| computerfrea | 26.02.2019 17:17 |
Früher hat vor allem Youtube manchmal starke Probleme gemacht. Ich werds mal ne Zeit lang mit Firefox testen...
Der Versuch hat wohl noch nicht zum volllständigen Erfolg geführt. Ich habe wie du es beschrieben hast Chrome deinstalliert und auch die Browserdaten gelöscht. Nach dem Neustart wieder heruntergeladen und direkt nach dem öffnen hat er mir sofort wieder die beiden nutzlosen Avira und die Yahoo Erweiterungen installiert wie davor.
FRST.txt: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25.02.2019 01
durchgeführt von Michael (Administrator) auf MICHAEL-PC (26-02-2019 17:10:15)
Gestartet von C:\Users\Michael\Desktop\Frst
Geladene Profile: Michael (Verfügbare Profile: Michael & sshd)
Platform: Windows 10 Home Version 1809 17763.316 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\snmp.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(ProtonVPN AG -> ) G:\Programme\ProtonVPN\ProtonVPNService.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) G:\Programme\Todo Backup\bin\Agent.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> ) G:\Programme\Todo Backup\bin\TodoBackupService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Noriyuki Miyazaki -> Crystal Dew World) G:\Programme\CrystalDiskInfo\DiskInfo32.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(WhatPulse -> ) C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Apple Inc. -> Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\Persbackup.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
(Valve -> Valve Corporation) G:\Programme\Steam\Steam.exe
(WhatPulse -> ) C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Mozilla Corporation -> Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Mozilla Corporation -> Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Mozilla Corporation -> Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279520 2019-01-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [whatpulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3377376 2018-11-16] (WhatPulse -> )
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Spotify] => C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe [26118888 2019-02-13] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2019-01-15] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Dropbox Update] => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-07] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [TunnelBear] => G:\Programme\TunnelBear\TunnelBear.UI.exe [1047936 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Policies\Explorer: [NoSecurityTab] 1
HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\system32\vorbis.acm [1470976 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\SysWOW64\vorbis.acm [1554944 2009-09-15] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.voxacm160] => C:\Windows\SysWOW64\vct3216.acm [82944 2003-05-21] (Voxware, Inc.) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.scg726] => C:\Windows\SysWOW64\scg726.acm [13239 2000-03-14] (SHARP Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.alf2cd] => C:\Windows\SysWOW64\alf2cd.acm [38912 2003-05-21] (NCT Company) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\AC3ACM.acm [81920 2004-02-04] (fccHandler) [Datei ist nicht signiert]
HKLM\...\Drivers32-x32: [msacm.lame] => lame.ax
HKLM\...\Drivers32: [vidc.dvsd] => C:\Windows\SysWOW64\mcdvd_32.dll [261632 2003-05-21] (MainConcept) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mpg4] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp42] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp43] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [139264 2004-07-03] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.DIVX] => C:\Windows\SysWOW64\DivX.dll [638976 2003-05-22] (DivXNetworks, Inc.) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP62] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.ZMBV] => C:\Windows\SysWOW64\zmbv.dll [94208 2010-04-09] () [Datei ist nicht signiert]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.119\Installer\chrmstp.exe [2019-02-26] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GigaTribe.lnk [2017-01-03]
ShortcutTarget: GigaTribe.lnk -> G:\Programme\GigaTribe\gigatribe.exe (Gigatribe -> Gigatribe)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk [2017-12-28]
ShortcutTarget: Persbackup.lnk -> C:\Program Files\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert]
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.lnk [2014-07-21]
ShortcutTarget: Steam.lnk -> G:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{81299b37-ca74-45f0-bb98-ac773480681d}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://files.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Edge:
======
Edge Session Restore: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> ist aktiviert.
FireFox:
========
FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default [2019-02-26]
FF Homepage: Mozilla\Firefox\Profiles\s12ar7zc.default -> hxxp://www.google.de
FF NetworkProxy: Mozilla\Firefox\Profiles\s12ar7zc.default -> backup.ftp", "127.0.0.1"
FF Session Restore: Mozilla\Firefox\Profiles\s12ar7zc.default -> ist aktiviert.
