Trojaner-Board - BKA-Trojaner

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-11-2017

durchgeführt von packard (Administrator) auf PACKARD-PC (01-12-2017 17:00:02)

Gestartet von C:\Users\Wolf_sicherer Zugang\Desktop

Geladene Profile: packard & Wolf_sicherer Zugang (Verfügbare Profile: packard & radarpostgres & Wolf_sicherer Zugang & DefaultAppPool)

Platform: Windows 10 Home Version 1703 15063.726 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe

(Avanquest Software) C:\Program Files\eXpert PDF 10\creator-ws.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe

(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Acer Group) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(mobile concepts GmbH) C:\Program Files\CyberGhost VPN\CGVPNCliService.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(PostgreSQL Global Development Group) C:\RadarOpus-PostgreSQL\bin\postgres.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe

(Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe

(PostgreSQL Global Development Group) C:\RadarOpus-PostgreSQL\bin\postgres.exe

(PostgreSQL Global Development Group) C:\RadarOpus-PostgreSQL\bin\postgres.exe

(PostgreSQL Global Development Group) C:\RadarOpus-PostgreSQL\bin\postgres.exe

(PostgreSQL Global Development Group) C:\RadarOpus-PostgreSQL\bin\postgres.exe

(PostgreSQL Global Development Group) C:\RadarOpus-PostgreSQL\bin\postgres.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

() C:\Windows\PLFSetI.exe

(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe

(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe

(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe

(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdwtxag.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2017-10-30] (Realtek Semiconductor)

HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-02-26] ()

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3951280 2016-01-07] (Synaptics Incorporated)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-10-20] (Apple Inc.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3222448 2017-10-12] (Dominik Reichl)

HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2016-02-03] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [1944576 2013-03-07] (Brother Industries, Ltd.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)

HKU\S-1-5-21-3601177453-726161993-3460598383-1001\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1160536 2015-02-23] (Ruiware LLC)

HKU\S-1-5-21-3601177453-726161993-3460598383-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517120 2017-03-18] (Microsoft Corporation)

HKU\S-1-5-21-3601177453-726161993-3460598383-1010\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [797328 2016-06-14] (Sandboxie Holdings, LLC)

HKU\S-1-5-21-3601177453-726161993-3460598383-1010\...\Run: [1&1_1&1 Upload-Manager] => C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2017-05-14] ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-10-18]

ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{632257cb-43f2-4fa3-8b0a-38c7c1b6db62}: [DhcpNameServer] 192.168.42.129

Tcpip\..\Interfaces\{66283cdd-cd9f-4358-b3cc-2299247e253d}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{7249c5cc-3206-4289-b698-4f044f845cd1}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{8ba048e9-ceb2-43d3-963f-618161b45165}: [DhcpNameServer] 192.168.100.254

Tcpip\..\Interfaces\{a5bd5a1f-e7a0-4f10-8ba9-6658440a3698}: [DhcpNameServer] 172.20.10.1

Tcpip\..\Interfaces\{fc0d8729-bf28-4cb5-9352-624a7b701f26}: [DhcpNameServer] 172.20.10.1
 

Internet Explorer:

==================

HKU\S-1-5-21-3601177453-726161993-3460598383-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-3601177453-726161993-3460598383-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-3601177453-726161993-3460598383-1010\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset

SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW

SearchScopes: HKU\S-1-5-21-3601177453-726161993-3460598383-1001 -> {4C7F4727-DA9F-4C58-B504-4BF6D8B3EFC2} URL = hxxp://suche.web.de/search/web/?su={searchTerms}&origin=searchplugin

SearchScopes: HKU\S-1-5-21-3601177453-726161993-3460598383-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search

SearchScopes: HKU\S-1-5-21-3601177453-726161993-3460598383-1010 -> {BB8756C3-D69B-4DE6-9B6F-4CAFB7546537} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-17] (Bitdefender)

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-09-05] (Microsoft Corporation)

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft Corporation)

BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-11-07] (DVDVideoSoft Ltd.)

BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-17] (Bitdefender)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2017-08-15] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-08-04] (Oracle Corporation)

BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-09-05] (Microsoft Corporation)

BHO-x32: eXpert PDF 10 Helper -> {D9B7E477-2C0F-4BCA-B63F-9AF4E03D05E1} -> C:\Program Files (x86)\eXpert PDF 10\creator-ie-helper.dll [2016-04-11] (Avanquest Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-04] (Oracle Corporation)

BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-11-11] (DVDVideoSoft Ltd.)

Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-17] (Bitdefender)

Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-11-17] (Bitdefender)

Toolbar: HKLM-x32 - eXpert PDF 10 Toolbar - {570F0ABC-DF49-4A09-8687-79F921605B7A} - C:\Program Files (x86)\eXpert PDF 10\creator-ie-plugin.dll [2016-04-11] (Avanquest Software)

Toolbar: HKU\S-1-5-21-3601177453-726161993-3460598383-1001 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Keine Datei

Toolbar: HKU\S-1-5-21-3601177453-726161993-3460598383-1001 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-17] (Bitdefender)

Toolbar: HKU\S-1-5-21-3601177453-726161993-3460598383-1010 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-11-17] (Bitdefender)

DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Technologies)

Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll [2013-10-16] (1und1 Mail und Media GmbH)

Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll [2013-10-16] (1und1 Mail und Media GmbH)
 

FireFox:

========

FF DefaultProfile: 35j3hzcu.default-1498225085275

FF ProfilePath: C:\Users\packard\AppData\Roaming\Mozilla\Firefox\Profiles\35j3hzcu.default-1498225085275 [2017-10-28]

FF Homepage: Mozilla\Firefox\Profiles\35j3hzcu.default-1498225085275 -> hxxps://web.de/

FF Extension: (FoxyDeal) - C:\Users\packard\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-05-26] [Lagacy] [ist nicht signiert]

FF Extension: (WEB.DE MailCheck) - C:\Users\packard\AppData\Roaming\Mozilla\Firefox\Profiles\35j3hzcu.default-1498225085275\Extensions\browser-mailcheck@web.de [2017-10-28] [Lagacy]

FF Extension: (HTTPS Everywhere) - C:\Users\packard\AppData\Roaming\Mozilla\Firefox\Profiles\35j3hzcu.default-1498225085275\Extensions\https-everywhere@eff.org.xpi [2017-10-28] [Lagacy]

FF Extension: (uBlock Origin) - C:\Users\packard\AppData\Roaming\Mozilla\Firefox\Profiles\35j3hzcu.default-1498225085275\Extensions\uBlock0@raymondhill.net.xpi [2017-06-25] [Lagacy]

FF Extension: (NoScript) - C:\Users\packard\AppData\Roaming\Mozilla\Firefox\Profiles\35j3hzcu.default-1498225085275\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-10-28] [Lagacy]

FF Extension: (WEB.DE MailCheck) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\browser-mailcheck@web.de [2017-08-09] [Lagacy]

FF HKLM\...\Firefox\Extensions: [{8C679308-89F3-402C-9323-8D9B3B6D57B2}] - C:\Program Files (x86)\Recordify\Extensions\recordify_title_discover-0.1.14-fx-windows.xpi => nicht gefunden

FF HKLM\...\Firefox\Extensions: [expert_pdf_10_conv@expert-pdf.com] - C:\Program Files\eXpert PDF 10\resources\expertpdf10firefoxextension

FF Extension: (eXpert PDF 10 Creator) - C:\Program Files\eXpert PDF 10\resources\expertpdf10firefoxextension [2017-06-15] [Lagacy] [ist nicht signiert]

FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff

FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff [2017-09-14]

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext

FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2016-12-13] [Lagacy] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF => nicht gefunden

FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt

FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-05-05] [Lagacy] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext

FF HKU\S-1-5-21-3601177453-726161993-3460598383-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff

FF Extension: (Download videos and MP3s from YouTube) - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-16] [Lagacy] [ist nicht signiert]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-17] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-11-28] (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-17] ()

FF Plugin-x32: @Bitdefender.com/PasswordManager;version=17.8 -> C:\Program Files\Bitdefender\Bitdefender\Antispam32\pmbxnp.dll [Keine Datei]

FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-04] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-04] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)

FF Plugin-x32: @sony.com/ReaderDesktop -> C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll [2014-10-24] (Sony Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)

FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2016-11-28] (Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)

FF Plugin-x32: eXpert PDF 10 -> C:\Program Files (x86)\eXpert PDF 10\np-previewer.dll [2016-04-11] (Avanquest Software)

FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-11-28] (Tracker Software Products (Canada) Ltd.)

FF Plugin HKU\S-1-5-21-3601177453-726161993-3460598383-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-11-28] (Tracker Software Products (Canada) Ltd.)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR StartupUrls: Default -> "hxxp://www.web.de/"

CHR Profile: C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default [2016-11-26]

CHR Extension: (ProxTube) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2013-11-23] [UpdateUrl: hxxps://proxtube.com/dl/updates.xml] <==== ACHTUNG

CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd [2014-03-18]

CHR Extension: (WOT) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-11-23]

CHR Extension: (Kein Name) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-22]

CHR Extension: (Kein Name) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-22]

CHR Extension: (Mahjong Solitaire) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\neojceinbonpjjcokpokpeobkhcpiloc [2012-10-25]

CHR Extension: (Google Wallet) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-23]

CHR Extension: (Kein Name) - C:\Users\packard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-09]

CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-10-11] (Apple Inc.)

