-2EF1C65D662A}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{EA8A8D48-F52E-4B0F-928A-8569189F3E63}C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\michiyo\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{18FC0646-1B06-4EEB-AA7F-17C9AEEB1EAF}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3AD55A9F-304A-42C1-BC01-DD5D7B57B3C9}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{26D33A50-2DD0-4ACC-AD51-2FEDA1348156}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6EBD68AE-6A13-4F28-A6A6-EC1C61123163}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B464FBBC-8487-499E-B0F6-883EAF4BE6ED}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe
FirewallRules: [UDP Query User{E5F2ACE9-652E-4E32-ABB6-0A30EF8ED3D8}C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe] => (Block) C:\program files (x86)\leawo\blu-ray player\leawo blu-ray player.exe
FirewallRules: [{04D296A4-0F50-471C-853F-AC0936BBA54B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{470C85BD-8FD9-4B98-B572-F643C9D04ADB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{200ED56F-AD5A-4313-9EAF-59976246ABDE}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe
FirewallRules: [{734CBD21-7773-43C9-9DEE-E9E506E6E10B}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{3F4F6F8D-A1B3-430A-BCD4-85F0825107D6}] => (Allow) C:\Program Files (x86)\AVG\Av\avgdiagex.exe
FirewallRules: [{74B5BF7E-FB48-4F62-80C2-EBE4C931B8C7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{FC923AFA-D2A7-494A-B507-47EB9E3DAA60}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{FD9A1542-6144-4842-A440-53C9A38EA97A}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe
FirewallRules: [{69204468-35D6-4012-9E88-EC1738F49588}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe

==================== Wiederherstellungspunkte =========================

28-08-2016 15:39:55 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/29/2016 05:27:31 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (4240) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 05:27:31 PM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (4240) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 05:27:01 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (7220) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 05:27:01 PM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (7220) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 05:26:31 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (8724) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 05:26:31 PM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (8724) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 05:26:01 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (6500) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 05:26:01 PM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (6500) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.

Error: (08/29/2016 05:25:31 PM) (Source: ESENT) (EventID: 454) (User: )
Description: SearchIndexer (8060) Windows: Unerwarteter Fehler "-551" bei der Datenbankwiederherstellung.

Error: (08/29/2016 05:25:31 PM) (Source: ESENT) (EventID: 517) (User: )
Description: SearchIndexer (8060) Windows: Der Vorgang zur Datenbankwiederherstellung wird mit Fehler -551 beendet, da Verweise auf Datenbank "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" festgestellt wurden, die nicht den aktuellen Protokollen entsprechen. Das Datenbankmodul lässt den Abschluss des Wiederherstellungsvorgangs für diese Instanz erst dann zu, wenn die Datenbank mit der fehlenden Übereinstimmung wieder verfügbar gemacht wird. Wenn die Datenbank tatsächlich nicht mehr verfügbar und auch nicht mehr erforderlich ist, finden Sie Informationen zu den Wiederherstellungsverfahren in der Microsoft Knowledge Base oder unter dem Link "Weitere Informationen" am Ende dieser Meldung.


Systemfehler:
=============
Error: (08/29/2016 05:27:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 16 Mal passiert.

Error: (08/29/2016 05:27:32 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126

Error: (08/29/2016 05:27:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 15 Mal passiert.

Error: (08/29/2016 05:27:01 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126

Error: (08/29/2016 05:26:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 14 Mal passiert.

Error: (08/29/2016 05:26:31 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126

Error: (08/29/2016 05:26:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 13 Mal passiert.

Error: (08/29/2016 05:26:01 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126

Error: (08/29/2016 05:25:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 12 Mal passiert.

Error: (08/29/2016 05:25:31 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%2147749126


CodeIntegrity:
===================================
  Date: 2016-08-27 12:54:29.036
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-27 10:53:11.017
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.998
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.976
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.939
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.920
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.882
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.828
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.808
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-08-27 10:53:10.785
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: AMD FX(tm)-6300 Six-Core Processor
Prozentuale Nutzung des RAM: 37%
Installierter physikalischer RAM: 8189.53 MB
Verfügbarer physikalischer RAM: 5093.91 MB
Summe virtueller Speicher: 16381.53 MB
Verfügbarer virtueller Speicher: 13194.98 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:918.97 GB) (Free:293.97 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 0049F0A3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=919 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=11 GB) - (Type=27)

==================== Ende von Addition.txt ============================

Deathkid535 30.08.2016 08:01
Hi,

Schritt # 1: MBAM

Lade dir, falls nicht schon vorhanden, http://filepony.de/icon/tiny/malware...ti_malware.pngMalwarebytes Anti-Malware herunter, installiere und starte es.
  • Gehe in die Einstellungen, unter Erkennung und Schutz und setze den Haken bei Suche nach Rootkits
  • Wechsle ins Amaturenbrett und klicke auf Jetzt Scannen
  • Nachdem der Suchlauf abgeschlossen ist, verschiebe alle vorhandenen Funde in die Quarantäne.
  • Nachdem der PC neu gestartet hat, findest du unter dem Punkt Verlauf dein Logfile. Poste mir dieses hier.

Das Log findest du hier.



Schritt # 2: ESET


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt # 3: FRST

Und noch ein frisches FRST-Log bitte.



Schritt # 4: Bitte Posten
  • Das Log von MBAM
  • Das Log von ESET
  • Das frische FRST-Log

DanielaS 30.08.2016 14:41
Schritt # 1: MBAM
Schritt2 befindet sich noch im Scan und kommt gegen 15/16 Uhr

Bei mir sieht das ganze ein bisschen anders aus. Es sind 2 Berichte die ich in 2 txt Dateien abgespeichert habe.

http://fs5.directupload.net/images/160830/mrortrn2.jpg

Maleware Scan Protokoll

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 30.08.2016
Suchlaufzeit: 12:04
Protokolldatei: Maleware1.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.08.30.05
Rootkit-Datenbank: v2016.08.15.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Michiyo

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 406840
Abgelaufene Zeit: 26 Min., 34 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 5
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [b18c1f3267334aec0a2f6c2426dc718f],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [132a18393c5eb482112d731d887a629e],
PUP.Optional.TweakBit, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{25938094-632A-4E2E-8C88-2856D095BEBF}, Löschen bei Neustart, [8faec1903a606fc784657a82996af808],
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Sparta 05, Löschen bei Neustart, [1627be93049688aed361369cef13f60a],
PUP.Optional.TweakBit, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\TWEAKBIT\FIXMYPC\Start FixMyPC ?n logon, Löschen bei Neustart, [ea532e2383170d29b03a5ba141c2837d],

Registrierungswerte: 1
PUP.Optional.TweakBit, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{25938094-632A-4E2E-8C88-2856D095BEBF}|Path, \TweakBit\FixMyPC\Start FixMyPC ?n logon, Löschen bei Neustart, [8faec1903a606fc784657a82996af808]

Registrierungsdaten: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[ab920d44a9f11e18a341690dab5941bf]