FF Extension: (Bookmarks Organizer) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\bookmarksorganizer@agenedia.com.xpi [2019-01-27]
FF Extension: (HTTPS Everywhere) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\https-everywhere@eff.org.xpi [2019-02-01]
FF Extension: (ProxTube) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\ich@maltegoetz.de.xpi [2018-09-13]
FF Extension: (PDF Mage) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\jid1-GeRCnsiDhZiTvA@jetpack.xpi [2018-12-28]
FF Extension: (404 Bookmarks) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{5f8d31ba-47fb-4b70-bf8d-d2113f6da22f}.xpi [2018-09-15]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-01-24]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_142.dll [2019-02-14] (Adobe Systems Incorporated -> )
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (Electronic Arts -> EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-14] (Adobe Systems Incorporated -> )
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (Electronic Arts -> EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google Inc -> Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker -> C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll [Keine Datei]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> G:\Programme\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
StartMenuInternet: Firefox-E6D11708B02F97DD - G:\Programme\Firefox\firefox.exe
Chrome:
=======
CHR DefaultSearchURL: Default -> hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://de.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default [2019-02-26]
CHR Extension: (Präsentationen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-02-26]
CHR Extension: (Docs) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-02-26]
CHR Extension: (Google Drive) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-02-26]
CHR Extension: (YouTube) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-02-26]
CHR Extension: (Avira Password Manager) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2019-02-26]
CHR Extension: (Adobe Acrobat) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-02-26]
CHR Extension: (Yahoo Partner) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\fabhkdeopjkcpkmofliimbjckmocfiom [2019-02-26]
CHR Extension: (Tabellen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-02-26]
CHR Extension: (Avira Browserschutz) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2019-02-26]
CHR Extension: (Google Docs Offline) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-02-26]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2019-02-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-02-26]
CHR Extension: (Google Mail) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-02-26]
CHR Extension: (Chrome Media Router) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-26]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6893704 2018-07-15] (BattlEye Innovations e.K. -> )
S4 BetterHashPrelogin; G:\Programme\BetterHash\prelogin.exe [621640 2018-02-16] (Innovative Solutions Grup SRL -> )
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-07-19] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 EaseUS Agent; G:\Programme\Todo Backup\bin\Agent.exe [40080 2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [779392 2018-06-24] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ICEsoundService; C:\Windows\system32\ICEsoundService64.exe [807808 2019-01-11] (ICEpower a/s -> ICEpower)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S4 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [184784 2018-12-04] (TEFINCOM S.A. -> )
S3 Origin Client Service; G:\Programme\Origin\OriginClientService.exe [2298688 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; G:\Programme\Origin\OriginWebHelperService.exe [3171144 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S4 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 ProtonVPN Service; G:\Programme\ProtonVPN\ProtonVPNService.exe [38664 2018-10-17] (ProtonVPN AG -> )
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R2 SNMP; C:\Windows\System32\snmp.exe [53248 2018-12-08] (Microsoft Windows -> Microsoft Corporation)
S3 sshd; C:\Windows\System32\OpenSSH\sshd.exe [974848 2018-12-08] (Microsoft Windows -> )
S3 TunnelBearMaintenance; G:\Programme\TunnelBear\TBear.Maintenance.exe [38272 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
S3 VBoxSDS; G:\Programme\OracleVM VirtualBox\VBoxSDS.exe [690424 2019-01-25] (Oracle Corporation -> Oracle Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 AmUStor; C:\Windows\system32\drivers\AmUStor.SYS [109504 2018-11-28] (Alcorlink Corp. -> )
S0 asahci64; C:\Windows\System32\drivers\asahci64.sys [36448 2011-01-30] (ASMedia Technology Inc. -> Asmedia Technology)
R0 asstahci64; C:\Windows\System32\drivers\asstahci64.sys [98696 2019-02-03] (ASMedia Technology Inc. -> Asmedia Technology)
S3 avmaura; C:\Windows\System32\drivers\avmaura.sys [116480 2015-11-20] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [269408 2018-01-09] (Bluestack Systems, Inc. -> Bluestack System Inc. )
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [34496 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> )
R0 EPMVolFlt; C:\Windows\System32\drivers\EPMVolFlt.sys [30416 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [73328 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [53360 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [22640 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [341104 2018-07-28] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2018-10-24] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Datei ist nicht signiert]
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\vrtaucbl.sys [110368 2014-05-30] (Muzychenko Evgenii Viktorovich -> Eugene V. Muzychenko)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [33968 2015-08-26] (Paragon Software GmbH -> Paragon Software Group)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-05-31] (Martin Malik - REALiX -> REALiX(tm))
S4 IObitUnlocker; G:\Programme\IObit Unlocker\IObitUnlocker.sys [66824 2017-06-15] (IObit Information Technology -> IObit)
R1 ISODrive; G:\Programme\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
S3 jakstaVA; C:\Windows\system32\DRIVERS\jaksta_va.sys [103816 2017-02-23] (Jaksta Technologies Pty Ltd -> e2eSoft)
S3 KMWDFILTER; C:\Windows\System32\drivers\KMWDFILTER.sys [30208 2009-04-29] (MLK Technologies Limited -> Windows (R) Codename Longhorn DDK provider)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2014-07-23] (Tages SA -> )
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [198512 2019-02-25] (Malwarebytes Corporation -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [127136 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [72864 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [274416 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [114040 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_01c064f3d89f92be\nvlddmkm.sys [20424640 2019-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