R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [29912 2015-09-15] (AOMEI Tech Co., Ltd.) [Datei ist nicht signiert]

R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2090152 2017-09-14] (Bitdefender)

R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Datei ist nicht signiert]

R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)

S3 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-08-08] (CyberGhost S.R.L)

R2 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058416 2017-09-05] (Microsoft Corporation)

R2 Crypkey License; C:\WINDOWS\system32\crypserv.exe [122880 2007-05-23] (CrypKey (Canada) Ltd.) [Datei ist nicht signiert]

R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [103072 2017-09-14] (Bitdefender)

S3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [867360 2010-04-23] (Acer Incorporated)

S3 eXpert PDF 10; C:\Program Files\eXpert PDF 10\ws.exe [2319560 2016-04-11] (Avanquest Software)

S3 eXpert PDF 10 CrashHandler; C:\Program Files\eXpert PDF 10\crash-handler-ws.exe [920264 2016-04-11] (Avanquest Software)

R2 eXpert PDF 10 Creator; C:\Program Files\eXpert PDF 10\creator-ws.exe [733384 2016-04-11] (Avanquest Software)

S4 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Datei ist nicht signiert]

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)

S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [Datei ist nicht signiert]

S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender)

S2 radarpostgresql-9.1; C:\RadarOpus-PostgreSQL\bin\pg_ctl.exe [110592 2012-08-09] (PostgreSQL Global Development Group) [Datei ist nicht signiert]

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [197264 2016-06-14] (Sandboxie Holdings, LLC)

R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)

R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)

S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2014-04-25] (Sony Corporation) [Datei ist nicht signiert]

S3 Steganos Anonym VPN Starter Service; C:\Program Files (x86)\Steganos Internet Anonym 2012\VPNService.exe [267928 2011-08-25] (Steganos Software GmbH)

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246448 2016-01-07] (Synaptics Incorporated)

R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)

R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [218416 2017-11-17] (Bitdefender)

R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1230880 2017-11-17] (Bitdefender)

R2 vsservp; C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe [524872 2016-08-25] (Bitdefender)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 abelssoft_recordify; C:\WINDOWS\system32\drivers\recordify.sys [68536 2016-03-30] (Abelssoft)

R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [30648 2015-02-25] () [Datei ist nicht signiert]

R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [151480 2015-02-25] () [Datei ist nicht signiert]

R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [17848 2015-02-25] () [Datei ist nicht signiert]

R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1019880 2017-10-02] (BitDefender S.R.L. Bucharest, ROMANIA)

R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4318648 2017-03-28] (Qualcomm Atheros Communications, Inc.)

R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [101376 2016-09-15] (Advanced Micro Devices)

R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1763744 2017-10-02] (BitDefender)

S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23672 2016-03-14] (Bitdefender)

R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [133088 2017-07-26] (BitDefender LLC)

R2 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [47376 2017-11-24] (© Bitdefender SRL)

R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)

R3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [32840 2017-07-04] (ELAN Microelectronic Corp.)

R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [187688 2017-09-14] (BitDefender LLC)

R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-12] (REALiX(tm))

R0 ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [362664 2017-10-02] (Bitdefender)

R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-28] (Malwarebytes)

R1 NetworkX; C:\WINDOWS\system32\ckldrv.sys [27904 2007-05-17] ()

R3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [204944 2016-06-14] (Sandboxie Holdings, LLC)

S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()

S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42664 2016-01-07] (Synaptics Incorporated)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)

S3 SWDUMon; C:\WINDOWS\System32\DRIVERS\SWDUMon.sys [16152 2014-03-18] ()

R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [439576 2017-09-14] (BitDefender S.R.L.)

R1 ui11rdr; C:\WINDOWS\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)

R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [198248 2016-03-05] (IDRIX)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-12-01 17:00 - 2017-12-01 17:01 - 000032660 _____ C:\Users\Wolf_sicherer Zugang\Desktop\FRST.txt

2017-12-01 16:59 - 2017-12-01 16:59 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\Desktop\FRST-OlderVersion

2017-11-27 21:58 - 2017-11-27 21:58 - 000076643 _____ C:\Users\packard\Desktop\Addition.txt

2017-11-27 21:58 - 2017-11-27 21:58 - 000001048 _____ C:\Users\packard\Desktop\Addition.txt - Verknüpfung.lnk

2017-11-27 21:58 - 2017-11-27 21:58 - 000001008 _____ C:\Users\packard\Desktop\FRST.txt - Verknüpfung.lnk

2017-11-27 21:56 - 2017-11-27 22:13 - 000085454 _____ C:\Users\packard\Desktop\FRST.txt

2017-11-27 21:42 - 2017-11-27 21:43 - 000076640 _____ C:\Users\Wolf_sicherer Zugang\Downloads\Addition.txt

2017-11-27 21:36 - 2017-12-01 17:00 - 000000000 ____D C:\FRST

2017-11-27 21:36 - 2017-11-27 21:43 - 000085451 _____ C:\Users\Wolf_sicherer Zugang\Downloads\FRST.txt

2017-11-27 21:33 - 2017-12-01 16:59 - 002391552 _____ (Farbar) C:\Users\Wolf_sicherer Zugang\Desktop\FRST64.exe

2017-11-26 10:42 - 2017-11-26 10:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-11-25 23:28 - 2017-11-25 23:28 - 000509566 _____ C:\Users\packard\AppData\Local\census.cache

2017-11-25 09:16 - 2017-11-25 09:16 - 002405664 _____ (Trend Micro Inc.) C:\Users\Wolf_sicherer Zugang\Downloads\HousecallLauncher64.exe

2017-11-24 23:41 - 2017-11-24 23:46 - 006974584 _____ (ESET spol. s r.o.) C:\Users\Wolf_sicherer Zugang\Downloads\ESETOnlineScanner_DEU(1).exe

2017-11-24 14:49 - 2017-11-24 14:49 - 000047376 _____ (© Bitdefender SRL) C:\WINDOWS\system32\Drivers\bdprivmon.sys

2017-11-17 18:34 - 2017-11-17 18:34 - 000044029 _____ C:\ProgramData\dm.update.1510939934.bdinstall.bin

2017-11-17 18:32 - 2017-11-17 18:33 - 001204720 _____ (Adobe Systems Incorporated) C:\Users\Wolf_sicherer Zugang\Downloads\flashplayer27ppau_ha_install.exe

2017-11-17 17:55 - 2017-11-02 06:16 - 002398696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2017-11-17 17:55 - 2017-11-02 06:15 - 001239448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2017-11-17 17:55 - 2017-11-02 06:13 - 000546712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2017-11-17 17:55 - 2017-11-02 06:13 - 000095640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys

2017-11-17 17:55 - 2017-11-02 06:12 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2017-11-17 17:55 - 2017-11-02 06:10 - 006557520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2017-11-17 17:55 - 2017-11-02 06:04 - 001292360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2017-11-17 17:55 - 2017-11-02 06:03 - 000223640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll

2017-11-17 17:55 - 2017-11-02 05:49 - 001838848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2017-11-17 17:55 - 2017-11-02 05:45 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2017-11-17 17:55 - 2017-11-02 05:45 - 000613136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2017-11-17 17:55 - 2017-11-02 05:45 - 000362144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2017-11-17 17:55 - 2017-11-02 05:45 - 000354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll

2017-11-17 17:55 - 2017-11-02 05:45 - 000283544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2017-11-17 17:55 - 2017-11-02 05:45 - 000172952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2017-11-17 17:55 - 2017-11-02 05:45 - 000133896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe

2017-11-17 17:55 - 2017-11-02 05:44 - 023680000 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-11-17 17:55 - 2017-11-02 05:44 - 005808640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2017-11-17 17:55 - 2017-11-02 05:44 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2017-11-17 17:55 - 2017-11-02 05:43 - 020372896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2017-11-17 17:55 - 2017-11-02 05:36 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll

2017-11-17 17:55 - 2017-11-02 05:35 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll

2017-11-17 17:55 - 2017-11-02 05:35 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2017-11-17 17:55 - 2017-11-02 05:34 - 012803072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2017-11-17 17:55 - 2017-11-02 05:34 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2017-11-17 17:55 - 2017-11-02 05:34 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2017-11-17 17:55 - 2017-11-02 05:34 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2017-11-17 17:55 - 2017-11-02 05:34 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2017-11-17 17:55 - 2017-11-02 05:34 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll

2017-11-17 17:55 - 2017-11-02 05:32 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2017-11-17 17:55 - 2017-11-02 05:31 - 020512256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-11-17 17:55 - 2017-11-02 05:30 - 013381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll

2017-11-17 17:55 - 2017-11-02 05:30 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2017-11-17 17:55 - 2017-11-02 05:30 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2017-11-17 17:55 - 2017-11-02 05:30 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2017-11-17 17:55 - 2017-11-02 05:30 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2017-11-17 17:55 - 2017-11-02 05:30 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2017-11-17 17:55 - 2017-11-02 05:30 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE

2017-11-17 17:55 - 2017-11-02 05:29 - 019338240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2017-11-17 17:55 - 2017-11-02 05:29 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2017-11-17 17:55 - 2017-11-02 05:29 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2017-11-17 17:55 - 2017-11-02 05:29 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2017-11-17 17:55 - 2017-11-02 05:28 - 023684096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2017-11-17 17:55 - 2017-11-02 05:28 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll

2017-11-17 17:55 - 2017-11-02 05:27 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2017-11-17 17:55 - 2017-11-02 05:27 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2017-11-17 17:55 - 2017-11-02 05:27 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2017-11-17 17:55 - 2017-11-02 05:27 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPKICmdlet.dll

2017-11-17 17:55 - 2017-11-02 05:26 - 008197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-11-17 17:55 - 2017-11-02 05:26 - 005963776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2017-11-17 17:55 - 2017-11-02 05:26 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll

2017-11-17 17:55 - 2017-11-02 05:26 - 001937408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdshext.dll

2017-11-17 17:55 - 2017-11-02 05:26 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2017-11-17 17:55 - 2017-11-02 05:26 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2017-11-17 17:55 - 2017-11-02 05:26 - 000068608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll

2017-11-17 17:55 - 2017-11-02 05:25 - 012227072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll

2017-11-17 17:55 - 2017-11-02 05:25 - 011888128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2017-11-17 17:55 - 2017-11-02 05:25 - 004727808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-11-17 17:55 - 2017-11-02 05:25 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll

2017-11-17 17:55 - 2017-11-02 05:25 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll

2017-11-17 17:55 - 2017-11-02 05:25 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2017-11-17 17:55 - 2017-11-02 05:25 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2017-11-17 17:55 - 2017-11-02 05:24 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2017-11-17 17:55 - 2017-11-02 05:24 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2017-11-17 17:55 - 2017-11-02 05:24 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll

2017-11-17 17:55 - 2017-11-02 05:24 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll

2017-11-17 17:55 - 2017-11-02 05:24 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2017-11-17 17:55 - 2017-11-02 05:23 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2017-11-17 17:55 - 2017-11-02 05:23 - 000680960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll

2017-11-17 17:55 - 2017-11-02 05:23 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2017-11-17 17:55 - 2017-11-02 05:23 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2017-11-17 17:55 - 2017-11-02 05:23 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll

2017-11-17 17:55 - 2017-11-02 05:22 - 006254080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-11-17 17:55 - 2017-11-02 05:22 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2017-11-17 17:55 - 2017-11-02 05:22 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2017-11-17 17:55 - 2017-11-02 05:22 - 001884160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpdshext.dll

2017-11-17 17:55 - 2017-11-02 05:22 - 001494528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll

2017-11-17 17:55 - 2017-11-02 05:21 - 004417024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2017-11-17 17:55 - 2017-11-02 05:21 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-11-17 17:55 - 2017-11-02 05:21 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2017-11-17 17:55 - 2017-11-02 05:21 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2017-11-17 17:55 - 2017-10-25 08:40 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll

2017-11-17 17:55 - 2017-10-15 16:09 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2017-11-17 17:55 - 2017-10-15 16:03 - 006765728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2017-11-17 17:55 - 2017-10-15 16:01 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2017-11-17 17:55 - 2017-10-15 15:53 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2017-11-17 17:55 - 2017-10-15 15:53 - 000387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2017-11-17 17:55 - 2017-10-15 15:49 - 000094616 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2017-11-17 17:55 - 2017-10-15 15:49 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll

2017-11-17 17:55 - 2017-10-15 15:45 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll

2017-11-17 17:55 - 2017-10-15 15:45 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2017-11-17 17:55 - 2017-10-15 15:44 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2017-11-17 17:55 - 2017-10-15 15:44 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll

2017-11-17 17:55 - 2017-10-15 15:42 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2017-11-17 17:55 - 2017-10-15 15:42 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll

2017-11-17 17:55 - 2017-10-15 15:41 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2017-11-17 17:55 - 2017-10-15 15:41 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2017-11-17 17:55 - 2017-10-15 15:38 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2017-11-17 17:55 - 2017-10-15 15:14 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll

2017-11-17 17:55 - 2017-10-15 15:10 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll

2017-11-17 17:54 - 2017-11-02 06:21 - 001578904 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2017-11-17 17:54 - 2017-11-02 06:21 - 000678808 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll

2017-11-17 17:54 - 2017-11-02 06:21 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll

2017-11-17 17:54 - 2017-11-02 06:21 - 000379288 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll

2017-11-17 17:54 - 2017-11-02 06:21 - 000190360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2017-11-17 17:54 - 2017-11-02 06:21 - 000136088 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe

2017-11-17 17:54 - 2017-11-02 06:20 - 002032536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2017-11-17 17:54 - 2017-11-02 06:20 - 001144728 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2017-11-17 17:54 - 2017-11-02 06:20 - 001015704 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2017-11-17 17:54 - 2017-11-02 06:20 - 000965016 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi

2017-11-17 17:54 - 2017-11-02 06:20 - 000821656 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe

2017-11-17 17:54 - 2017-11-02 06:20 - 000613784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll

2017-11-17 17:54 - 2017-11-02 06:20 - 000543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2017-11-17 17:54 - 2017-11-02 06:20 - 000484248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll

2017-11-17 17:54 - 2017-11-02 06:20 - 000469568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll

2017-11-17 17:54 - 2017-11-02 06:20 - 000259992 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll

2017-11-17 17:54 - 2017-11-02 06:20 - 000034712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe

2017-11-17 17:54 - 2017-11-02 06:16 - 008319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2017-11-17 17:54 - 2017-11-02 06:16 - 002327448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2017-11-17 17:54 - 2017-11-02 06:15 - 000503704 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll

2017-11-17 17:54 - 2017-11-02 06:14 - 000667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2017-11-17 17:54 - 2017-11-02 06:14 - 000067992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll

2017-11-17 17:54 - 2017-11-02 06:13 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2017-11-17 17:54 - 2017-11-02 06:13 - 002443672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2017-11-17 17:54 - 2017-11-02 06:13 - 001345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2017-11-17 17:54 - 2017-11-02 06:13 - 000212888 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2017-11-17 17:54 - 2017-11-02 06:12 - 000727336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2017-11-17 17:54 - 2017-11-02 06:12 - 000714648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys

2017-11-17 17:54 - 2017-11-02 06:12 - 000643192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2017-11-17 17:54 - 2017-11-02 06:12 - 000430848 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll

2017-11-17 17:54 - 2017-11-02 06:12 - 000412752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2017-11-17 17:54 - 2017-11-02 06:12 - 000319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2017-11-17 17:54 - 2017-11-02 06:12 - 000144248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe

2017-11-17 17:54 - 2017-11-02 06:12 - 000038808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Diskdump.sys

2017-11-17 17:54 - 2017-11-02 06:12 - 000026472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2017-11-17 17:54 - 2017-11-02 06:11 - 021353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2017-11-17 17:54 - 2017-11-02 06:05 - 000871408 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2017-11-17 17:54 - 2017-11-02 06:05 - 000187800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2017-11-17 17:54 - 2017-11-02 05:37 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2017-11-17 17:54 - 2017-11-02 05:37 - 001278976 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll

2017-11-17 17:54 - 2017-11-02 05:37 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2017-11-17 17:54 - 2017-11-02 05:37 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE

2017-11-17 17:54 - 2017-11-02 05:37 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2017-11-17 17:54 - 2017-11-02 05:36 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll

2017-11-17 17:54 - 2017-11-02 05:35 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2017-11-17 17:54 - 2017-11-02 05:35 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Dumpstorport.sys

2017-11-17 17:54 - 2017-11-02 05:35 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll

2017-11-17 17:54 - 2017-11-02 05:34 - 000438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll

2017-11-17 17:54 - 2017-11-02 05:34 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe

2017-11-17 17:54 - 2017-11-02 05:34 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2017-11-17 17:54 - 2017-11-02 05:33 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2017-11-17 17:54 - 2017-11-02 05:33 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll

2017-11-17 17:54 - 2017-11-02 05:33 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll

2017-11-17 17:54 - 2017-11-02 05:33 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2017-11-17 17:54 - 2017-11-02 05:33 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPKICmdlet.dll

2017-11-17 17:54 - 2017-11-02 05:32 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2017-11-17 17:54 - 2017-11-02 05:32 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll

2017-11-17 17:54 - 2017-11-02 05:31 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2017-11-17 17:54 - 2017-11-02 05:31 - 000411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2017-11-17 17:54 - 2017-11-02 05:31 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll

2017-11-17 17:54 - 2017-11-02 05:30 - 007339008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2017-11-17 17:54 - 2017-11-02 05:30 - 000719872 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll

2017-11-17 17:54 - 2017-11-02 05:30 - 000635392 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll

2017-11-17 17:54 - 2017-11-02 05:30 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll

2017-11-17 17:54 - 2017-11-02 05:30 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2017-11-17 17:54 - 2017-11-02 05:29 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2017-11-17 17:54 - 2017-11-02 05:29 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll

2017-11-17 17:54 - 2017-11-02 05:28 - 001468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2017-11-17 17:54 - 2017-11-02 05:28 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll

2017-11-17 17:54 - 2017-11-02 05:28 - 000799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2017-11-17 17:54 - 2017-11-02 05:28 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2017-11-17 17:54 - 2017-11-02 05:27 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll

2017-11-17 17:54 - 2017-11-02 05:27 - 000537600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll

2017-11-17 17:54 - 2017-11-02 05:27 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll

2017-11-17 17:54 - 2017-11-02 05:26 - 004445696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2017-11-17 17:54 - 2017-11-02 05:26 - 003060224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2017-11-17 17:54 - 2017-11-02 05:26 - 002809344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2017-11-17 17:54 - 2017-11-02 05:26 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2017-11-17 17:54 - 2017-11-02 05:25 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2017-11-17 17:54 - 2017-11-02 05:25 - 002052608 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2017-11-17 17:54 - 2017-11-02 05:25 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2017-11-17 17:54 - 2017-11-02 05:25 - 001713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll

2017-11-17 17:54 - 2017-11-02 05:25 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2017-11-17 17:54 - 2017-11-02 05:25 - 000877568 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2017-11-17 17:54 - 2017-11-02 05:25 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll

2017-11-17 17:54 - 2017-11-02 05:24 - 004707840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2017-11-17 17:54 - 2017-11-02 05:23 - 002449408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2017-11-17 17:54 - 2017-11-02 05:23 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2017-11-17 17:54 - 2017-11-02 05:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys

2017-11-17 17:54 - 2017-10-15 15:59 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2017-11-17 17:54 - 2017-10-15 15:57 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2017-11-17 17:54 - 2017-10-15 15:57 - 000409496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2017-11-17 17:54 - 2017-10-15 15:56 - 000872464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2017-11-17 17:54 - 2017-10-15 15:55 - 007910960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2017-11-17 17:54 - 2017-10-15 15:51 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2017-11-17 17:54 - 2017-10-15 15:15 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2017-11-17 17:54 - 2017-10-15 15:13 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll

2017-11-17 17:54 - 2017-10-15 15:09 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2017-11-17 17:54 - 2017-10-15 15:09 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2017-11-17 17:54 - 2017-10-15 15:08 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2017-11-17 17:54 - 2017-10-15 15:08 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll

2017-11-17 17:54 - 2017-10-15 15:07 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2017-11-17 17:54 - 2017-10-15 15:05 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll

2017-11-17 17:54 - 2017-10-15 15:05 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2017-11-17 17:54 - 2017-10-15 15:04 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2017-11-17 17:54 - 2017-10-15 15:02 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll

2017-11-17 17:54 - 2017-10-15 15:00 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll

2017-11-17 16:42 - 2017-11-17 16:42 - 000311248 _____ (Mozilla) C:\Users\Wolf_sicherer Zugang\Downloads\Firefox Installer(1).exe

2017-11-14 14:49 - 2017-11-14 14:49 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-3601177453-726161993-3460598383-1010

2017-11-12 15:58 - 2017-11-12 16:11 - 000000440 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics

2017-11-06 15:20 - 2017-11-06 15:20 - 000018980 _____ C:\Users\Wolf_sicherer Zugang\Downloads\Blutwerte 2017-11-06.tif

2017-11-06 07:55 - 2017-11-06 07:55 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\Local\TempTaskUpdateDetection027EFF7E-253A-46BB-AC5A-C672A241A92D

2017-11-02 18:14 - 2017-11-02 18:14 - 000001828 _____ C:\Users\Public\Desktop\iTunes.lnk

2017-11-02 18:14 - 2017-11-02 18:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

2017-11-02 18:14 - 2017-11-02 18:14 - 000000000 ____D C:\Program Files\iPod

2017-11-02 18:12 - 2017-11-02 18:14 - 000000000 ____D C:\Program Files\iTunes

2017-11-02 18:07 - 2017-11-02 18:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple

2017-11-02 18:07 - 2017-11-02 18:07 - 000000000 ____D C:\Program Files (x86)\Apple Software Update

2017-11-01 09:28 - 2017-11-01 09:29 - 003224744 _____ (Dominik Reichl ) C:\Users\Wolf_sicherer Zugang\Downloads\KeePass-2.37-Setup.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-12-01 16:51 - 2017-05-15 00:03 - 000004190 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0E0E0141-3105-4633-A928-C5E205DAFE1E}

2017-12-01 16:38 - 2017-05-14 23:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2017-12-01 15:26 - 2017-03-16 17:33 - 000001005 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2017-12-01 15:26 - 2016-11-17 09:50 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\LocalLow\Mozilla

2017-12-01 15:26 - 2016-09-26 22:42 - 000001017 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2017-12-01 15:26 - 2016-05-08 14:33 - 000000000 ____D C:\Program Files\Mozilla Firefox

2017-12-01 15:26 - 2012-05-12 14:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2017-12-01 14:55 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps

2017-12-01 14:55 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\AppReadiness

2017-11-30 17:08 - 2014-04-05 15:07 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\Roaming\KeePass

2017-11-30 17:02 - 2016-04-06 19:33 - 000026850 _____ C:\WINDOWS\BRRBCOM.INI

2017-11-29 21:52 - 2017-05-14 23:19 - 004375402 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-11-29 21:52 - 2017-03-20 05:35 - 002127642 _____ C:\WINDOWS\system32\perfh007.dat

2017-11-29 21:52 - 2017-03-20 05:35 - 000545546 _____ C:\WINDOWS\system32\perfc007.dat

2017-11-26 10:59 - 2016-01-10 10:47 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\Local\Comms

2017-11-26 10:58 - 2014-04-08 18:13 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\Roaming\Skype

2017-11-26 10:42 - 2015-12-20 09:30 - 000002642 _____ C:\Users\Public\Desktop\Skype.lnk

2017-11-26 10:42 - 2015-09-23 12:14 - 000000000 ___RD C:\Program Files (x86)\Skype

2017-11-26 10:42 - 2010-10-23 15:46 - 000000000 ____D C:\ProgramData\Skype

2017-11-25 23:27 - 2015-10-17 13:21 - 000170373 _____ C:\Users\packard\AppData\Local\ars.cache

2017-11-25 19:20 - 2015-01-03 19:52 - 000021070 _____ C:\Users\Wolf_sicherer Zugang\Documents\NeueDatenbank01_15.kdbx

2017-11-25 12:27 - 2017-03-18 22:01 - 000000000 ____D C:\WINDOWS\INF

2017-11-24 23:48 - 2017-03-04 15:35 - 000000000 ____D C:\Users\packard\AppData\Local\ESET

2017-11-24 18:21 - 2017-03-18 12:40 - 000065536 _____ C:\WINDOWS\system32\config\ELAM

2017-11-24 18:16 - 2017-05-15 00:04 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-11-24 18:15 - 2017-03-18 12:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI

2017-11-24 18:15 - 2014-02-14 22:41 - 000742547 _____ C:\bdlog.txt

2017-11-22 17:58 - 2017-03-18 22:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-11-22 17:56 - 2013-06-17 19:16 - 000000000 ____D C:\Program Files\Microsoft Office 15

2017-11-20 10:41 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\rescache

2017-11-17 20:19 - 2017-05-14 23:12 - 000518544 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2017-11-17 20:13 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\appraiser

2017-11-17 20:13 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\ShellExperiences

2017-11-17 20:13 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\Provisioning

2017-11-17 20:13 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2017-11-17 20:13 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2017-11-17 18:56 - 2014-10-05 13:56 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\Local\Adobe

2017-11-17 18:38 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2017-11-17 18:38 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Macromed

2017-11-17 18:36 - 2017-05-15 00:03 - 000004654 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier

2017-11-17 18:34 - 2014-10-18 09:23 - 000000000 ____D C:\Users\packard\AppData\Local\Adobe

2017-11-17 18:25 - 2014-08-30 18:57 - 000000000 ____D C:\WINDOWS\system32\MRT

2017-11-17 18:09 - 2017-10-11 20:50 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe

2017-11-17 18:09 - 2017-03-18 21:51 - 000000000 ____D C:\WINDOWS\CbsTemp

2017-11-17 18:09 - 2010-10-20 21:49 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-11-17 17:00 - 2014-04-05 10:17 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\Roaming\Mozilla

2017-11-17 16:20 - 2012-10-11 20:15 - 000002276 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-11-17 16:05 - 2017-05-15 00:03 - 000003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2017-11-17 16:05 - 2017-05-15 00:03 - 000003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2017-11-17 15:18 - 2016-01-08 18:47 - 000000000 ____D C:\Program Files\Bitdefender Agent

2017-11-14 15:38 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\NDF

2017-11-11 15:15 - 2014-04-05 14:34 - 000000000 ____D C:\Users\Wolf_sicherer Zugang\AppData\Local\CyberGhost

2017-11-10 20:17 - 2014-06-07 14:53 - 000013229 _____ C:\Users\Wolf_sicherer Zugang\Documents\Weinliste.xlsx

2017-11-08 23:41 - 2017-05-14 23:20 - 000000000 ____D C:\Users\Wolf_sicherer Zugang

2017-11-08 16:28 - 2017-07-28 14:33 - 000003396 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3601177453-726161993-3460598383-1010

2017-11-08 16:28 - 2016-01-10 10:31 - 000002480 _____ C:\Users\Wolf_sicherer Zugang\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-11-08 16:28 - 2016-01-10 10:31 - 000000000 ___RD C:\Users\Wolf_sicherer Zugang\OneDrive

2017-11-05 02:40 - 2017-03-18 22:06 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2017-11-05 02:40 - 2017-03-18 22:06 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2017-11-02 18:07 - 2014-08-03 13:05 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk

2017-11-01 09:31 - 2011-11-01 11:53 - 000001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk

2017-11-01 09:31 - 2011-11-01 11:53 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-11-21 13:46 - 2004-11-10 05:36 - 001140617 _____ (Red Hat) C:\Users\Wolf_sicherer\cygwin1.dll

2015-11-21 13:46 - 2005-02-16 02:01 - 000232153 _____ () C:\Users\Wolf_sicherer\mkisofs.exe

2015-10-17 13:21 - 2017-11-25 23:27 - 000170373 _____ () C:\Users\packard\AppData\Local\ars.cache

2017-11-25 23:28 - 2017-11-25 23:28 - 000509566 _____ () C:\Users\packard\AppData\Local\census.cache

2015-10-17 12:24 - 2015-10-17 12:24 - 000000036 _____ () C:\Users\packard\AppData\Local\housecall.guid.cache
 

Einige Dateien in TEMP:

====================

2017-08-04 14:38 - 2017-08-04 14:38 - 000740416 _____ (Oracle Corporation) C:\Users\Wolf_sicherer Zugang\AppData\Local\Temp\jre-8u144-windows-au.exe

2017-11-26 10:27 - 2017-11-26 10:37 - 058818504 _____ (Skype Technologies S.A.) C:\Users\Wolf_sicherer Zugang\AppData\Local\Temp\SkypeSetup.exe

2017-07-29 16:30 - 2017-07-29 16:33 - 030950664 _____ () C:\Users\Wolf_sicherer Zugang\AppData\Local\Temp\vlc-2.2.6-win32.exe
 

Einige mit null Byte Größe Dateien/Ordner:

==========================

C:\Windows\EH.EXE
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-11-29 11:49
 

==================== Ende von FRST.txt ============================

Sory für die späte Antwort. Ich hatte sofort am Montag-Abend geantwortet, aber es wurde wohl nicht losgeschickt. Hier nochmal ein neuer Suchlauf mit Farbar. -diesmal in 2 Posts aufgespalten-
Adebar

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-11-2017

durchgeführt von packard (01-12-2017 17:03:27)

Gestartet von C:\Users\Wolf_sicherer Zugang\Desktop

Windows 10 Home Version 1703 15063.726 (X64) (2017-05-16 15:24:12)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-3601177453-726161993-3460598383-500 - Administrator - Disabled)