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 11
PUP.Optional.OpenCandy, C:\Users\Michiyo\Documents\CheatEngine63.exe, In Quarantäne, [c479a6abfb9fbe78b94308847889c838],
PUP.Optional.ChipDigital, C:\Users\Michiyo\Documents\PhotoFiltre - CHIP-Installer.exe, In Quarantäne, [42fbeb66bfdb2f07a8a9d27cd13348b8],
PUP.Optional.OpenCandy, C:\Users\Michiyo\Documents\DTLite4491-0356.exe, In Quarantäne, [5ce184cd2b6f1c1a99397f0a6f956e92],
CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2 TeamPro Trainer v2.0.exe, In Quarantäne, [ac91e66b0b8f0630d3613791ff023ec2],
CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2 TeamPro Trainer v2.0.zip, In Quarantäne, [c77687cac2d8b185d85cd7f1f30ea65a],
CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2 TeamPro Trainer v3.0.zip, In Quarantäne, [97a630214a50e155a78de5e3dd24d927],
CheatTool.CETTrainer, C:\Users\Michiyo\Documents\FV2 TRAINER TEAM PRO V3.0.EXE, In Quarantäne, [9da0a5acc6d42b0b74c0efd9f70aaf51],
CheatTool.CETTrainer, C:\Users\Michiyo\Documents\Fv2-XsonicX-5.0.zip, In Quarantäne, [7fbe5001c2d8e551a094eeda8f726d93],
PUP.Optional.OmigaPlus.ShrtCln, C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_isearch.omiga-plus.com_0.localstorage, In Quarantäne, [25180c45faa0b2847019637cca387b85],
PUP.Optional.OmigaPlus.ShrtCln, C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_isearch.omiga-plus.com_0.localstorage-journal, In Quarantäne, [72cbb8992d6dbb7b088121be8979966a],
PUP.Optional.WinYahoo, C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy), Ersetzt,[f14cf75a0c8e8fa7099a7e2119eb17e9]

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
Schutzprotokoll

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Starting,
Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Started,
Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting,
Protection, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started,
Update, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Manual, Remediation Database, 2016.2.12.1, 2016.8.15.2,
Update, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Manual, Rootkit Database, 2016.2.8.1, 2016.8.15.1,
Update, 30.08.2016 12:03, SYSTEM, MICHIYO-PC, Manual, IP Database, 2016.2.8.1, 2016.8.29.1,
Update, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Manual, Domain Database, 2016.2.16.8, 2016.8.29.7,
Update, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Manual, Malware Database, 2016.2.16.6, 2016.8.30.5,
Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Refresh, Starting,
Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopping,
Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopped,
Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Refresh, Success,
Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting,
Protection, 30.08.2016 12:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started,
Scan, 30.08.2016 12:36, SYSTEM, MICHIYO-PC, Manual, Start: 30.08.2016 12:04, Dauer: 26 Min. 34 Sek., Bedrohungssuchlauf, Abgeschlossen, 10 Malware-Erkennung, 26 Nicht-Malware-Erkennungen,
Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Starting,
Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malware Protection, Started,
Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting,
Protection, 30.08.2016 12:39, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started,
Update, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Scheduler, Domain Database, 2016.8.29.7, 2016.8.30.1,
Update, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Scheduler, Malware Database, 2016.8.30.5, 2016.8.30.6,
Protection, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Protection, Refresh, Starting,
Protection, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopping,
Protection, 30.08.2016 13:04, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Stopped,
Protection, 30.08.2016 13:05, SYSTEM, MICHIYO-PC, Protection, Refresh, Success,
Protection, 30.08.2016 13:05, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Starting,
Protection, 30.08.2016 13:05, SYSTEM, MICHIYO-PC, Protection, Malicious Website Protection, Started,

(end)
Schritt # 2: ESET

Code:
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internet# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=499db2cb81f1ca4db5863e8d341bf887
# end=init
# utc_time=2016-08-30 11:19:44
# local_time=2016-08-30 01:19:44 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 30585
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=499db2cb81f1ca4db5863e8d341bf887
# end=updated
# utc_time=2016-08-30 11:22:59
# local_time=2016-08-30 01:22:59 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=499db2cb81f1ca4db5863e8d341bf887
# engine=30585
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-08-30 01:12:48
# local_time=2016-08-30 03:12:48 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='AVG AntiVirus Free Edition'
# compatibility_mode=1057 16777213 100 88 104813 2871208 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 332482 26376911 0 0
# scanned=399085
# found=38
# cleaned=38
# scan_time=6588
sh=DE7CC769ED24606C67E0921A7A13F41C7C226CC2 ft=1 fh=3a4703d37e51fe00 vn="Variante von Win32/Toolbar.CrossRider.T evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-8.1\Plus-HD-8.1-bg.exe.vir"
sh=38CEDA7702701713FA821C916BF27F23E18E6A65 ft=1 fh=d0e2982836bf8ab7 vn="Win64/Toolbar.Crossrider.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-8.1\Plus-HD-8.1-bho64.dll.vir"
sh=543A95E3D4C050288908B937FA9CCE5450E6AFDE ft=1 fh=5fee560ec51f2e7b vn="Variante von Win32/Toolbar.CrossRider.BP evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-8.1\Uninstall.exe.vir"
sh=140F1BA4DD591202E50DEA5DE4EF46612C059BD0 ft=1 fh=906b6d7a397ba4c9 vn="Variante von MSIL/Adware.PullUpdate.A Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\InternetUpdater\InternetUpdaterService.exe.vir"
sh=56D877C9852ADC4A958663231C44C1839C25CAA0 ft=1 fh=c71c001140362052 vn="Variante von Win32/Adware.PullUpdate.G Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\InternetUpdater\Uninstall.exe.vir"
sh=559637F0567C7A95BD4881D7BAF0B284D640215A ft=1 fh=c2f893dd822f18f6 vn="Variante von Win32/ELEX.AE evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\ProgramData\WPM\wprotectmanager.exe.vir"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\0D0S1L2Z1P1B0T1P1B2Z\Image Editor Packages\uninstaller.exe.vir"
sh=C5D5BE4D875D869C0736332C9739983D8664B182 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\chrome\content\core\xhr.js.vir"
sh=A8BA4E33B30E22D5D23E01A6B0D52F21CF7181FB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\102_dealply_m.js.vir"
sh=A1A2EC28719D19EC77B6A46A980A71FDE5E500AE ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\104_jollywallet_m.js.vir"
sh=ADB5D656E327D79C167FB53F0C9E8567AC7D297E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\123_intext_adv_m.js.vir"
sh=07E7242E737B1924CA063AD8A18577661B6879A3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\14_CrossriderUtils.js.vir"
sh=73D7B96272D6B2775D77D0FCD72450BBC9C497D4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\155_ibario_pops_m.js.vir"
sh=EB19F8211D7B4D646A460A9F060325A8845EEF22 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\178_revizer_ws_dynamic_m.js.vir"
sh=7EF151342936737A0EE87FF356E947372CE76900 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\180_bpo_serp_m.js.vir"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\190_pops_5_m.js.vir"
sh=8BB92307AA4FF9E470AF67130210F6B680E66B07 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\191_ciuvo_m.js.vir"
sh=422ADC32103BA63A199F74837A656FC5EF4FC677 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\195_icm_convertmedia_m.js.vir"
sh=0A8B1205F5D538FAB8D45F743262312C198E08B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js.vir"
sh=63D3217BF16BFB37091DD90C82E573D8CA13F08E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\1_base.js.vir"
sh=E11D14A642EC31DFC4D17283F637FEA4FD1946A2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\213_dealply_no_google_m.js.vir"
sh=5902FC10054355A5B8B9CC41620445BAA0F1D0AB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\21_debug.js.vir"
sh=AB37C567C86E950E0EEFC156AA3D9CB665729C40 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\220_icm_base_m.js.vir"
sh=C27C02D1ADA6C7E2101718BA2B2F4F359CA5C793 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\226_set_campaign_id_m.js.vir"
sh=9968E7101A0C09D5340EE60D45B074AB1C8302C2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.S evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\22_resources.js.vir"
sh=C0B915618574606A23096387B44820AA877C6006 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\236_sl_mobile_m.js.vir"
sh=096360E528F6964EAA30051DDE841A0C8E63849B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\246_setup.js.vir"
sh=57F2136CD86B69E88017E3346CF16BE0C2A51A2B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\28_initializer.js.vir"
sh=2EBC101982648313FFE20510A6C6754410F9D89B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\47_resources_background.js.vir"
sh=148CA44D7C0A3E2F5E2A3D38EFC5D999D2701A84 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\64_appApiMessage.js.vir"
sh=202C1899F9B92EF86E40333C701C620BB16CE1F2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\91_monetizationLoader.js.js.vir"
sh=82375A6153BE4F1F134E2E0A6077B67597E7F382 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Mozilla\Firefox\Profiles\dxfjpvkb.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com\extensionData\plugins\93_superfish_no_coupons_m.js.vir"
sh=464FD963183897BB987030A2097E759ED613A79C ft=1 fh=d1e1cc77b7d23939 vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\SupTab\SupTab.dll.vir"
sh=476063885747EDD774A6B8CB2790703503A75A55 ft=1 fh=d7bb79193adaee2e vn="Win32/Systweak.G evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\Akina\AppData\Roaming\Systweak\ssd\SSDPTstub.exe.vir"
sh=74C1E18392B94E3ECB392A1AD14ED9945F117F19 ft=1 fh=3cf3838aeba011dd vn="Variante von Win32/Adware.CognosAds.A Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\files\ftkfkhefogstfbacoebwqgcursnfzbej\inst\Bootstrapper\uninstall.exe"
sh=02E1E58BE25BC656589C5DC5AF311B9F2E5EA6E2 ft=1 fh=a94b1d23b6435b2a vn="Win32/Toolbar.Iminent.G evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\files\rerrmpqdrnzrbdgwhcdpfixfpxdbszdf\IMGUpdater.exe"
sh=C75525227535F3271E4FBAF2314B654029E705A0 ft=1 fh=74ab7846da60b139 vn="Variante von Win32/Toolbar.Iminent.J evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\files\tgradrdpadjqcvrntqzkrdfzyhwugxku\Umbrella260.exe"
sh=552464E3A61B57248E7ABBB9E78047923105E150 ft=1 fh=8e19f37ab9b5e3fe vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung (gelöscht)" ac=C fn="C:\Users\Michiyo\Documents\PDFCreator-2_3_0-Setup.exe"
Schritt # 3 ALLES ERLEDIGT FRST LOG