R3 P17; C:\Windows\system32\drivers\P17.sys [1289216 2009-08-03] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
S3 pmxdrv; C:\WINDOWS\system32\drivers\pmxdrv.sys [31152 2017-11-25] (PAIPTAC Driver -> )
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1122200 2019-01-11] (Realtek Semiconductor Corp. -> Realtek )
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] (Intel(R) Code Signing External -> )
R0 speedfan; C:\Windows\SysWow64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 tap-tb-0901; C:\Windows\System32\drivers\tap-tb-0901.sys [38656 2016-10-17] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2018-06-13] (TEFINCOM S.A. -> The OpenVPN Project)
R3 tapprotonvpn; C:\Windows\System32\drivers\tapprotonvpn.sys [44976 2018-06-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 teVirtualMIDI64; C:\Windows\system32\DRIVERS\teVirtualMIDI64.sys [41016 2016-08-31] (Tobias Erichsen -> Tobias Erichsen)
R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102576 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25904 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [701232 2015-08-26] (Paragon Software GmbH -> )
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [41720 2016-04-05] (Wireshark Foundation, Inc. -> USBPcap)
R3 VBAudioVMVAIOMME; C:\Windows\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-10-12] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [235832 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [247216 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [828776 2018-09-23] (IDRIX -> IDRIX)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-02-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [333792 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [39112 2017-03-29] (Wondershare Technology Co.,Ltd -> Wondershare)
U3 idsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2019-02-26 17:08 - 2019-02-26 17:08 - 000002376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-02-26 17:08 - 2019-02-26 17:08 - 000002335 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-02-26 17:06 - 2019-02-26 17:06 - 000274416 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-02-26 17:06 - 2019-02-26 17:06 - 000127136 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2019-02-26 17:06 - 2019-02-26 17:06 - 000114040 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2019-02-26 17:06 - 2019-02-26 17:06 - 000072864 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2019-02-26 09:42 - 2019-02-26 17:10 - 000000000 ____D C:\Users\Michael\Desktop\Frst
2019-02-25 19:21 - 2019-02-25 19:21 - 000198512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2019-02-24 23:52 - 2019-02-24 23:52 - 000000000 ____D C:\Users\Michael\AppData\Local\mbam
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\Users\Michael\AppData\Local\mbamtray
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-02-24 23:51 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2019-02-24 23:51 - 2019-01-08 15:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-02-24 05:37 - 2019-02-26 17:10 - 000000000 ____D C:\FRST
2019-02-23 09:02 - 2019-02-23 09:02 - 002870767 _____ C:\Users\Michael\Desktop\RathausRevue-Nr22_final.pdf
2019-02-23 01:08 - 2019-02-23 01:08 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2019-02-22 21:47 - 2019-02-22 21:47 - 000000000 ____D C:\Users\Michael\AppData\Local\IsolatedStorage
2019-02-21 00:16 - 2019-02-21 00:16 - 000000000 ____D C:\Users\Michael\Documents\Flower
2019-02-19 00:38 - 2019-02-19 00:38 - 000000000 ____D C:\Users\Michael\OnionShare
2019-02-13 15:44 - 2019-02-13 15:44 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 023439360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 020812288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 019023872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006540424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006070272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 005086208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004885504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004688896 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004627456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003922944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003743744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002927120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002626592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002469648 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002323696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001969680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 001700864 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001671864 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001467560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000982032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000833536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000475152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-02-13 15:44 - 2019-02-13 15:44 - 000421904 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000340480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:44 - 009683984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 007645600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 003662336 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002721280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002437552 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 002021584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 001255736 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050936 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050624 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000982576 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000765960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000419128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000387384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000090424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000047136 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000072 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2019-02-10 21:36 - 2019-02-10 21:36 - 000626634 _____ C:\Users\Michael\Desktop\dl-praesentation.pdf
2019-02-07 02:13 - 2019-02-08 11:34 - 023578051 _____ C:\Users\Michael\Desktop\Stefan Nixdorf - Commodus Part 2 The Menace.mp4
2019-02-06 18:17 - 2019-02-06 18:20 - 000000000 ____D C:\Users\Michael\VirtualBox VMs
2019-02-06 18:10 - 2019-02-06 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2019-02-06 18:04 - 2019-02-06 18:04 - 001779329 _____ C:\Users\Michael\Desktop\Anhang_Themendienst_ETCS-data.pdf