ASPNET (S-1-5-21-3601177453-726161993-3460598383-1004 - Limited - Enabled)

DefaultAccount (S-1-5-21-3601177453-726161993-3460598383-503 - Limited - Disabled)

Gast (S-1-5-21-3601177453-726161993-3460598383-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3601177453-726161993-3460598383-1008 - Limited - Enabled)

packard (S-1-5-21-3601177453-726161993-3460598383-1001 - Administrator - Enabled) => C:\Users\packard

postgres (S-1-5-21-3601177453-726161993-3460598383-1011 - Limited - Enabled)

radarpostgres (S-1-5-21-3601177453-726161993-3460598383-1009 - Limited - Enabled) => C:\Users\radarpostgres

Wolf_sicherer Zugang (S-1-5-21-3601177453-726161993-3460598383-1010 - Limited - Enabled) => C:\Users\Wolf_sicherer Zugang
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Bitdefender Virenschutz (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}

AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

1&1 Upload-Manager (HKLM-x32\...\1&1 Upload-Manager) (Version: 2.0.676 - 1&1 Internet AG)

4660_4680_Help (HKLM-x32\...\{3B540E44-8382-4899-B481-1E2E02E38F3E}) (Version: 1.00.0000 - Hewlett-Packard) Hidden

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)

Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)

Adobe Digital Editions 3.0 (HKLM-x32\...\Adobe Digital Editions 3.0) (Version: 3.0.1 - Adobe Systems Incorporated)

Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)

Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)

Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)

Advertising Center (HKLM-x32\...\{B2EC4A38-B545-4A00-8214-13FE0E915E6D}) (Version: 0.0.0.2 - Nero AG) Hidden

Alcor Micro USB Card Reader (HKLM-x32\...\{6030FCD7-8F1A-427D-AF05-8DD1A2EA2ABA}) (Version: 1.5.17.05094 - Alcor Micro Corp.) Hidden

Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{6030FCD7-8F1A-427D-AF05-8DD1A2EA2ABA}) (Version: 1.5.17.05094 - Alcor Micro Corp.)

Amazon Kindle (HKU\S-1-5-21-3601177453-726161993-3460598383-1001\...\Amazon Kindle) (Version:  - Amazon)

Amazon Kindle (HKU\S-1-5-21-3601177453-726161993-3460598383-1010\...\Amazon Kindle) (Version:  - Amazon)

AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)

AOMEI Backupper Standard (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536C09F}_is1) (Version:  - AOMEI Technology Co., Ltd.)

Apple Application Support (32-Bit) (HKLM-x32\...\{D811A40A-9791-497C-B9DC-2D89C8E95EA1}) (Version: 6.1 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{8B47B514-F5D2-4E0D-B951-6E250618A7CD}) (Version: 6.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{31A0B634-BCF4-4D3F-8336-87FEACFEE142}) (Version: 11.0.1.2 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)

Archibel products installation (HKLM-x32\...\{45CF4F40-098B-4CBB-A9C8-12D99FFF6B49}) (Version: 1.01.0001 - Archibel S.A.)

Ashampoo Burning Studio 2017 (HKLM-x32\...\{91B33C97-C878-6579-69BA-23E5405C7AAB}_is1) (Version: 18.0.0 - Ashampoo GmbH & Co. KG)

Backup Manager Basic (HKLM-x32\...\{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.60 - NewTech Infosystems) Hidden

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.23.1252 - Bitdefender)

Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 21.0.22.1050 - Bitdefender)

Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

bpd_scan (HKLM-x32\...\{EC7FE03D-239A-4E36-9907-0E327922D2A2}) (Version: 3.00.0000 - Hewlett-Packard) Hidden

BPDSoftware (HKLM-x32\...\{DCE9C52A-95DD-4075-9FC6-3313FB8748A5}) (Version: 140.0.000.000 - Hewlett-Packard) Hidden

BPDSoftware_Ini (HKLM-x32\...\{B629CD93-A629-4A9F-8B6E-218E741A316E}) (Version: 1.00.0000 - Hewlett-Packard) Hidden

Brother MFL-Pro Suite MFC-J5625DW (HKLM-x32\...\{7FC49664-DAA4-4E7C-ADD0-614ABB43691B}) (Version: 1.0.5.0 - Brother Industries, Ltd.)

BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.213.000 - Hewlett-Packard) Hidden

calibre (HKLM-x32\...\{D2DCF339-7EBC-4D88-B515-A504297796EA}) (Version: 3.6.0 - Kovid Goyal)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.6059 - CDBurnerXP)

CodeMeter Runtime Kit v5.22a (HKLM\...\{8D299F2C-A3C8-49A5-A726-E885AB397243}) (Version: 5.22.1508.501 - WIBU-SYSTEMS AG)

COMPUTERBILD App-Center (HKLM-x32\...\{21295604-BBCA-4A3E-B1D1-1B8A746C4A52}) (Version: 1.0.23 - J3S)

CyberGhost 5 (HKLM\...\CyberGhost VPN 5_is1) (Version:  - CyberGhost S.R.L.)

CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)

CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version:  - CyberGhost S.R.L.)

Das große Franzis Paket Office - Office Vorlagen Teil 1 (HKLM-x32\...\Das große Franzis Paket Office - Office Vorlagen Teil 1_is1) (Version:  - )

DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.100.000 - Hewlett-Packard) Hidden

Driver Booster 4.3 (HKLM-x32\...\Driver Booster_is1) (Version: 4.3.0 - IObit)

eReg (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden

eXpert PDF 10 (HKLM-x32\...\eXpert PDF 10) (Version: 10.0.11.27464 - Avanquest Software Limited)

eXpert PDF 10 Asian Fonts Pack (HKLM\...\{7C756095-F46D-470E-B760-41D10F94DBE6}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 Convert Module (HKLM\...\{E95D0F74-BAD1-482A-AAF2-5FC996F11A01}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 Create Module (HKLM\...\{53F1ED73-C43A-4137-A5D1-00626311B922}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 Edit Module (HKLM\...\{85C4DDFC-6B4B-46F9-B180-35E3779F06A5}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 Forms Module (HKLM\...\{7D7F186E-E29C-49F6-B7BF-9C9559917140}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 Insert Module (HKLM\...\{9FCAA275-6E40-47F9-89A1-D9491D6794F1}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 OCR Module (HKLM\...\{F359C7C4-F0C7-41FF-ADE2-28A3680A59F9}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 Review Module (HKLM\...\{4E203271-739E-4696-AEE3-2E4FDEDB64AE}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 Secure Module (HKLM\...\{72EFADF1-3FDE-49B5-ACB2-118B7B5C52FD}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

eXpert PDF 10 View Module (HKLM\...\{1BABCC0A-9A05-4321-A602-F63116C6412E}) (Version: 10.0.11.27457 - Avanquest Software) Hidden

ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - FreeCodecPack)

Free YouTube Download version 3.2.49.1111 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.49.1111 - DVDVideoSoft Ltd.)

Free YouTube to MP3 Converter version 3.12.56.301 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.56.301 - DVDVideoSoft Ltd.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden

HP OfficeJet J4600 All-In-One Series (HKLM\...\{4945F319-A24D-454C-A411-F3689987315D}) (Version: 14.0 - HP)

HPDiagnosticAlert (HKLM-x32\...\{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}) (Version: 1.00.0000 - Microsoft) Hidden

Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Packard Bell)

ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)

IrfanView 4.44 (64-bit) (HKLM\...\IrfanView64) (Version: 4.44 - Irfan Skiljan)

iTunes (HKLM\...\{24607015-8D34-4AF3-9092-AC83847AE073}) (Version: 12.7.1.14 - Apple Inc.)

J4680 (HKLM-x32\...\{D7D3E265-119C-4EFD-BB43-BEAF464FC969}) (Version: 140.0.000.000 - Hewlett-Packard) Hidden

Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)

Junk Mail filter update (HKLM-x32\...\{E2DFE069-083E-4631-9B6C-43C48E991DE5}) (Version: 14.0.8089.726 - Microsoft Corporation) Hidden

KeePass Password Safe 2.37 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.37 - Dominik Reichl)

Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.8 - Packard Bell)

Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)

Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)

Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)

Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4981.1001 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3601177453-726161993-3460598383-1010\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Mozilla Firefox 55.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 55.0 (x86 de)) (Version: 55.0 - Mozilla)

Mozilla Firefox 57.0.1 (x64 de) (HKLM\...\Mozilla Firefox 57.0.1 (x64 de)) (Version: 57.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 57.0.1 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)

MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.7 - F.J. Wechselberger)

Network64 (HKLM\...\{48C0866E-57EB-444C-8371-8E4321066BC3}) (Version: 140.0.215.000 - Hewlett-Packard) Hidden

Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.221.000 - Hewlett-Packard) Hidden

OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)

Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0407-0000-0000000FF1CE}) (Version: 15.0.4981.1001 - Microsoft Corporation) Hidden

Packard Bell InfoCentre (HKLM-x32\...\Packard Bell InfoCentre) (Version: 3.02.3000 - Packard Bell)

Packard Bell MyBackup (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.60 - NewTech Infosystems)

Packard Bell Power Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3004 - Packard Bell)

Packard Bell Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3011 - Packard Bell)

Packard Bell Registration (HKLM-x32\...\Packard Bell Registration) (Version: 1.03.3003 - Packard Bell)

Packard Bell ScreenSaver (HKLM-x32\...\Packard Bell Screensaver) (Version: 1.1.0330.2010 - Packard Bell )

Packard Bell Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Packard Bell)

PDF Experte Testversion (HKLM-x32\...\{7D10E906-5D7F-4b91-BEC0-618056BAEB52}) (Version: 10.00 - Avanquest)

PDF-XChange Editor (HKLM\...\{B7E5844A-B8ED-4F27-A3C8-966114DCB007}) (Version: 6.0.319.0 - Tracker Software Products (Canada) Ltd.) Hidden

PDF-XChange Editor (HKLM-x32\...\{e44f0a83-eeaa-471b-8e1e-5475e4183164}) (Version: 6.0.319.0 - Tracker Software Products (Canada) Ltd.)