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-08-2016
durchgeführt von Michiyo (Administrator) auf MICHIYO-PC (30-08-2016 15:38:08)
Gestartet von C:\Users\Michiyo\Desktop
Geladene Profile: Michiyo (Verfügbare Profile: Michiyo & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
() C:\Windows\System32\atwtusb.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(© pdfforge GmbH.) C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
() C:\Windows\System32\atwtusb.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
() C:\Program Files\ATI Technologies\ATI.ACE\a4\AdaptiveSleepService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\System32\AtwtusbIcon.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [AtwtusbIcon] => C:\WINDOWS\system32\AtwtusbIcon.exe [3593728 2012-09-10] ()
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe [6613896 2016-06-24] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Live! Central] => C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe [438381 2009-06-05] (Creative Technology Ltd.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [56080 2015-12-12] (Raptr, Inc)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [204560 2016-08-18] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [6709008 2016-07-28] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2178120 2016-08-30] ()
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [AnyDVD] => C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exe [4886136 2011-03-07] (SlySoft, Inc.)
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
HKU\S-1-5-21-1262878346-956153297-733536101-1001\...\RunOnce: [Uninstall C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Michiyo\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\buShell.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Michiyo\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-08-30]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IML.lnk [2016-08-30]
ShortcutTarget: IML.lnk ->  (Keine Datei)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{86916325-c1ab-4869-a177-2fbf32564dab}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130859355493535952&GUID=9EC4EDB1-5F00-4682-8EB6-D81E4A9B890C
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de
HKU\S-1-5-21-1262878346-956153297-733536101-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?pc=UE01&ocid=UE01DHP
SearchScopes: HKLM -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {F66BFC25-B41D-4A17-A66C-2D338F452675} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MNMTDF&pc=MANM&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {6ECB41EC-A7AC-4224-8D1E-44C44B4639E2} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={761D6F70-819C-43ED-AF67-A4EE55D0A33D}&mid=d34487a0d9ba47ccb850a59d73d1869f-04f99b185149844fb42273afbf5d96e39a056fc0&lang=de&ds=AVG&coid=avgtbavg&cmpid=0516piz&pr=fr&d=2016-08-27 10:34:14&v=4.3.4.122&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {AEEDE363-46A7-4B7A-9092-EEDB31E079DE} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C2EE27DF-5090-4D18-8930-B7403474FB06} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {C8ABDA6A-F499-4674-8C39-FDE573ABBEDE} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {D16EFC19-2554-4D94-B6A1-7B098BFCBD25} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll => Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-30] (AVG)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation)
BHO-x32: PDF Architect 4 Helper -> {38279E1A-7019-40C1-B579-E99DFB3312E8} -> C:\Program Files (x86)\PDF Architect 4\creator-ie-helper.dll [2016-01-15] (pdfforge GmbH)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll => Keine Datei
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\ssv.dll [2016-08-27] (Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.4.122\AVG Web TuneUp.dll [2016-08-30] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-08-27] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\22.7.0.76\coIEPlg.dll Keine Datei
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\coIEPlg.dll Keine Datei
Toolbar: HKLM-x32 - PDF Architect 4 Toolbar - {23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} - C:\Program Files (x86)\PDF Architect 4\creator-ie-plugin.dll [2016-01-15] (pdfforge GmbH)
IE Session Restore: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> ist aktiviert.
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1262878346-956153297-733536101-1001 -> hxxp://go.web.de/tb/ie_startpage