2019-02-06 15:39 - 2019-02-06 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup 11.5
2019-02-06 15:38 - 2018-08-14 09:40 - 000026256 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\fbnative.exe
2019-02-05 08:05 - 2019-02-24 00:47 - 000017525 _____ C:\Users\Michael\Desktop\_Stundennachweis - Abrechung Ausdruck ZVMC.ods
2019-02-05 07:46 - 2019-02-05 07:47 - 000000000 ____D C:\Program Files\Recuva
2019-02-05 07:46 - 2019-02-05 07:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2019-02-05 01:25 - 2019-02-18 01:30 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2019-02-03 08:06 - 2019-02-03 08:06 - 000098696 _____ (Asmedia Technology) C:\Windows\system32\Drivers\asstahci64.sys
2019-02-01 14:04 - 2019-02-01 14:04 - 000000000 ____D C:\Users\Michael\Desktop\Spiele
2019-01-29 06:49 - 2019-01-29 06:49 - 000001948 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATTO Disk Benchmark.lnk
2019-01-28 02:14 - 2019-01-28 02:14 - 000247216 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2019-01-28 02:14 - 2019-01-28 02:14 - 000235832 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
==================== Ein Monat (geänderte) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2019-02-26 17:08 - 2014-07-19 21:37 - 000000000 ____D C:\Program Files (x86)\Google
2019-02-26 17:07 - 2016-11-25 15:01 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\Mozilla
2019-02-26 17:07 - 2015-01-31 23:20 - 000000000 ____D C:\Users\Michael\AppData\Local\whatpulse
2019-02-26 17:06 - 2018-12-08 19:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-02-26 17:06 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-26 17:06 - 2017-07-25 15:37 - 000000000 ____D C:\ProgramData\NVIDIA
2019-02-26 17:06 - 2015-01-25 00:49 - 000000000 ___RD C:\Users\Michael\iCloudDrive
2019-02-26 17:06 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Spotify
2019-02-26 17:06 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Spotify
2019-02-26 17:05 - 2018-09-15 07:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-02-26 17:03 - 2015-11-22 19:23 - 000000600 _____ C:\Users\Michael\AppData\Local\PUTTY.RND
2019-02-26 16:57 - 2018-12-08 18:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-02-26 09:50 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-02-26 09:50 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-02-26 09:41 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-02-26 09:41 - 2015-11-26 23:20 - 000000008 __RSH C:\ProgramData\ntuser.pol
2019-02-26 09:40 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2019-02-26 09:40 - 2009-07-14 04:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2019-02-26 02:21 - 2018-12-08 19:07 - 000004166 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B0378A27-122D-4BCB-88AD-AA674EF080DB}
2019-02-26 01:21 - 2018-12-08 16:28 - 000000000 ___DC C:\Windows\Panther
2019-02-25 18:42 - 2017-09-15 21:09 - 000000000 ____D C:\Users\Michael\AppData\Local\PingPlotter 5
2019-02-24 23:51 - 2018-09-15 08:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-02-24 23:48 - 2019-01-02 09:00 - 000000000 ____D C:\Users\Michael\AppData\Roaming\IObit
2019-02-24 23:48 - 2017-05-31 23:54 - 000000000 ____D C:\ProgramData\ProductData
2019-02-24 02:11 - 2014-07-23 15:16 - 000000000 ____D C:\Users\Michael\Desktop\Bereinigungsprogramme
2019-02-24 02:08 - 2018-12-08 19:07 - 000003928 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-02-24 02:06 - 2014-07-22 01:05 - 000000000 ____D C:\ProgramData\Origin
2019-02-24 02:05 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Origin
2019-02-24 02:04 - 2018-12-11 22:34 - 000000000 ____D C:\Users\Michael\AppData\Roaming\OnionShare
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files\OBS
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files (x86)\OBS
2019-02-24 00:50 - 2018-03-02 05:42 - 000000000 ____D C:\Users\Michael\.VirtualBox
2019-02-24 00:44 - 2019-01-02 10:36 - 000000000 ____D C:\ProgramData\VirtualBox
2019-02-23 19:42 - 2018-05-18 04:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-02-23 01:08 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Dropbox
2019-02-22 21:47 - 2016-12-08 18:26 - 000000000 ____D C:\Users\Michael\AppData\Roaming\TunnelBear
2019-02-22 09:20 - 2017-01-06 22:05 - 000000000 ____D C:\Users\Michael\AppData\Roaming\vlc
2019-02-21 20:37 - 2017-11-16 03:31 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-20 01:01 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Ubisoft Game Launcher
2019-02-19 00:38 - 2018-12-08 19:01 - 000000000 ____D C:\Users\Michael
2019-02-18 15:23 - 2017-09-15 22:03 - 000000827 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-02-18 01:35 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-02-18 01:28 - 2014-07-21 20:47 - 000000000 ____D C:\Users\Michael\Desktop\Icons
2019-02-18 01:11 - 2019-01-02 09:05 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\IObit
2019-02-18 01:11 - 2019-01-02 09:00 - 000000000 ____D C:\ProgramData\IObit
2019-02-14 16:04 - 2018-12-08 19:07 - 000004534 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\Macromed
2019-02-14 15:51 - 2018-12-08 19:07 - 000004636 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-02-13 21:29 - 2018-12-08 18:57 - 000585952 _____ C:\Windows\system32\FNTCACHE.DAT
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\appraiser
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-02-13 15:42 - 2014-07-19 22:02 - 000000000 ____D C:\Windows\system32\MRT
2019-02-13 15:39 - 2014-07-19 22:02 - 129330784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-02-12 13:57 - 2018-12-08 19:07 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-02-11 23:26 - 2018-09-15 18:34 - 000000000 ____D C:\Windows\system32\OpenSSH
2019-02-09 10:29 - 2016-10-07 17:09 - 000001254 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job
2019-02-09 10:29 - 2016-10-07 17:09 - 000001202 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job
2019-02-08 12:26 - 2015-01-25 23:39 - 000000000 ____D C:\Users\Michael\AppData\Roaming\PersBackup5
2019-02-08 10:51 - 2018-12-08 19:07 - 000004408 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3
2019-02-08 10:51 - 2018-12-08 19:07 - 000004032 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318
2019-02-07 16:42 - 2016-07-28 17:12 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cain
2019-02-06 18:12 - 2017-10-24 03:54 - 000000000 ____D C:\Users\Michael\Documents\PersBackup
2019-02-06 15:39 - 2018-03-02 21:30 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-02-04 16:40 - 2017-05-15 13:48 - 000000000 ____D C:\ProgramData\Package Cache
2019-02-04 16:40 - 2014-07-20 01:28 - 000000000 ____D C:\ProgramData\Avira
2019-02-04 16:39 - 2018-09-15 07:09 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-02-04 16:30 - 2018-12-08 19:09 - 001968014 _____ C:\Windows\system32\PerfStringBackup.INI
2019-02-04 16:30 - 2018-09-15 18:33 - 000805258 _____ C:\Windows\system32\perfh007.dat