ProductContext (HKLM-x32\...\{15619017-86DB-49F8-AD97-DC1BC616502E}) (Version: 140.0.000.000 - Hewlett-Packard) Hidden

RadarOpus (HKLM-x32\...\RadarOpus 1.36) (Version: 1.36 - Archibel S.A.)

RadarOpus PostgreSQL 9.1 (HKLM-x32\...\RadarOpus PostgreSQL 9.1) (Version: 9.1 - Archibel)

Reader for PC (HKLM-x32\...\{D279DFB7-97A3-439D-8BE9-95D8AFA68562}) (Version: 2.4.01.10241 - Sony Corporation)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)

Sandboxie 5.12 (64-bit) (HKLM\...\Sandboxie) (Version: 5.12 - Sandboxie Holdings, LLC)

Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.167.000 - Hewlett-Packard) Hidden

Scholten Module (HKLM-x32\...\{01EE1FA6-03EB-488F-8FC6-26484E65B909}) (Version:  - )

Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)

Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)

SmartSound Common Data (HKLM-x32\...\{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.) Hidden

SmartSound Common Data (HKLM-x32\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.)

SmartSound Quicktracks 5 (HKLM-x32\...\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.6 - SmartSound Software Inc.) Hidden

SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.6 - SmartSound Software Inc.)

Surf & E-Mail-Stick (HKLM-x32\...\Surf & E-Mail-Stick) (Version: 16.001.06.02.35 - Huawei Technologies Co.,Ltd)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.1 - Synaptics Incorporated)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.428.000 - Hewlett-Packard) Hidden

TuneUp Utilities Language Pack (de-DE) (HKLM-x32\...\{5D4C60AA-84E6-4E1A-8A68-69970D387BE1}) (Version: 10.0.4500.49 - TuneUp Software) Hidden

TuneUp Utilities Language Pack (de-DE) (HKLM-x32\...\{CE026CFE-73FE-4FED-9D5F-2C8D4DB512B0}) (Version: 12.0.3600.73 - TuneUp Software) Hidden

Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod)

USB2.0 ATV (HKLM-x32\...\{3C873221-12B9-475D-8DCB-62D0B2179AF9}) (Version: 6.10.000.001 - Regulus)

VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.17 - IDRIX)

Video Web Camera (HKLM-x32\...\{12A1B519-5934-4508-ADBD-335347B0DC87}) (Version: 1.7.121.407 - Chicony Electronics Co.,Ltd.)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)

WEB.DE Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)

WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.213.017 - Hewlett-Packard) Hidden

Welcome Center (HKLM-x32\...\Packard Bell Welcome Center) (Version: 1.01.3002 - Packard Bell)

Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)

Winamp Erkennungs-Plug-in (HKU\S-1-5-21-3601177453-726161993-3460598383-1001\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)

Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)

Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)

Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )

WISO steuer:Sparbuch 2016 (HKLM-x32\...\{361AE226-A186-4724-816A-51B56D1118B4}) (Version: 23.00.1146 - Buhl Data Service GmbH)

WISO steuer:Sparbuch 2017 (HKLM-x32\...\{1F0C0AC6-AABE-45DE-84AC-759449632DD1}) (Version: 24.00.1375 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2012 (HKLM-x32\...\{0CC1DAFB-40C8-4903-953D-471E541477C7}) (Version: 19.00.7303 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.03.8202 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2014 (HKLM-x32\...\{A96BA4E0-6D58-4C01-B16A-89605D5D1764}) (Version: 21.00.8480 - Buhl Data Service GmbH)

WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{54792729-6422-4E0B-B970-D1A4D10DD03A}) (Version: 22.00.8811 - Buhl Data Service GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> Keine Datei

ContextMenuHandlers1: [eXpertPDF10_ManagerExt] -> {0D0BC151-74FD-4755-8F00-5CAD33DEB334} => C:\Program Files\eXpert PDF 10\creator-context-menu.dll [2016-04-11] (Avanquest Software)

ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-30] (F.J. Wechselberger)

ContextMenuHandlers1-x32: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2016-11-28] (Tracker Software Products (Canada) Ltd.)

ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> Keine Datei

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> Keine Datei

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-11-04] (Advanced Micro Devices, Inc.)

ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {00550D50-5284-4DC3-86D8-83F24CCBC008} - System32\Tasks\S-1-5-21-3601177453-726161993-3460598383-1010\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-11-02] (Microsoft Corporation)

Task: {0471A598-34E3-4688-9302-E06BFD29DA58} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {06C5B039-B577-43A4-BAE9-3DF0ED082E54} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-11-17] (Microsoft Corporation)

Task: {0C64F765-FB1D-422A-8D52-70CD0FB4CEAB} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {1180D54C-A3EA-4E8F-AB62-D8BD2A6889D1} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe [2017-11-17] (Bitdefender)

Task: {1B49899B-141E-4400-8CBD-9DC5FF11846E} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {1CFC1862-F374-4964-BFE6-ADDFB290089A} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe

Task: {27949FC0-B31B-4D82-A0C2-7F9A7D54B98A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {2C6F897D-4D53-4BCF-9FAB-36DF3EB56A6C} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-07-21] (Oracle Corporation)

Task: {2DA26A59-B06B-4B4D-9C32-CF5BF63D95A6} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {2E89A136-3CE8-4EF5-9EA7-22554E5E6523} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {3036640F-3BBD-4142-B9DB-405E0022DDF9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {3111D87E-A14D-454D-B8FB-3ED7E73A552B} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe

Task: {333F79A7-A37C-419E-8A90-3B27A5101295} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {33D51FC7-2851-4010-90D3-46ADD58C2A47} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {363989FE-32E6-44D5-9A14-FB06603E2664} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {37C6F4C9-6172-4AE2-ABCB-D6545053F137} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {39A85408-1021-4A22-A1CA-A4F161AB495E} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {3CCC2DA1-FC4B-4397-A3B3-8A6B2DA01A01} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {41EF6650-CB89-4D5D-93B2-E704E984274D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {4611AF21-10D5-4944-B5A5-983B14CE727D} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {4BB2E2A6-A5AD-49BA-BD0D-1EC78A932B87} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {4D59D17B-260D-4D8D-B609-0090E4F125E1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)

Task: {51FCF629-C882-4D47-A0B1-A99E5A7ECC67} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)

Task: {55A620F6-D8C2-434C-8A9F-6F0269654274} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {57D223D3-4B0D-4FCC-9EA6-5739A5C37B8B} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2017-04-11] (Bitdefender)

Task: {59A03AEF-3E5A-4C8B-9C22-DFC9545C1BBE} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {5A1A72BB-408D-4F3D-B062-BA099F859F41} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {5AC41513-F52B-45A2-800A-CFC235882CFF} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {6412F210-4C38-455A-BC13-82CA2EB5B3F2} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\SymErr.exe

Task: {6515644F-5347-4B8C-A469-09AAECDD1EDE} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {68980183-C379-4AAD-A1D8-6EE7ECA9AE86} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {6B835C56-DA27-4C0F-AC3B-A25393485FAB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {73CDE768-24BE-4E9E-A281-3129DDF9E428} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)

Task: {7A681242-A8F3-4DF6-BBF4-CD3412CFCFCB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {7EC0D8B7-3D7E-4799-976B-6EBD51EDF2BB} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

Task: {7FA048EB-273A-40E7-88CB-E0F3AC100497} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)

Task: {80674834-EB81-4F95-812F-F99E75A62A4E} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {81B23E62-6764-4733-9004-2C42A7C5EC36} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe

Task: {8A1384EC-0953-4306-92A4-1ECE2E836871} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {91B56D76-C523-4D50-A6AB-74B84FA070F3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-17] (Adobe Systems Incorporated)

Task: {A46D3160-87FF-4024-A2B7-161EBB1FBAF4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {A662BB8C-D710-4F9E-8024-80E806F2FAA5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)

Task: {AF4C8E95-9505-42A8-A188-FB18ACEA7546} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {BFA9BB6E-DCB1-4AED-B0A2-C5C86CB0B8FC} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3601177453-726161993-3460598383-1010 => C:\Users\packard\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe

Task: {CBE57E55-806A-4F87-B2A3-D38CD351B57B} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.1.0.18\SymErr.exe

Task: {CD3763F5-55C5-4706-8B0F-61A1C6B19B06} - System32\Tasks\Driver Booster SkipUAC (packard) => C:\Program Files (x86)\IObit\Driver Booster\4.3.0\DriverBooster.exe [2017-03-16] (IObit)

Task: {DD375D4C-6D42-40AD-83C6-44A431927577} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {DE176E3B-82C3-4838-9FB0-5A582871ABBE} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {E8C42605-5B34-4960-A59C-B49367CFA296} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {ED0073F9-5C25-4B9D-893A-91ACB614B228} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation)

Task: {EDC18D86-082E-4D02-B8A4-36A9B4C48879} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {EF94706F-0E26-42BC-B192-D392711D4604} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {F0B3A8A8-2F54-4192-A152-A61BD85860EA} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F7903F5E-8288-4636-B51D-824EE74E8CCD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {F958252A-4514-4C8E-A5CF-F0DF6373F49A} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [2017-11-17] (Adobe Systems Incorporated)

Task: {FDA7F7AA-5278-4503-8C65-0BBD49700904} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {FE45D2DA-F616-4995-9FA1-7BB6A0FBC168} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {FE52B147-203F-4391-8D54-A1B32C72F9C0} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\4.3.0\Scheduler.exe [2017-03-10] (IObit)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 

ShortcutWithArgument: C:\Users\packard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WEB.DE.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://go.web.de/br/ie9_menu_home

ShortcutWithArgument: C:\Users\packard\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WEB.DE.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://go.web.de/br/ie9_pinned_search

ShortcutWithArgument: C:\Users\packard\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\WEB.DE.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://go.web.de/br/ie9_pinned_search
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2017-09-14 13:53 - 2017-09-14 13:53 - 000111832 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\bdmetrics.dll

2017-02-07 11:41 - 2017-02-07 11:41 - 001008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpbr.mdl

2017-02-07 11:41 - 2017-02-07 11:41 - 000541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpdsp.mdl

2017-02-07 11:41 - 2017-02-07 11:41 - 003243920 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttpph.mdl

2017-02-07 11:41 - 2017-02-07 11:41 - 001544568 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02451_002\ashttprbl.mdl

2016-09-01 17:12 - 2016-09-01 17:12 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2017-10-18 23:51 - 2017-10-18 23:51 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2014-03-24 18:10 - 2017-01-17 03:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2016-04-06 19:31 - 2005-04-22 05:36 - 000143360 _____ () C:\WINDOWS\system32\BrSNMP64.dll

2017-10-28 12:11 - 2017-10-04 12:15 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll

2017-03-18 21:58 - 2017-03-18 21:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2017-03-18 21:59 - 2017-03-20 05:36 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-11-30 16:52 - 2017-11-30 16:56 - 000087040 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2017-11-30 16:52 - 2017-11-30 16:56 - 000202752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2010-06-03 21:26 - 2010-02-26 22:39 - 000206208 _____ () C:\Windows\PLFSetI.exe

2017-10-20 15:22 - 2017-10-20 15:22 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll

2017-10-20 15:22 - 2017-10-20 15:22 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000306904 _____ () C:\Program Files (x86)\AOMEI Backupper\UiLogic.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000241368 _____ () C:\Program Files (x86)\AOMEI Backupper\diskmgr.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000290520 _____ () C:\Program Files (x86)\AOMEI Backupper\Comn.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000122584 _____ () C:\Program Files (x86)\AOMEI Backupper\FuncLogic.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000347864 _____ () C:\Program Files (x86)\AOMEI Backupper\ImgFile.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000028376 _____ () C:\Program Files (x86)\AOMEI Backupper\Encrypt.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000483032 _____ () C:\Program Files (x86)\AOMEI Backupper\EnumFolder.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000069336 _____ () C:\Program Files (x86)\AOMEI Backupper\Compress.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrLog.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000691928 _____ () C:\Program Files (x86)\AOMEI Backupper\Sync.dll

2015-09-24 10:49 - 2015-02-25 23:00 - 002403504 _____ () C:\Program Files (x86)\AOMEI Backupper\QtCore4.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000077528 _____ () C:\Program Files (x86)\AOMEI Backupper\Ldm.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000061144 _____ () C:\Program Files (x86)\AOMEI Backupper\Device.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000282328 _____ () C:\Program Files (x86)\AOMEI Backupper\BrFat.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000962264 _____ () C:\Program Files (x86)\AOMEI Backupper\BrNtfs.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000282328 _____ () C:\Program Files (x86)\AOMEI Backupper\Clone.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000118488 _____ () C:\Program Files (x86)\AOMEI Backupper\Backup.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000155352 _____ () C:\Program Files (x86)\AOMEI Backupper\FlBackup.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000102104 _____ () C:\Program Files (x86)\AOMEI Backupper\BrVol.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000253656 _____ () C:\Program Files (x86)\AOMEI Backupper\GptBcd.dll

2015-09-24 10:49 - 2015-09-15 16:56 - 000175832 _____ () C:\Program Files (x86)\AOMEI Backupper\DeviceMgr.dll

2010-03-09 01:18 - 2010-03-09 01:18 - 000465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\sqlite3.dll

2010-03-09 01:13 - 2010-03-09 01:13 - 001081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\ACE.dll

2016-12-26 10:28 - 2009-02-27 16:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\packard\Downloads\7z1604-x64.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\Backupper.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\BackupperFull.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\calibre-portable-installer-1.17.0.exe:BDU [1]

AlternateDataStreams: C:\Users\packard\Downloads\driver_booster_setup(3.2.0.696).exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\driver_booster_setup(4.1.0.389).exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\driver_booster_setup(4.3.0.504).exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\driver_booster_setup_331.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\FreeCodecPackSetup.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\iobituninstaller.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\jdk-7u51-windows-x64.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\jxpiinstall.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\SandboxieInstall_4.0.8.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\Silverlight_x64(1).exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\slimdrivers-setup.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\SoftonicDownloader_fuer_driver-booster-free.exe:BDU [0]

AlternateDataStreams: C:\Users\packard\Downloads\wpsetup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\1und1_smartdrive_uploadmanager.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\activeprotect.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\ashampoo_burning_studio_2017_25278.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\Audials_Light-Setup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\avira_de_avsc0__ws.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\bitdefender_windows_f0fd0992-d0f2-4a64-8ffe-2cb50c2e8b01.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\ChromeSetup(1).exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\Defogger.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\driver_booster_setup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\ESETOnlineScanner_DEU.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\FreeYouTubeToMP3Converter.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\irfanview_plugins_x64_444_setup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\iview444_x64_setup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\JavaSetup8u91.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\KeePass-2.35-Setup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\KeePass-2.36-Setup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\LiveUpdate 1.43.8-win.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\LiveUpdate-2.0.28-windows.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\M185WirelessMouse6.32.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\mbae-setup-1.08.1.2572.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\mbam-setup-2.0.3.1025(1).exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\MediaCreationTool.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\MFC-J5625DW-inst-C1-eu1(1).EXE:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\MFC-J5625DW-inst-C1-eu1.EXE:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\mp3DC220.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\MyPhoneExplorer_Setup_1.8.7.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\NDP1.1sp1-KB867460-X86.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\OOSU10.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\Opera_NI_stable.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\PDFExperte_DE(1).exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\PDFExperte_DE.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\PSISetup_3.0.0.9016.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\RevoUninProSetup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\SandboxieInstall-5.12.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\TFC(1).exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\The_New_Bitdefender_UninstallTool.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\WEB.DE_Firefox_Setup(1).exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\WEB.DE_Firefox_Setup(2).exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\WEB.DE_Firefox_Setup.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\winamp5666_full_de-de_b3516.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\Windows10Upgrade28085.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\Windows10Upgrade9252.exe:BDU [0]

AlternateDataStreams: C:\Users\Wolf_sicherer Zugang\Downloads\wpsetup(1).exe:BDU [0]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2017-12-01 16:44 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3601177453-726161993-3460598383-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\packard\AppData\Local\Microsoft\Windows\Themes\img10.jpg

HKU\S-1-5-21-3601177453-726161993-3460598383-1010\Control Panel\Desktop\\Wallpaper -> C:\Users\Wolf_sicherer Zugang\AppData\Local\Microsoft\Windows\Themes\img11.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^CodeMeter Control Center.lnk => C:\Windows\pss\CodeMeter Control Center.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^packard^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup

MSCONFIG\startupreg: Acer ePower Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe

MSCONFIG\startupreg: HTC Sync Loader => 

MSCONFIG\startupreg: LManager => C:\Program Files (x86)\Launch Manager\LManager.exe

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized

HKU\S-1-5-21-3601177453-726161993-3460598383-1010\...\StartupApproved\Run: => "1&1_1&1 Upload-Manager"

HKU\S-1-5-21-3601177453-726161993-3460598383-1010\...\StartupApproved\Run: => "OneDrive"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{E2CA2663-CD73-40F7-9973-E88BFABB32D0}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.3.0\AutoUpdate.exe

FirewallRules: [{3FBC24E6-ABC6-4D21-AD77-748E17269185}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.3.0\AutoUpdate.exe

FirewallRules: [{DF54ECEA-9D52-4BF4-9E9F-08D844501C64}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.3.0\DBDownloader.exe

FirewallRules: [{02BD3D03-6693-41FA-A6D7-3AC31CD656E6}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.3.0\DBDownloader.exe

FirewallRules: [{D8A06933-1C31-49B0-8049-D7AAE45D665A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.3.0\DriverBooster.exe

FirewallRules: [{A4E50CC4-06F5-4D4D-9F4A-C2D62FBB2B3C}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.3.0\DriverBooster.exe

FirewallRules: [{B1CC48C0-698E-4EE2-A481-7B80AC53B0FE}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe

FirewallRules: [{C7833EE0-5038-46E2-B793-B47BF6DBF18F}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe

FirewallRules: [{C9F6FF97-95CC-4820-A9A3-78F3D0B8A281}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{36105EC8-1810-40BA-909B-6C920FA870D3}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe

FirewallRules: [{BA649FA2-1BDB-4F6A-B429-0FAD90230D62}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{7443FDC3-7F5A-47F0-B00B-05220CCDAE59}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe

FirewallRules: [{F521353C-6001-4513-AF7D-0B4DF2362EB2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{CB708775-D0B3-4BA1-BBF3-F06E8EF93142}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7798386C-FD08-47E7-AF60-7217BA1D3472}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{AEB1C8C1-7570-495B-89EA-5D9206B07834}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{8C659608-CBE8-4E39-A227-F903B34B56CA}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe

FirewallRules: [{7C213284-9475-4750-9BA4-76A4565E0DD0}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe

FirewallRules: [{7C2BB722-2747-424F-8281-4C6AE99E76CC}] => (Allow) C:\Program Files (x86)\Opera\opera.exe

FirewallRules: [{89549622-3FEB-4BEE-9F05-3254607CF8B9}] => (Allow) C:\Program Files (x86)\Opera\opera.exe

FirewallRules: [{BBC85E52-A3AA-4232-B78C-35FB68B44EFB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{8882B5CD-E4E9-4B1A-B0E5-0C7046830E45}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{86C08034-C18B-4A17-BEDF-557055D0F152}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{E83241A6-2EA4-4198-9610-DD375578F981}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{084A0F49-28BE-4DC1-B54C-456585AA5EF9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe

FirewallRules: [{55E20F6D-A316-4052-80CE-2D46D410BE9D}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [UDP Query User{334E3DF9-1F9B-478D-AC9D-32D0EFF6106B}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe

FirewallRules: [TCP Query User{7C6ECFD0-20AE-48F3-92FC-37471C05B996}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe

FirewallRules: [UDP Query User{A121255E-F546-4FBA-98B0-9EAAFAB5D81B}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe

FirewallRules: [TCP Query User{6A59D09E-65D4-465B-836A-6741D19094CB}C:\program files (x86)\winamp\winamp.exe] => (Allow) C:\program files (x86)\winamp\winamp.exe

FirewallRules: [{2ED3B19A-68A4-462D-B394-7089E8CF89E9}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe

FirewallRules: [{48B25B60-BF62-4578-BB9B-EF501F5EA22A}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe

FirewallRules: [{24C82E9D-C4E4-4AC9-A538-C50FB178F47F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe

FirewallRules: [{5EC911AB-6949-4279-9EBF-FE2F03C905DE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe

FirewallRules: [{3564D0A9-04CA-4CF7-AEC8-928F58ED5CE5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{361F2BB1-663B-4F30-8B8D-D3908BB2B4CE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{F861B898-3813-4F1E-A378-E6C84958C626}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{DE4BC6CF-7709-4863-8D68-3A7A9B0616A4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{C00724B0-71AD-4DEC-A8F1-06738F0609A6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{06B5B7C1-C85D-40AC-A2E7-6EAB16D14F51}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{E57DB23D-29D7-4486-A787-36D1C274C680}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{38D5480D-7547-486A-8D73-335FEDEBE5D0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{09987D76-D015-49AE-96BF-51A6617A1BE4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{46F68531-45B4-413F-B8DB-1B522B38774A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{12DDDCEC-62A5-42D9-AF42-F1EACFD80B6F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{F1D18EE5-05D4-4E1B-9504-3D374328B1DE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{93171BB2-CCA9-4F9A-B023-725540CBD11F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{D9AB6919-ADBA-4F2C-8659-AE633588DCBA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{4B1030E9-E15D-4F46-8087-6AF73B2AEB48}] => (Allow) C:\Program Files (x86)\Opera\opera.exe

FirewallRules: [{AD88E616-CAA6-4CC9-81D1-8ED4E568E42A}] => (Allow) C:\Program Files (x86)\Opera\opera.exe

FirewallRules: [{6F348A0D-B114-42F4-95DE-9023BF262BEE}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{E0D53AB0-C66F-4F10-8DAF-2099C3AB4BB8}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{F97BE70A-B345-4AC8-A989-026C8651F3CE}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{82B090CC-1B02-4CB0-8E15-509EA2B12BA4}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{656F90F8-08B5-446D-8FF3-49DB98D15BCA}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{94CB4BDA-4978-466F-8106-8A2F0D7E60F5}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{ABCC9BF8-B979-42A6-B966-236863B972AD}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{6A7EA83C-3349-4D66-A946-B3A4B4D340AA}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{1A59317D-01FE-46AE-9A53-05FFADF7291C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{763443ED-3D6F-4413-83AE-EA5640F6E6D0}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe

FirewallRules: [{6A5DE9A1-2B7F-4E04-B1F0-15EEFC94AB9F}] => (Allow) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe

FirewallRules: [{316F8C2C-82F0-4070-9758-B8B58FEE6475}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{AD2298A6-2630-4EB9-B7CA-39FFF8A4736D}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{2990CFD6-F3C7-441E-9B99-6A7346EA7DF0}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe

FirewallRules: [{05C4D45F-141E-42F5-BAC0-2B0923CDC129}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{E69766B0-5F36-4C1C-8E09-BBCB51D7C216}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

FirewallRules: [{33FFD44D-0800-4289-A0B1-59DE165ECE46}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe

FirewallRules: [{194F2CFA-C46A-4941-B45E-63D419C836A2}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe

FirewallRules: [{F72EA834-A312-4DCA-8EF7-FE957D9FF060}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe

FirewallRules: [{FD90E040-20D9-4310-953B-C6A8584D28BC}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe

FirewallRules: [{F83C93A7-E86E-41E0-9B02-48DA3F2E1B99}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe

FirewallRules: [{8BFC1A7B-0D33-4758-B011-AB00D52121C6}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe

FirewallRules: [TCP Query User{0B5F323E-019A-4AF8-A703-73B60B28E3EB}C:\users\packard\appdata\local\temp\rarsfx0\x32\pcsftool.exe] => (Allow) C:\users\packard\appdata\local\temp\rarsfx0\x32\pcsftool.exe

FirewallRules: [UDP Query User{0B754D6B-1733-421F-9A55-284843ED7EE1}C:\users\packard\appdata\local\temp\rarsfx0\x32\pcsftool.exe] => (Allow) C:\users\packard\appdata\local\temp\rarsfx0\x32\pcsftool.exe

FirewallRules: [TCP Query User{E7DD78A1-A451-4E96-BFAA-E0ABD3DB98EC}C:\users\packard\appdata\local\temp\rarsfx0\x64\pcsftool.exe] => (Allow) C:\users\packard\appdata\local\temp\rarsfx0\x64\pcsftool.exe

FirewallRules: [UDP Query User{A54D3E84-DA4A-4C3B-B049-6D3348B0B736}C:\users\packard\appdata\local\temp\rarsfx0\x64\pcsftool.exe] => (Allow) C:\users\packard\appdata\local\temp\rarsfx0\x64\pcsftool.exe

FirewallRules: [{4EA22835-47F6-4A03-8496-70454567B3F6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{9795BDA4-2FE0-4CF9-8FD4-57BFE5AD2B93}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{C812C290-AB1E-4C3C-806C-CA6D61381A94}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{7B61211A-6FA3-4A6F-92EA-B2B94BD62314}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{ABBA16E9-C16E-4244-8482-E30A2406ADA5}] => (Allow) C:\Program Files (x86)\Brother\Brmfl14e\FAXRX.EXE

FirewallRules: [{BE38AB7A-5C0E-407D-805D-21FF8A6C77DE}] => (Allow) LPort=54925

FirewallRules: [{5312A9A0-DAA0-4054-86A1-0F694F132C22}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{1D0E1498-4908-4CA8-B9F7-0DE5476CBFFF}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{676DC41D-0602-4A0D-9933-04761E2AB110}] => (Allow) C:\Program Files\iTunes\iTunes.exe

FirewallRules: [{FD0C4D13-1D12-4135-8D18-069EE62E7C46}] => (Allow) %systemroot%\system32\alg.exe

FirewallRules: [{211A13CD-8B6E-4FED-B0B0-2434540CA188}] => (Allow) %systemroot%\system32\alg.exe

FirewallRules: [{8B493005-2D6E-4935-B23B-9CED8BF43172}] => (Allow) %systemroot%\system32\alg.exe

FirewallRules: [{8A5B756D-955F-4E24-AE75-61E61D00CB7F}] => (Allow) %systemroot%\system32\alg.exe

FirewallRules: [{DB6C1CC3-3230-4D51-A923-94C6DE900233}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
 

==================== Wiederherstellungspunkte =========================
 

17-11-2017 17:58:21 Windows Update

17-11-2017 17:59:52 Windows Update

25-11-2017 14:03:04 Geplanter Prüfpunkt
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/01/2017 03:24:21 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 

Error: (11/29/2017 11:53:24 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 

Error: (11/27/2017 09:56:20 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL" in Zeile  1.

Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.

Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".

Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".

Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 

Error: (11/25/2017 11:44:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15703
 

Error: (11/25/2017 11:44:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15703
 

Error: (11/25/2017 11:44:36 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (11/25/2017 12:26:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: packard-PC)

Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (11/24/2017 06:17:16 PM) (Source: PostgreSQL) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (11/24/2017 06:11:49 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 

Error: (11/22/2017 07:16:42 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 
 

Systemfehler:

=============

Error: (12/01/2017 03:17:47 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/01/2017 03:17:47 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/01/2017 03:17:47 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (12/01/2017 03:17:47 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (11/30/2017 07:02:03 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 5
 

Error: (11/30/2017 07:01:38 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (11/30/2017 07:01:38 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (11/30/2017 07:01:38 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (11/30/2017 07:01:38 PM) (Source: DCOM) (EventID: 10016) (User: packard-PC)

Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "packard-PC\Wolf_sicherer Zugang" (SID: S-1-5-21-3601177453-726161993-3460598383-1010) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 

{9E175B6D-F52A-11D8-B9A5-505054503030}

 und der APPID 

{9E175B9C-F52A-11D8-B9A5-505054503030}

 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
 

Error: (11/29/2017 10:45:44 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )

Description: 5
 
 

CodeIntegrity:

===================================

  Date: 2017-11-24 18:24:23.958

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2017-11-23 17:28:17.635

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-23 17:28:17.581

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-23 17:28:17.535

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-23 17:28:17.396

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-23 17:28:17.332

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-23 17:28:17.249

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-23 17:28:14.728

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-23 17:28:13.852

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
 

  Date: 2017-11-18 10:36:28.092

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Pentium(R) CPU P6000 @ 1.87GHz

Prozentuale Nutzung des RAM: 72%

Installierter physikalischer RAM: 3956.5 MB

Verfügbarer physikalischer RAM: 1090.09 MB

Summe virtueller Speicher: 7924.5 MB

Verfügbarer virtueller Speicher: 4335.57 MB
 

==================== Laufwerke ================================
 

Drive c: (Packard Bell) (Fixed) (Total:284.53 GB) (Free:130.75 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 1FA51FA4)

Partition 1: (Not Active) - (Size=12.7 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=284.5 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=787 MB) - (Type=27)
 

==================== Ende von Addition.txt ============================