FireFox:
========
FF ProfilePath: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default
FF SelectedSearchEngine: Yahoo! Powered
FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/_lvrms_16_27&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyByE0DyEtAyDtAyDyC0FyC0CyC0F0A0FtN0D0Tzu0StCyCyEyBtN1L2XzutAtFtBtAtFtCtFtAtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StDtAzztA0DyEzztBtGyB0D0B0CtGzyyE0BtBtGtC0EyD0CtGyCtD0BtAyD0ByEyCyBtCzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0CzztB0ByE0FtGyCyDyCyBtGyEtBtB0FtGzz0C0A0AtGtCyB0ByC0F0C0B0E0EtCyBzz2QtN0A0LzuyE%26cr%3D1771641347%26a%3Dwncy_lvrms_16_27%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
FF Keyword.URL: user_pref("keyword.URL", true);
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-08-27] ()
FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-08-27] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.4\\npsitesafety.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-08-27] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files (x86)\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-08-27] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1262878346-956153297-733536101-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Michiyo\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
FF user.js: detected! => C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\user.js [2015-03-18]
FF SearchPlugin: C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\searchplugins\avg-secure-search.xml [2016-08-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2016-08-30]
FF Extension: (AVG Web TuneUp) - C:\Users\Michiyo\AppData\Roaming\Mozilla\Firefox\Profiles\ax37ujkk.default\Extensions\avg@toolbar.xpi [2016-08-30]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
FF Extension: (Norton Identity Safe) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon [2016-08-12]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: (PDF Architect 4 Creator) - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2016-03-06] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.0.124\coFFAddon
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR Profile: C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Unblock embedded Youtube videos) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aajjpnimaghinaladfeongfnojpooegf [2016-03-11]
CHR Extension: (Google Drive) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Docs Offline) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Proxmate) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2016-08-25]
CHR Extension: (Norton Identity Safe) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-03-18]
CHR Extension: (Skype) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-08-12]
CHR Extension: (Pink Lake) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkikaplkcnkehkocaeaddjiicklloajh [2016-03-12]
CHR Extension: (TumTaster) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nanfbkacbckngfcklahdgfagjlghfbgm [2016-03-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01]
CHR Extension: (Google Mail) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR Extension: (Chrome Media Router) - C:\Users\Michiyo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-30]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden>
CHR HKLM\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.7.0.76\Exts\Chrome.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [edlomhpkphiongfmegcmaamkbadecnkd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx

Opera:
=======
OPR Extension: (YouTube Unblocker) - C:\Users\Michiyo\AppData\Roaming\Opera Software\Opera Stable\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2016-05-10]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-06-24] () [Datei ist nicht signiert]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [674552 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5267456 2016-07-28] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1097488 2016-08-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [760024 2016-07-28] (AVG Technologies CZ, s.r.o.)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.)
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.)
S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [382312 2015-11-17] (Digital Wave Ltd.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29760 2016-07-04] (HP Inc.)
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.7.1.32\NIS.exe [289080 2016-08-16] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-03-29] (Electronic Arts)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2016-01-15] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2016-01-15] (pdfforge GmbH)
R2 PDF Architect 4 Manager; C:\ProgramData\pdfforge\PDF Architect 4 Manager\PDF Architect 4\Architect Manager.exe [959248 2015-10-05] (© pdfforge GmbH.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-12-21] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4878096 2016-08-19] (AVG Technologies CZ, s.r.o.)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
R2 vToolbarUpdater40.3.4; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.4\ToolbarUpdater.exe [1347144 2016-08-30] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
R2 WTService; C:\WINDOWS\system32\atwtusb.exe [581120 2012-10-19] () [Datei ist nicht signiert]
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [980040 2016-08-30] ()