2019-02-04 16:30 - 2018-09-15 18:33 - 000172634 _____ C:\Windows\system32\perfc007.dat
2019-02-04 15:55 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-02-04 15:45 - 2010-11-21 04:27 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-02-03 14:39 - 2018-05-18 04:45 - 000000000 ____D C:\Users\Michael\AppData\Local\D3DSCache
2019-02-01 23:31 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-02-01 23:31 - 2018-09-15 08:36 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-02-01 17:01 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-01-31 18:29 - 2018-07-10 01:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2019-01-31 18:22 - 2014-07-19 18:30 - 000000000 ____D C:\ProgramData\Mozilla
2019-01-28 02:14 - 2019-01-02 10:36 - 001021768 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2019-01-28 02:14 - 2019-01-02 10:36 - 000185960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2017-01-14 12:37 - 2017-01-14 12:37 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2015-03-09 23:37 - 2015-03-09 23:37 - 000000095 _____ () C:\Users\Michael\AppData\Roaming\LauncherSettings_live.cfg
2017-08-09 00:04 - 2017-08-09 00:09 - 000000166 _____ () C:\Users\Michael\AppData\Roaming\nuvotonISP.lua
2015-03-09 23:36 - 2015-03-09 23:36 - 000000040 _____ () C:\Users\Michael\AppData\Roaming\TheHunterSettings_steam_live.cfg
2017-10-12 23:37 - 2018-06-03 23:07 - 000004402 _____ () C:\Users\Michael\AppData\Roaming\VoiceMeeterDefault.xml
2014-07-20 12:33 - 2014-01-13 13:37 - 000000074 _____ () C:\Users\Michael\AppData\Roaming\WB.CFG
2014-07-20 12:28 - 2013-01-04 22:20 - 000000095 _____ () C:\Users\Michael\AppData\Local\fusioncache.dat
2015-11-22 19:23 - 2019-02-26 17:03 - 000000600 _____ () C:\Users\Michael\AppData\Local\PUTTY.RND
2017-03-19 00:04 - 2017-03-19 00:04 - 000007606 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg
2014-07-21 23:42 - 2014-07-21 23:42 - 000828671 _____ () C:\Users\Michael\AppData\Local\Tempmusic.ogg
2014-07-20 12:28 - 2012-09-21 19:12 - 000017408 _____ () C:\Users\Michael\AppData\Local\WebpageIcons.db
2012-09-10 12:49 - 2012-09-10 12:49 - 000001050 ____H () C:\Users\Michael\AppData\Local\{793FD447-37EB-4083-B222-2E447297AF07}
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\dllhost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\dllhost.exe => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
==================== Ende von FRST.txt ============================
Addition.txt Teil 1: Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25.02.2019 01
durchgeführt von Michael (26-02-2019 17:11:44)
Gestartet von C:\Users\Michael\Desktop\Frst
Windows 10 Home Version 1809 17763.316 (X64) (2018-12-08 18:07:40)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2862775871-2864016982-4179919401-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2862775871-2864016982-4179919401-1005 - Limited - Enabled)
DefaultAccount (S-1-5-21-2862775871-2864016982-4179919401-503 - Limited - Disabled)
Gast (S-1-5-21-2862775871-2864016982-4179919401-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2862775871-2864016982-4179919401-1044 - Limited - Enabled)
Michael (S-1-5-21-2862775871-2864016982-4179919401-1000 - Administrator - Enabled) => C:\Users\Michael
WDAGUtilityAccount (S-1-5-21-2862775871-2864016982-4179919401-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\uTorrent) (Version: 3.5.3.44494 - BitTorrent Inc.)
4K Stogram 2.6 (HKLM\...\{CBD24523-4E64-4DFB-8311-05019EFD0D6B}) (Version: 2.6.14.1590 - Open Media LLC)
64 Bit HP CIO Components Installer (HKLM\...\{345F3F90-0505-4EDF-B7A9-5E3AC1AC6CE4}) (Version: 15.2.1 - Hewlett-Packard) Hidden
7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Any Video Converter 6.2.3 (HKLM-x32\...\Any Video Converter) (Version: 6.2.3 - Anvsoft)
Apple Application Support (32-Bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.1.9.000 - Asmedia Technology)
Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version: - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Uplay Install 625) (Version: - Ubisoft)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version: - Ubisoft)
Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.51 - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)
ATTO Disk Benchmark (HKLM-x32\...\{8D451ECC-F576-41CF-8059-150676D668EF}) (Version: 4.000.4002 - ATTO Technology)
AVS Image Converter 5.0.3 (HKLM-x32\...\AVS Image Converter_is1) (Version: 5.0.3.293 - Online Media Technologies Ltd.)
Backup and Sync from Google (HKLM\...\{693CADB0-962B-4AC1-A939-9524B258C997}) (Version: 3.43.2448.9071 - Google, Inc.)
Balabolka (HKLM-x32\...\Balabolka) (Version: 2.05 - Ilya Morozov)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.57.44284 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.4.0.10 - Electronic Arts)
Battlefield™ V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.59.63793 - Electronic Arts)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.18.5 - Bethesda Softworks)
BetterHash (HKLM-x32\...\BH1_is1) (Version: 2.41.0.203 - Innovative Solutions)
BlueJ (HKLM-x32\...\{7D66971C-652B-4065-A6B1-B3EE313C254B}) (Version: 3.1.1 - BlueJ Team)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 3.55.70.1783 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BPM-Studio 4 Demo (HKLM-x32\...\{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}) (Version: 4.9.94 - AlcaTech)
Cain & Abel 4.9.56 (HKLM-x32\...\Cain & Abel 4.9.56) (Version: - )
CameoD4 (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\{3b187530-f325-414e-85ac-b5b28c38ba65}) (Version: 1.0.0.0 - LightingSoft)
CCleaner (HKLM\...\CCleaner) (Version: 5.53 - Piriform)
Cobra 11 - Crash Time Demo (remove only) (HKLM-x32\...\CrashTime Demo) (Version: - )
Cobra 11 - Nitro Demo (HKLM-x32\...\{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic) Hidden
Cobra 11 - Nitro Demo (HKLM-x32\...\InstallShield_{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic)
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
CPUID CPU-Z 1.86 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.86 - CPUID, Inc.)
Creative ALchemy (HKLM-x32\...\ALchemy) (Version: 1.45 - Creative Technology Limited)
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: - )
Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.14 - Creative Technology Limited)
CrystalDiskInfo 7.5.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.5.1 - Crystal Dew World)
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
Dead in Bermuda (HKLM-x32\...\{FA6BAE37-E751-46A2-A26D-C6090ECCEBD3}) (Version: 4.7.0.2969 - Plug In Digital)
Dead Space (HKLM-x32\...\{9789E33B-317A-44B2-AF9A-FF8708AD93E0}) (Version: 3.0.0.222 - Electronic Arts)
D-Fend Reloaded 1.4.4 (deinstallieren) (HKLM-x32\...\D-Fend Reloaded) (Version: 1.4.4 - Alexander Herzog)
DMXControl 3.1 (HKLM-x32\...\DMXControl3) (Version: 3.1 - DMXControl Projects e.V.)
DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.60.000 - Runtime Software)
Dropbox (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Dropbox) (Version: 68.3.92 - Dropbox, Inc.)
Dungeon Keeper (HKLM-x32\...\{B9E79070-56B6-4980-A7E9-C28D6480D050}) (Version: 1.0.0.1 - Electronic Arts)
EaseUS Partition Master 13.0 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
EaseUS Todo Backup Free 11.5 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 11.5 - CHENGDU YIWO Tech Development Co., Ltd)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: - Steinberg Media Technologies GmbH)
Emperors New Groove (HKLM-x32\...\Emperors New Groove) (Version: - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
Far Cry 5 (HKLM-x32\...\Uplay Install 1803) (Version: - Ubisoft)
Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version: - Ubisoft)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Fraps (HKLM-x32\...\Fraps) (Version: - )
Fresco Logic USB3.0 Host Controller (HKLM\...\{6E9E1B70-59C4-403E-ABFB-C08012BC7F8A}) (Version: 3.0.89.14 - Fresco Logic Inc.)
Funfair Machines Break Dance No.1 V1.1 (HKLM-x32\...\Funfair Machines Break Dance No.1 V1.1) (Version: - )
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.40.0 - International GeoGebra Institute)
G-Force (HKLM-x32\...\G-Force) (Version: 5.1.2 - SoundSpectrum)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 72.0.3626.119 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
gpedt.msc 1.0 (HKLM-x32\...\{10B9C608-BF7C-4CCF-A658-C01D969DCA21}_is1) (Version: - Richard)
Gpg4win (3.1.4) (HKLM-x32\...\Gpg4win) (Version: 3.1.4 - The Gpg4win Project)
HashCalc 2.02 (HKLM-x32\...\HashCalc_is1) (Version: - SlavaSoft Inc.)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
IdleMaster (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\1d85483b1c982d8c) (Version: 1.4.0.0 - IdleMaster)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
IL Minihost Modular (HKLM-x32\...\IL Minihost Modular) (Version: - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version: - Image-Line)
ImageGlass (HKLM\...\{D539FBEF-4AA8-4415-B66F-6367DA5D0186}_is1) (Version: 4.5.11.27 - Duong Dieu Phap)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4885 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.1.2.1 - IObit)
ISO to USB (HKLM-x32\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version: - isotousb.com)
IsoBuster 4.3 (HKLM-x32\...\IsoBuster_is1) (Version: 4.3 - Smart Projects)
iTunes (HKLM\...\{C704C598-39D0-4B12-BBFA-FF6D43C95BFD}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Java SE Development Kit 8 Update 112 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180112}) (Version: 8.0.1120.15 - Oracle Corporation)
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version: - )
Magic 3D Easy View (HKLM-x32\...\Magic 3D Easy View_is1) (Version: - Nicolaudie)
Malwarebytes Version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Manhunt 2 (HKLM-x32\...\Manhunt 2) (Version: 1.00.0000 - Rockstar Games)
Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts)
Mäx! (HKLM-x32\...\Maex) (Version: - )
MeatCity 2 V2.03 (HKLM-x32\...\MeatCity 2) (Version: V2.03 - )
Medal of Honor: Pacific Assault™ (HKLM-x32\...\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}) (Version: 1.2.1.280 - Electronic Arts)
Medal of Honor™ Warfighter (HKLM-x32\...\{1040143F-FEFB-4B90-8E51-E47D40E14C4E}) (Version: 1.0.0.3 - Electronic Arts)
Melodyne 3.2 Demo (HKLM-x32\...\{EC9A0711-9823-4DD2-83C4-039886A3ECF6}) (Version: 3.2.0105 - Celemony Software GmbH) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.62615.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-0ACBCE08F78D}) (Version: 10.0.62615.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mirror's Edge™ Catalyst (HKLM-x32\...\{12228a0d-f6ad-4691-82af-d2c643424468}) (Version: 1.0.3.47248 - Electronic Arts)
Mirror's Edge™ Catalyst Closed Beta (HKLM-x32\...\{A0F5340B-2F0B-4830-B746-1850B62B61E0}) (Version: 1.0.3.31690 - Electronic Arts)
Morphyre (HKLM-x32\...\Morphyre) (Version: - )
Mozilla Firefox 58.0.2 (x64 de) (HKLM\...\Mozilla Firefox 58.0.2 (x64 de)) (Version: 58.0.2 - Mozilla)
Mozilla Firefox 65.0.1 (x64 de) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Mozilla Firefox 65.0.1 (x64 de)) (Version: 65.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
NASA World Wind 1.4 (HKLM-x32\...\NASA World Wind 1.4) (Version: - )
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Next Generation Visualisations (HKLM-x32\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 - Microsoft)
NirSoft ShellExView (HKLM-x32\...\NirSoft ShellExView) (Version: - )
NordVPN (HKLM-x32\...\{F11DDED0-213C-41B7-B120-514E402A7B53}) (Version: 6.19.6 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.19.6) (Version: 6.19.6 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NOX (HKLM-x32\...\{BF152F35-9708-452C-862C-F7E3B62DF732}) (Version: 2.0.0.22 - Electronic Arts, Inc.)
NVIDIA HD-Audiotreiber 1.3.38.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.4 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.5 (HKLM-x32\...\{F0C909D7-D643-4628-8C6A-94073139F0CE}) (Version: 4.15.9789 - Apache Software Foundation)
Oracle VM VirtualBox 6.0.4 (HKLM\...\{9E2B30E6-2102-45C0-9EAF-B631EBCEC198}) (Version: 6.0.4 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.34.21025 - Electronic Arts, Inc.)
Paragon Backup and Recovery™ 14 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Partition Manager™ 2014 Free (HKLM-x32\...\{47E5588F-C3A0-11DE-9857-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Personal Backup 5.9.4.10 (64-bit) (HKLM\...\Personal Backup 5_is1) (Version: 5.9.4.10 - Dr. J. Rathlev)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PingPlotter 5 (HKLM-x32\...\{F513FFE3-ED3B-4DC1-BB41-DABEBCAE2F6F}) (Version: 5.5.14.4908 - Pingman Tools, LLC) Hidden
PingPlotter 5 (HKLM-x32\...\PingPlotter 5 5.5.14.4908) (Version: 5.5.14.4908 - Pingman Tools, LLC)
Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.) Hidden
ProtonVPN (HKLM-x32\...\{ED11FFD4-61B3-4329-870E-8F4DAC7D5A0D}) (Version: 1.6.4 - ProtonVPN AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.6.4) (Version: 1.6.4 - ProtonVPN AG)
ProtonVPNTap (HKLM-x32\...\{C23BCE3A-FD25-48BA-948E-2CE94576F983}) (Version: 1.0.1 - ProtonVPN AG)
Quake Champions (HKLM-x32\...\Quake Champions) (Version: - Bethesda Softworks)
RealSpeak Solo fur Deutsch - Steffi (HKLM-x32\...\{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}) (Version: 4.00.0000 - ScanSoft)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8549 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Rename Master (HKLM-x32\...\Rename Master_is1) (Version: - )
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Rise of the Triad (HKLM-x32\...\1207659244_is1) (Version: 2.5.0.23 - GOG.com)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version: - )
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.2.0.1610 - Samsung Electronics)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SeaTools for Windows 1.4.0.6 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.6 - Seagate Technology)
SiudiDriver Version 2.3 (HKLM\...\SiudiDriver_is1) (Version: 2.3 - LightingSoft AG)
SlimDX Runtime .NET 4.0 x86 (January 2012) (HKLM-x32\...\{7EBD0E43-6AC0-4CA8-9990-00E50069AD29}) (Version: 2.0.13.43 - SlimDX Group)
Sniper Elite (HKLM-x32\...\{A979B2D8-E3EE-4523-A26C-4AF0A6809280}) (Version: - )
SoftPerfect Network Scanner version 7.1.2 (HKLM\...\{8083C3D9-F400-48FA-B060-CF55F25E2D4B}_is1) (Version: 7.1.2 - SoftPerfect)
SoftSkies (HKLM-x32\...\SoftSkies) (Version: 2.1.2 - SoundSpectrum)
Spire-1.1 Plug-In (x64) (HKLM\...\{3F98118B-D5D1-455B-A899-E03C1D7B4E89}) (Version: 1.1.12.0 - Reveal Sound Ltd.)
Splice (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\splice) (Version: 3.2.28369 - Distributed Creation, Inc.)
Spotify (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Spotify) (Version: 1.1.0.237.g378f6f25 - Spotify AB)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
TAP-NordVPN 9.21.2 (HKLM\...\TAP-NordVPN) (Version: 9.21.2 - NordVPN.com)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp)
Termius 3.0.10 (only current user) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\4f53adaa-a4b2-50c1-b605-e304e4d14011) (Version: 3.0.10 - Crystalnix)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft)
The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.1 - Electronic Arts)
The Train 1.0 (HKLM-x32\...\The Train 1.0) (Version: 1.0 - Cat-A-Cat)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts)
Total Overdose (HKLM-x32\...\GOGPACKTOTALOVERDOSE_is1) (Version: 2.0.0.2 - GOG.com)
Trials of the Blood Dragon (HKLM-x32\...\Uplay Install 2741) (Version: - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
TunnelBear (HKLM-x32\...\{1d805fba-7655-411e-a641-51f4f8e6bd5b}) (Version: 3.0.33.0 - TunnelBear)
TunnelBear (HKLM-x32\...\{C0A3B957-2B11-404F-9FFC-D97E7D175681}) (Version: 3.0.33.0 - TunnelBear) Hidden
Ultima 8 (HKLM-x32\...\{428C6B01-D292-46F9-9321-75668ED17DA2}) (Version: 1.0.0.1 - Electronic Arts)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.6 - Ubisoft)
USBPcap 1.1.0.0-g794bf26-3 (HKLM\...\USBPcap) (Version: 1.1.0.0-g794bf26-3 - )
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.23 - IDRIX)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.)
Virtual Audio Cable 4.14 (HKLM\...\Virtual Audio Cable 4.14) (Version: - )
Vistawinexit (HKLM-x32\...\{2FC1B08D-B4B6-42F4-B1BF-C913625EAC6C}_is1) (Version: 8 - hxxp://www.kurt-selzam.de/)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version: - VB-Audio Software)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{71B8842B-5C0D-4221-968D-8750D4F3DF63}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{cc96a3c1-3461-4e39-be96-50219a26ce18}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline)
WhatPulse version 2.8.4 (HKLM-x32\...\{95CC8D5F-90A1-4285-9B2D-8D0FBCFD8D0D}_is1) (Version: 2.8.4 - WhatPulse)
WhiteCap (HKLM-x32\...\WhiteCap) (Version: 6.5 - SoundSpectrum)
Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Winamp Essentials Pack (HKLM-x32\...\Winamp Essentials Pack) (Version: v5.64 - Christoph Grether)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinToUSB Version 3.9 (HKLM\...\WinToUSB_is1) (Version: 3.9 - Hasleo Software.)