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 amdacpksd; C:\WINDOWS\system32\drivers\amdacpksd.sys [305392 2016-01-22] (Advanced Micro Devices)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
S3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
S3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [125512 2010-12-01] (SlySoft, Inc.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-09-18] (Advanced Micro Devices)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [163072 2016-05-13] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [314112 2016-06-30] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [260352 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [261888 2016-07-19] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [52992 2016-06-01] (AVG Technologies CZ, s.r.o.)
R0 avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [77056 2016-06-20] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [313088 2016-07-20] (AVG Technologies CZ, s.r.o.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\BASHDefs\20150521.001\BHDrvx64.sys [1640152 2015-06-04] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1607010.020\ccSetx64.sys [174328 2016-06-02] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2015-08-07] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2015-08-07] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-11-10] (Disc Soft Ltd)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-06-16] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153936 2015-06-16] (Symantec Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [637360 2011-12-19] (Intel Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\IPSDefs\20150519.100\IDSVia64.sys [684248 2015-06-04] (Symantec Corporation)
S3 INIDVD; C:\Windows\System32\drivers\inidvd.sys [19488 2012-11-02] (Initio Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-08-30] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 moufiltr; C:\Windows\System32\drivers\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [68608 2008-12-19] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [96768 2009-07-23] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [122880 2008-12-19] ()
R3 RLDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\livecamv.sys [49664 2007-02-05] ()
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1607010.020\SRTSP64.SYS [773360 2016-08-10] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1607010.020\SRTSPX64.SYS [48888 2016-06-02] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NISx64\1607010.020\SYMEFASI64.SYS [1627352 2016-06-02] (Symantec Corporation)
S4 SymELAM; C:\Windows\system32\drivers\NISx64\1607010.020\SymELAM.sys [24192 2015-07-11] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [101112 2016-08-11] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1607010.020\Ironx64.SYS [291056 2016-06-02] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1607010.020\SYMNETS.SYS [567536 2016-06-02] (Symantec Corporation)
S3 TabletFilter; C:\Windows\System32\drivers\TabletFilter.sys [7680 2012-08-15] (Windows (R) Win 7 DDK provider)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.)
R3 V0540Dev; C:\Windows\system32\DRIVERS\V0540Vid.sys [321376 2009-06-15] (Creative Technology Ltd.)
R3 vhidmini; C:\Windows\System32\drivers\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.5.0.124\Definitions\VirusDefs\20150714.024\EX64.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-30 15:38 - 2016-08-30 15:38 - 00036645 _____ C:\Users\Michiyo\Desktop\FRST.txt
2016-08-30 15:37 - 2016-08-30 15:37 - 00000000 ____D C:\Users\Michiyo\Desktop\FRST-OlderVersion
2016-08-30 13:18 - 2016-08-30 13:18 - 00000000 ____D C:\Program Files (x86)\ESET
2016-08-30 12:03 - 2016-08-30 14:49 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-08-30 12:03 - 2016-08-30 12:50 - 00001172 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-30 12:03 - 2016-08-30 12:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-08-30 12:03 - 2016-08-30 12:03 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-30 12:03 - 2016-08-30 12:03 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-08-30 12:03 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-08-30 12:03 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-08-30 12:03 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-08-30 11:06 - 2016-08-30 11:13 - 22851472 _____ (Malwarebytes ) C:\Users\Michiyo\Desktop\mbam-setup-2.2.1.1043.exe
2016-08-29 21:16 - 2016-08-29 21:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Neuer Ordner
2016-08-29 21:09 - 2016-08-29 21:09 - 00000000 ____D C:\Users\Michiyo\Desktop\Mandala
2016-08-29 17:16 - 2016-08-30 10:12 - 00000000 ____D C:\ProgramData\AVG Web TuneUp
2016-08-29 17:16 - 2016-08-30 10:12 - 00000000 ____D C:\Program Files (x86)\AVG Web TuneUp
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AVG Web TuneUp
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search
2016-08-29 17:16 - 2016-08-29 17:16 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2016-08-29 17:07 - 2016-08-29 17:08 - 03826240 _____ C:\Users\Michiyo\Desktop\AdwCleaner_6.010.exe
2016-08-29 10:38 - 2016-08-29 10:47 - 00000000 ____D C:\Users\Michiyo\Desktop\HIGH & LOW THE LIVE
2016-08-29 10:17 - 2016-08-30 15:38 - 00000000 ____D C:\FRST
2016-08-29 10:17 - 2016-08-30 15:37 - 02397696 _____ (Farbar) C:\Users\Michiyo\Desktop\FRST64.exe
2016-08-28 01:14 - 2016-08-28 17:28 - 2613934989 _____ C:\Users\Michiyo\Downloads\[SOFCJ-Raws] Dragon Ball Z Resurrection F – Future Trunks Special Edition Extended (SUT 1280x720 x264 10bit AAC).mp4
2016-08-27 12:49 - 2016-08-27 12:49 - 03143504 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Michiyo\Documents\AVG_Protection_Free_1606.exe
2016-08-27 11:18 - 2016-08-27 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-08-27 11:18 - 2016-08-27 11:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AVG
2016-08-27 11:17 - 2016-08-27 11:17 - 00000000 ___HD C:\$AVG
2016-08-27 11:16 - 2016-08-30 12:39 - 00000000 ____D C:\ProgramData\MFAData
2016-08-27 11:16 - 2016-08-27 11:16 - 00000000 ____D C:\Users\Michiyo\AppData\Local\MFAData
2016-08-27 11:00 - 2016-08-30 14:54 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-08-27 11:00 - 2016-08-27 11:00 - 01198049 _____ C:\WINDOWS\unins000.exe
2016-08-27 11:00 - 2016-08-27 11:00 - 00010826 _____ C:\WINDOWS\unins000.dat
2016-08-27 11:00 - 2016-08-27 11:00 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-08-27 11:00 - 2016-08-27 11:00 - 00001409 _____ C:\AiOLog.txt
2016-08-27 11:00 - 2016-08-27 11:00 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2016-08-27 11:00 - 2016-01-28 18:44 - 01261568 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libeay32.dll
2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\ssleay32.dll
2016-08-27 11:00 - 2016-01-28 18:44 - 00297472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\WINDOWS\system32\libssl32.dll
2016-08-27 11:00 - 2015-07-10 10:51 - 00456008 _____ (AutoIt Team) C:\WINDOWS\system32\autoitx3.dll
2016-08-27 11:00 - 2015-07-08 09:29 - 03477818 _____ (Red Hat) C:\WINDOWS\system32\cygwin1.dll
2016-08-27 11:00 - 2014-01-31 02:14 - 01055676 _____ (Free Software Foundation) C:\WINDOWS\system32\libiconv2.dll
2016-08-27 11:00 - 2014-01-25 13:30 - 00131072 _____ (Sereby Corporation) C:\WINDOWS\system32\AiORuntimes.dll
2016-08-27 11:00 - 2013-12-23 14:44 - 00163480 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 01070232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomctl.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00660120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomct2.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00617896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00444328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshflxgd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00416408 _____ (Microsoft Corporation ) C:\WINDOWS\system32\comct332.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00279192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatgrd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00259736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msflxgrd.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00253080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatlst.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00222360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabctl32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00219288 _____ (Microsoft Corporation) C:\WINDOWS\system32\richtx32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00218776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dblist32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00212112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mci32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00179352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmask32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\system32\comct232.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00131728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinet.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00130712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstdfmt.dll
2016-08-27 11:00 - 2013-12-20 00:48 - 00127640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswinsck.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00119960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomm32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00108696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstkprp.dll
2016-08-27 11:00 - 2013-12-20 00:48 - 00104088 _____ (Microsoft Corporation) C:\WINDOWS\system32\picclp32.ocx
2016-08-27 11:00 - 2013-12-20 00:48 - 00084624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysinfo.ocx
2016-08-27 11:00 - 2012-06-14 14:36 - 00107520 _____ C:\WINDOWS\system32\zlib1.dll
2016-08-27 11:00 - 2012-04-03 16:11 - 00138752 _____ C:\WINDOWS\system32\libpng15.dll
2016-08-27 11:00 - 2011-10-12 03:09 - 04033440 _____ (Intel Corporation) C:\WINDOWS\system32\libmmd.dll
2016-08-27 11:00 - 2011-10-01 08:16 - 00445016 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll
2016-08-27 11:00 - 2011-10-01 08:16 - 00109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\openal32.dll
2016-08-27 11:00 - 2011-01-12 13:36 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71DEU.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ITA.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71FRA.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ESP.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71ENU.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71KOR.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71JPN.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHT.dll
2016-08-27 11:00 - 2011-01-12 13:25 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71CHS.dll
2016-08-27 11:00 - 2011-01-12 13:19 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll
2016-08-27 11:00 - 2011-01-12 12:53 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll
2016-08-27 11:00 - 2010-06-27 17:44 - 00053248 _____ (Adobe Systems, Incorporated) C:\WINDOWS\system\plugin.dll
2016-08-27 11:00 - 2010-03-18 20:21 - 00799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdia100.dll
2016-08-27 11:00 - 2008-08-26 06:40 - 00162304 _____ C:\WINDOWS\system32\libpng13.dll
2016-08-27 11:00 - 2007-02-01 22:13 - 00503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll
2016-08-27 11:00 - 2007-02-01 19:11 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll
2016-08-27 11:00 - 2007-01-30 22:04 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll
2016-08-27 11:00 - 2006-08-26 00:28 - 01017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ITA.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70FRA.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ESP.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70DEU.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ENU.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70KOR.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70JPN.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHT.dll
2016-08-27 11:00 - 2006-08-26 00:15 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70CHS.dll
2016-08-27 11:00 - 2006-08-26 00:07 - 01024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll
2016-08-27 11:00 - 2006-08-25 23:17 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll
2016-08-27 11:00 - 2005-05-06 13:52 - 00103424 _____ (GNU <www.gnu.org>) C:\WINDOWS\system32\libintl3.dll
2016-08-27 11:00 - 2005-01-20 19:25 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll
2016-08-27 11:00 - 2002-01-05 05:40 - 00487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll
2016-08-27 11:00 - 1996-01-12 03:00 - 00935632 _____ (Microsoft Corporation) C:\WINDOWS\system\vb40016.dll
2016-08-27 11:00 - 1996-01-12 03:00 - 00722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vb40032.dll
2016-08-27 11:00 - 1994-11-17 13:00 - 00210944 _____ C:\WINDOWS\system\msvcrt10.dll
2016-08-27 11:00 - 1993-05-11 19:00 - 00398416 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun300.dll
2016-08-27 11:00 - 1992-10-21 00:00 - 00356992 _____ (Microsoft Corporation) C:\WINDOWS\system\vbrun200.dll
2016-08-27 11:00 - 1991-05-10 01:00 - 00271264 _____ C:\WINDOWS\system\vbrun100.dll
2016-08-27 10:57 - 2016-08-27 10:57 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Sun
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\ProgramData\Oracle
2016-08-27 10:56 - 2016-08-27 10:56 - 00000000 ____D C:\Program Files\Java
2016-08-27 10:53 - 2016-08-27 11:01 - 00632904 _____ (O&O Software GmbH) C:\Users\Michiyo\Documents\OOSU10.exe
2016-08-27 10:49 - 2016-08-27 10:49 - 00203114 _____ C:\Users\Michiyo\Documents\OOSU10.zip
2016-08-27 10:48 - 2016-08-27 10:53 - 377130076 _____ (Sereby Corporation) C:\Users\Michiyo\Documents\aio-runtimes_v2.3.8.exe
2016-08-26 16:16 - 2016-08-26 16:16 - 00000000 ____D C:\$SysReset
2016-08-26 15:34 - 2016-08-26 15:34 - 00000017 _____ C:\Users\Michiyo\AppData\Local\resmon.resmoncfg
2016-08-26 13:18 - 2016-08-26 15:24 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-08-26 11:10 - 2016-08-26 11:10 - 00003340 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-08-26 10:29 - 2016-08-26 10:29 - 00003404 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-08-26 10:28 - 2016-08-26 10:28 - 00280764 _____ C:\WINDOWS\Minidump\082616-97187-01.dmp
2016-08-23 09:34 - 2012-01-01 17:18 - 00000000 ____D C:\Users\Michiyo\Desktop\[Yaoi Fangirl] Lent - Death Note Doujin
2016-08-22 17:22 - 2016-08-22 18:07 - 00327998 _____ C:\Users\Michiyo\Documents\Digimon Adventure - Leb deine Träume.pds
2016-08-20 00:00 - 2016-08-20 00:00 - 79449510 _____ C:\Users\Michiyo\Desktop\『HiGH&LOW THE MOVIE』Best Action Scenes Special Trailer.mp4
2016-08-13 10:23 - 2016-08-13 10:26 - 00000000 ____D C:\Users\Michiyo\Documents\Die Sims 4
2016-08-12 18:08 - 2016-08-12 18:11 - 42013312 _____ (Skype Technologies S.A.) C:\Users\Michiyo\Documents\SkypeSetupFull.exe
2016-08-12 16:58 - 2016-08-26 10:27 - 739168023 _____ C:\WINDOWS\MEMORY.DMP
2016-08-12 11:13 - 2016-08-13 19:24 - 00000000 ____D C:\Users\Michiyo\Desktop\Die Sims 4
2016-08-12 09:02 - 2016-08-12 09:05 - 00002503 _____ C:\Users\Michiyo\Documents\Norton Internet Security.lnk
2016-08-12 01:07 - 2016-08-12 01:07 - 08892696 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 08738920 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 07115928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00479368 _____ C:\WINDOWS\system32\amdmiracast.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00164280 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiu9p64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00159088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00154920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00138688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00138176 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00123120 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00123104 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2016-08-12 01:07 - 2016-08-12 01:07 - 00105344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 48819200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 38266368 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 32555512 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atio6axx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 27489280 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdocl12cl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 26639360 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atioglxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 21641216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\amdocl12cl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 15729152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticaldd64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 14320128 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticaldd.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 08830456 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 08627704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmantle64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 07076352 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 06956032 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmantle32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02376704 _____ C:\WINDOWS\system32\amdoclvp9lib64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02286584 _____ C:\WINDOWS\SysWOW64\amdoclvp9lib32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 02147328 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 01837568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00991232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00883192 _____ (AMD) C:\WINDOWS\system32\coinst_16.30.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00751616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00627192 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00459776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00402944 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00350208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODE.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00292352 _____ C:\WINDOWS\system32\dgtrayicon.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00287744 _____ (AMD) C:\WINDOWS\system32\atitmm64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00275968 _____ C:\WINDOWS\system32\GameManager64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00270336 _____ C:\WINDOWS\system32\clinfo.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00268792 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00249336 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00241152 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00234496 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00231424 _____ C:\WINDOWS\system32\atieah64.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00222208 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00209408 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00202744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00201728 _____ C:\WINDOWS\system32\amdhdl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00181760 _____ C:\WINDOWS\SysWOW64\amdhdl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00176640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00159736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00137208 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00135168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00130560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00123896 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6pxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00118784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00113664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00111616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00109568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiglpxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00108544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiglpxx.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00104448 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00083960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00079864 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalrt64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00073216 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\aticalcl64.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00069632 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalrt.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00068608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIODCLI.exe
2016-08-12 01:06 - 2016-08-12 01:06 - 00068096 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00067584 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00066560 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\SysWOW64\aticalcl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00060920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\ati2erec.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00055800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmmcl.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2016-08-12 01:06 - 2016-08-12 01:06 - 00021496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2016-08-11 14:38 - 2016-08-11 14:38 - 00000000 ____D C:\Users\Michiyo\Documents\Electronic Arts
2016-08-11 14:26 - 2016-08-30 13:13 - 00002187 _____ C:\Users\Michiyo\Desktop\Die Sims 4 Digital Deluxe Edition 64 Bit.lnk
2016-08-11 14:07 - 2016-08-27 12:15 - 00000000 ____D C:\Program Files (x86)\Die Sims 4
2016-08-11 13:58 - 2016-08-11 14:02 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Gaumenfreuden DLC Incl. Update 14 MULTi2
2016-08-11 12:39 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-08-11 12:39 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-08-11 12:39 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-08-11 12:39 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-08-11 12:39 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-08-11 12:39 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2016-08-11 12:39 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-08-11 12:39 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-08-11 12:39 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-08-11 12:39 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2016-08-11 12:39 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2016-08-11 12:39 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-08-11 12:39 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-08-11 12:39 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-08-11 12:39 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-08-11 12:39 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-08-11 12:39 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2016-08-11 12:39 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-08-11 12:39 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-08-11 12:39 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2016-08-11 12:39 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-08-11 12:39 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-08-11 12:39 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-08-11 12:39 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2016-08-11 12:39 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2016-08-11 12:39 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2016-08-11 12:39 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-08-11 12:39 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-08-11 12:39 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-08-11 12:39 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-08-11 12:39 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-08-11 12:39 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-08-11 12:39 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2016-08-11 12:39 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-08-11 12:39 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-08-11 12:39 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2016-08-11 12:39 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-08-11 12:39 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-08-11 12:39 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-08-11 12:39 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-08-11 12:39 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-08-11 12:39 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-08-11 12:39 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2016-08-11 12:39 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-08-11 12:39 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-08-11 12:39 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-08-11 12:39 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-08-11 12:39 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe
2016-08-11 12:39 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-08-11 12:39 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-08-11 12:39 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-08-11 12:39 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2016-08-11 12:39 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-08-11 12:39 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-08-11 12:39 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2016-08-11 12:39 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-08-11 12:39 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-08-11 12:39 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-08-11 12:39 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-08-11 12:39 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2016-08-11 12:39 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-08-11 12:38 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-08-11 12:38 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-08-11 12:38 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2016-08-11 12:38 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-08-11 12:38 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2016-08-11 12:38 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-08-11 12:38 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-08-11 12:38 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2016-08-11 12:38 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-08-11 12:38 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-08-11 12:38 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-08-11 12:38 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2016-08-11 12:38 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2016-08-11 12:38 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-08-11 12:38 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2016-08-11 12:38 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-08-11 12:38 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-08-11 12:38 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2016-08-11 12:38 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-08-11 12:38 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-08-11 12:38 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-08-11 12:38 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2016-08-11 12:38 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-08-11 12:38 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-08-11 12:38 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-08-11 12:38 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-08-11 12:38 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-08-11 12:38 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-08-11 12:38 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-08-11 12:38 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-08-11 12:38 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-08-11 12:38 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-08-11 12:38 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-08-11 12:38 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-08-11 12:38 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-08-11 12:38 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-08-11 12:38 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-08-11 12:38 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-08-11 12:38 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-08-11 12:38 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2016-08-11 12:38 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-08-11 12:38 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-08-11 12:38 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-08-11 12:38 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2016-08-11 12:38 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-08-11 12:38 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-08-11 12:38 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-08-11 12:38 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-11 12:38 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-08-11 12:38 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-08-11 12:38 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-08-11 12:38 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-08-11 12:38 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-08-11 12:38 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-08-11 12:38 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-08-11 12:38 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-08-11 12:38 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-08-11 12:38 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-08-11 12:38 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-08-11 12:38 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-08-11 11:35 - 2016-08-11 11:46 - 00000000 ____D C:\Users\Michiyo\Downloads\Die Sims 4 Digital Deluxe Edition ReRelease Incl. Update 14 MULTi2
2016-08-08 12:51 - 2016-08-08 12:53 - 1266484522 _____ C:\Users\Michiyo\Documents\PhotoImpact.13.1.rar
2016-08-07 23:09 - 2016-08-07 23:17 - 529480482 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 054 RAW (THK 1280x720 x264 AAC).mp4
2016-08-07 23:09 - 2016-08-07 23:10 - 389781623 _____ C:\Users\Michiyo\Downloads\[Leopard-Raws] Dragon Ball Super - 053 RAW (THK 1280x720 x264 AAC).mp4
2016-08-06 11:03 - 2016-08-06 11:03 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\29030

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-08-30 15:33 - 2014-11-08 14:42 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Skype
2016-08-30 15:18 - 2014-11-08 19:05 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-08-30 13:13 - 2016-06-11 11:49 - 00002039 _____ C:\Users\Michiyo\Desktop\Dragonball Xenoverse.lnk
2016-08-30 12:50 - 2016-03-11 18:39 - 00002549 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk
2016-08-30 12:50 - 2016-03-06 14:20 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-08-30 12:50 - 2016-01-06 07:26 - 00001080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2016-08-30 12:50 - 2015-12-21 13:30 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-08-30 12:50 - 2015-08-21 22:45 - 00001119 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2016-08-30 12:50 - 2015-03-18 13:45 - 00002008 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
2016-08-30 12:50 - 2015-03-18 13:45 - 00001997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk
2016-08-30 12:50 - 2015-03-18 13:45 - 00001931 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
2016-08-30 12:50 - 2014-11-13 20:23 - 00001026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-08-30 12:50 - 2014-11-12 18:24 - 00001166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-08-30 12:50 - 2014-11-11 12:34 - 00001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk
2016-08-30 12:50 - 2014-11-11 12:34 - 00001126 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5 (64 Bit).lnk
2016-08-30 12:50 - 2014-11-11 12:32 - 00001269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk
2016-08-30 12:50 - 2014-11-11 12:32 - 00001176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk
2016-08-30 12:50 - 2014-11-11 12:31 - 00001526 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk
2016-08-30 12:50 - 2014-11-11 12:31 - 00001360 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.lnk
2016-08-30 12:50 - 2014-11-11 12:30 - 00001004 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2016-08-30 12:50 - 2014-11-08 19:05 - 00002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-08-30 12:50 - 2014-11-08 19:05 - 00002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-08-30 12:50 - 2014-11-08 15:41 - 00001127 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-08-30 12:50 - 2013-12-16 17:02 - 00001987 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2016-08-30 12:50 - 2013-12-16 17:00 - 00001381 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
2016-08-30 12:50 - 2013-12-16 17:00 - 00001312 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
2016-08-30 12:50 - 2013-12-16 16:59 - 00001465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2016-08-30 12:49 - 2016-01-06 07:27 - 00001441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2016-08-30 12:49 - 2015-12-17 12:05 - 00001250 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CNext.lnk
2016-08-30 12:49 - 2015-08-04 11:19 - 00001054 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-08-30 12:49 - 2015-08-04 11:18 - 00002437 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-30 12:49 - 2014-12-03 10:20 - 00000843 _____ C:\Users\Michiyo\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-08-30 12:49 - 2014-11-09 14:25 - 00001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2016-08-30 12:48 - 2014-11-08 19:05 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-08-30 12:38 - 2015-12-21 13:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-08-30 12:38 - 2009-07-14 04:34 - 00000555 _____ C:\WINDOWS\win.ini
2016-08-30 12:37 - 2015-12-21 13:18 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-08-30 12:37 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Web
2016-08-30 12:37 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-08-30 10:19 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-08-30 10:13 - 2016-04-18 09:31 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{AE24DCEB-E6C7-487B-AFB9-782C90AB2FBD}
2016-08-30 00:50 - 2014-11-08 15:38 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\vlc
2016-08-29 23:34 - 2014-11-13 20:23 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Audacity
2016-08-29 23:00 - 2014-11-11 20:14 - 00000132 _____ C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs
2016-08-29 22:18 - 2016-04-04 18:53 - 00000000 ____D C:\Users\Michiyo\Desktop\gucken heute
2016-08-29 22:03 - 2014-11-09 15:20 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\AbiSuite
2016-08-29 17:35 - 2016-05-23 10:38 - 00000000 ____D C:\Users\Michiyo\Downloads\One.Piece.E103.Um.8.in.Spiders.Cafe.UNCUT.German.Dubbed.1999.ANiME.DVDRiP.XviD-STARS
2016-08-29 17:16 - 2016-07-05 17:34 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-08-29 17:16 - 2014-03-13 12:37 - 00000000 ____D C:\AdwCleaner
2016-08-29 17:15 - 2014-11-11 15:00 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\Yahoo!
2016-08-28 21:06 - 2014-12-03 10:18 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\uTorrent
2016-08-28 10:47 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-08-27 13:06 - 2016-06-05 15:29 - 00000000 ____D C:\WINDOWS\Minidump
2016-08-27 13:06 - 2016-01-06 07:27 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\HpUpdate
2016-08-27 12:52 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\AvgSetupLog
2016-08-27 12:34 - 2014-11-12 18:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-08-27 12:31 - 2014-12-26 18:22 - 00000000 ____D C:\Users\Michiyo\Documents\AnyDVD HD 6.7.9.0 Fimal
2016-08-27 11:20 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-08-27 11:18 - 2016-03-11 18:36 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Avg
2016-08-27 11:18 - 2014-11-12 18:13 - 00000000 ____D C:\Users\Michiyo\AppData\Roaming\TuneUp Software
2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\ProgramData\Avg
2016-08-27 11:17 - 2016-03-11 18:37 - 00000000 ____D C:\Program Files (x86)\AVG
2016-08-27 11:17 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-08-27 11:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System
2016-08-27 10:59 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-27 10:59 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-08-27 10:57 - 2015-03-18 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-27 10:56 - 2015-03-18 13:45 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-08-27 10:55 - 2015-03-18 13:45 - 00000000 ____D C:\Program Files (x86)\Java
2016-08-26 16:47 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-08-26 16:16 - 2014-11-12 17:49 - 00000000 ____D C:\Users\Michiyo\AppData\Local\CrashDumps
2016-08-26 13:17 - 2014-11-25 15:51 - 00000000 ____D C:\WINDOWS\pss
2016-08-26 12:45 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Seisei Suruhodo, Aishiteru
2016-08-26 11:25 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Ie Uru Onna
2016-08-26 11:10 - 2015-08-04 11:18 - 00000000 ___RD C:\Users\Michiyo\OneDrive
2016-08-26 10:30 - 2013-12-16 20:32 - 00000000 ____D C:\WINDOWS\system32\Drivers\NISx64
2016-08-25 16:56 - 2016-03-30 09:53 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2016-08-23 07:41 - 2015-05-11 12:42 - 00000000 ____D C:\Users\Michiyo\FanFics - Geschichten
2016-08-21 20:02 - 2016-06-08 11:33 - 00000000 ____D C:\Users\Michiyo\Desktop\Video
2016-08-21 10:27 - 2015-12-21 13:18 - 00000000 ____D C:\ProgramData\AMD
2016-08-19 16:35 - 2016-03-11 18:39 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\TURegOpt.exe
2016-08-16 20:19 - 2016-07-16 17:15 - 00000000 ____D C:\Users\Michiyo\Downloads\Suki na Hito ga Iru Koto
2016-08-14 15:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-08-14 01:43 - 2015-12-21 13:21 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-08-14 01:43 - 2015-10-30 20:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat
2016-08-14 01:43 - 2015-10-30 20:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat
2016-08-14 01:43 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-08-13 17:25 - 2015-08-04 11:15 - 00000000 ____D C:\Users\Michiyo\AppData\Local\Packages
2016-08-13 01:07 - 2015-12-21 13:22 - 00000000 ____D C:\Users\Michiyo
2016-08-12 18:11 - 2014-11-08 14:41 - 00000000 ____D C:\ProgramData\Skype
2016-08-12 15:05 - 2014-11-08 19:10 - 00000000 ____D C:\Program Files (x86)\AMD
2016-08-12 15:02 - 2015-12-21 13:17 - 00000000 ____D C:\Program Files\AMD
2016-08-12 14:29 - 2015-07-01 22:23 - 00000000 ____D C:\Users\Michiyo\AppData\Local\JDownloader 2.0
2016-08-12 09:08 - 2015-08-04 11:15 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-08-12 09:05 - 2015-07-15 19:34 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2016-08-12 09:01 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-08-12 09:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-08-12 01:07 - 2016-01-22 14:05 - 07258160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdag.dll
2016-08-12 01:07 - 2016-01-22 14:04 - 00137224 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiu9pag.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 09340136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiumdva.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 09131736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 01273928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2016-08-12 01:07 - 2015-12-16 21:06 - 00152800 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atiuxpag.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 10995344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 10317568 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiumd6a.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 01547544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2016-08-12 01:07 - 2015-10-07 17:19 - 00183952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atiuxp64.dll
2016-08-12 01:06 - 2016-01-22 14:00 - 00521728 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2016-08-12 01:06 - 2016-01-22 14:00 - 00287232 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2016-08-12 01:06 - 2016-01-22 13:59 - 01323008 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2016-08-12 01:06 - 2015-10-07 17:19 - 26706432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmdag.sys
2016-08-12 01:06 - 2015-10-07 17:19 - 00518656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Drivers\atikmpag.sys
2016-08-11 17:19 - 2013-12-16 20:33 - 00101112 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2016-08-11 17:19 - 2013-12-16 20:33 - 00008270 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2016-08-11 16:01 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2016-08-11 16:01 - 2013-12-17 10:23 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-08-11 15:53 - 2013-12-17 10:23 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-08-08 22:13 - 2015-01-02 15:06 - 00000000 ____D C:\ProgramData\Electronic Arts
2016-08-08 11:25 - 2014-11-08 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-08-03 21:08 - 2016-03-11 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-07-31 17:30 - 2016-05-19 17:32 - 00000000 ____D C:\Users\Michiyo\Downloads\extracted

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-08-04 11:23 - 2015-08-04 11:23 - 0000000 _____ () C:\Program Files (x86)\Common Files\AMD
2014-11-11 20:14 - 2016-08-29 23:00 - 0000132 _____ () C:\Users\Michiyo\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-12-24 02:38 - 2014-12-24 02:38 - 0003584 _____ () C:\Users\Michiyo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-08-26 15:34 - 2016-08-26 15:34 - 0000017 _____ () C:\Users\Michiyo\AppData\Local\resmon.resmoncfg
2014-12-26 19:39 - 2014-12-26 19:39 - 0000040 ___SH () C:\ProgramData\.zreglib
2014-12-26 19:46 - 2014-12-26 19:46 - 0028672 _____ () C:\ProgramData\data.dll
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\iml.xml
2011-05-22 15:09 - 2011-05-22 15:09 - 0019624 _____ () C:\ProgramData\winiml.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\data.dll
C:\ProgramData\winiml.dat
C:\Users\Michiyo\VisualBoyAdvance.exe


Einige Dateien in TEMP:
====================
C:\Users\Michiyo\AppData\Local\Temp\libeay32.dll
C:\Users\Michiyo\AppData\Local\Temp\msvcr120.dll
C:\Users\Michiyo\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-08-30 14:12

==================== Ende von FRST.txt ============================

DanielaS 30.08.2016 14:47
Ich hoffe ich mache bis jetzt alles richtig :)

Deathkid535 31.08.2016 08:47
Hi,

ja alles super gemacht :daumenhoc

Bestehen die Probleme noch?

DanielaS 31.08.2016 09:13
Hallo ja das Problem ist dennoch LEIDER immer noch da.
Er ist nur etwas schneller geworden also er braucht wenigstens keine 10min mehr um was an zu zeigen :D
Sagen wir 2-3min :D

Weiße Icons sind aber noch da
Keine Vorschau mehr in Bilder und immer noch keine Detail Anzeige :( Explorer braucht eben noch etwas lange
bis er mal komplett fertig geladen hat uu"

Neue Ordner benennt er nicht um ;/

Deathkid535 31.08.2016 14:29
Hi,

mach mal bitte das und berichte:

Windows reparieren - so geht's - Anleitungen

DanielaS 31.08.2016 17:11
Ich bin mittlerweile bei Punkt 5 Wiederherstellung
Was genau wird wieder hergestellt?
Doch nicht der ganze PC das alles weg ist? O_O
Und wie lange dauert das ungefair? :)

Deathkid535 31.08.2016 17:14
Also wenn du der Anleitung richtig folgst solltest du keine Daten verlieren. Das ganze läuft in etwa 1 Stunde in der Regel, kann aber länger oder kürzer auch dauern.


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:25 Uhr.
Seite 1 von 4 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131