Wireshark 2.4.2 32-bit (HKLM-x32\...\Wireshark) (Version: 2.4.2 - The Wireshark developer community, hxxps://www.wireshark.org)
Wondershare AllMyTube(Build 4.10.2.3) (HKLM-x32\...\Wondershare AllMyTube_is1) (Version: 4.10.2.3 - Wondershare Software)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Zip Motion Block Video codec (Remove Only) (HKLM-x32\...\ZMBV) (Version: - DOSBox Team)
Zumas Revenge (HKLM-x32\...\{0B153CAB-792B-4CA2-B2A5-AB0BBAF2FFA9}) (Version: 1.0.5.600 - PopCap Games)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{9B57F475-CCB0-4C85-88A9-2AA9A6C0809A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} => -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} => -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [Balabolka] -> {6CB83A5A-AA68-4895-9F54-175E789AE149} => G:\Programme\Balabolka\BFileExt.dll [2012-04-06] (Ilya Morozov) [Datei ist nicht signiert]
ContextMenuHandlers1: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} => -> Keine Datei
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers1: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} => -> Keine Datei
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Keine Datei
ContextMenuHandlers2: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} => -> Keine Datei
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers4: [UltraISO] -> [CC]{AD392E40-428C-459F-961E-9B147782D099} => -> Keine Datei
ContextMenuHandlers4: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-12-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} => -> Keine Datei
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {01EA6A67-8822-46E0-BD96-FC08DB3D8BBB} - System32\Tasks\{89DD9B44-2F83-4197-996E-C8098428B644} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setupd.exe -d C:\Users\Michael\Desktop
Task: {059CD803-B78C-413D-BE1A-AA09A9445C32} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {07DDD542-132B-46BB-B3FC-F35BA76D0CA9} - System32\Tasks\CCleaner Update => G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {0B709BD2-E774-420A-A51B-BBD4DA2A66CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {17B66134-46E2-4A54-8BF9-990BA02C0C5C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {35A08F34-9552-4F46-B6F7-BF78570FA332} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {39029539-4295-4AEB-84D8-B523676A734A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {3CCB2340-05A8-41A1-A53E-071A229DDC24} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4250DC96-7DDE-4BAE-A3DA-CCA4F32C9438} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {466FD5D0-FAFE-42D6-97D2-029ABBEB5A54} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {4B2485CD-C98B-4707-A57B-9B7E1B189B35} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.EXE /NOUACCHECK
Task: {5068825B-B75D-436A-AB39-5665687A7E9F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5C072332-DBEA-42E8-A395-9E5CB91F6E15} - System32\Tasks\S-1-5-21-2862775871-2864016982-4179919401-1000\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe (Microsoft Windows -> Microsoft Corporation)
Task: {6485F8B2-6355-40E9-A653-5A9BF901A413} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {6656EB71-F08F-4A17-AAC4-3031825E49D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {779C4E69-F3B3-4D22-A9B0-5ED017345E3D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {8A9D0829-BB90-4472-B4C2-8A70FFEACCE4} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {8B778A13-4A28-4427-A53D-95B6BA5CF98C} - System32\Tasks\SamsungMagician => G:\Programme\Samsung Magician\SamsungMagician.exe (Samsung Electronics Co., Ltd. -> Samsung Electronics Co. Ltd.)
Task: {8D512E7D-F4D8-47EE-A0BB-3C36FA78D4FB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {8F44A9F9-2DB8-4407-931D-725DAFFD0D24} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {9D144209-4029-48FD-B10A-66A3ACDB35AE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {A2F85536-A291-4FF9-88FE-6620A6DB6D91} - System32\Tasks\{1DE6E651-2507-43E3-9FF8-E287F4799876} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setup.exe -d C:\Users\Michael\Desktop
Task: {AED74002-9BE2-466E-86F1-9370F35F24AE} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {B7ECBF71-5300-4273-9E5B-71C343957C32} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {B823C99B-068A-47F9-B8D6-E652C6620DF6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {BDAB4FB8-B3EC-4598-A2A6-7C6654BD7B69} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C4B78B46-40B0-463D-9841-2D8816553CD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {CE7BF8D7-4637-474F-A48C-7034C246B4D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {CED07631-1858-44D0-8F84-456AEBE2D6FC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {D6E2EDBA-DEDE-4893-87A1-61EEEACD3F99} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {DB292475-781B-48F6-97C7-5694CF930CBA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {E3CCB1BB-EFF6-4410-8E9F-8AAC2973C17B} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {E922B90C-F1EA-4D8C-BEAE-D573F342E45F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {EDD03E1B-FEAD-47F1-8388-2F27B94E3A7E} - System32\Tasks\CrystalDiskInfo => G:\Programme\CrystalDiskInfo\DiskInfo32.exe (Noriyuki Miyazaki -> Crystal Dew World)
Task: {FC158B24-ECDF-4F3F-8C9B-764B5078E035} - System32\Tasks\Tweaking.com - Registry Backup => G:\Programme\Registry Backup\TweakingRegistryBackup.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
|
Lesestoff: