| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
24.10.2015, 21:05
| #1 |
 |  Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Abend  Im Moment bekomme ich ständig Werbung und Pop-up Fenster beim Surfen. Manchmal öffnet sich auch unangefordert ein anderer Browser mit Werbung, entweder Firefox oder Mybrowser, während ich aber Google Chrome benutze. Mybrowser gehört neben YTDownloader zu Programmen, die ich eigentlich nicht installiert habe, die aber trotzdem auftauchen. Bevor ich auf dieses Forum gestoßen bin, hab ich versucht alles mit Malwarebytes zu entfernen, habe die Ergebnisse aber nicht gespeichert und jetzt finde ich nur Schutzprotokolle. Avast hat auch einige Dateien in die Quarantäne verschoben, leider weiß ich aber nicht, wo man die Log Dateien findet. Den Log von Defogger habe ich auch leider nicht gefunden und bei GMER kam die Meldung "C:\Windows\system32\config\system: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird." Ich hatte aber alle Programme geschlossen, Avast deaktiviert und WiFi ausgeschaltet. FRST hat funktioniert. FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:24-10-2015 durchgeführt von saturn1 (Administrator) auf SATURN (24-10-2015 20:56:30) Gestartet von C:\Users\saturn1\Downloads Geladene Profile: UpdatusUser & saturn1 (Verfügbare Profile: UpdatusUser & saturn1 & Gast) Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe (Cinema PlusV18.10) C:\Program Files (x86)\CinemaPlus-3.2cV18.10\07193f39-2975-4a06-b838-be65dc69209f-6.exe (Cinema PlusV18.10) C:\Program Files (x86)\CinemaPlus-3.2cV18.10\07193f39-2975-4a06-b838-be65dc69209f-1-6.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files (x86)\093BD3E7-1445176877-3346-BE18-089E01F42089\hnst635A.tmp (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Condusiv Technologies) C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe () C:\Program Files (x86)\093BD3E7-1445176877-3346-BE18-089E01F42089\knst30D8.tmpfs (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe (Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe () C:\Program Files (x86)\093BD3E7-1445176877-3346-BE18-089E01F42089\jnsz4B9A.tmp (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Cinema PlusV18.10) C:\Program Files (x86)\CinemaPlus-3.2cV18.10\07193f39-2975-4a06-b838-be65dc69209f-1-6.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe (Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Cinema PlusV24.10) C:\Program Files (x86)\CinemaPlus-3.2cV24.10\9019b8ca-0bd0-4075-810e-ddb68bb0dc98-6.exe (Cinema PlusV24.10) C:\Program Files (x86)\CinemaPlus-3.2cV24.10\9019b8ca-0bd0-4075-810e-ddb68bb0dc98-1-6.exe (Search Module Ltd.) C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe () C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe (globalUpdate) C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe (Cinema PlusV24.10) C:\Program Files (x86)\CinemaPlus-3.2cV24.10\9019b8ca-0bd0-4075-810e-ddb68bb0dc98-10.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe () C:\Users\saturn1\AppData\Local\gmsd_de_005010123\upgmsd_de_005010123.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Screen Grasp\GestureDetection.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Screen Grasp\Launch Screen Grasp.exe (Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Akamai Technologies, Inc.) C:\Users\saturn1\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\saturn1\AppData\Local\Akamai\netsession_win.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe () C:\Program Files (x86)\Syncios\SynciosDeviceService.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\gmsd_de_005010123\gmsd_de_005010123.exe () C:\Program Files (x86)\rec_en_77\rec_en_77.exe () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Goobzo) C:\Program Files (x86)\YTDownloader\BrowserHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778352 2013-08-28] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.) HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.) HKLM-x32\...\Run: [Syncios device service] => C:\Program Files (x86)\Syncios\SynciosDeviceService.exe [747520 2014-10-31] () HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.) HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2015-09-16] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36711472 2015-10-13] (Dropbox, Inc.) HKLM-x32\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1991600 2015-10-22] (YTDownloader) HKLM-x32\...\RunOnce: [upgmsd_de_005010123.exe] => C:\Users\saturn1\AppData\Local\gmsd_de_005010123\upgmsd_de_005010123.exe [3335344 2015-10-22] () HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-10-05] (Malwarebytes) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Run: [Akamai NetSession Interface] => C:\Users\saturn1\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.) HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Run: [YTDownloader] => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [1991600 2015-10-22] (YTDownloader) HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Run: [SPDriver] => C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2687\jsdrv.exe HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\RunOnce: [Application Restart #2] => C:\Users\saturn1\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-sid (Der Dateneintrag hat 566 mehr Zeichen). HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation) HKU\S-1-5-18\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [1769312 2015-09-16] () HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\logon.scr AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation) ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated) ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-03] (Avast Software s.r.o.) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk [2015-10-24] ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-10-24] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) BootExecute: autocheck autochk * aswBoot.exe /M:21d4b14d868 /wow /dir:"C:\Program Files\AVAST Software\Avast" ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{0578C397-90C3-41AD-BF4A-E9A5C7F21EDE}: [DhcpNameServer] 40.33.1.55 Tcpip\..\Interfaces\{8338A901-C2B3-48D2-91B5-92D696243DA8}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1506994272-2369309272-3303374795-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer13.msn.com/?pc=ACJB HKU\S-1-5-21-1506994272-2369309272-3303374795-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006 SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> {5D48B1EE-C9AE-44AA-8E1C-9739F1CAB895} URL = SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> {B88EC6B7-CAD2-47CF-98CD-6F1C52DC6102} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms} BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-03] (Avast Software s.r.o.) BHO-x32: Kein Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> Keine Datei BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-28] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-03] (Avast Software s.r.o.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-28] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) FireFox: ======== FF ProfilePath: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default FF DefaultSearchUrl: hxxps://www.google.com/search/?trackid=sp-006 FF SearchEngineOrder.1: Google (avast) FF SelectedSearchEngine: Google (avast) FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/.com/?site=shyosffdefault&prd=set&s=FAOztutdk0003,6de5abd9-4bff-4a3d-b98f-542a02b515ac FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-17] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-28] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-28] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.) FF user.js: detected! => C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\user.js [2015-10-18] FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\bing-avast.xml [2015-03-21] FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\ecosia.xml [2015-10-17] FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\google-avast.xml [2015-08-06] FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\google-images.xml [2015-03-21] FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\google-maps.xml [2015-03-21] FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\youtube-videosuche.xml [2015-03-01] FF Extension: YouTube Unblocker - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\youtubeunblocker@unblocker.yt [2015-10-16] FF Extension: TextMarker! - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\{1c530060-b0ae-11d9-9669-0800200c9a66} [2015-10-13] FF Extension: Lightbeam - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi [2015-05-27] FF Extension: Ecosia — The search engine that plants trees! - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2015-10-17] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-03] [ist nicht signiert] FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => nicht gefunden FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\extensions\cliqz@cliqz.com => nicht gefunden Chrome: ======= CHR HomePage: Default -> hxxp://www-searching.com/?pid=s&s=FAOztutdk0003,6de5abd9-4bff-4a3d-b98f-542a02b515ac, CHR DefaultSearchURL: Default -> hxxp://www-searching.com/search.aspx?site=shdefault&prd=smw&pid=s&shr=d&q={searchTerms}&s=FAOztutdk0003,6de5abd9-4bff-4a3d-b98f-542a02b515ac, CHR DefaultSearchKeyword: Default -> www-searching.com CHR DefaultSuggestURL: Default -> hxxp://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms} CHR Profile: C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-08] CHR Extension: (Google Docs) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08] CHR Extension: (Google Drive) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24] CHR Extension: (YouTube) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27] CHR Extension: (Google Cast) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2015-10-12] CHR Extension: (Google-Suche) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-24] CHR Extension: (Google Tabellen) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-08] CHR Extension: (Google Text & Tabellen Offline) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06] CHR Extension: (Avast Online Security) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-20] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-07] CHR Extension: (Google Mail) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-03] CHR HKLM-x32\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-03] Opera: ======= OPR Extension: (Opera Bookmarks Share Portal) - C:\Users\saturn1\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-10-24] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-03] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-03] (Avast Software) R2 BrsHelper; C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [112560 2015-10-22] () R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2858336 2015-08-31] (Acer Incorporated) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-12] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-12] (Dropbox, Inc.) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated) R2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107792 2013-07-03] (Condusiv Technologies) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation) S3 Intel(R) TA SAM; C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18064 2015-04-18] () R2 Intel(R) Technology Access Legacy CS Loader; C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe [144128 2015-07-31] (Intel(R) Corporation) R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [481536 2015-07-31] (Intel(R) Corporation) R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-12] () S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation) R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.) R2 mitsijm2015; C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-12] (Autodesk, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] () S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert] S3 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [347176 2013-08-14] (Acer Incorporated) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-03] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-03] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-03] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-03] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-03] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-03] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-03] () S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation) U0 brini; C:\Windows\System32\drivers\ykcjs.sys [79064 2015-10-18] (Malwarebytes) S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation) S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.) U0 cbfj; C:\Windows\System32\drivers\cmsn.sys [79064 2015-10-24] (Malwarebytes) R3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation) S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [25872 2013-07-03] (Condusiv Technologies) R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112912 2013-07-03] (Condusiv Technologies) S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated) R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation) R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-08] () R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-08] () R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-07] () R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-07] () R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation) S2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.) R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-11-04] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.) R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.) R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.) R1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [41688 2015-04-30] (Intel Corporation) R3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67800 2014-10-30] (Intel Corporation) R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-19] (Intel Corporation) S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation) S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA) R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation) R2 sbmntr; C:\Program Files (x86)\YTDownloader\sbmntr.sys [58528 2015-10-22] (YTDownloader) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-28] (Synaptics Incorporated) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Datei ist nicht signiert] R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-03] (Avast Software) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) U0 ybjx; C:\Windows\System32\drivers\tbhmp.sys [79064 2015-10-18] (Malwarebytes) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-24 20:56 - 2015-10-24 20:57 - 00038498 _____ C:\Users\saturn1\Downloads\FRST.txt 2015-10-24 20:56 - 2015-10-24 20:56 - 00380416 _____ C:\Users\saturn1\Downloads\hyvj88ry.exe 2015-10-24 20:56 - 2015-10-24 20:56 - 00000000 ____D C:\FRST 2015-10-24 20:55 - 2015-10-24 20:55 - 02196480 _____ (Farbar) C:\Users\saturn1\Downloads\FRST64.exe 2015-10-24 20:54 - 2015-10-24 20:55 - 01700352 _____ (Farbar) C:\Users\saturn1\Downloads\FRST.exe 2015-10-24 20:51 - 2015-10-24 20:51 - 00000476 _____ C:\Users\saturn1\Downloads\defogger_disable.log 2015-10-24 20:51 - 2015-10-24 20:51 - 00000000 _____ C:\Users\saturn1\defogger_reenable 2015-10-24 20:50 - 2015-10-24 20:50 - 00050477 _____ C:\Users\saturn1\Downloads\Defogger.exe 2015-10-24 20:31 - 2015-10-24 20:31 - 00000000 ____D C:\ProgramData\ShopperPro 2015-10-24 20:25 - 2015-10-24 20:25 - 00003698 _____ C:\Windows\System32\Tasks\Inst_Rep 2015-10-24 20:25 - 2015-10-24 20:25 - 00000000 ____D C:\ProgramData\SearchModule 2015-10-24 20:21 - 2015-10-24 20:21 - 00079064 _____ (Malwarebytes) C:\Windows\system32\Drivers\cmsn.sys 2015-10-24 20:16 - 2015-10-24 20:16 - 00602112 _____ (OldTimer Tools) C:\Users\saturn1\Downloads\OTL.exe 2015-10-24 19:40 - 2015-10-24 19:40 - 00000000 ____D C:\Users\saturn1\Downloads\ProcessExplorer_16.5 2015-10-24 19:39 - 2015-10-24 19:39 - 01125626 _____ C:\Users\saturn1\Downloads\ProcessExplorer_16.5.zip 2015-10-24 19:31 - 2015-10-24 20:20 - 00000000 ____D C:\Program Files\Common Files\ShopperPro 2015-10-24 19:24 - 2015-10-24 20:21 - 00001458 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-10-24 18:25 - 2015-10-24 20:21 - 00001929 _____ C:\Users\saturn1\Desktop\YTDownloader.lnk 2015-10-24 18:25 - 2015-10-24 18:25 - 00004362 _____ C:\Windows\System32\Tasks\Installer_DSKB 2015-10-24 18:25 - 2015-10-24 18:25 - 00003904 _____ C:\Windows\System32\Tasks\YTDownloaderUpd 2015-10-24 18:25 - 2015-10-24 18:25 - 00003582 _____ C:\Windows\System32\Tasks\YTDownloader 2015-10-24 18:25 - 2015-10-24 18:25 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader 2015-10-24 18:25 - 2015-10-24 18:25 - 00000000 ____D C:\Users\saturn1\AppData\Local\CrashRpt 2015-10-24 18:25 - 2015-10-24 18:25 - 00000000 ____D C:\Program Files\Common Files\Goobzo 2015-10-24 18:25 - 2015-10-24 18:25 - 00000000 ____D C:\Program Files (x86)\YTDownloader 2015-10-24 18:24 - 2015-10-24 20:20 - 00000000 ____D C:\Program Files (x86)\rec_en_77 2015-10-24 18:22 - 2015-10-24 20:21 - 00001091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-10-24 18:22 - 2015-10-24 20:21 - 00001085 _____ C:\Users\Public\Desktop\Opera.lnk 2015-10-24 18:22 - 2015-10-24 20:20 - 00000000 ____D C:\Users\saturn1\AppData\Local\gmsd_de_005010123 2015-10-24 18:22 - 2015-10-24 20:20 - 00000000 ____D C:\Program Files (x86)\gmsd_de_005010123 2015-10-24 18:22 - 2015-10-24 19:24 - 00001030 _____ C:\Windows\Tasks\fgQ3SLKo3PQmATQfNa.job 2015-10-24 18:22 - 2015-10-24 19:24 - 00001030 _____ C:\Windows\Tasks\bKowc082jZo3bbUXLv.job 2015-10-24 18:22 - 2015-10-24 18:22 - 00004038 _____ C:\Windows\System32\Tasks\fgQ3SLKo3PQmATQfNa 2015-10-24 18:22 - 2015-10-24 18:22 - 00004038 _____ C:\Windows\System32\Tasks\bKowc082jZo3bbUXLv 2015-10-24 18:22 - 2015-10-24 18:22 - 00003842 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1445703737 2015-10-24 18:22 - 2015-10-24 18:22 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\Opera Software 2015-10-24 18:22 - 2015-10-24 18:22 - 00000000 ____D C:\Users\saturn1\AppData\Local\Opera Software 2015-10-24 18:21 - 2015-10-24 20:20 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV24.10 2015-10-24 18:21 - 2015-10-24 18:22 - 00000000 ____D C:\Program Files (x86)\Opera 2015-10-24 18:20 - 2015-10-24 20:20 - 00000000 ____D C:\Program Files\SpaceSoundPro 2015-10-24 18:20 - 2015-10-24 18:20 - 00000008 _____ C:\END 2015-10-21 14:20 - 2015-10-21 14:20 - 00003334 _____ C:\Windows\System32\Tasks\AcerCloud 2015-10-18 21:46 - 2015-10-18 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-10-18 20:07 - 2015-10-18 20:07 - 00079064 _____ (Malwarebytes) C:\Windows\system32\Drivers\tbhmp.sys 2015-10-18 20:07 - 2015-10-18 20:07 - 00015266 _____ C:\Windows\Tasks\vvmo 2015-10-18 19:05 - 2015-10-18 19:05 - 00243888 _____ C:\Users\saturn1\Downloads\Firefox Setup Stub 41.0.2.exe 2015-10-18 19:03 - 2015-10-18 19:03 - 00264438 _____ C:\Windows\SysWOW64\llvwypec 2015-10-18 19:03 - 2015-10-18 19:03 - 00079064 _____ (Malwarebytes) C:\Windows\system32\Drivers\ykcjs.sys 2015-10-18 18:01 - 2015-10-24 20:21 - 00001076 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-10-18 18:01 - 2015-10-24 19:26 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-10-18 18:01 - 2015-10-18 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-10-18 18:01 - 2015-10-18 18:01 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-10-18 18:01 - 2015-10-18 18:01 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-10-18 18:01 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-10-18 18:01 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-10-18 18:01 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2015-10-18 18:00 - 2015-10-18 18:00 - 22908888 _____ (Malwarebytes ) C:\Users\saturn1\Downloads\mbam-setup-org-2.2.0.1024.exe 2015-10-18 17:58 - 2015-10-24 19:24 - 00001026 _____ C:\Windows\Tasks\ZRhLK9hrBkOCMase.job 2015-10-18 17:58 - 2015-10-24 19:24 - 00001018 _____ C:\Windows\Tasks\MVCQOKPixtwM.job 2015-10-18 17:58 - 2015-10-18 17:58 - 00004034 _____ C:\Windows\System32\Tasks\ZRhLK9hrBkOCMase 2015-10-18 17:58 - 2015-10-18 17:58 - 00004024 _____ C:\Windows\System32\Tasks\MVCQOKPixtwM 2015-10-18 17:08 - 2015-10-24 19:24 - 00001044 _____ C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job 2015-10-18 17:08 - 2015-10-24 19:24 - 00001024 _____ C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job 2015-10-18 17:08 - 2015-10-18 17:08 - 00004050 _____ C:\Windows\System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m 2015-10-18 17:08 - 2015-10-18 17:08 - 00004032 _____ C:\Windows\System32\Tasks\Y8AUFtKs8KRzdqL 2015-10-18 17:05 - 2015-10-18 17:05 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-10-18 17:05 - 2015-10-18 17:05 - 00000000 ____D C:\Users\saturn1\Tracing 2015-10-18 17:05 - 2015-10-18 17:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2015-10-18 17:04 - 2015-10-18 17:04 - 00000000 ____D C:\Users\saturn1\Documents\Autoloader 2015-10-18 16:34 - 2015-10-24 20:21 - 00001952 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk 2015-10-18 16:34 - 2015-10-24 19:24 - 00001032 _____ C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job 2015-10-18 16:34 - 2015-10-24 19:24 - 00001010 _____ C:\Windows\Tasks\GUmJ6Qbd.job 2015-10-18 16:34 - 2015-10-18 16:34 - 00004038 _____ C:\Windows\System32\Tasks\n2WsgG5UnMBz2EppfzX 2015-10-18 16:34 - 2015-10-18 16:34 - 00004018 _____ C:\Windows\System32\Tasks\GUmJ6Qbd 2015-10-18 16:15 - 2015-10-24 19:24 - 00001048 _____ C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job 2015-10-18 16:15 - 2015-10-24 19:24 - 00001030 _____ C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job 2015-10-18 16:15 - 2015-10-18 16:15 - 00004056 _____ C:\Windows\System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF 2015-10-18 16:15 - 2015-10-18 16:15 - 00004038 _____ C:\Windows\System32\Tasks\DEAn2Th92CYuEkPG9n 2015-10-18 16:13 - 2015-10-24 19:24 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-10-18 16:13 - 2015-10-24 18:21 - 00000000 ____D C:\Program Files (x86)\globalUpdate 2015-10-18 16:13 - 2015-10-19 18:54 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV18.10 2015-10-18 16:13 - 2015-10-18 16:13 - 00000000 ____D C:\Users\saturn1\AppData\Local\globalUpdate 2015-10-18 16:07 - 2015-10-18 16:07 - 00003130 _____ C:\Windows\System32\Tasks\{BDB0FB31-C5A3-4201-9E0E-C7E3F5F6FE6F} 2015-10-18 16:06 - 2015-10-18 16:06 - 00000000 ____D C:\Program Files (x86)\predm 2015-10-18 16:03 - 2015-10-18 16:21 - 818177352 _____ (Travellers Tales (UK) Ltd) C:\Users\saturn1\Downloads\LEGOHarryPotterDEMO.exe.part 2015-10-18 16:02 - 2015-10-18 16:02 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\dlg 2015-10-18 16:01 - 2015-10-18 19:02 - 00000000 ____D C:\Program Files (x86)\DailyPcClean Support 2015-10-18 16:01 - 2015-10-18 19:02 - 00000000 ____D C:\Program Files (x86)\093BD3E7-1445176877-3346-BE18-089E01F42089 2015-10-18 16:01 - 2013-08-22 15:25 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-10-18 16:00 - 2015-10-18 16:07 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\SpeedMon 2015-10-18 15:59 - 2015-10-18 15:59 - 00544320 _____ C:\Users\saturn1\Downloads\jetzt_installieren.exe 2015-10-16 11:42 - 2015-10-18 19:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-10-11 13:40 - 2015-10-11 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2015-10-11 13:40 - 2015-10-11 13:40 - 00000000 ____D C:\Program Files\iTunes 2015-10-11 13:40 - 2015-10-11 13:40 - 00000000 ____D C:\Program Files\iPod 2015-10-11 13:40 - 2015-10-11 13:40 - 00000000 ____D C:\Program Files (x86)\iTunes 2015-10-11 13:38 - 2015-10-11 13:38 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2015-10-11 13:38 - 2015-10-11 13:38 - 00000000 ____D C:\Program Files\Bonjour 2015-10-11 13:38 - 2015-10-11 13:38 - 00000000 ____D C:\Program Files (x86)\Bonjour 2015-10-11 13:38 - 2015-10-11 13:38 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2015-10-08 15:59 - 2015-10-08 15:59 - 00186880 _____ (TODO: <Company name>) C:\Windows\system32\rsrcs.dll 2015-10-03 17:54 - 2015-10-03 17:54 - 00143445 _____ C:\Users\saturn1\Downloads\YouTube-Unblocker-056.zip 2015-10-03 17:53 - 2015-10-03 17:53 - 01457952 _____ C:\Users\saturn1\Downloads\YouTube-Unblocker-056 - CHIP-Installer.exe 2015-10-03 16:14 - 2015-10-03 16:14 - 00000000 ____D C:\Users\saturn1\Downloads\youtube_unblocker-0.6.17-fx 2015-10-03 16:08 - 2015-10-03 16:08 - 00201046 _____ C:\Users\saturn1\Downloads\youtube_unblocker-0.6.17-fx.zip 2015-10-02 22:34 - 2015-10-02 22:34 - 00000000 ____D C:\Windows\LastGood 2015-09-27 18:33 - 2015-09-27 18:33 - 00000000 ____D C:\Windows\LastGood.Tmp ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-24 20:52 - 2013-11-11 18:06 - 01185910 _____ C:\Windows\WindowsUpdate.log 2015-10-24 20:51 - 2013-12-22 00:02 - 00000000 ____D C:\Users\saturn1 2015-10-24 20:46 - 2014-10-22 21:08 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-10-24 20:45 - 2015-09-12 09:40 - 00001230 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2015-10-24 20:25 - 2013-12-22 00:08 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1506994272-2369309272-3303374795-1002 2015-10-24 20:22 - 2014-10-17 22:17 - 00000000 ____D C:\Users\saturn1\AppData\Local\CrashDumps 2015-10-24 20:21 - 2015-07-07 09:26 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2015-10-24 20:21 - 2014-10-17 13:25 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2015-10-24 20:21 - 2014-09-06 15:44 - 00002205 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer Games.lnk 2015-10-24 20:21 - 2014-09-06 15:44 - 00002105 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk 2015-10-24 20:21 - 2014-02-18 20:34 - 00002185 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2015-10-24 20:21 - 2013-12-22 00:03 - 00001280 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk 2015-10-24 20:21 - 2013-12-22 00:02 - 00001458 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet-Explorer.lnk 2015-10-24 20:21 - 2013-11-11 18:56 - 00001939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2015-10-24 20:21 - 2013-10-07 13:23 - 00000000 ____D C:\Windows\oem 2015-10-24 20:21 - 2013-07-09 23:24 - 00002166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Games.lnk 2015-10-24 20:19 - 2013-10-07 13:21 - 00000000 ____D C:\Program Files (x86)\Acer 2015-10-24 20:12 - 2014-12-13 15:40 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-10-24 20:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru 2015-10-24 19:32 - 2014-10-15 21:06 - 00000000 __RDO C:\Users\saturn1\OneDrive 2015-10-24 19:24 - 2015-09-12 09:40 - 00001226 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2015-10-24 19:24 - 2014-12-13 15:40 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-10-24 17:24 - 2014-10-24 12:46 - 00000000 ____D C:\Users\saturn1\AppData\Local\Akamai 2015-10-24 16:27 - 2014-01-03 00:00 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3B5229CA-775F-4B17-B56B-B93A96D118AF} 2015-10-21 14:19 - 2015-08-05 16:16 - 00003352 _____ C:\Windows\System32\Tasks\BacKGroundAgent 2015-10-21 14:19 - 2013-10-07 14:04 - 00000000 ___HD C:\OEM 2015-10-21 14:19 - 2013-10-07 13:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2015-10-21 14:16 - 2013-12-22 00:04 - 00000000 ____D C:\Users\saturn1\AppData\Local\clear.fi 2015-10-18 21:46 - 2015-09-12 09:40 - 00000000 ____D C:\Program Files (x86)\Dropbox 2015-10-18 19:07 - 2014-02-04 00:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-10-18 17:51 - 2014-10-16 08:55 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-10-18 17:49 - 2014-12-06 15:28 - 00000000 ____D C:\Users\saturn1\AppData\Local\HTC MediaHub 2015-10-18 17:49 - 2013-08-22 16:46 - 00083952 _____ C:\Windows\setupact.log 2015-10-18 17:49 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-18 17:07 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2015-10-18 17:05 - 2014-11-23 19:21 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\Skype 2015-10-18 17:05 - 2014-11-22 17:28 - 00000000 ____D C:\ProgramData\Skype 2015-10-18 17:04 - 2014-10-24 12:48 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\Autodesk 2015-10-18 16:58 - 2013-10-07 13:08 - 00088236 _____ C:\Windows\PFRO.log 2015-10-18 16:57 - 2013-08-22 15:25 - 00524288 ___SH C:\Windows\system32\config\BBI 2015-10-17 12:46 - 2014-10-22 21:08 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-10-16 13:10 - 2014-12-27 22:25 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2015-10-14 12:25 - 2013-11-12 02:51 - 00765582 _____ C:\Windows\system32\perfh007.dat 2015-10-14 12:25 - 2013-11-12 02:51 - 00159366 _____ C:\Windows\system32\perfc007.dat 2015-10-14 12:25 - 2013-10-07 13:11 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-13 09:58 - 2013-11-11 18:23 - 00000000 ____D C:\Windows\SysWOW64\NV 2015-10-13 09:58 - 2013-11-11 18:23 - 00000000 ____D C:\Windows\system32\NV 2015-10-13 09:58 - 2013-11-11 18:23 - 00000000 ____D C:\ProgramData\NVIDIA 2015-10-11 13:40 - 2015-06-28 13:55 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-10-11 13:40 - 2014-10-17 13:25 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-10-09 16:54 - 2014-12-01 23:43 - 00000000 ____D C:\Users\saturn1\Documents\The Lord of the Rings Online 2015-10-09 16:03 - 2015-09-12 09:42 - 00000000 ___RD C:\Users\saturn1\Dropbox 2015-10-09 16:03 - 2015-09-12 09:40 - 00000000 ____D C:\Users\saturn1\AppData\Local\Dropbox 2015-10-09 15:57 - 2014-12-02 07:56 - 00000000 ____D C:\Users\saturn1\AppData\Local\The Lord of the Rings Online 2015-10-04 20:22 - 2015-02-22 11:36 - 00003722 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2015-10-04 20:22 - 2015-02-22 11:36 - 00003476 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon 2015-09-29 20:23 - 2015-09-12 20:29 - 00000000 ____D C:\Users\Gast\AppData\Local\Acer ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-06-15 13:43 - 2015-06-15 13:43 - 12060760 _____ (WindSolutions) C:\Program Files\CopyTransManager.exe 2015-06-23 17:58 - 2015-06-23 17:58 - 11591752 _____ () C:\Program Files\CopyTransManagerDEv1.018.zip 2014-04-17 09:56 - 2014-04-17 09:56 - 0012943 _____ () C:\Program Files\License Agreement.rtf 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX 2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase 2015-03-15 12:01 - 2015-03-15 12:01 - 0007598 _____ () C:\Users\saturn1\AppData\Local\Resmon.ResmonCfg 2013-11-11 18:51 - 2013-11-11 18:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Einige Dateien in TEMP: ==================== C:\Users\Gast\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpw0vgcx.dll C:\Users\Gast\AppData\Local\Temp\oct6BE3.tmp.exe C:\Users\Gast\AppData\Local\Temp\octCAE2.tmp.exe C:\Users\saturn1\AppData\Local\Temp\AcDeltree.exe C:\Users\saturn1\AppData\Local\Temp\avg3C96.exe C:\Users\saturn1\AppData\Local\Temp\avg4EE9.exe C:\Users\saturn1\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpsq_due.dll C:\Users\saturn1\AppData\Local\Temp\FNP_ACT_InstallerCA.dll C:\Users\saturn1\AppData\Local\Temp\Intel_Technology_Access_Software.exe C:\Users\saturn1\AppData\Local\Temp\jre-8u51-windows-au.exe C:\Users\saturn1\AppData\Local\Temp\jre-8u60-windows-au.exe C:\Users\saturn1\AppData\Local\Temp\MSETUP4.EXE C:\Users\saturn1\AppData\Local\Temp\oct10A6.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct130D.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct13E4.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct14E3.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct2A21.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct3079.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct336B.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct3402.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct353F.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct3DFA.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct4526.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct4E1.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct4E31.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct5091.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct52A1.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct5481.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct5BFB.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct67D5.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct6836.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct6B6F.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct7FB8.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct81CC.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct8256.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct8E9A.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct9606.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct98B5.tmp.exe C:\Users\saturn1\AppData\Local\Temp\oct99F6.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octA02.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octA84C.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octAD17.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octB077.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octB1F5.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octC1AE.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octCDDB.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octD530.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octD6A1.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octD9B9.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octDD43.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octE337.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octEDB2.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octEF04.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octF0B1.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octF0B7.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octF47.tmp.exe C:\Users\saturn1\AppData\Local\Temp\octFCB.tmp.exe C:\Users\saturn1\AppData\Local\Temp\Quarantine.exe C:\Users\saturn1\AppData\Local\Temp\SkypeSetup.exe C:\Users\saturn1\AppData\Local\Temp\sqlite3.dll C:\Users\saturn1\AppData\Local\Temp\tmpF9C9.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-10-23 17:18 ==================== Ende von FRST.txt ============================ Vielen Dank für die Hilfe! |
|
24.10.2015, 21:07
| #2 |
| | Nächster LogCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:24-10-2015
durchgeführt von saturn1 (2015-10-24 20:57:48)
Gestartet von C:\Users\saturn1\Downloads
Windows 8.1 (X64) (2013-12-21 22:01:56)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1506994272-2369309272-3303374795-500 - Administrator - Disabled)
Gast (S-1-5-21-1506994272-2369309272-3303374795-501 - Limited - Enabled) => C:\Users\Gast
saturn1 (S-1-5-21-1506994272-2369309272-3303374795-1002 - Administrator - Enabled) => C:\Users\saturn1
UpdatusUser (S-1-5-21-1506994272-2369309272-3303374795-1001 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
„Der Herr der Ringe Online™“ v1301.0055.0535.4025 (HKLM-x32\...\12bbe590-c890-11d9-9669-0800200c9a66_is1) (Version: 1301.0055.0535.4025 - Turbine, Inc.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.08.2005 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2000 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.09.2002.1 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.04.2004.0 - Acer Incorporated)
Acer Games (HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf) (Version: 1.1.9.43466 - Pokki)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.08.2006 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Acer Screen Grasp (HKLM-x32\...\{84443E5D-0767-438B-B1C8-6A52FAB2101B}) (Version: 1.01.3004 - Acer Incorporated)
Acer Theft Shield (HKLM\...\{8ADB0CD2-4E5A-452F-BB3B-3A2984CAC749}) (Version: 1.01.8102 - Acer Incorporated)
Acer Touch Tools (HKLM\...\{BB1F8130-3CB3-4896-9D28-770DFFFDE59C}) (Version: 1.00.3013 - Acer Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20071 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Akamai) (Version: - Akamai Technologies, Inc)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.10.2002.1 - Acer Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{A50679D9-6CBD-4FCD-BACB-62EF3894F6F3}) (Version: 4.0.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{1F72FDD5-A069-45B4-928F-D0F16492DC69}) (Version: 4.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FD244E19-6EFE-4A2D-948A-0D45D4C168BE}) (Version: 9.0.0.26 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.)
Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden
Autodesk DWG TrueView 2015 - English (HKLM\...\DWG TrueView 2015 - English) (Version: 20.0.51.0 - Autodesk)
Autodesk Inventor Professional 2015 - Deutsch (German) (HKLM\...\Autodesk Inventor Professional 2015) (Version: 19.1.20300.0000 - Autodesk)
Autodesk Inventor Professional 2015 (Version: 19.1.20300.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2015 Language Pack - Deutsch (German) (Version: 19.0.15900.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2015 SP1 (HKLM\...\Autodesk Inventor Professional 2015 SP1RTM) (Version: 19.1.20300.0000 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2015 (HKLM-x32\...\{4FBC9635-AC56-4378-8FDE-C4D3ED072681}) (Version: 5.2.9.100 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.3.1 - Autodesk)
Autodesk ReCap (Version: 1.3.3.1 - Autodesk) Hidden
Autodesk Revit Interoperability for Inventor 2015 (HKLM\...\Autodesk Revit Interoperability for Inventor 2015) (Version: 15.0.166.0 - Autodesk)
Autodesk Revit Interoperability for Inventor 2015 (Version: 15.0.166.0 - Autodesk) Hidden
Autodesk Vault Basic 2015 (Client) (HKLM\...\Autodesk Vault Basic 2015 (Client)) (Version: 19.0.49.0 - Autodesk)
Autodesk Vault Basic 2015 (Client) (Version: 19.0.49.0 - Autodesk) Hidden
Autodesk Vault Basic 2015 (Client) German Language Pack (Version: 19.0.49.0 - Autodesk) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG6400 series Benutzerregistrierung (HKLM-x32\...\Canon MG6400 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MG6400 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6400_series) (Version: 1.02 - Canon Inc.)
Canon MG6400 series On-screen Manual (HKLM-x32\...\Canon MG6400 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.68 - CLIQZ.com)
Configurator 360 addin (HKLM-x32\...\{8FE324B0-B934-4D68-BAB5-DE2136036237}) (Version: 19.0.11300.9000 - Autodesk, Inc.)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.35 - Dropbox, Inc.) Hidden
DWG TrueView 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Eco Materials Adviser for Autodesk Inventor 2015 (64-bit) (HKLM\...\{2F7441CB-A646-41F1-B1CB-518AB311138B}) (Version: 5.3.8.0 - Granta Design Limited)
ExpressCache (HKLM\...\{6E55C9F8-138E-4128-8A9F-6464725BE98A}) (Version: 1.0.102.0 - Condusiv Technologies)
FARO LS 1.1.502.0 (64bit) (HKLM-x32\...\{66D83FE0-D798-4B38-86FE-FB48151E5AEF}) (Version: 5.2.0.35213 - FARO Scanner Production)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
HID Monitor (HKLM-x32\...\{4ED132F6-EC28-49CE-8291-2F6B42614BC1}) (Version: 1.1.5 - Acer Incorporated)
Host App Service (HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Pokki) (Version: 0.269.7.738 - Pokki)
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.16.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.44.5 - HTC)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel Experience Center - Configuration (x32 Version: 1.7.0.179 - Intel) Hidden
Intel(R) Experience Center Desktop Software (HKLM-x32\...\{3608ec0a-56b4-4d9d-b038-9b3e51d72582}) (Version: 1.7.0.179 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3277 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{26AA61D4-B04D-4E0D-8E20-94A8FF2EE64D}) (Version: 4.2.40.2439 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{fb74531f-28c3-4dca-9849-e6b8faa85afe}) (Version: 1.5.0.1021 - Intel Corporation)
Intel(R) Technology Access Software Asset Manager (x32 Version: 1.0.1562 - Intel Corporation) Hidden
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e1172fd4-a6d9-4cfa-8256-268f728fec31}) (Version: 16.5.3 - Intel Corporation)
Inventor 2015 Heartbleed Hotfix Installer (INV19001) (HKLM\...\Autodesk Inventor Professional 2015_19001) (Version: 1 - Autodesk)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{96984DE8-1DB8-425C-AC8C-3098BC696F04}) (Version: 12.3.0.44 - Apple Inc.)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Living Legends: Die Eisrose (HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Living Legends: Die Eisrose) (Version: 1.0.0.0 - Alawar Entertainment Inc.)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mockup 360 Addin 2015 (HKLM-x32\...\{E4D4242C-FC14-4B4F-B1D9-6760D8C241D5}) (Version: 1.1.0 - Autodesk)
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2 - Mozilla)
MuseScore 1.3 (HKLM-x32\...\MuseScore) (Version: 1.3.0 - Werner Schweer and Others)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 32.0.1948.69 (HKLM-x32\...\Opera 32.0.1948.69) (Version: 32.0.1948.69 - Opera Software)
Pokki Start Menu (HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Pokki_Start_Menu) (Version: 0.269.7.738 - Pokki)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Proxy Searcher (HKLM-x32\...\{B649E831-8F2D-401A-9C81-0318219EAAC6}) (Version: 4.50.0000 - Proxy Searcher)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ACHTUNG
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Spielkanäle (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 9.2.0.11 - WildTangent, Inc.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.13 - Synaptics Incorporated)
Syncios Version 4.1.5 (HKLM-x32\...\{068A5D84-8419-4BDE-9689-FE65F412EFBB}_is1) (Version: 4.1.5 - Anvsoft, Inc.)
Update 1 for Inventor 2015 Service Pack 1 (See readme for detail) (INV19110) (HKLM\...\Autodesk Inventor Professional 2015_19110) (Version: 1 - Autodesk)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
YTDownloader (HKLM-x32\...\YTDownloader) (Version: - YTDownloader) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\iDrop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxTest.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtCp.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\BodyReceiver.dll ()
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxApprenticeServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\AcInetUI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxInventorUtilities.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\InvResc.dll (Autodesk)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\InvTXTStack.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Keine Datei
==================== Wiederherstellungspunkte =========================
02-10-2015 22:34:49 Intel(R) Technology Access
11-10-2015 14:10:48 Geplanter Prüfpunkt
23-10-2015 17:31:43 Geplanter Prüfpunkt
24-10-2015 20:23:05 OTL Restore Point - 24.10.2015 20:23:04
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0792B308-9EE7-4842-963E-BE39AE44D82C} - System32\Tasks\avastBCLRestartS-1-5-21-1506994272-2369309272-3303374795-1002 => Firefox.exe
Task: {09A572D4-A071-43FE-AFAA-7E44074F3444} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2015-10-22] (YTDownloader) <==== ACHTUNG
Task: {127D061F-A5F5-4F60-8545-AAC370D28382} - System32\Tasks\{BDB0FB31-C5A3-4201-9E0E-C7E3F5F6FE6F} => pcalua.exe -a C:\Users\saturn1\AppData\Roaming\SpeedMon\speedmon.exe -c /uninstall
Task: {1997FE39-B6E3-4232-AA22-9ACAEE003C8D} - System32\Tasks\YTDownloaderUpd => C:\Program Files (x86)\YTDownloader\updater.exe [2015-10-22] (Goobzo) <==== ACHTUNG
Task: {1B9A8A50-8616-49B2-B51E-180472056425} - System32\Tasks\MVCQOKPixtwM => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: {1FC5EE56-5562-416F-8297-2E61C5B445EB} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {20B52AC6-BB40-466B-8A36-230C24D068D8} - System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d-Logon => C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-04-18] ()
Task: {2A42FED6-6A9B-435A-96C6-11C2B309CC2A} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {34620452-A97A-4ED9-BBF6-7FF58DA57BE4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {37699999-5763-49CA-A1CE-AB72A566CE66} - \ShopperProJSUpd -> Keine Datei <==== ACHTUNG
Task: {377A79EA-433C-4556-AA20-455F7F52630E} - System32\Tasks\DEAn2Th92CYuEkPG9n => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: {3A824691-844B-4078-AD60-3338F1F61978} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2015-08-31] (Acer Incorporated)
Task: {3D4BE21C-F015-4F41-A4F3-7ACEC264F0FC} - \Smp -> Keine Datei <==== ACHTUNG
Task: {3E5F5531-7967-40C1-AF29-E8AF1B469BC7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {41DCD5EA-0EFD-4723-B1DC-11E69EBC4D87} - System32\Tasks\prelauncher_First => C:\Program Files (x86)\Acer\Screen Grasp\InputTask.exe [2013-07-01] (Acer Incorporated)
Task: {483BF00E-FCD4-490E-A79D-6205192A6EBF} - System32\Tasks\Inst_Rep => C:\Users\saturn1\AppData\Local\Installer\Install_21912\ytdkietut_tutdk_inst.exe [2015-10-24] ()
Task: {49A8BD4E-AE8C-4173-8A10-431DC069EA94} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-12] (Dropbox, Inc.)
Task: {4AD49C7F-3C90-4818-A002-D6E874A48BF4} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-12] (Dropbox, Inc.)
Task: {4C000DFC-D18F-4C57-AC36-D46C661375D2} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5 -> Keine Datei <==== ACHTUNG
Task: {52FCE5C3-5D59-456A-B22D-80B24EB7C9C0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17] (Adobe Systems Incorporated)
Task: {5BE18EEB-E1EB-4F95-9040-AE31EDB7A252} - System32\Tasks\Installer_DSKB => C:\Users\saturn1\AppData\Local\Installer\InstallDSKB_28564\ytdkietut_tutdk_inst.exe [2015-10-24] () <==== ACHTUNG
Task: {5C7E3A4E-30C3-4244-BFDE-051A1545BD98} - \Installer_geforce -> Keine Datei <==== ACHTUNG
Task: {5F846BD5-71F2-42A0-93B0-5A4ECF340451} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5_user -> Keine Datei <==== ACHTUNG
Task: {633C6770-671C-435B-B8C3-C7E21EBD0A5F} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-1506994272-2369309272-3303374795-1002
Task: {6AD3275A-47B8-4DA4-9815-6A9320D50E12} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {6F56BEFD-9515-4693-A250-C5C09116E95C} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {744B37FA-0E57-417B-B7B8-C114FD6D2030} - System32\Tasks\Touch Tools Launcher => C:\Program Files\Acer\Acer Touch Tools\TouchToolsLauncher.exe [2013-08-24] (TODO: <Company name>)
Task: {78354191-63ED-461A-B368-CAA874E5ADE7} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-10-15] (Acer)
Task: {7A17005E-F205-47DA-B52B-CFF861F8238E} - System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d => C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-04-18] ()
Task: {7AE5679B-AE1C-47FE-8C6D-A4710314CCC7} - System32\Tasks\ZRhLK9hrBkOCMase => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
Task: {7AF9DC2C-9ADD-4B7D-8F5D-D1D3A821F557} - System32\Tasks\fgQ3SLKo3PQmATQfNa => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: {7D6BC39F-52CC-4E14-8C20-6F3BF4B9005B} - \SPDriver -> Keine Datei <==== ACHTUNG
Task: {7EF21977-21B9-4933-B682-C29B9157A03F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {7F646CA8-DFD0-41AD-9F2A-62CF64A18DA7} - System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: {825BC578-3042-4748-B33B-92400C98F7B2} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {87E27CBD-086A-4597-80B4-248E22317BE3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {9036901C-9705-4D76-A972-356FB1C95D94} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {90A4B073-D07E-48F6-BD19-B7760320E6FD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {945313AD-BD8E-4CEF-A93D-0868E9F4495C} - System32\Tasks\Pokki => %LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe
Task: {985EC60A-DC0D-4E00-9FAB-959A71730EC0} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-10_user -> Keine Datei <==== ACHTUNG
Task: {A0D23810-982C-491F-88F0-41BFFF4F63E2} - System32\Tasks\Prelauncher => C:\Program Files (x86)\Acer\Screen Grasp\InputTask.exe [2013-07-01] (Acer Incorporated)
Task: {A1B2AFFB-7BD3-47CF-A5D7-1399428891E3} - System32\Tasks\Screen Grasp GestureDetection => C:\Program Files (x86)\Acer\Screen Grasp\GestureDetection.exe [2013-08-26] (Acer Incorporated)
Task: {A86729F0-6B8F-458C-89D6-49EEF0746A18} - \ShopperPro -> Keine Datei <==== ACHTUNG
Task: {A871E839-1BB8-4E46-B5E6-D397D6606A40} - System32\Tasks\HIDMonitor => C:\Program Files\Acer Incorporated\HID Monitor\HIDMonitor.exe
Task: {AE9D6E37-65A1-4FB2-8ACC-4840E6264A97} - System32\Tasks\Theft Shield\AcerTheftShieldTask => C:\Program Files\Acer\Acer Theft Shield\USecuAppLauncher.exe [2013-08-14] (Acer Incorporated)
Task: {B36990D3-1A75-439C-9E3D-39234D887CA0} - System32\Tasks\bKowc082jZo3bbUXLv => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: {CFE5AF85-4F7F-4B42-B1C1-B45D196314D2} - \WordShark Auto Updater 1.10.0.20 Core -> Keine Datei <==== ACHTUNG
Task: {D116F606-76F6-4E63-8BD9-503ABDED8707} - \WordShark Auto Updater 1.10.0.20 Pending Update -> Keine Datei <==== ACHTUNG
Task: {D7B0F932-8B51-4035-8337-3651B3CB1F04} - System32\Tasks\Launch Screen Grasp_First => C:\Program Files (x86)\Acer\Screen Grasp\Launch Screen Grasp.exe [2013-08-12] (Acer Incorporated)
Task: {DD581687-44EE-4A4D-A410-ACD4F397CF55} - System32\Tasks\n2WsgG5UnMBz2EppfzX => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: {E5A363A6-326C-456D-9A44-DEDDFA30D679} - System32\Tasks\GUmJ6Qbd => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: {E80D8E79-0612-40BD-925B-C609B0FA9CF9} - System32\Tasks\Opera scheduled Autoupdate 1445703737 => C:\Program Files (x86)\Opera\launcher.exe [2015-09-25] (Opera Software)
Task: {E8F00E77-0660-46BB-9768-A656F30190A6} - System32\Tasks\Y8AUFtKs8KRzdqL => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: {F12CCAA4-5145-4CF2-8B2C-175ACB93061D} - System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: {FC04F794-7C91-47F4-9A7B-604491EF119B} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {FEDD2803-040C-4EF9-B92D-7EC961021DC3} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\bKowc082jZo3bbUXLv.job => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\fgQ3SLKo3PQmATQfNa.job => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GUmJ6Qbd.job => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: C:\Windows\Tasks\MVCQOKPixtwM.job => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: C:\Windows\Tasks\ZRhLK9hrBkOCMase.job => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-07-02 17:12 - 2015-07-02 17:12 - 01927680 _____ () C:\Program Files\SpaceSoundPro\SpaceSoundPro.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-09-23 16:47 - 2015-09-23 16:47 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-10-18 16:01 - 2015-10-18 16:01 - 00845312 _____ () C:\Program Files (x86)\093BD3E7-1445176877-3346-BE18-089E01F42089\hnst635A.tmp
2015-10-18 14:46 - 2015-10-18 14:46 - 00396288 _____ () C:\Program Files (x86)\093BD3E7-1445176877-3346-BE18-089E01F42089\knst30D8.tmpfs
2015-07-29 13:48 - 2015-07-29 13:48 - 00088064 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\libglog.dll
2015-07-31 09:55 - 2015-07-31 09:55 - 01793280 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\cpprest120_1_4.dll
2015-07-31 09:55 - 2015-07-31 09:55 - 00354560 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\JsonCpp.dll
2013-08-12 20:06 - 2013-08-12 20:06 - 00198120 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-08-12 20:06 - 2013-08-12 20:06 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-08-12 20:06 - 2013-08-12 20:06 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2013-10-17 16:27 - 2013-10-17 16:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2015-10-18 16:01 - 2015-10-18 16:01 - 00097792 _____ () C:\Program Files (x86)\093BD3E7-1445176877-3346-BE18-089E01F42089\jnsz4B9A.tmp
2015-10-22 11:57 - 2015-10-22 11:57 - 00112560 _____ () C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe
2013-11-11 18:22 - 2013-08-30 05:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2012-08-23 15:02 - 2012-08-23 15:02 - 00030640 _____ () C:\Program Files (x86)\Acer Incorporated\HID Monitor\HIDMonitor.exe
2013-11-11 19:13 - 2013-07-30 19:11 - 00110152 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2015-10-24 18:22 - 2015-10-22 16:09 - 03335344 _____ () C:\Users\saturn1\AppData\Local\gmsd_de_005010123\upgmsd_de_005010123.exe
2013-07-08 19:53 - 2013-07-08 19:53 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll
2015-07-03 19:53 - 2015-07-03 19:53 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\ErrorReporting.dll
2013-11-11 18:50 - 2012-03-21 05:05 - 00051776 _____ () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
2014-11-02 13:35 - 2014-10-31 17:53 - 00747520 _____ () C:\Program Files (x86)\Syncios\SynciosDeviceService.exe
2015-09-16 14:58 - 2015-09-16 14:58 - 00091488 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
2015-10-24 18:22 - 2015-10-22 16:09 - 03976880 _____ () C:\Program Files (x86)\gmsd_de_005010123\gmsd_de_005010123.exe
2015-10-24 18:24 - 2015-10-22 16:42 - 03976368 _____ () C:\Program Files (x86)\rec_en_77\rec_en_77.exe
2015-09-16 14:58 - 2015-09-16 14:58 - 01769312 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
2015-05-03 11:01 - 2015-05-03 11:01 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-05-03 11:01 - 2015-05-03 11:01 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-10-18 16:02 - 2015-10-18 16:02 - 02994032 _____ () C:\Program Files\AVAST Software\Avast\defs\15101800\algo.dll
2015-10-24 20:53 - 2015-10-24 20:53 - 02997616 _____ () C:\Program Files\AVAST Software\Avast\defs\15102401\algo.dll
2014-10-25 18:46 - 2014-12-05 04:27 - 00055688 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\QtSolutions_Service-head.dll
2014-10-25 18:46 - 2014-12-05 04:27 - 00104328 _____ () C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\qjson0.dll
2014-08-08 20:50 - 2014-08-08 20:50 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2015-03-19 17:16 - 2015-03-19 17:16 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-08-08 20:51 - 2014-08-08 20:51 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-08-08 20:51 - 2014-08-08 20:51 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-08-08 20:51 - 2014-08-08 20:51 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-08-08 20:52 - 2014-08-08 20:52 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-08-08 20:53 - 2014-08-08 20:53 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2013-11-11 18:19 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-05-03 11:01 - 2015-05-03 11:01 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-05-03 11:01 - 2015-05-03 11:01 - 00985600 _____ () C:\Program Files\AVAST Software\Avast\ffmpegsumo.dll
2013-01-04 17:19 - 2013-01-04 17:19 - 00035336 _____ () C:\Program Files (x86)\Acer Incorporated\HID Monitor\ElanTPAPI.dll
2014-11-02 13:35 - 2014-10-31 16:20 - 00386560 _____ () C:\Program Files (x86)\Syncios\DuiLib.dll
2014-11-02 13:35 - 2013-03-01 11:30 - 00059904 _____ () C:\Program Files (x86)\Syncios\zlib.dll
2014-11-02 13:35 - 2013-03-01 11:30 - 00526848 _____ () C:\Program Files (x86)\Syncios\sqlite3.dll
2015-09-16 14:58 - 2015-09-16 14:58 - 00277856 _____ () C:\Program Files (x86)\Acer\abDocs\libcurl.dll
2015-08-05 19:48 - 2015-08-05 19:48 - 00201568 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll
2015-08-05 19:48 - 2015-08-05 19:48 - 00653112 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll
2015-08-05 19:48 - 2015-08-05 19:48 - 00640352 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll
2015-08-05 19:48 - 2015-08-05 19:48 - 00118112 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll
2015-10-21 14:19 - 2015-10-21 14:19 - 00014176 _____ () C:\Windows\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2015-08-31 20:21 - 2015-08-31 20:21 - 00012128 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2015-08-31 20:11 - 2015-08-31 20:11 - 00277856 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2015-10-24 18:21 - 2015-10-24 18:21 - 00174672 _____ () C:\Program Files (x86)\CinemaPlus-3.2cV24.10\ff74f341-b277-4c9a-88bd-614bc60e1b54.dll
2013-11-11 19:13 - 2013-07-30 19:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2015-10-23 10:13 - 2015-10-20 16:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-23 10:13 - 2015-10-20 16:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll
2015-10-23 10:13 - 2015-10-20 16:08 - 16493384 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "BTMTrayAgent"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "ADSKAppManager"
HKLM\...\StartupApproved\Run32: => "abDocsDllLoader"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "YTDownloader"
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\StartupApproved\Run: => "YTDownloader"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{721D814F-51F9-4057-B646-4AA4B52402A9}] => (Allow) C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
FirewallRules: [{738AFE15-C5BB-4987-B989-F620A3755881}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{F16D29BA-697C-4ADA-B67B-BB7389092DD6}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{698710BF-8F91-43B2-998B-FAC77C17EABB}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{D69C63C2-A24C-44C0-BD55-37E8CF3540C6}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{47B1A57F-CD59-472C-89DE-405ECFB146B3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{7E06F0E5-8120-4615-8CE2-53139266C799}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{151F56A2-1C84-4B3D-BE49-DB2C9079D4CF}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{EAB09F69-27AB-45EE-8505-9724821ED321}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{445F8A16-5016-4C2A-A1CC-940A2238F3AF}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{44E716AA-F262-4D55-A609-99B1E8BC8BF2}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{E2E941C1-E1FA-4856-AEAF-E241A6F5DCC6}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{A66713AE-CDE7-40D2-A0F8-12DD7E7B9231}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{380BDDFD-B1FE-46B2-B7A6-AABBCAB0C75E}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{B93A7943-8B5C-427B-8E68-0C7432DB547A}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{25F03C37-E865-4562-B53D-DF2FBD59EE91}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{302023C2-9BA0-400D-9141-29E3CBAA2C4E}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{3C1F80AF-F7BD-4E78-8CBE-3AF58A01D1C4}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{7F4963DE-EAC9-4D33-B49C-EC2431292002}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{DD896303-4697-489E-9E0F-3C1B2F3680D9}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{C535CDFA-DCB1-437D-80D7-9E9E0C85AB6A}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{84E794E1-D291-461E-8861-0A53F90889D7}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{EB4422C1-2A00-4436-8F10-2EB794BD48B7}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{7D74B643-7485-4463-ACB6-42636AF93E6F}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{E68DFF6B-4BF5-4197-B3C5-796D5AA0FABE}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{3E13B0AE-81E7-4876-82AD-5C4E46CEBB57}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{72B8466A-0090-4259-8E67-6A0A754FB20B}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{88641E9F-179A-4EA8-823F-758B8C02D5DD}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{24CEFA3E-2F2F-47D7-9B9E-AF896CEA7A59}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{D931836A-2118-4760-8C10-A313C2849E55}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{8093DB6A-0C9B-4977-9629-5217E842EA5C}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe
FirewallRules: [{8DDC29FB-A266-4890-856E-C91335A7BD57}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe
FirewallRules: [{B6EEA685-D013-4D88-8006-10B969581D55}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe
FirewallRules: [{C7654D28-043C-4E6F-B43D-3E4D32FB2E52}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe
FirewallRules: [{F17804E9-198C-4A42-8C32-0D75DDCC0EAE}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{B4DC29E9-AD54-4E45-B221-B989B7E444B7}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{581E763F-F0DF-4423-823B-83021AD63124}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{17D04AC5-0772-45CA-9EB2-529F6A76691D}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{3F6127C9-9333-432B-914A-F3BAAF028D8B}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{7915CF5D-BFDD-4581-AB47-5570B6EED297}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{53802E07-47B3-4457-9B47-81CB4E712D4F}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{059B0553-7E28-47FD-BAC1-59EAB4A76A16}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{4981E980-8C9F-452E-BF3E-E3EEE419BE98}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{B9B6A01C-0502-4CEF-A7A2-CB0320D10DAF}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{C02EB5FD-222A-44EB-B47A-5CC01BCCEC58}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{BE7618F1-A521-4966-A3DF-4649F5123975}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{50E98C5E-7080-4F4F-9C64-DCF3048349C2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{00C6C1D6-4FC1-429B-BDF5-BC47D03CEA5F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{7B2CBE40-D366-4F7D-A17A-2BB891DC38DE}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{D3145BB8-4277-45BE-9196-C20502B82F9E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F23821A0-E5E4-483B-99F7-824870C72895}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{40DDE7D7-76A4-48FD-93CE-8F36E3C82814}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{9D4688ED-6479-46EA-8CC8-6B56D141018A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{C26F9EA8-25E6-449C-9F12-8CBCEAD7C39F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{20AB99EB-2E4A-41D6-B4FE-EF6953A46608}] => (Allow) C:\Program Files (x86)\Alawar.de\Living Legends Ice Rose\LivingLegends_DieEisrose.exe
FirewallRules: [TCP Query User{3AD99F48-49C3-45E3-AF24-346BB1D0FF64}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{FF008D3B-33FE-442A-B2CD-618131D5A53B}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [{DB0C0AA1-A4F4-4F95-B21A-FF439D9FE9A5}] => (Allow) LPort=64969
FirewallRules: [{918DB24B-7362-4683-A41B-2B2491EB8855}] => (Allow) LPort=5000
FirewallRules: [TCP Query User{51CB772B-8D50-4442-9FD6-58CFE9800B26}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{ACB125E4-FC04-45C0-89D4-537F967F8830}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [{3407E0D4-C6C5-4016-8C8E-DB9945DB6839}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{E0196E90-1AC3-44AC-A72F-DFE5FFD79375}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{53D15A53-D006-41DF-8EF0-87836ACF0FA6}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{EF73ED11-65FA-431E-A71E-FB5E4DB18E02}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{E128D0DC-4FF5-41C3-BE40-17C2EAF7A2B9}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{27AA633D-1B12-4B66-81E9-2124430C431E}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{45B7B5E3-4060-4075-96C6-ADBA380D6419}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{31F15844-D93D-4C76-A114-05EB2F99A8B0}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{3034FF0E-127F-4A9B-8B8B-38E720689B3D}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{FE885989-D274-4CBE-8168-3C744E83BD9F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{CFB04CF3-1A63-4EE9-8579-FACEA479F0FF}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{8D05079A-3823-41CD-AFC1-F3BFA7260150}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{90450828-8813-4057-B525-5D6EC69BBB16}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{C354A11E-286E-4C85-8AFA-D81B3B4D401B}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{8374AA61-A30F-4201-BA0A-393FE23C7D10}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{9C2A34BB-31F8-4E96-8727-CBE422217AB1}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [TCP Query User{40EBA6EC-1DA2-4390-851D-CBBD70DC0FBA}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{485FBFBF-8091-4B81-AC83-830D8920776C}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{7C4A21C5-602A-4398-81CC-3075B8A41108}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{86828B7F-090B-496C-BCAD-F9FFAB1B6BB4}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{08A5FFAB-2ACE-4390-B966-84D91B315759}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe
FirewallRules: [UDP Query User{4BD61926-623C-4C25-9EC8-E100E3EFB9FD}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe
FirewallRules: [TCP Query User{8992BE2C-B2A9-47D5-ABAE-66B1A09F2158}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{F85BBA06-6BA8-4866-BEFB-3F77AAFD1E08}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{2A06308D-662D-47B8-B49E-69B843DC19CF}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{15B6A7F8-5931-43C4-90FD-7CDABA22DA70}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{A666FC58-BD9D-4EF2-BCD6-7F9FEA4813D9}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{D109ACE4-674C-4E4B-99B5-316F42B077AF}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{50E32E18-FF55-49D9-8571-B10208E34A0B}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{1CFA0ECE-BEC2-4D6F-86D2-6C21A1F3550C}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{9A21A731-36A5-416B-880F-B7993F4AC36B}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{A4527191-0EB6-4868-B45B-6C57559885E5}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{9D5DFDB0-B17B-476F-B4C8-EB0EFC90F9F3}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{54A29559-8ECA-489C-B8A4-4AD1408357D9}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{F5626D69-5BA6-40EE-BCCE-51371A054FDD}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{E3A2C1FA-1BED-48D0-B3F0-D66C3123CD8E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{40A66269-B13D-4286-871F-8E2E4179F3E3}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1DB0E3D-DA3C-40CA-8144-674927D788C2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{0231FA7D-B635-43C1-BBBD-C42CE12EF3AA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{02C5FAED-EEF9-481B-903E-0AA7E1F37162}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{6982F573-9DED-447F-B67D-FB02BCC93F48}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{140159B0-7C08-4775-9018-8B3E34A0A29E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{FCB243DE-248B-49DC-B5AB-605AA74C8C4C}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{8106F371-F1A0-486B-B9F7-94D0D63A5ED6}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{E7285D37-2D67-4B3F-BA57-5095E03DD2A8}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{330CE625-0905-440D-A59E-33714DD44A8A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{94301012-B986-4E31-8A39-F49F9C095025}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{810CE275-B99E-499E-838D-4D401BE6C7AD}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{8B2816A2-266F-4188-838A-8C7E776A67C9}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{9EE81563-7212-44A5-97E6-8E351F53894D}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{19C28D8A-F92C-4E21-80E6-CA8D2B8A31B7}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{0961F9B0-6C8F-4D75-96FA-1B948891AB25}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{64FEFB7C-1D11-439B-965E-18B24C0D1605}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{E855A521-57B6-4A1B-9DB1-590D66C12943}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{DF30B7D2-FFBA-4DF9-9DD1-07A30D70658C}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{91C2AB33-303A-4D40-ABCF-E12926BE824E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{ABB7ACBB-D703-40FB-B8DF-AB07B3556D1C}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{568AEDEF-32BA-4ABA-B0A6-F5247D23894E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{BD13995C-6ED6-41F5-91E9-5EBCA5C1C5D3}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{509FE5FF-0FC3-4C6A-94EC-5794EE6D7349}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A78C5113-CD23-40E6-A626-25E35080B0E2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A4948693-D8A1-41C2-8780-DADCDAC51090}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{B160B7B1-F352-4217-AB1C-13C5BBE79A9B}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1130B92B-DA9E-47D2-87AA-7C4DF527C7BA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{022173B0-55BF-4C50-827F-3781AAA692E0}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1795E07-F64A-4645-80D7-D37CE44AA711}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{89BA6027-951D-4460-8FA8-F9EDA9878A08}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{A6FDD445-26F2-4C1C-BF9A-64610BC7DD62}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{0EE4374D-FF05-49BC-B659-EC0DC71B4986}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1E4AE26-241A-49B4-8A70-A0083B1BA74E}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{A42C6099-6749-45CA-B29C-40D22D8634F2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{0D878B2D-C8A2-404C-84CB-5A684BAB0EE5}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1E6E95E0-F432-4206-AF71-4FB7F1B93C91}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{3FA8696A-402B-4B23-AC16-B751BF08BE90}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{650123A9-89AA-4C0B-86DC-05C476F51496}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{127A5E99-EE83-4784-AD4A-C44313A2D6BB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{8307A716-0095-4D4A-AEA3-FB45A7622A63}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{62D0397D-9DD4-4346-A61E-6D369352E16D}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{5A073357-162A-4302-878B-977FE71FD714}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{3051AD2D-253B-465B-8C1F-DF50DF05EBB7}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{92E6D042-57CD-456B-8506-1B658C166478}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{3F9A9948-A12E-41D2-8538-C9CF40969CDB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{07511964-56FD-4734-9725-338632DAB7A4}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{C81ED1ED-45BD-47CB-AA6C-A8BD4C0BBF48}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{EACA0575-1EA5-4F34-BFD8-E2E91EF07740}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{6E845FE3-2516-4C23-8373-E62832A82761}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{2A48EADA-CCCA-4E1F-A2E9-C6CB2E306875}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{222D71E8-1063-4183-B10E-32C46566A94A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{E165AC3B-AEE0-4B80-B1EA-7F19870C9E10}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{11202FDC-F988-4958-B3C1-0A9AF471A30A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{4A662BF3-497E-4EEA-A710-FAE3A1109E28}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{2FE1B102-6640-48EE-A8BF-51910143CDEE}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{4F224FE9-BD3D-48B8-AC4A-59B0AE338FB1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F618F489-06E0-42E9-9F69-7451DA889BC9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{252366CF-E85D-4B94-AC08-5A271127BFDA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D7F81FD5-1B04-4B65-B3DF-36DE7588717A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BB97DA1C-FDB0-4026-8965-BFF4626100B5}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{0CF495CD-562D-441F-BF9C-342F602C9BEE}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{0576658A-6590-4336-B7DC-96B7BF8A680F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{062C9E32-752F-4AEA-A53D-DEC1F9A6BA15}] => (Allow) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/24/2015 08:52:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm OTL.exe, Version 3.2.69.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2bb0
Startzeit: 01d10e888890a8d0
Endzeit: 4294967295
Anwendungspfad: C:\Users\saturn1\Downloads\OTL.exe
Berichts-ID: 5ef08fb2-7a80-11e5-82b0-089e01f42089
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (10/24/2015 08:24:20 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service ShopperPro Update since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service Search Module Update since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdatem) since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service globalUpdate Update Service (globalUpdate) since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service Desktop Background Template since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service Separation Keyboard since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddWin32ServiceFiles: Unable to back up image of service Task Advertisement since QueryServiceConfig API failed
System Error:
Das System kann die angegebene Datei nicht finden.
.
Error: (10/24/2015 08:23:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary ShopperPro UpdateD.
System Error:
Das System kann die angegebene Datei nicht finden.
.
Systemfehler:
=============
Error: (10/24/2015 06:28:21 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (10/24/2015 06:23:06 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {682159D9-C321-47CA-B3F1-30E36B2EC8B9}
Error: (10/18/2015 07:05:48 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {682159D9-C321-47CA-B3F1-30E36B2EC8B9}
Error: (10/18/2015 05:49:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1243
Error: (10/18/2015 05:38:09 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}
Error: (10/18/2015 04:59:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "McAfee Inc. mfeapfk" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1243
Error: (10/18/2015 04:57:54 PM) (Source: DCOM) (EventID: 10005) (User: SATURN)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (10/18/2015 04:56:52 PM) (Source: DCOM) (EventID: 10005) (User: SATURN)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (10/18/2015 04:56:44 PM) (Source: DCOM) (EventID: 10005) (User: SATURN)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
Error: (10/18/2015 04:56:33 PM) (Source: DCOM) (EventID: 10005) (User: SATURN)
Description: 1084ShellHWDetectionNicht verfügbar{DD522ACC-F821-461A-A407-50B198B896DC}
CodeIntegrity:
===================================
Date: 2015-10-24 20:20:07.624
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:17:14.904
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:17:14.462
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:13.452
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:13.178
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:11.248
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:10.988
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:09.936
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:09.660
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:09.394
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz
Prozentuale Nutzung des RAM: 66%
Installierter physikalischer RAM: 8072.27 MB
Verfügbarer physikalischer RAM: 2714.63 MB
Summe virtueller Speicher: 9352.27 MB
Verfügbarer virtueller Speicher: 3671.56 MB
==================== Laufwerke ================================
Drive c: (Acer) (Fixed) (Total:912.7 GB) (Free:717.97 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: ED63966E)
Partition: GPT.
========================================================
Disk: 1 (Size: 22.4 GB) (Disk ID: 4D5DCBC4)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
24.10.2015, 22:25
| #3 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Hallo und
__________________ Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
25.10.2015, 09:07
| #4 |
| | Avast logs und Probleme beim Starten Wie du siehst, sind hier ziemlich viele, alle von heute oder gestern. Welche brauchst du? Und heute morgen kam die Fehlermeldung, dass mein PC nicht richtig gestartet werden konnte und neugestartet werden muss, dabei stand unten als Fehler IRQL_NOT_LESS_OR_EQUAL , habe gelesen, das deutet auf ein ernstes Problem bei der Grafikkarte hin?  |
|
25.10.2015, 17:09
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Fand doch erstmal mit den Logs mit Funden von Malwarebytes an...
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.10.2015, 17:35
| #6 |
| | Malwarebytes Logs Da gibt es nur die: Code:
ATTFilter <?xml version="1.0" encoding="UTF-8" ?>
<logs>
<record severity="debug" LoggingEventType="4" datetime="2015-10-25T07:39:11.135284+01:00" source="Protection" type="Error" username="SYSTEM" systemname="SATURN" code="13" last_modified_tag="b54a2412-a077-4546-9b71-fb79dc5f500d" message="IsLicensed"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-25T07:39:11.488219+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="SATURN" last_modified_tag="6885b3e4-ba4c-495a-8532-639775d4b82f" result="Stopping" subtype="Malware Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-25T07:39:11.491242+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="SATURN" last_modified_tag="ebd9ef28-0bdd-4d3c-902e-ad480bbd1a1e" result="Stopped" subtype="Malware Protection"></record>
<record severity="debug" LoggingEventType="4" datetime="2015-10-25T13:08:14.514718+01:00" source="Protection" type="Error" username="SYSTEM" systemname="SATURN" code="13" last_modified_tag="5f0c9327-e879-48f9-91a0-b9db282f2d0d" message="IsLicensed"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-25T13:08:14.560276+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="SATURN" last_modified_tag="40084193-38f1-48a1-bdb1-c663097dff7a" result="Stopping" subtype="Malware Protection"></record>
<record severity="debug" LoggingEventType="2" datetime="2015-10-25T13:08:14.564287+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="SATURN" last_modified_tag="4e97aa43-3317-47e6-b049-4c25ef74b713" result="Stopped" subtype="Malware Protection"></record>
</logs>
Code:
ATTFilter <?xml version="1.0" encoding="UTF-8" ?>
<logs>
<record severity="debug" LoggingEventType="1" datetime="2015-10-24T19:26:26.455216+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.10.16.1" last_modified_tag="41077fa4-b645-4309-a515-4c92b9e05e5e" name="Remediation Database" toVersion="2015.10.21.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-24T19:26:26.637052+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.10.16.1" last_modified_tag="10585861-194d-407b-a5e0-9c80a8cc1ca6" name="Rootkit Database" toVersion="2015.10.23.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-24T19:26:27.026144+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.10.18.1" last_modified_tag="f6d98641-48fb-4e4e-972a-d4b6ffc7b608" name="Domain Database" toVersion="2015.10.24.8"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-24T19:26:30.742872+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.10.17.1" last_modified_tag="c3bdcc94-73eb-4fe3-936a-4159e8935ac3" name="IP Database" toVersion="2015.10.24.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-24T19:26:36.972706+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.10.18.4" last_modified_tag="0ffbfb70-8d18-4607-a6e0-357a45696e13" name="Malware Database" toVersion="2015.10.24.4"></record>
</logs>
Code:
ATTFilter <?xml version="1.0" encoding="UTF-8" ?>
<logs>
<record severity="debug" LoggingEventType="1" datetime="2015-10-18T18:02:20.377476+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.9.16.1" last_modified_tag="ed4e559c-cb06-424f-96a8-56fe01779316" name="Remediation Database" toVersion="2015.10.16.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-18T18:02:20.456532+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.9.18.1" last_modified_tag="c2162a86-967a-4df8-8a0e-4e3796f9490b" name="Rootkit Database" toVersion="2015.10.16.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-18T18:02:20.524581+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.9.21.2" last_modified_tag="931d8916-5cde-43b4-aaa5-da0d63ccbfc4" name="IP Database" toVersion="2015.10.17.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-18T18:02:20.898602+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.9.22.3" last_modified_tag="8c493126-a18d-49b0-b140-9b34cc55c5f1" name="Domain Database" toVersion="2015.10.18.1"></record>
<record severity="debug" LoggingEventType="1" datetime="2015-10-18T18:02:30.906686+02:00" source="Manual" type="Update" username="SYSTEM" systemname="SATURN" fromVersion="2015.9.22.5" last_modified_tag="9a3bb900-af5e-4d8e-9135-52278fcf38f9" name="Malware Database" toVersion="2015.10.18.4"></record>
</logs>
|
|
25.10.2015, 17:37
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.10.2015, 17:48
| #8 |
| | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Unter den dort angezeigten Programmen gibt es weder Setup noch YTDownloader... |
|
25.10.2015, 17:55
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Adware/Junkware/Toolbars entfernen 1. Schritt: Malwarebytes Downloade Dir bitte  Malwarebytes Anti-Malware
(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!) 2. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
3. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
4. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
26.10.2015, 11:24
| #10 |
| | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Auf Thema antworten Habe ich ausgeführt von FRST gab es leider keine neue Addition.txt, nur die vom 24.10, die ich schon gepostet habmbam.txt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 26.10.2015 Suchlaufzeit: 10:08 Protokolldatei: mbam.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2015.10.26.02 Rootkit-Datenbank: v2015.10.23.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: saturn1 Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 459294 Abgelaufene Zeit: 36 Min., 16 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 5 PUP.Optional.Goobzo, HKLM\SOFTWARE\CLASSES\APPID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}, In Quarantäne, [7119fe5db7d453e3783b3ee779898878], PUP.Optional.Goobzo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}, In Quarantäne, [7119fe5db7d453e3783b3ee779898878], PUP.Optional.Goobzo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}, In Quarantäne, [7119fe5db7d453e3783b3ee779898878], PUP.Optional.Goobzo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Inst_Rep, In Quarantäne, [5c2e0b500e7d3cfa9e11362b34cf49b7], PUP.Optional.WordShark, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\wsfd_vw_1_10_0_20, In Quarantäne, [4d3d0c4f23687bbb1c7843480201dc24], Registrierungswerte: 1 PUP.Optional.ShopperPro, HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\1.42.1.2687\jsdrv.exe, In Quarantäne, [d5b5a1ba216a7bbb8e244737e71b0af6] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 1 PUP.Optional.BrowserHelper, C:\Users\saturn1\AppData\Local\BrowserHelper, In Quarantäne, [0387b5a6e6a538fe0a7161eefa097c84], Dateien: 3 PUP.Optional.DownloaderGuide, C:\Users\saturn1\Downloads\jetzt_installieren.exe, In Quarantäne, [6c1e4a11513ad6603bc1ed697c88f60a], PUP.Optional.BrowserHelper, C:\Users\saturn1\AppData\Local\BrowserHelper\BrowserHelperBk.txt, In Quarantäne, [0387b5a6e6a538fe0a7161eefa097c84], PUP.Optional.BrowserHelper, C:\Users\saturn1\AppData\Local\BrowserHelper\BrowserHelper.txt, In Quarantäne, [0387b5a6e6a538fe0a7161eefa097c84], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v5.015 - Bericht erstellt am 26/10/2015 um 11:00:46
# Aktualisiert am 26/10/2015 von Xplode
# Datenbank : 2015-10-26.2 [Server]
# Betriebssystem : Windows 8.1 (x64)
# Benutzername : saturn1 - SATURN
# Gestartet von : C:\Users\saturn1\Desktop\adwcleaner_5.015.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
[-] Dienst Gelöscht : BrsHelper
[-] Dienst Gelöscht : sbmntr
***** [ Ordner ] *****
[-] Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
[-] Ordner Gelöscht : C:\Program Files (x86)\predm
[-] Ordner Gelöscht : C:\Program Files (x86)\DailyPcClean Support
[-] Ordner Gelöscht : C:\Users\Gast\AppData\Local\pokki
[-] Ordner Gelöscht : C:\Users\saturn1\AppData\Local\globalUpdate
[-] Ordner Gelöscht : C:\Users\saturn1\AppData\Local\pokki
[-] Ordner Gelöscht : C:\Users\saturn1\AppData\Roaming\SpeedMon
[-] Ordner Gelöscht : C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
***** [ Dateien ] *****
[-] Datei Gelöscht : C:\END
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_homepage-web.com_0.localstorage
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_homepage-web.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
[-] Datei Gelöscht : C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\user.js
[-] Datei Gelöscht : C:\Users\saturn1\Desktop\YTDownloader.lnk
***** [ DLLs ] *****
***** [ Verknüpfungen ] *****
***** [ Geplante Tasks ] *****
[-] Task Gelöscht : Inst_Rep
[-] Task Gelöscht : YTDownloader
[-] Task Gelöscht : YTDownloaderUpd
[-] Task Gelöscht : Pokki
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel Gelöscht : HKCU\Software\Classes\pokki
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\YTDownloader.exe
[-] Schlüssel Gelöscht : HKCU\Software\Classes\AllFileSystemObjects\shell\pokki
[-] Schlüssel Gelöscht : HKCU\Software\Classes\Directory\shell\pokki
[-] Schlüssel Gelöscht : HKCU\Software\Classes\Drive\shell\pokki
[-] Schlüssel Gelöscht : HKCU\Software\Classes\lnkfile\shell\pokki
[-] Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
[-] Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
[-] Wert Gelöscht : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Wert Gelöscht : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Wert Gelöscht : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\7bd5218e-a347-482a-be59-9d9c0d99b8ff
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\a7895f34-e584-4897-b643-4ced325a4696
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\ff74f341-b277-4c9a-88bd-614bc60e1b54
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_03d432a7e610c3e908213e7689d4342ce2111caf
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki_Start_Menu
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
[-] Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
[-] Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\Pokki
[-] Schlüssel Gelöscht : HKCU\Software\Tutorials
[-] Schlüssel Gelöscht : HKCU\Software\YTDownloader
[-] Schlüssel Gelöscht : HKCU\Software\DAILYPCCLEAN
[-] Schlüssel Gelöscht : HKCU\Software\SpeedMon
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\YTDownloader
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\SearchModule
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\SVH
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Pokki
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\GlobalUpdate
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\OCS
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Pokki
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Tutorials
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\YTDownloader
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\DAILYPCCLEAN
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\SpeedMon
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\SearchModule
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
***** [ Internetbrowser ] *****
[-] [C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.hiddenOneOffs", "Bing (Microsoft),Yahoo,Amazon.de,DuckDuckGo,eBay,LEO Eng-Deu,Web Search,Wikipedia (de),Google (avast),Google Images,Google Maps");
[-] [C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\prefs.js] [Preference] Gelöscht : user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2[...]
*************************
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [11393 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 8.1 x64
Ran by saturn1 on 26.10.2015 at 11:08:08,59
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
Successfully deleted: [Task] C:\Windows\system32\tasks\HIDMonitor
Successfully deleted: [Task] C:\Windows\system32\tasks\Inst_Rep
Successfully deleted: [Task] C:\Windows\system32\tasks\Installer_DSKB
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\ProgramData\alawarwrapper
Successfully deleted: [Folder] C:\users\Public\Documents\alawarwrapper
Successfully deleted: [Folder] C:\Users\saturn1\Appdata\Local\alawar
Successfully deleted: [Folder] C:\Users\saturn1\Appdata\Local\alawarwrapper
Successfully deleted: [Folder] C:\Users\saturn1\Appdata\Local\crashrpt
Successfully deleted: [Folder] C:\Users\saturn1\Appdata\Local\installer
~~~ FireFox
Emptied folder: C:\Users\saturn1\AppData\Roaming\mozilla\firefox\profiles\dlbghz7b.default\minidumps [5 files]
~~~ Chrome
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
[C:\Users\saturn1\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\saturn1\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\saturn1\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\saturn1\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.10.2015 at 11:10:46,24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02
durchgeführt von saturn1 (Administrator) auf SATURN (26-10-2015 11:15:47)
Gestartet von C:\Users\saturn1\Downloads
Geladene Profile: saturn1 (Verfügbare Profile: UpdatusUser & saturn1 & Gast)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe
(Intel(R) Corporation) C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778352 2013-08-28] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-07] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)
HKLM-x32\...\Run: [Syncios device service] => C:\Program Files (x86)\Syncios\SynciosDeviceService.exe [747520 2014-10-31] ()
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2015-09-16] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [36711472 2015-10-13] (Dropbox, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Run: [Akamai NetSession Interface] => C:\Users\saturn1\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\RunOnce: [Application Restart #2] => C:\Users\saturn1\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-sid (Der Dateneintrag hat 566 mehr Zeichen).
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [788480 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [1769312 2015-09-16] ()
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\logon.scr
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-08-30] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-08-30] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-10-15] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-03] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-10-13] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk [2015-10-24]
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-10-24]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{0578C397-90C3-41AD-BF4A-E9A5C7F21EDE}: [DhcpNameServer] 40.33.1.55
Tcpip\..\Interfaces\{8338A901-C2B3-48D2-91B5-92D696243DA8}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL =
SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> {5D48B1EE-C9AE-44AA-8E1C-9739F1CAB895} URL =
SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> {B88EC6B7-CAD2-47CF-98CD-6F1C52DC6102} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-03] (Avast Software s.r.o.)
BHO-x32: Kein Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> Keine Datei
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-28] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-03] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-28] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
FireFox:
========
FF ProfilePath: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default
FF DefaultSearchUrl: hxxps://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/.com/?site=shyosffdefault&prd=set&s=FAOztutdk0003,6de5abd9-4bff-4a3d-b98f-542a02b515ac
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-10-17] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-17] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-04] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\bing-avast.xml [2015-03-21]
FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\ecosia.xml [2015-10-17]
FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\google-avast.xml [2015-08-06]
FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\google-images.xml [2015-03-21]
FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\google-maps.xml [2015-03-21]
FF SearchPlugin: C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\searchplugins\youtube-videosuche.xml [2015-03-01]
FF Extension: YouTube Unblocker - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\youtubeunblocker@unblocker.yt [2015-10-16]
FF Extension: TextMarker! - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\{1c530060-b0ae-11d9-9669-0800200c9a66} [2015-10-13]
FF Extension: Lightbeam - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi [2015-05-27]
FF Extension: Ecosia — The search engine that plants trees! - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2015-10-17]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-03] [ist nicht signiert]
FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => nicht gefunden
FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\extensions\cliqz@cliqz.com => nicht gefunden
Chrome:
=======
CHR HomePage: Default -> hxxp://www.msn.com/?PC=AV01
CHR StartupUrls: Default -> "hxxp://www.msn.com/?PC=AV01"
CHR DefaultSearchURL: Default -> hxxp://www-searching.com/search.aspx?site=shdefault&prd=smw&pid=s&shr=d&q={searchTerms}&s=FAOztutdk0003,6de5abd9-4bff-4a3d-b98f-542a02b515ac,
CHR DefaultSearchKeyword: Default -> www-searching.com
CHR DefaultSuggestURL: Default -> hxxp://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}
CHR Profile: C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-08]
CHR Extension: (Google Docs) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08]
CHR Extension: (Google Drive) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-24]
CHR Extension: (YouTube) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Google Cast) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2015-10-12]
CHR Extension: (Google-Suche) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-24]
CHR Extension: (Google Tabellen) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-08]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-06]
CHR Extension: (Avast Online Security) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-20]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-07]
CHR Extension: (Google Mail) - C:\Users\saturn1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-03]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-03]
Opera:
=======
OPR Extension: (Opera Bookmarks Share Portal) - C:\Users\saturn1\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-10-24]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-03] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-03] (Avast Software)
S2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2858336 2015-09-10] (Acer Incorporated)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-12] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-12] (Dropbox, Inc.)
S3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
S2 ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [107792 2013-07-03] (Condusiv Technologies)
S2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
S3 Intel(R) TA SAM; C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [18064 2015-04-18] ()
R2 Intel(R) Technology Access Legacy CS Loader; C:\Program Files\Intel Corporation\Intel(R) Technology Access\LegacyCsLoaderService.exe [144128 2015-07-31] (Intel(R) Corporation)
R2 Intel(R) TechnologyAccessService; C:\Program Files\Intel Corporation\Intel(R) Technology Access\IntelTechnologyAccessService.exe [481536 2015-07-31] (Intel(R) Corporation)
S2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-12] ()
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)
S2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)
S2 mitsijm2015; C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-11] (Autodesk, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] ()
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert]
S3 USecuAppSvc; C:\Program Files\Acer\Acer Theft Shield\USecuAppSvc.exe [347176 2013-08-14] (Acer Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-03] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-03] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-03] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-03] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-03] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-03] ()
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [25872 2013-07-03] (Condusiv Technologies)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [112912 2013-07-03] (Condusiv Technologies)
S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation)
R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [21408 2013-08-08] ()
R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [21920 2013-08-08] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-07] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD64.sys [46568 2013-08-07] ()
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S2 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)
R2 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69344 2013-11-04] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)
R1 ndisrd; C:\Windows\system32\DRIVERS\ndisrfl.sys [41688 2015-04-30] (Intel Corporation)
R3 NetTap630; C:\Windows\system32\DRIVERS\nettap630.sys [67800 2014-10-30] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-19] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [427736 2013-08-09] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-28] (Synaptics Incorporated)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Datei ist nicht signiert]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-03] (Avast Software)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-26 11:15 - 2015-10-26 11:15 - 00000000 ____D C:\Users\saturn1\Downloads\FRST-OlderVersion
2015-10-26 11:10 - 2015-10-26 11:10 - 00001951 _____ C:\Users\saturn1\Desktop\JRT.txt
2015-10-26 11:06 - 2015-10-26 11:06 - 01798976 _____ (Malwarebytes) C:\Users\saturn1\Desktop\JRT.exe
2015-10-26 10:56 - 2015-10-26 11:00 - 00000000 ____D C:\AdwCleaner
2015-10-26 10:54 - 2015-10-26 10:54 - 01694208 _____ C:\Users\saturn1\Desktop\adwcleaner_5.015.exe
2015-10-25 17:42 - 2015-10-25 17:42 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-10-25 17:41 - 2015-10-25 17:41 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\saturn1\Downloads\revosetup95.exe
2015-10-25 14:19 - 2015-10-25 14:23 - 00000000 ____D C:\619dd1880f956c6c2c11
2015-10-25 14:19 - 2015-08-27 03:43 - 22372152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-25 14:19 - 2015-08-27 03:42 - 19795904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-25 13:38 - 2015-09-29 13:31 - 07457624 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-25 13:38 - 2015-09-29 13:31 - 01658536 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-25 13:38 - 2015-09-29 13:31 - 01519592 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-10-25 13:38 - 2015-09-29 13:31 - 01487008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-25 13:38 - 2015-09-29 13:31 - 01355848 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-10-25 13:38 - 2015-09-24 17:42 - 00348672 _____ (Microsoft Corporation) C:\Windows\system32\bdesvc.dll
2015-10-25 13:38 - 2015-09-24 17:40 - 00737280 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2015-10-25 13:38 - 2015-09-19 04:18 - 00035384 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-25 13:38 - 2015-09-18 14:42 - 01290752 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-25 13:38 - 2015-09-18 14:42 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-25 13:38 - 2015-09-18 14:42 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-25 13:38 - 2015-09-18 14:42 - 00699904 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-25 13:38 - 2015-09-18 14:42 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-25 13:38 - 2015-09-18 14:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-25 13:38 - 2015-09-10 19:02 - 25851392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-25 13:38 - 2015-09-10 18:19 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-25 13:38 - 2015-09-10 18:18 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-25 13:38 - 2015-09-10 18:18 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-25 13:38 - 2015-09-10 18:14 - 05990400 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-25 13:38 - 2015-09-10 18:09 - 20358144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-25 13:38 - 2015-09-10 18:06 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-25 13:38 - 2015-09-10 18:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-25 13:38 - 2015-09-10 17:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-25 13:38 - 2015-09-10 17:39 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-25 13:38 - 2015-09-10 17:37 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-25 13:38 - 2015-09-10 17:37 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-25 13:38 - 2015-09-10 17:35 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-25 13:38 - 2015-09-10 17:33 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-25 13:38 - 2015-09-10 17:28 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-10-25 13:38 - 2015-09-10 17:28 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-25 13:38 - 2015-09-10 17:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-25 13:38 - 2015-09-10 17:24 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-25 13:38 - 2015-09-10 17:21 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-25 13:38 - 2015-09-10 17:19 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-25 13:38 - 2015-09-10 17:19 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-25 13:38 - 2015-09-10 17:19 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-25 13:38 - 2015-09-10 17:17 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-25 13:38 - 2015-09-10 17:17 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-25 13:38 - 2015-09-10 17:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-25 13:38 - 2015-09-10 17:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-25 13:38 - 2015-09-10 17:02 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-25 13:38 - 2015-09-10 17:01 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-10-25 13:38 - 2015-09-10 17:00 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-25 13:38 - 2015-09-10 16:57 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-25 13:38 - 2015-09-10 16:57 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-25 13:38 - 2015-09-10 16:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-25 13:38 - 2015-09-10 16:55 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-25 13:38 - 2015-09-10 16:55 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-25 13:38 - 2015-09-10 16:45 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-25 13:38 - 2015-09-10 16:34 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-25 13:38 - 2015-09-10 16:31 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-25 13:38 - 2015-09-10 16:27 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-25 13:38 - 2015-09-10 16:26 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-25 13:38 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-25 13:38 - 2015-08-07 22:40 - 01736520 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-25 13:38 - 2015-08-07 22:40 - 01499920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-25 13:38 - 2015-08-07 22:40 - 01134752 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-25 13:38 - 2015-08-07 22:40 - 00686960 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-10-25 13:38 - 2015-08-07 22:40 - 00507176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-10-25 13:38 - 2015-08-07 15:13 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-25 13:38 - 2015-08-06 17:47 - 04710400 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-10-25 13:38 - 2015-08-06 17:18 - 04068352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2015-10-25 13:37 - 2015-09-29 13:29 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-25 13:37 - 2015-09-28 19:45 - 03705344 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-25 13:37 - 2015-09-28 19:26 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2015-10-25 13:37 - 2015-09-28 19:25 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-25 13:37 - 2015-09-28 19:25 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-25 13:37 - 2015-09-28 19:25 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-25 13:37 - 2015-09-28 19:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-25 13:37 - 2015-09-28 19:22 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-25 13:37 - 2015-09-28 19:22 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-25 13:37 - 2015-09-28 19:15 - 02243072 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-25 13:37 - 2015-09-28 19:13 - 00891904 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-25 13:37 - 2015-09-28 19:12 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-25 13:37 - 2015-08-06 18:05 - 00669184 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx
2015-10-25 13:37 - 2015-08-06 17:37 - 00536576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx
2015-10-25 13:37 - 2015-07-16 19:58 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\NcdAutoSetup.dll
2015-10-25 07:38 - 2015-10-25 07:38 - 00262816 _____ C:\Windows\Minidump\102515-22906-01.dmp
2015-10-24 20:05 - 2015-10-24 20:05 - 00000860 _____ C:\Users\saturn1\Downloads\Musik - Verknüpfung.lnk
2015-10-24 19:57 - 2015-10-24 19:59 - 00100192 _____ C:\Users\saturn1\Downloads\Addition.txt
2015-10-24 19:56 - 2015-10-26 11:15 - 00030270 _____ C:\Users\saturn1\Downloads\FRST.txt
2015-10-24 19:56 - 2015-10-26 11:15 - 00000000 ____D C:\FRST
2015-10-24 19:55 - 2015-10-26 11:15 - 02197504 _____ (Farbar) C:\Users\saturn1\Downloads\FRST64.exe
2015-10-24 19:51 - 2015-10-24 19:51 - 00000476 _____ C:\Users\saturn1\Downloads\defogger_disable.log
2015-10-24 19:51 - 2015-10-24 19:51 - 00000000 _____ C:\Users\saturn1\defogger_reenable
2015-10-24 19:50 - 2015-10-24 19:50 - 00050477 _____ C:\Users\saturn1\Downloads\Defogger.exe
2015-10-24 19:16 - 2015-10-24 19:16 - 00602112 _____ (OldTimer Tools) C:\Users\saturn1\Downloads\OTL.exe
2015-10-24 18:40 - 2015-10-24 18:40 - 00000000 ____D C:\Users\saturn1\Downloads\ProcessExplorer_16.5
2015-10-24 18:39 - 2015-10-24 18:39 - 01125626 _____ C:\Users\saturn1\Downloads\ProcessExplorer_16.5.zip
2015-10-24 18:24 - 2015-10-24 19:21 - 00001458 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-10-24 17:22 - 2015-10-26 11:02 - 00001030 _____ C:\Windows\Tasks\fgQ3SLKo3PQmATQfNa.job
2015-10-24 17:22 - 2015-10-26 11:02 - 00001030 _____ C:\Windows\Tasks\bKowc082jZo3bbUXLv.job
2015-10-24 17:22 - 2015-10-24 19:21 - 00001091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-10-24 17:22 - 2015-10-24 19:21 - 00001085 _____ C:\Users\Public\Desktop\Opera.lnk
2015-10-24 17:22 - 2015-10-24 17:22 - 00004038 _____ C:\Windows\System32\Tasks\fgQ3SLKo3PQmATQfNa
2015-10-24 17:22 - 2015-10-24 17:22 - 00004038 _____ C:\Windows\System32\Tasks\bKowc082jZo3bbUXLv
2015-10-24 17:22 - 2015-10-24 17:22 - 00003842 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1445703737
2015-10-24 17:22 - 2015-10-24 17:22 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\Opera Software
2015-10-24 17:22 - 2015-10-24 17:22 - 00000000 ____D C:\Users\saturn1\AppData\Local\Opera Software
2015-10-24 17:21 - 2015-10-24 17:22 - 00000000 ____D C:\Program Files (x86)\Opera
2015-10-21 13:20 - 2015-10-21 13:20 - 00003334 _____ C:\Windows\System32\Tasks\AcerCloud
2015-10-18 20:46 - 2015-10-18 20:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-18 18:05 - 2015-10-18 18:05 - 00243888 _____ C:\Users\saturn1\Downloads\Firefox Setup Stub 41.0.2.exe
2015-10-18 17:01 - 2015-10-26 10:49 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-18 17:01 - 2015-10-18 17:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2015-10-18 17:01 - 2015-10-18 17:01 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-18 17:01 - 2015-10-18 17:01 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2015-10-18 17:01 - 2015-10-05 08:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-18 17:01 - 2015-10-05 08:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-18 17:01 - 2015-10-05 08:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-18 17:00 - 2015-10-18 17:00 - 22908888 _____ (Malwarebytes ) C:\Users\saturn1\Downloads\mbam-setup-org-2.2.0.1024.exe
2015-10-18 16:58 - 2015-10-26 11:02 - 00001026 _____ C:\Windows\Tasks\ZRhLK9hrBkOCMase.job
2015-10-18 16:58 - 2015-10-26 11:02 - 00001018 _____ C:\Windows\Tasks\MVCQOKPixtwM.job
2015-10-18 16:58 - 2015-10-18 16:58 - 00004034 _____ C:\Windows\System32\Tasks\ZRhLK9hrBkOCMase
2015-10-18 16:58 - 2015-10-18 16:58 - 00004024 _____ C:\Windows\System32\Tasks\MVCQOKPixtwM
2015-10-18 16:08 - 2015-10-26 11:02 - 00001044 _____ C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job
2015-10-18 16:08 - 2015-10-26 11:02 - 00001024 _____ C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job
2015-10-18 16:08 - 2015-10-18 16:08 - 00004050 _____ C:\Windows\System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m
2015-10-18 16:08 - 2015-10-18 16:08 - 00004032 _____ C:\Windows\System32\Tasks\Y8AUFtKs8KRzdqL
2015-10-18 16:05 - 2015-10-18 16:05 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-10-18 16:05 - 2015-10-18 16:05 - 00000000 ____D C:\Users\saturn1\Tracing
2015-10-18 16:05 - 2015-10-18 16:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-10-18 16:04 - 2015-10-18 16:04 - 00000000 ____D C:\Users\saturn1\Documents\Autoloader
2015-10-18 15:34 - 2015-10-26 11:02 - 00001032 _____ C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job
2015-10-18 15:34 - 2015-10-26 11:02 - 00001010 _____ C:\Windows\Tasks\GUmJ6Qbd.job
2015-10-18 15:34 - 2015-10-24 19:21 - 00001952 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk
2015-10-18 15:34 - 2015-10-18 15:34 - 00004038 _____ C:\Windows\System32\Tasks\n2WsgG5UnMBz2EppfzX
2015-10-18 15:34 - 2015-10-18 15:34 - 00004018 _____ C:\Windows\System32\Tasks\GUmJ6Qbd
2015-10-18 15:15 - 2015-10-26 11:02 - 00001048 _____ C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job
2015-10-18 15:15 - 2015-10-26 11:02 - 00001030 _____ C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job
2015-10-18 15:15 - 2015-10-18 15:15 - 00004056 _____ C:\Windows\System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF
2015-10-18 15:15 - 2015-10-18 15:15 - 00004038 _____ C:\Windows\System32\Tasks\DEAn2Th92CYuEkPG9n
2015-10-18 15:13 - 2015-10-24 18:24 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-10-18 15:07 - 2015-10-18 15:07 - 00003130 _____ C:\Windows\System32\Tasks\{BDB0FB31-C5A3-4201-9E0E-C7E3F5F6FE6F}
2015-10-18 15:03 - 2015-10-18 15:21 - 818177352 _____ (Travellers Tales (UK) Ltd) C:\Users\saturn1\Downloads\LEGOHarryPotterDEMO.exe.part
2015-10-18 15:02 - 2015-10-18 15:02 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\dlg
2015-10-18 15:01 - 2013-08-22 14:25 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-10-16 10:42 - 2015-10-18 18:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-11 12:40 - 2015-10-11 12:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-10-11 12:40 - 2015-10-11 12:40 - 00000000 ____D C:\Program Files\iTunes
2015-10-11 12:40 - 2015-10-11 12:40 - 00000000 ____D C:\Program Files\iPod
2015-10-11 12:40 - 2015-10-11 12:40 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-10-11 12:38 - 2015-10-11 12:38 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2015-10-11 12:38 - 2015-10-11 12:38 - 00000000 ____D C:\Program Files\Bonjour
2015-10-11 12:38 - 2015-10-11 12:38 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-10-11 12:38 - 2015-10-11 12:38 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-10-08 14:59 - 2015-10-08 14:59 - 00186880 _____ (TODO: <Company name>) C:\Windows\system32\rsrcs.dll
2015-10-03 16:54 - 2015-10-03 16:54 - 00143445 _____ C:\Users\saturn1\Downloads\YouTube-Unblocker-056.zip
2015-10-03 16:53 - 2015-10-03 16:53 - 01457952 _____ C:\Users\saturn1\Downloads\YouTube-Unblocker-056 - CHIP-Installer.exe
2015-10-03 15:14 - 2015-10-03 15:14 - 00000000 ____D C:\Users\saturn1\Downloads\youtube_unblocker-0.6.17-fx
2015-10-03 15:08 - 2015-10-03 15:08 - 00201046 _____ C:\Users\saturn1\Downloads\youtube_unblocker-0.6.17-fx.zip
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-26 11:14 - 2013-11-11 17:06 - 02079802 _____ C:\Windows\WindowsUpdate.log
2015-10-26 11:12 - 2014-12-13 14:40 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-26 11:07 - 2013-12-21 23:08 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1506994272-2369309272-3303374795-1002
2015-10-26 11:07 - 2013-11-12 01:51 - 00765582 _____ C:\Windows\system32\perfh007.dat
2015-10-26 11:07 - 2013-11-12 01:51 - 00159366 _____ C:\Windows\system32\perfc007.dat
2015-10-26 11:07 - 2013-10-07 12:11 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-26 11:02 - 2015-09-12 08:40 - 00001226 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2015-10-26 11:02 - 2014-12-13 14:40 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-26 11:02 - 2014-12-06 14:28 - 00000000 ____D C:\Users\saturn1\AppData\Local\HTC MediaHub
2015-10-26 11:02 - 2014-10-15 20:06 - 00000000 ___DO C:\Users\saturn1\OneDrive
2015-10-26 11:02 - 2013-08-22 15:46 - 00085237 _____ C:\Windows\setupact.log
2015-10-26 11:01 - 2013-10-07 12:08 - 00828666 _____ C:\Windows\PFRO.log
2015-10-26 11:01 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-26 11:01 - 2013-08-22 14:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2015-10-26 11:00 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\sru
2015-10-26 10:47 - 2013-08-22 20:11 - 00000000 ____D C:\Windows\ShellNew
2015-10-26 10:46 - 2014-10-22 20:08 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-26 10:45 - 2015-09-12 08:40 - 00001230 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2015-10-26 10:19 - 2014-10-17 21:17 - 00000000 ____D C:\Users\saturn1\AppData\Local\CrashDumps
2015-10-26 10:10 - 2013-10-07 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-10-26 10:09 - 2015-08-05 15:16 - 00003352 _____ C:\Windows\System32\Tasks\BacKGroundAgent
2015-10-26 10:09 - 2013-12-21 23:04 - 00000000 ____D C:\Users\saturn1\AppData\Local\clear.fi
2015-10-26 10:08 - 2013-10-07 13:04 - 00000000 ___HD C:\OEM
2015-10-26 10:06 - 2014-01-02 23:00 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3B5229CA-775F-4B17-B56B-B93A96D118AF}
2015-10-26 10:04 - 2014-10-24 11:46 - 00000000 ____D C:\Users\saturn1\AppData\Local\Akamai
2015-10-25 20:31 - 2015-04-13 19:18 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-25 18:00 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData
2015-10-25 14:24 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2015-10-25 14:23 - 2015-04-13 19:19 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-25 14:23 - 2014-01-20 23:38 - 00000000 ____D C:\Windows\system32\MRT
2015-10-25 14:19 - 2014-12-13 18:21 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-25 14:19 - 2014-07-17 17:49 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-25 14:19 - 2014-01-20 23:38 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-25 07:41 - 2014-10-16 07:55 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-10-25 07:38 - 2014-10-16 16:07 - 00000000 ____D C:\Windows\Minidump
2015-10-25 07:38 - 2014-10-16 16:06 - 384223902 _____ C:\Windows\MEMORY.DMP
2015-10-25 07:38 - 2014-02-03 23:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-24 19:51 - 2013-12-21 23:02 - 00000000 ____D C:\Users\saturn1
2015-10-24 19:21 - 2015-07-07 08:26 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-10-24 19:21 - 2014-10-17 12:25 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-10-24 19:21 - 2014-09-06 14:44 - 00002205 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acer Games.lnk
2015-10-24 19:21 - 2014-02-18 19:34 - 00002185 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2015-10-24 19:21 - 2013-12-21 23:03 - 00001280 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RtkGUI.lnk
2015-10-24 19:21 - 2013-12-21 23:02 - 00001458 _____ C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet-Explorer.lnk
2015-10-24 19:21 - 2013-11-11 17:56 - 00001939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-10-24 19:21 - 2013-10-07 12:23 - 00000000 ____D C:\Windows\oem
2015-10-24 19:21 - 2013-07-09 22:24 - 00002166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Games.lnk
2015-10-24 19:19 - 2013-10-07 12:21 - 00000000 ____D C:\Program Files (x86)\Acer
2015-10-18 20:46 - 2015-09-12 08:40 - 00000000 ____D C:\Program Files (x86)\Dropbox
2015-10-18 16:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2015-10-18 16:05 - 2014-11-23 18:21 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\Skype
2015-10-18 16:05 - 2014-11-22 16:28 - 00000000 ____D C:\ProgramData\Skype
2015-10-18 16:04 - 2014-10-24 11:48 - 00000000 ____D C:\Users\saturn1\AppData\Roaming\Autodesk
2015-10-17 11:46 - 2014-10-22 20:08 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-10-16 12:10 - 2014-12-27 21:25 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-10-16 05:51 - 2015-06-11 13:42 - 00810488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-10-16 05:51 - 2015-06-11 13:42 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-13 08:58 - 2013-11-11 17:23 - 00000000 ____D C:\Windows\SysWOW64\NV
2015-10-13 08:58 - 2013-11-11 17:23 - 00000000 ____D C:\Windows\system32\NV
2015-10-13 08:58 - 2013-11-11 17:23 - 00000000 ____D C:\ProgramData\NVIDIA
2015-10-11 12:40 - 2015-06-28 12:55 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-10-11 12:40 - 2014-10-17 12:25 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-10-09 15:54 - 2014-12-01 22:43 - 00000000 ____D C:\Users\saturn1\Documents\The Lord of the Rings Online
2015-10-09 15:03 - 2015-09-12 08:42 - 00000000 ___RD C:\Users\saturn1\Dropbox
2015-10-09 15:03 - 2015-09-12 08:40 - 00000000 ____D C:\Users\saturn1\AppData\Local\Dropbox
2015-10-09 14:57 - 2014-12-02 06:56 - 00000000 ____D C:\Users\saturn1\AppData\Local\The Lord of the Rings Online
2015-10-04 19:22 - 2015-02-22 10:36 - 00003722 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2015-10-04 19:22 - 2015-02-22 10:36 - 00003476 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2015-09-29 19:23 - 2015-09-12 19:29 - 00000000 ____D C:\Users\Gast\AppData\Local\Acer
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-06-15 12:43 - 2015-06-15 12:43 - 12060760 _____ (WindSolutions) C:\Program Files\CopyTransManager.exe
2015-06-23 16:58 - 2015-06-23 16:58 - 11591752 _____ () C:\Program Files\CopyTransManagerDEv1.018.zip
2014-04-17 08:56 - 2014-04-17 08:56 - 0012943 _____ () C:\Program Files\License Agreement.rtf
2015-04-14 17:28 - 2015-04-14 17:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF
2015-04-14 17:28 - 2015-04-14 17:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n
2015-04-14 17:28 - 2015-04-14 17:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa
2015-04-14 17:28 - 2015-04-14 17:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL
2015-04-14 17:28 - 2015-04-14 17:28 - 0004387 _____ () C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase
2015-03-15 11:01 - 2015-03-15 11:01 - 0007598 _____ () C:\Users\saturn1\AppData\Local\Resmon.ResmonCfg
2013-11-11 17:51 - 2013-11-11 17:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Einige Dateien in TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpw0vgcx.dll
C:\Users\Gast\AppData\Local\Temp\oct6BE3.tmp.exe
C:\Users\Gast\AppData\Local\Temp\octCAE2.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\AcDeltree.exe
C:\Users\saturn1\AppData\Local\Temp\avg3C96.exe
C:\Users\saturn1\AppData\Local\Temp\avg4EE9.exe
C:\Users\saturn1\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpsq_due.dll
C:\Users\saturn1\AppData\Local\Temp\FNP_ACT_InstallerCA.dll
C:\Users\saturn1\AppData\Local\Temp\Intel_Technology_Access_Software.exe
C:\Users\saturn1\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\saturn1\AppData\Local\Temp\jre-8u60-windows-au.exe
C:\Users\saturn1\AppData\Local\Temp\MSETUP4.EXE
C:\Users\saturn1\AppData\Local\Temp\oct10A6.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct130D.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct13E4.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct14E3.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct2A21.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct3079.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct336B.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct3402.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct353F.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct3DFA.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct4526.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct4E1.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct4E31.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct5091.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct52A1.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct5481.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct5BFB.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct67D5.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct6836.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct6B6F.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct7FB8.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct81CC.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct8256.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct8E9A.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct9606.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct98B5.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\oct99F6.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octA02.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octA84C.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octAD17.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octB077.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octB1F5.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octC1AE.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octCDDB.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octD530.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octD6A1.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octD9B9.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octDD43.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octE337.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octEDB2.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octEF04.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octF0B1.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octF0B7.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octF47.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\octFCB.tmp.exe
C:\Users\saturn1\AppData\Local\Temp\Quarantine.exe
C:\Users\saturn1\AppData\Local\Temp\SkypeSetup.exe
C:\Users\saturn1\AppData\Local\Temp\sqlite3.dll
C:\Users\saturn1\AppData\Local\Temp\tmpF9C9.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-10-23 16:18
==================== Ende von FRST.txt ============================
|
|
26.10.2015, 11:25
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Untersuchen klicken.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
26.10.2015, 11:33
| #12 |
| | Addition.txtCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-10-2015 02
durchgeführt von saturn1 (2015-10-26 11:29:33)
Gestartet von C:\Users\saturn1\Downloads
Windows 8.1 (X64) (2013-12-21 22:01:56)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1506994272-2369309272-3303374795-500 - Administrator - Disabled)
Gast (S-1-5-21-1506994272-2369309272-3303374795-501 - Limited - Enabled) => C:\Users\Gast
saturn1 (S-1-5-21-1506994272-2369309272-3303374795-1002 - Administrator - Enabled) => C:\Users\saturn1
UpdatusUser (S-1-5-21-1506994272-2369309272-3303374795-1001 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
„Der Herr der Ringe Online™“ v1301.0055.0535.4025 (HKLM-x32\...\12bbe590-c890-11d9-9669-0800200c9a66_is1) (Version: 1301.0055.0535.4025 - Turbine, Inc.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.08.2005 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2000 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.09.2002.1 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.05.2001.1 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.08.2006 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Acer Screen Grasp (HKLM-x32\...\{84443E5D-0767-438B-B1C8-6A52FAB2101B}) (Version: 1.01.3004 - Acer Incorporated)
Acer Theft Shield (HKLM\...\{8ADB0CD2-4E5A-452F-BB3B-3A2984CAC749}) (Version: 1.01.8102 - Acer Incorporated)
Acer Touch Tools (HKLM\...\{BB1F8130-3CB3-4896-9D28-770DFFFDE59C}) (Version: 1.00.3013 - Acer Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20071 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Akamai) (Version: - Akamai Technologies, Inc)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.11.2000.2 - Acer Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{A50679D9-6CBD-4FCD-BACB-62EF3894F6F3}) (Version: 4.0.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{1F72FDD5-A069-45B4-928F-D0F16492DC69}) (Version: 4.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FD244E19-6EFE-4A2D-948A-0D45D4C168BE}) (Version: 9.0.0.26 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 4.0.69.0 - Autodesk)
Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.)
Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden
Autodesk DWG TrueView 2015 - English (HKLM\...\DWG TrueView 2015 - English) (Version: 20.0.51.0 - Autodesk)
Autodesk Inventor Professional 2015 - Deutsch (German) (HKLM\...\Autodesk Inventor Professional 2015) (Version: 19.1.20300.0000 - Autodesk)
Autodesk Inventor Professional 2015 (Version: 19.1.20300.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2015 Language Pack - Deutsch (German) (Version: 19.0.15900.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2015 SP1 (HKLM\...\Autodesk Inventor Professional 2015 SP1RTM) (Version: 19.1.20300.0000 - Autodesk)
Autodesk Material Library 2015 (HKLM-x32\...\{427F733F-4D6C-45BC-9324-EB743104C321}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2015 (HKLM-x32\...\{ABE2F70B-8D94-44E9-AA04-F0DB35063D62}) (Version: 5.2.9.100 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2015 (HKLM-x32\...\{4FBC9635-AC56-4378-8FDE-C4D3ED072681}) (Version: 5.2.9.100 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.3.3.1 - Autodesk)
Autodesk ReCap (Version: 1.3.3.1 - Autodesk) Hidden
Autodesk Revit Interoperability for Inventor 2015 (HKLM\...\Autodesk Revit Interoperability for Inventor 2015) (Version: 15.0.166.0 - Autodesk)
Autodesk Revit Interoperability for Inventor 2015 (Version: 15.0.166.0 - Autodesk) Hidden
Autodesk Vault Basic 2015 (Client) (HKLM\...\Autodesk Vault Basic 2015 (Client)) (Version: 19.0.49.0 - Autodesk)
Autodesk Vault Basic 2015 (Client) (Version: 19.0.49.0 - Autodesk) Hidden
Autodesk Vault Basic 2015 (Client) German Language Pack (Version: 19.0.49.0 - Autodesk) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon MG6400 series Benutzerregistrierung (HKLM-x32\...\Canon MG6400 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MG6400 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6400_series) (Version: 1.02 - Canon Inc.)
Canon MG6400 series On-screen Manual (HKLM-x32\...\Canon MG6400 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.)
CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.68 - CLIQZ.com)
Configurator 360 addin (HKLM-x32\...\{8FE324B0-B934-4D68-BAB5-DE2136036237}) (Version: 19.0.11300.9000 - Autodesk, Inc.)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
Dropbox (HKLM-x32\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.27.35 - Dropbox, Inc.) Hidden
DWG TrueView 2015 - English (Version: 20.0.51.0 - Autodesk) Hidden
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Eco Materials Adviser for Autodesk Inventor 2015 (64-bit) (HKLM\...\{2F7441CB-A646-41F1-B1CB-518AB311138B}) (Version: 5.3.8.0 - Granta Design Limited)
ExpressCache (HKLM\...\{6E55C9F8-138E-4128-8A9F-6464725BE98A}) (Version: 1.0.102.0 - Condusiv Technologies)
FARO LS 1.1.502.0 (64bit) (HKLM-x32\...\{66D83FE0-D798-4B38-86FE-FB48151E5AEF}) (Version: 5.2.0.35213 - FARO Scanner Production)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
HID Monitor (HKLM-x32\...\{4ED132F6-EC28-49CE-8291-2F6B42614BC1}) (Version: 1.1.5 - Acer Incorporated)
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.16.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.44.5 - HTC)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel Experience Center - Configuration (x32 Version: 1.7.0.179 - Intel) Hidden
Intel(R) Experience Center Desktop Software (HKLM-x32\...\{3608ec0a-56b4-4d9d-b038-9b3e51d72582}) (Version: 1.7.0.179 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3277 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{26AA61D4-B04D-4E0D-8E20-94A8FF2EE64D}) (Version: 4.2.40.2439 - Intel Corporation)
Intel(R) Technology Access (HKLM-x32\...\{fb74531f-28c3-4dca-9849-e6b8faa85afe}) (Version: 1.5.0.1021 - Intel Corporation)
Intel(R) Technology Access Software Asset Manager (x32 Version: 1.0.1562 - Intel Corporation) Hidden
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{e1172fd4-a6d9-4cfa-8256-268f728fec31}) (Version: 16.5.3 - Intel Corporation)
Inventor 2015 Heartbleed Hotfix Installer (INV19001) (HKLM\...\Autodesk Inventor Professional 2015_19001) (Version: 1 - Autodesk)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{96984DE8-1DB8-425C-AC8C-3098BC696F04}) (Version: 12.3.0.44 - Apple Inc.)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Living Legends: Die Eisrose (HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Living Legends: Die Eisrose) (Version: 1.0.0.0 - Alawar Entertainment Inc.)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mockup 360 Addin 2015 (HKLM-x32\...\{E4D4242C-FC14-4B4F-B1D9-6760D8C241D5}) (Version: 1.1.0 - Autodesk)
Mozilla Firefox 41.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.2 (x86 de)) (Version: 41.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.2 - Mozilla)
MuseScore 1.3 (HKLM-x32\...\MuseScore) (Version: 1.3.0 - Werner Schweer and Others)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 32.0.1948.69 (HKLM-x32\...\Opera 32.0.1948.69) (Version: 32.0.1948.69 - Opera Software)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
Proxy Searcher (HKLM-x32\...\{B649E831-8F2D-401A-9C81-0318219EAAC6}) (Version: 4.50.0000 - Proxy Searcher)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21238 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Spielkanäle (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 9.2.0.11 - WildTangent, Inc.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.13 - Synaptics Incorporated)
Syncios Version 4.1.5 (HKLM-x32\...\{068A5D84-8419-4BDE-9689-FE65F412EFBB}_is1) (Version: 4.1.5 - Anvsoft, Inc.)
Update 1 for Inventor 2015 Service Pack 1 (See readme for detail) (INV19110) (HKLM\...\Autodesk Inventor Professional 2015_19110) (Version: 1 - Autodesk)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\iDrop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxTest.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtCp.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\UCxTextBtn.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\BodyReceiver.dll ()
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxApprenticeServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ColorButton.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\AcInetUI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\RxInventorUtilities.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\InvResc.dll (Autodesk)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\InvTXTStack.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2015\Bin\DTInterop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1506994272-2369309272-3303374795-1002_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Keine Datei
==================== Wiederherstellungspunkte =========================
02-10-2015 21:34:49 Intel(R) Technology Access
11-10-2015 13:10:48 Geplanter Prüfpunkt
23-10-2015 16:31:43 Geplanter Prüfpunkt
24-10-2015 19:23:05 OTL Restore Point - 24.10.2015 20:23:04
26-10-2015 10:48:16 Intel(R) Technology Access
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0792B308-9EE7-4842-963E-BE39AE44D82C} - System32\Tasks\avastBCLRestartS-1-5-21-1506994272-2369309272-3303374795-1002 => Firefox.exe
Task: {127D061F-A5F5-4F60-8545-AAC370D28382} - System32\Tasks\{BDB0FB31-C5A3-4201-9E0E-C7E3F5F6FE6F} => pcalua.exe -a C:\Users\saturn1\AppData\Roaming\SpeedMon\speedmon.exe -c /uninstall
Task: {1B9A8A50-8616-49B2-B51E-180472056425} - System32\Tasks\MVCQOKPixtwM => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: {1FC5EE56-5562-416F-8297-2E61C5B445EB} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {20B52AC6-BB40-466B-8A36-230C24D068D8} - System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d-Logon => C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-04-18] ()
Task: {2A42FED6-6A9B-435A-96C6-11C2B309CC2A} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {34620452-A97A-4ED9-BBF6-7FF58DA57BE4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {37699999-5763-49CA-A1CE-AB72A566CE66} - \ShopperProJSUpd -> Keine Datei <==== ACHTUNG
Task: {377A79EA-433C-4556-AA20-455F7F52630E} - System32\Tasks\DEAn2Th92CYuEkPG9n => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: {3A824691-844B-4078-AD60-3338F1F61978} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2015-09-10] (Acer Incorporated)
Task: {3D4BE21C-F015-4F41-A4F3-7ACEC264F0FC} - \Smp -> Keine Datei <==== ACHTUNG
Task: {3E5F5531-7967-40C1-AF29-E8AF1B469BC7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
Task: {41DCD5EA-0EFD-4723-B1DC-11E69EBC4D87} - System32\Tasks\prelauncher_First => C:\Program Files (x86)\Acer\Screen Grasp\InputTask.exe [2013-07-01] (Acer Incorporated)
Task: {49A8BD4E-AE8C-4173-8A10-431DC069EA94} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-12] (Dropbox, Inc.)
Task: {4AD49C7F-3C90-4818-A002-D6E874A48BF4} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-09-12] (Dropbox, Inc.)
Task: {4C000DFC-D18F-4C57-AC36-D46C661375D2} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5 -> Keine Datei <==== ACHTUNG
Task: {52FCE5C3-5D59-456A-B22D-80B24EB7C9C0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-17] (Adobe Systems Incorporated)
Task: {5C1F2352-90B7-488C-BC01-58CDC3206652} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-10-25] (Microsoft Corporation)
Task: {5C7E3A4E-30C3-4244-BFDE-051A1545BD98} - \Installer_geforce -> Keine Datei <==== ACHTUNG
Task: {5F846BD5-71F2-42A0-93B0-5A4ECF340451} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5_user -> Keine Datei <==== ACHTUNG
Task: {633C6770-671C-435B-B8C3-C7E21EBD0A5F} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-1506994272-2369309272-3303374795-1002
Task: {6AD3275A-47B8-4DA4-9815-6A9320D50E12} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {6F56BEFD-9515-4693-A250-C5C09116E95C} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {744B37FA-0E57-417B-B7B8-C114FD6D2030} - System32\Tasks\Touch Tools Launcher => C:\Program Files\Acer\Acer Touch Tools\TouchToolsLauncher.exe [2013-08-24] (TODO: <Company name>)
Task: {78354191-63ED-461A-B368-CAA874E5ADE7} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-10-15] (Acer)
Task: {7A17005E-F205-47DA-B52B-CFF861F8238E} - System32\Tasks\IntelTA-Upgrade-56460984-97c2-4bc7-a632-d776cf817f5d => C:\Program Files (x86)\Intel Corporation\Intel(R) Technology Access\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-04-18] ()
Task: {7AE5679B-AE1C-47FE-8C6D-A4710314CCC7} - System32\Tasks\ZRhLK9hrBkOCMase => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
Task: {7AF9DC2C-9ADD-4B7D-8F5D-D1D3A821F557} - System32\Tasks\fgQ3SLKo3PQmATQfNa => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: {7D6BC39F-52CC-4E14-8C20-6F3BF4B9005B} - \SPDriver -> Keine Datei <==== ACHTUNG
Task: {7EF21977-21B9-4933-B682-C29B9157A03F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {7F646CA8-DFD0-41AD-9F2A-62CF64A18DA7} - System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: {825BC578-3042-4748-B33B-92400C98F7B2} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {87E27CBD-086A-4597-80B4-248E22317BE3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {9036901C-9705-4D76-A972-356FB1C95D94} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {90A4B073-D07E-48F6-BD19-B7760320E6FD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {985EC60A-DC0D-4E00-9FAB-959A71730EC0} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-10_user -> Keine Datei <==== ACHTUNG
Task: {A0D23810-982C-491F-88F0-41BFFF4F63E2} - System32\Tasks\Prelauncher => C:\Program Files (x86)\Acer\Screen Grasp\InputTask.exe [2013-07-01] (Acer Incorporated)
Task: {A1B2AFFB-7BD3-47CF-A5D7-1399428891E3} - System32\Tasks\Screen Grasp GestureDetection => C:\Program Files (x86)\Acer\Screen Grasp\GestureDetection.exe [2013-08-26] (Acer Incorporated)
Task: {A86729F0-6B8F-458C-89D6-49EEF0746A18} - \ShopperPro -> Keine Datei <==== ACHTUNG
Task: {AE9D6E37-65A1-4FB2-8ACC-4840E6264A97} - System32\Tasks\Theft Shield\AcerTheftShieldTask => C:\Program Files\Acer\Acer Theft Shield\USecuAppLauncher.exe [2013-08-14] (Acer Incorporated)
Task: {B36990D3-1A75-439C-9E3D-39234D887CA0} - System32\Tasks\bKowc082jZo3bbUXLv => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: {CFE5AF85-4F7F-4B42-B1C1-B45D196314D2} - \WordShark Auto Updater 1.10.0.20 Core -> Keine Datei <==== ACHTUNG
Task: {D116F606-76F6-4E63-8BD9-503ABDED8707} - \WordShark Auto Updater 1.10.0.20 Pending Update -> Keine Datei <==== ACHTUNG
Task: {D7B0F932-8B51-4035-8337-3651B3CB1F04} - System32\Tasks\Launch Screen Grasp_First => C:\Program Files (x86)\Acer\Screen Grasp\Launch Screen Grasp.exe [2013-08-12] (Acer Incorporated)
Task: {DD581687-44EE-4A4D-A410-ACD4F397CF55} - System32\Tasks\n2WsgG5UnMBz2EppfzX => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: {E5A363A6-326C-456D-9A44-DEDDFA30D679} - System32\Tasks\GUmJ6Qbd => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: {E80D8E79-0612-40BD-925B-C609B0FA9CF9} - System32\Tasks\Opera scheduled Autoupdate 1445703737 => C:\Program Files (x86)\Opera\launcher.exe [2015-09-25] (Opera Software)
Task: {E8F00E77-0660-46BB-9768-A656F30190A6} - System32\Tasks\Y8AUFtKs8KRzdqL => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: {F12CCAA4-5145-4CF2-8B2C-175ACB93061D} - System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: {FC04F794-7C91-47F4-9A7B-604491EF119B} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {FEDD2803-040C-4EF9-B92D-7EC961021DC3} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-07-08] (Dolby Laboratories Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\bKowc082jZo3bbUXLv.job => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\fgQ3SLKo3PQmATQfNa.job => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GUmJ6Qbd.job => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: C:\Windows\Tasks\MVCQOKPixtwM.job => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: C:\Windows\Tasks\ZRhLK9hrBkOCMase.job => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2013-11-11 17:22 - 2013-08-30 04:03 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2013-08-12 19:06 - 2013-08-12 19:06 - 00198120 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-08-12 19:06 - 2013-08-12 19:06 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-08-12 19:06 - 2013-08-12 19:06 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2015-01-20 22:35 - 2015-01-20 22:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-09-23 15:47 - 2015-09-23 15:47 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-07-29 12:48 - 2015-07-29 12:48 - 00088064 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\libglog.dll
2015-07-31 08:55 - 2015-07-31 08:55 - 01793280 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\cpprest120_1_4.dll
2015-07-31 08:55 - 2015-07-31 08:55 - 00354560 _____ () C:\Program Files\Intel Corporation\Intel(R) Technology Access\JsonCpp.dll
2015-05-03 10:01 - 2015-05-03 10:01 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-05-03 10:01 - 2015-05-03 10:01 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-10-26 10:36 - 2015-10-26 10:36 - 02997616 _____ () C:\Program Files\AVAST Software\Avast\defs\15102600\algo.dll
2015-05-03 10:01 - 2015-05-03 10:01 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-11-11 17:19 - 2013-09-04 00:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\saturn1\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run: => "BTMTrayAgent"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "ADSKAppManager"
HKLM\...\StartupApproved\Run32: => "abDocsDllLoader"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "YTDownloader"
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\StartupApproved\Run: => "YTDownloader"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{721D814F-51F9-4057-B646-4AA4B52402A9}] => (Allow) C:\Program Files\Acer\Acer Theft Shield\USecuAppClient.exe
FirewallRules: [{738AFE15-C5BB-4987-B989-F620A3755881}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{F16D29BA-697C-4ADA-B67B-BB7389092DD6}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{698710BF-8F91-43B2-998B-FAC77C17EABB}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{D69C63C2-A24C-44C0-BD55-37E8CF3540C6}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{47B1A57F-CD59-472C-89DE-405ECFB146B3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{7E06F0E5-8120-4615-8CE2-53139266C799}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{151F56A2-1C84-4B3D-BE49-DB2C9079D4CF}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{EAB09F69-27AB-45EE-8505-9724821ED321}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{445F8A16-5016-4C2A-A1CC-940A2238F3AF}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{44E716AA-F262-4D55-A609-99B1E8BC8BF2}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{E2E941C1-E1FA-4856-AEAF-E241A6F5DCC6}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{A66713AE-CDE7-40D2-A0F8-12DD7E7B9231}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{380BDDFD-B1FE-46B2-B7A6-AABBCAB0C75E}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{B93A7943-8B5C-427B-8E68-0C7432DB547A}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{25F03C37-E865-4562-B53D-DF2FBD59EE91}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{302023C2-9BA0-400D-9141-29E3CBAA2C4E}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{3C1F80AF-F7BD-4E78-8CBE-3AF58A01D1C4}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\DMCDaemon.exe
FirewallRules: [{7F4963DE-EAC9-4D33-B49C-EC2431292002}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{DD896303-4697-489E-9E0F-3C1B2F3680D9}] => (Allow) C:\Program Files (x86)\Acer\Acer Media\WindowsUpnpMV.exe
FirewallRules: [{C535CDFA-DCB1-437D-80D7-9E9E0C85AB6A}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{84E794E1-D291-461E-8861-0A53F90889D7}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{EB4422C1-2A00-4436-8F10-2EB794BD48B7}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{7D74B643-7485-4463-ACB6-42636AF93E6F}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{E68DFF6B-4BF5-4197-B3C5-796D5AA0FABE}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{3E13B0AE-81E7-4876-82AD-5C4E46CEBB57}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\DMCDaemon.exe
FirewallRules: [{72B8466A-0090-4259-8E67-6A0A754FB20B}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{88641E9F-179A-4EA8-823F-758B8C02D5DD}] => (Allow) C:\Program Files (x86)\Acer\Acer Photo\WindowsUpnp.exe
FirewallRules: [{24CEFA3E-2F2F-47D7-9B9E-AF896CEA7A59}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{D931836A-2118-4760-8C10-A313C2849E55}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{8093DB6A-0C9B-4977-9629-5217E842EA5C}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe
FirewallRules: [{8DDC29FB-A266-4890-856E-C91335A7BD57}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\Sdd.exe
FirewallRules: [{B6EEA685-D013-4D88-8006-10B969581D55}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe
FirewallRules: [{C7654D28-043C-4E6F-B43D-3E4D32FB2E52}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\virtualdrive.exe
FirewallRules: [{F17804E9-198C-4A42-8C32-0D75DDCC0EAE}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{B4DC29E9-AD54-4E45-B221-B989B7E444B7}] => (Allow) C:\Program Files (x86)\Acer\Acer Portal\ccd.exe
FirewallRules: [{581E763F-F0DF-4423-823B-83021AD63124}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{17D04AC5-0772-45CA-9EB2-529F6A76691D}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{3F6127C9-9333-432B-914A-F3BAAF028D8B}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{7915CF5D-BFDD-4581-AB47-5570B6EED297}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{53802E07-47B3-4457-9B47-81CB4E712D4F}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{059B0553-7E28-47FD-BAC1-59EAB4A76A16}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{4981E980-8C9F-452E-BF3E-E3EEE419BE98}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{B9B6A01C-0502-4CEF-A7A2-CB0320D10DAF}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{C02EB5FD-222A-44EB-B47A-5CC01BCCEC58}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{BE7618F1-A521-4966-A3DF-4649F5123975}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{50E98C5E-7080-4F4F-9C64-DCF3048349C2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{00C6C1D6-4FC1-429B-BDF5-BC47D03CEA5F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{7B2CBE40-D366-4F7D-A17A-2BB891DC38DE}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{D3145BB8-4277-45BE-9196-C20502B82F9E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F23821A0-E5E4-483B-99F7-824870C72895}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{40DDE7D7-76A4-48FD-93CE-8F36E3C82814}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{9D4688ED-6479-46EA-8CC8-6B56D141018A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{C26F9EA8-25E6-449C-9F12-8CBCEAD7C39F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{20AB99EB-2E4A-41D6-B4FE-EF6953A46608}] => (Allow) C:\Program Files (x86)\Alawar.de\Living Legends Ice Rose\LivingLegends_DieEisrose.exe
FirewallRules: [TCP Query User{3AD99F48-49C3-45E3-AF24-346BB1D0FF64}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{FF008D3B-33FE-442A-B2CD-618131D5A53B}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [{DB0C0AA1-A4F4-4F95-B21A-FF439D9FE9A5}] => (Allow) LPort=64969
FirewallRules: [{918DB24B-7362-4683-A41B-2B2491EB8855}] => (Allow) LPort=5000
FirewallRules: [TCP Query User{51CB772B-8D50-4442-9FD6-58CFE9800B26}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{ACB125E4-FC04-45C0-89D4-537F967F8830}C:\users\saturn1\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\saturn1\appdata\local\akamai\netsession_win.exe
FirewallRules: [{3407E0D4-C6C5-4016-8C8E-DB9945DB6839}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{E0196E90-1AC3-44AC-A72F-DFE5FFD79375}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{53D15A53-D006-41DF-8EF0-87836ACF0FA6}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{EF73ED11-65FA-431E-A71E-FB5E4DB18E02}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{E128D0DC-4FF5-41C3-BE40-17C2EAF7A2B9}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{27AA633D-1B12-4B66-81E9-2124430C431E}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{45B7B5E3-4060-4075-96C6-ADBA380D6419}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{31F15844-D93D-4C76-A114-05EB2F99A8B0}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{3034FF0E-127F-4A9B-8B8B-38E720689B3D}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{FE885989-D274-4CBE-8168-3C744E83BD9F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{CFB04CF3-1A63-4EE9-8579-FACEA479F0FF}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{8D05079A-3823-41CD-AFC1-F3BFA7260150}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{90450828-8813-4057-B525-5D6EC69BBB16}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{C354A11E-286E-4C85-8AFA-D81B3B4D401B}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{8374AA61-A30F-4201-BA0A-393FE23C7D10}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{9C2A34BB-31F8-4E96-8727-CBE422217AB1}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [TCP Query User{40EBA6EC-1DA2-4390-851D-CBBD70DC0FBA}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{485FBFBF-8091-4B81-AC83-830D8920776C}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{7C4A21C5-602A-4398-81CC-3075B8A41108}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{86828B7F-090B-496C-BCAD-F9FFAB1B6BB4}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{08A5FFAB-2ACE-4390-B966-84D91B315759}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe
FirewallRules: [UDP Query User{4BD61926-623C-4C25-9EC8-E100E3EFB9FD}C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\lotroclient.exe
FirewallRules: [TCP Query User{8992BE2C-B2A9-47D5-ABAE-66B1A09F2158}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{F85BBA06-6BA8-4866-BEFB-3F77AAFD1E08}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{2A06308D-662D-47B8-B49E-69B843DC19CF}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{15B6A7F8-5931-43C4-90FD-7CDABA22DA70}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{A666FC58-BD9D-4EF2-BCD6-7F9FEA4813D9}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{D109ACE4-674C-4E4B-99B5-316F42B077AF}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{50E32E18-FF55-49D9-8571-B10208E34A0B}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{1CFA0ECE-BEC2-4D6F-86D2-6C21A1F3550C}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{9A21A731-36A5-416B-880F-B7993F4AC36B}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{A4527191-0EB6-4868-B45B-6C57559885E5}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{9D5DFDB0-B17B-476F-B4C8-EB0EFC90F9F3}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{54A29559-8ECA-489C-B8A4-4AD1408357D9}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{F5626D69-5BA6-40EE-BCCE-51371A054FDD}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{E3A2C1FA-1BED-48D0-B3F0-D66C3123CD8E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{40A66269-B13D-4286-871F-8E2E4179F3E3}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1DB0E3D-DA3C-40CA-8144-674927D788C2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{0231FA7D-B635-43C1-BBBD-C42CE12EF3AA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{02C5FAED-EEF9-481B-903E-0AA7E1F37162}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{6982F573-9DED-447F-B67D-FB02BCC93F48}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{140159B0-7C08-4775-9018-8B3E34A0A29E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{FCB243DE-248B-49DC-B5AB-605AA74C8C4C}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{8106F371-F1A0-486B-B9F7-94D0D63A5ED6}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{E7285D37-2D67-4B3F-BA57-5095E03DD2A8}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{330CE625-0905-440D-A59E-33714DD44A8A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{94301012-B986-4E31-8A39-F49F9C095025}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{810CE275-B99E-499E-838D-4D401BE6C7AD}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{8B2816A2-266F-4188-838A-8C7E776A67C9}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{9EE81563-7212-44A5-97E6-8E351F53894D}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{19C28D8A-F92C-4E21-80E6-CA8D2B8A31B7}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{0961F9B0-6C8F-4D75-96FA-1B948891AB25}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{64FEFB7C-1D11-439B-965E-18B24C0D1605}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{E855A521-57B6-4A1B-9DB1-590D66C12943}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{DF30B7D2-FFBA-4DF9-9DD1-07A30D70658C}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{91C2AB33-303A-4D40-ABCF-E12926BE824E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{ABB7ACBB-D703-40FB-B8DF-AB07B3556D1C}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{568AEDEF-32BA-4ABA-B0A6-F5247D23894E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{BD13995C-6ED6-41F5-91E9-5EBCA5C1C5D3}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{509FE5FF-0FC3-4C6A-94EC-5794EE6D7349}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A78C5113-CD23-40E6-A626-25E35080B0E2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A4948693-D8A1-41C2-8780-DADCDAC51090}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{B160B7B1-F352-4217-AB1C-13C5BBE79A9B}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1130B92B-DA9E-47D2-87AA-7C4DF527C7BA}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{022173B0-55BF-4C50-827F-3781AAA692E0}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1795E07-F64A-4645-80D7-D37CE44AA711}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{89BA6027-951D-4460-8FA8-F9EDA9878A08}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{A6FDD445-26F2-4C1C-BF9A-64610BC7DD62}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{0EE4374D-FF05-49BC-B659-EC0DC71B4986}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{A1E4AE26-241A-49B4-8A70-A0083B1BA74E}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{A42C6099-6749-45CA-B29C-40D22D8634F2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{0D878B2D-C8A2-404C-84CB-5A684BAB0EE5}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1E6E95E0-F432-4206-AF71-4FB7F1B93C91}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{3FA8696A-402B-4B23-AC16-B751BF08BE90}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{650123A9-89AA-4C0B-86DC-05C476F51496}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{127A5E99-EE83-4784-AD4A-C44313A2D6BB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{8307A716-0095-4D4A-AEA3-FB45A7622A63}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{62D0397D-9DD4-4346-A61E-6D369352E16D}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{5A073357-162A-4302-878B-977FE71FD714}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{3051AD2D-253B-465B-8C1F-DF50DF05EBB7}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{92E6D042-57CD-456B-8506-1B658C166478}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{3F9A9948-A12E-41D2-8538-C9CF40969CDB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{07511964-56FD-4734-9725-338632DAB7A4}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{C81ED1ED-45BD-47CB-AA6C-A8BD4C0BBF48}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{EACA0575-1EA5-4F34-BFD8-E2E91EF07740}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{6E845FE3-2516-4C23-8373-E62832A82761}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{2A48EADA-CCCA-4E1F-A2E9-C6CB2E306875}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{222D71E8-1063-4183-B10E-32C46566A94A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{E165AC3B-AEE0-4B80-B1EA-7F19870C9E10}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{11202FDC-F988-4958-B3C1-0A9AF471A30A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{4A662BF3-497E-4EEA-A710-FAE3A1109E28}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{2FE1B102-6640-48EE-A8BF-51910143CDEE}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{4F224FE9-BD3D-48B8-AC4A-59B0AE338FB1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F618F489-06E0-42E9-9F69-7451DA889BC9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{252366CF-E85D-4B94-AC08-5A271127BFDA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D7F81FD5-1B04-4B65-B3DF-36DE7588717A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BB97DA1C-FDB0-4026-8965-BFF4626100B5}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{0CF495CD-562D-441F-BF9C-342F602C9BEE}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{0576658A-6590-4336-B7DC-96B7BF8A680F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{062C9E32-752F-4AEA-A53D-DEC1F9A6BA15}] => (Allow) C:\Program Files (x86)\MyBrowser\MyBrowser\Application\mybrowser.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/26/2015 11:17:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: updater.exe, Version: 2.0.8100.0, Zeitstempel: 0x51da5d04
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.18007, Zeitstempel: 0x55c4c341
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000000871c
ID des fehlerhaften Prozesses: 0x648
Startzeit der fehlerhaften Anwendung: 0xupdater.exe0
Pfad der fehlerhaften Anwendung: updater.exe1
Pfad des fehlerhaften Moduls: updater.exe2
Berichtskennung: updater.exe3
Vollständiger Name des fehlerhaften Pakets: updater.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: updater.exe5
Error: (10/26/2015 11:17:33 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: updater.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
Stapel:
bei System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(System.String)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
bei System.Xml.XmlDocument.Load(System.String)
bei updater.Report.AddFPToResult(updater.Result)
bei updater.UpgradeItem.DiagnosticDownloadEvent(NotifyMgrArgs)
bei updater.DownloadMgr.DownloadFile(System.String, System.String)
bei updater.DownloadMgr.Worker(System.Object)
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
Error: (10/26/2015 11:08:49 AM) (Source: ISCTAgent) (EventID: 1000) (User: )
Description: ISCT - netDetect::AOACWLANProset::LocateAdapters Net Detect: Net Detect Supported Error Getting Adapter List Error=0x80040302\n
Error: (10/26/2015 11:08:49 AM) (Source: ISCTAgent) (EventID: 1000) (User: )
Description: ISCT - netDetect::AOACWLANProset::LocateAdapters Net Detect: Net Detect Supported Error Getting Adapter List Error=0x80040302\n
Error: (10/26/2015 10:44:19 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005
Error: (10/26/2015 10:19:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: updater.exe, Version: 2.0.8100.0, Zeitstempel: 0x51da5d04
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.18007, Zeitstempel: 0x55c4c341
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000000871c
ID des fehlerhaften Prozesses: 0x1308
Startzeit der fehlerhaften Anwendung: 0xupdater.exe0
Pfad der fehlerhaften Anwendung: updater.exe1
Pfad des fehlerhaften Moduls: updater.exe2
Berichtskennung: updater.exe3
Vollständiger Name des fehlerhaften Pakets: updater.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: updater.exe5
Error: (10/26/2015 10:19:08 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: updater.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
Stapel:
bei System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(System.String)
bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
bei System.Xml.XmlDocument.Load(System.String)
bei updater.Report.AddFPToResult(updater.Result)
bei updater.UpgradeItem.DiagnosticDownloadEvent(NotifyMgrArgs)
bei updater.DownloadMgr.DownloadFile(System.String, System.String)
bei updater.DownloadMgr.Worker(System.Object)
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
Error: (10/26/2015 10:04:44 AM) (Source: MsiInstaller) (EventID: 11310) (User: SATURN)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\saturn1\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Error: (10/26/2015 10:04:21 AM) (Source: MsiInstaller) (EventID: 11310) (User: SATURN)
Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\saturn1\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.
Error: (10/25/2015 10:24:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 15062
Systemfehler:
=============
Error: (10/26/2015 11:09:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "McAfee Validation Trust Protection Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/26/2015 11:08:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/26/2015 11:08:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/26/2015 11:08:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Bluetooth OBEX Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/26/2015 11:08:31 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ePower Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/26/2015 11:08:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Firewall Core Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/26/2015 11:08:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/26/2015 11:08:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Registry Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (10/26/2015 11:08:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Internet Pass-Through Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/26/2015 11:08:28 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===================================
Date: 2015-10-24 20:20:07.624
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:17:14.904
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:17:14.462
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:13.452
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:13.178
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:11.248
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:10.988
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:09.936
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:09.660
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-10-24 20:09:09.394
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\SpaceSoundPro\SpaceSoundPro.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 8072.27 MB
Verfügbarer physikalischer RAM: 5468.61 MB
Summe virtueller Speicher: 16264.27 MB
Verfügbarer virtueller Speicher: 13583.36 MB
==================== Laufwerke ================================
Drive c: (Acer) (Fixed) (Total:912.7 GB) (Free:709.49 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: ED63966E)
Partition: GPT.
========================================================
Disk: 1 (Size: 22.4 GB) (Disk ID: 4D5DCBC4)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
26.10.2015, 11:41
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Tcpip\..\Interfaces\{0578C397-90C3-41AD-BF4A-E9A5C7F21EDE}: [DhcpNameServer] 40.33.1.55
FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => nicht gefunden
FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\extensions\cliqz@cliqz.com => nicht gefunden
CHR DefaultSearchURL: Default -> http://www-searching.com/search.aspx?site=shdefault&prd=smw&pid=s&shr=d&q={searchTerms}&s=FAOztutdk0003,6de5abd9-4bff-4a3d-b98f-542a02b515ac,
CHR DefaultSearchKeyword: Default -> www-searching.com
CHR DefaultSuggestURL: Default -> http://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}
Task: {1B9A8A50-8616-49B2-B51E-180472056425} - System32\Tasks\MVCQOKPixtwM => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: {37699999-5763-49CA-A1CE-AB72A566CE66} - \ShopperProJSUpd -> Keine Datei <==== ACHTUNG
Task: {377A79EA-433C-4556-AA20-455F7F52630E} - System32\Tasks\DEAn2Th92CYuEkPG9n => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: {3D4BE21C-F015-4F41-A4F3-7ACEC264F0FC} - \Smp -> Keine Datei <==== ACHTUNG
Task: {4C000DFC-D18F-4C57-AC36-D46C661375D2} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5 -> Keine Datei <==== ACHTUNG
Task: {5C7E3A4E-30C3-4244-BFDE-051A1545BD98} - \Installer_geforce -> Keine Datei <==== ACHTUNG
Task: {5F846BD5-71F2-42A0-93B0-5A4ECF340451} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5_user -> Keine Datei <==== ACHTUNG
Task: {7AE5679B-AE1C-47FE-8C6D-A4710314CCC7} - System32\Tasks\ZRhLK9hrBkOCMase => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
Task: {7AF9DC2C-9ADD-4B7D-8F5D-D1D3A821F557} - System32\Tasks\fgQ3SLKo3PQmATQfNa => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: {7D6BC39F-52CC-4E14-8C20-6F3BF4B9005B} - \SPDriver -> Keine Datei <==== ACHTUNG
Task: {7F646CA8-DFD0-41AD-9F2A-62CF64A18DA7} - System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: {985EC60A-DC0D-4E00-9FAB-959A71730EC0} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-10_user -> Keine Datei <==== ACHTUNG
Task: {A86729F0-6B8F-458C-89D6-49EEF0746A18} - \ShopperPro -> Keine Datei <==== ACHTUNG
Task: {B36990D3-1A75-439C-9E3D-39234D887CA0} - System32\Tasks\bKowc082jZo3bbUXLv => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: {CFE5AF85-4F7F-4B42-B1C1-B45D196314D2} - \WordShark Auto Updater 1.10.0.20 Core -> Keine Datei <==== ACHTUNG
Task: {D116F606-76F6-4E63-8BD9-503ABDED8707} - \WordShark Auto Updater 1.10.0.20 Pending Update -> Keine Datei <==== ACHTUNG
Task: {DD581687-44EE-4A4D-A410-ACD4F397CF55} - System32\Tasks\n2WsgG5UnMBz2EppfzX => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: {E5A363A6-326C-456D-9A44-DEDDFA30D679} - System32\Tasks\GUmJ6Qbd => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: {E8F00E77-0660-46BB-9768-A656F30190A6} - System32\Tasks\Y8AUFtKs8KRzdqL => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: {F12CCAA4-5145-4CF2-8B2C-175ACB93061D} - System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bKowc082jZo3bbUXLv.job => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: C:\Windows\Tasks\fgQ3SLKo3PQmATQfNa.job => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GUmJ6Qbd.job => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: C:\Windows\Tasks\MVCQOKPixtwM.job => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: C:\Windows\Tasks\ZRhLK9hrBkOCMase.job => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
C:\Windows\Tasks\ZRhLK9hrBkOCMase.job
C:\Windows\Tasks\MVCQOKPixtwM.job
C:\Windows\System32\Tasks\ZRhLK9hrBkOCMase
C:\Windows\System32\Tasks\MVCQOKPixtwM
C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job
C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job
C:\Windows\System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m
C:\Windows\System32\Tasks\Y8AUFtKs8KRzdqL
C:\Users\saturn1\Documents\Autoloader
C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job
C:\Windows\Tasks\GUmJ6Qbd.job
C:\Windows\System32\Tasks\n2WsgG5UnMBz2EppfzX
C:\Windows\System32\Tasks\GUmJ6Qbd
C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job
C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job
C:\Windows\System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF
C:\Windows\System32\Tasks\DEAn2Th92CYuEkPG9n
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
C:\Windows\System32\Tasks\{BDB0FB31-C5A3-4201-9E0E-C7E3F5F6FE6F}
C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m
C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv
C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF
C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n
C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa
C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd
C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM
C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX
C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL
C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase
EmptyTemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
26.10.2015, 12:20
| #14 |
| | Fixlog.txtCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-10-2015 02
durchgeführt von saturn1 (2015-10-26 12:14:12) Run:1
Gestartet von C:\Users\saturn1\Downloads
Geladene Profile: saturn1 (Verfügbare Profile: UpdatusUser & saturn1 & Gast)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
Tcpip\..\Interfaces\{0578C397-90C3-41AD-BF4A-E9A5C7F21EDE}: [DhcpNameServer] 40.33.1.55
FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => nicht gefunden
FF HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\saturn1\AppData\Roaming\Mozilla\Firefox\Profiles\dlbghz7b.default\extensions\cliqz@cliqz.com => nicht gefunden
CHR DefaultSearchURL: Default -> hxxp://www-searching.com/search.aspx?site=shdefault&prd=smw&pid=s&shr=d&q={searchTerms}&s=FAOztutdk0003,6de5abd9-4bff-4a3d-b98f-542a02b515ac,
CHR DefaultSearchKeyword: Default -> www-searching.com
CHR DefaultSuggestURL: Default -> hxxp://api.searchpredict.com/api/?rqtype=ffplugin&siteID=8661&dbCode=1&command={searchTerms}
Task: {1B9A8A50-8616-49B2-B51E-180472056425} - System32\Tasks\MVCQOKPixtwM => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: {37699999-5763-49CA-A1CE-AB72A566CE66} - \ShopperProJSUpd -> Keine Datei <==== ACHTUNG
Task: {377A79EA-433C-4556-AA20-455F7F52630E} - System32\Tasks\DEAn2Th92CYuEkPG9n => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: {3D4BE21C-F015-4F41-A4F3-7ACEC264F0FC} - \Smp -> Keine Datei <==== ACHTUNG
Task: {4C000DFC-D18F-4C57-AC36-D46C661375D2} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5 -> Keine Datei <==== ACHTUNG
Task: {5C7E3A4E-30C3-4244-BFDE-051A1545BD98} - \Installer_geforce -> Keine Datei <==== ACHTUNG
Task: {5F846BD5-71F2-42A0-93B0-5A4ECF340451} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-5_user -> Keine Datei <==== ACHTUNG
Task: {7AE5679B-AE1C-47FE-8C6D-A4710314CCC7} - System32\Tasks\ZRhLK9hrBkOCMase => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
Task: {7AF9DC2C-9ADD-4B7D-8F5D-D1D3A821F557} - System32\Tasks\fgQ3SLKo3PQmATQfNa => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: {7D6BC39F-52CC-4E14-8C20-6F3BF4B9005B} - \SPDriver -> Keine Datei <==== ACHTUNG
Task: {7F646CA8-DFD0-41AD-9F2A-62CF64A18DA7} - System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: {985EC60A-DC0D-4E00-9FAB-959A71730EC0} - \538078e2-0803-4e53-bb75-1ae35a2f16a9-10_user -> Keine Datei <==== ACHTUNG
Task: {A86729F0-6B8F-458C-89D6-49EEF0746A18} - \ShopperPro -> Keine Datei <==== ACHTUNG
Task: {B36990D3-1A75-439C-9E3D-39234D887CA0} - System32\Tasks\bKowc082jZo3bbUXLv => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: {CFE5AF85-4F7F-4B42-B1C1-B45D196314D2} - \WordShark Auto Updater 1.10.0.20 Core -> Keine Datei <==== ACHTUNG
Task: {D116F606-76F6-4E63-8BD9-503ABDED8707} - \WordShark Auto Updater 1.10.0.20 Pending Update -> Keine Datei <==== ACHTUNG
Task: {DD581687-44EE-4A4D-A410-ACD4F397CF55} - System32\Tasks\n2WsgG5UnMBz2EppfzX => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: {E5A363A6-326C-456D-9A44-DEDDFA30D679} - System32\Tasks\GUmJ6Qbd => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: {E8F00E77-0660-46BB-9768-A656F30190A6} - System32\Tasks\Y8AUFtKs8KRzdqL => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: {F12CCAA4-5145-4CF2-8B2C-175ACB93061D} - System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job => C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bKowc082jZo3bbUXLv.job => C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv.exe <==== ACHTUNG
Task: C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job => C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job => C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n.exe <==== ACHTUNG
Task: C:\Windows\Tasks\fgQ3SLKo3PQmATQfNa.job => C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GUmJ6Qbd.job => C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd.exe <==== ACHTUNG
Task: C:\Windows\Tasks\MVCQOKPixtwM.job => C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM.exe <==== ACHTUNG
Task: C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job => C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job => C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL.exe <==== ACHTUNG
Task: C:\Windows\Tasks\ZRhLK9hrBkOCMase.job => C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase.exe <==== ACHTUNG
C:\Windows\Tasks\ZRhLK9hrBkOCMase.job
C:\Windows\Tasks\MVCQOKPixtwM.job
C:\Windows\System32\Tasks\ZRhLK9hrBkOCMase
C:\Windows\System32\Tasks\MVCQOKPixtwM
C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job
C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job
C:\Windows\System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m
C:\Windows\System32\Tasks\Y8AUFtKs8KRzdqL
C:\Users\saturn1\Documents\Autoloader
C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job
C:\Windows\Tasks\GUmJ6Qbd.job
C:\Windows\System32\Tasks\n2WsgG5UnMBz2EppfzX
C:\Windows\System32\Tasks\GUmJ6Qbd
C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job
C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job
C:\Windows\System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF
C:\Windows\System32\Tasks\DEAn2Th92CYuEkPG9n
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
C:\Windows\System32\Tasks\{BDB0FB31-C5A3-4201-9E0E-C7E3F5F6FE6F}
C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m
C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv
C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF
C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n
C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa
C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd
C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM
C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX
C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL
C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase
EmptyTemp:
*****************
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{0578C397-90C3-41AD-BF4A-E9A5C7F21EDE}\\DhcpNameServer => Wert erfolgreich entfernt
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Software\Mozilla\Firefox\Extensions\\{e4f94d1e-2f53-401e-8885-681602c0ddd8} => Wert erfolgreich entfernt
HKU\S-1-5-21-1506994272-2369309272-3303374795-1002\Software\Mozilla\Firefox\Extensions\\cliqz@cliqz.com => Wert erfolgreich entfernt
Chrome DefaultSearchURL => erfolgreich entfernt
Chrome DefaultSearchKeyword => erfolgreich entfernt
Chrome DefaultSuggestURL => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1B9A8A50-8616-49B2-B51E-180472056425}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B9A8A50-8616-49B2-B51E-180472056425}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\MVCQOKPixtwM => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MVCQOKPixtwM" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{37699999-5763-49CA-A1CE-AB72A566CE66}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{37699999-5763-49CA-A1CE-AB72A566CE66}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ShopperProJSUpd => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{377A79EA-433C-4556-AA20-455F7F52630E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{377A79EA-433C-4556-AA20-455F7F52630E}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\DEAn2Th92CYuEkPG9n => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DEAn2Th92CYuEkPG9n" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3D4BE21C-F015-4F41-A4F3-7ACEC264F0FC}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D4BE21C-F015-4F41-A4F3-7ACEC264F0FC}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Smp => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4C000DFC-D18F-4C57-AC36-D46C661375D2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C000DFC-D18F-4C57-AC36-D46C661375D2}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\538078e2-0803-4e53-bb75-1ae35a2f16a9-5 => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5C7E3A4E-30C3-4244-BFDE-051A1545BD98}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C7E3A4E-30C3-4244-BFDE-051A1545BD98}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Installer_geforce => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5F846BD5-71F2-42A0-93B0-5A4ECF340451}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F846BD5-71F2-42A0-93B0-5A4ECF340451}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\538078e2-0803-4e53-bb75-1ae35a2f16a9-5_user => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7AE5679B-AE1C-47FE-8C6D-A4710314CCC7}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AE5679B-AE1C-47FE-8C6D-A4710314CCC7}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\ZRhLK9hrBkOCMase => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ZRhLK9hrBkOCMase" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7AF9DC2C-9ADD-4B7D-8F5D-D1D3A821F557}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AF9DC2C-9ADD-4B7D-8F5D-D1D3A821F557}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\fgQ3SLKo3PQmATQfNa => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fgQ3SLKo3PQmATQfNa" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7D6BC39F-52CC-4E14-8C20-6F3BF4B9005B}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7D6BC39F-52CC-4E14-8C20-6F3BF4B9005B}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPDriver => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7F646CA8-DFD0-41AD-9F2A-62CF64A18DA7}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F646CA8-DFD0-41AD-9F2A-62CF64A18DA7}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\dadePdmwVvTaHhLNvf8hIMcT9IF" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{985EC60A-DC0D-4E00-9FAB-959A71730EC0}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{985EC60A-DC0D-4E00-9FAB-959A71730EC0}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\538078e2-0803-4e53-bb75-1ae35a2f16a9-10_user => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A86729F0-6B8F-458C-89D6-49EEF0746A18}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A86729F0-6B8F-458C-89D6-49EEF0746A18}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ShopperPro => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B36990D3-1A75-439C-9E3D-39234D887CA0}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B36990D3-1A75-439C-9E3D-39234D887CA0}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\bKowc082jZo3bbUXLv => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bKowc082jZo3bbUXLv" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CFE5AF85-4F7F-4B42-B1C1-B45D196314D2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CFE5AF85-4F7F-4B42-B1C1-B45D196314D2}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WordShark Auto Updater 1.10.0.20 Core => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D116F606-76F6-4E63-8BD9-503ABDED8707}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D116F606-76F6-4E63-8BD9-503ABDED8707}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WordShark Auto Updater 1.10.0.20 Pending Update => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DD581687-44EE-4A4D-A410-ACD4F397CF55}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DD581687-44EE-4A4D-A410-ACD4F397CF55}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\n2WsgG5UnMBz2EppfzX => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\n2WsgG5UnMBz2EppfzX" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E5A363A6-326C-456D-9A44-DEDDFA30D679}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5A363A6-326C-456D-9A44-DEDDFA30D679}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\GUmJ6Qbd => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GUmJ6Qbd" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E8F00E77-0660-46BB-9768-A656F30190A6}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E8F00E77-0660-46BB-9768-A656F30190A6}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\Y8AUFtKs8KRzdqL => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Y8AUFtKs8KRzdqL" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F12CCAA4-5145-4CF2-8B2C-175ACB93061D}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F12CCAA4-5145-4CF2-8B2C-175ACB93061D}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\5Cu3LipFija5o17kHXCYuaR9m" => Schlüssel erfolgreich entfernt
C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job => erfolgreich verschoben
C:\Windows\Tasks\bKowc082jZo3bbUXLv.job => erfolgreich verschoben
C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job => erfolgreich verschoben
C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job => erfolgreich verschoben
C:\Windows\Tasks\fgQ3SLKo3PQmATQfNa.job => erfolgreich verschoben
C:\Windows\Tasks\GUmJ6Qbd.job => erfolgreich verschoben
C:\Windows\Tasks\MVCQOKPixtwM.job => erfolgreich verschoben
C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job => erfolgreich verschoben
C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job => erfolgreich verschoben
C:\Windows\Tasks\ZRhLK9hrBkOCMase.job => erfolgreich verschoben
"C:\Windows\Tasks\ZRhLK9hrBkOCMase.job" => nicht gefunden.
"C:\Windows\Tasks\MVCQOKPixtwM.job" => nicht gefunden.
"C:\Windows\System32\Tasks\ZRhLK9hrBkOCMase" => nicht gefunden.
"C:\Windows\System32\Tasks\MVCQOKPixtwM" => nicht gefunden.
"C:\Windows\Tasks\5Cu3LipFija5o17kHXCYuaR9m.job" => nicht gefunden.
"C:\Windows\Tasks\Y8AUFtKs8KRzdqL.job" => nicht gefunden.
"C:\Windows\System32\Tasks\5Cu3LipFija5o17kHXCYuaR9m" => nicht gefunden.
"C:\Windows\System32\Tasks\Y8AUFtKs8KRzdqL" => nicht gefunden.
C:\Users\saturn1\Documents\Autoloader => erfolgreich verschoben
"C:\Windows\Tasks\n2WsgG5UnMBz2EppfzX.job" => nicht gefunden.
"C:\Windows\Tasks\GUmJ6Qbd.job" => nicht gefunden.
"C:\Windows\System32\Tasks\n2WsgG5UnMBz2EppfzX" => nicht gefunden.
"C:\Windows\System32\Tasks\GUmJ6Qbd" => nicht gefunden.
"C:\Windows\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF.job" => nicht gefunden.
"C:\Windows\Tasks\DEAn2Th92CYuEkPG9n.job" => nicht gefunden.
"C:\Windows\System32\Tasks\dadePdmwVvTaHhLNvf8hIMcT9IF" => nicht gefunden.
"C:\Windows\System32\Tasks\DEAn2Th92CYuEkPG9n" => nicht gefunden.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => erfolgreich verschoben
C:\Windows\System32\Tasks\{BDB0FB31-C5A3-4201-9E0E-C7E3F5F6FE6F} => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\5Cu3LipFija5o17kHXCYuaR9m => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\bKowc082jZo3bbUXLv => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\dadePdmwVvTaHhLNvf8hIMcT9IF => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\DEAn2Th92CYuEkPG9n => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\fgQ3SLKo3PQmATQfNa => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\GUmJ6Qbd => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\MVCQOKPixtwM => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\n2WsgG5UnMBz2EppfzX => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\Y8AUFtKs8KRzdqL => erfolgreich verschoben
C:\Users\saturn1\AppData\Roaming\ZRhLK9hrBkOCMase => erfolgreich verschoben
EmptyTemp: => 12.7 GB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 12:14:54 ====
|
|
26.10.2015, 13:15
| #15 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Werbung beim Surfen, unangeforderter Browserstart, neue Programme, die ich nicht installiert habe |
| antivirus, browser mit werbung, canon, dnsapi.dll, downloader, entfernen, flash player, homepage, launch, prozesse, pup.optional.browserhelper, pup.optional.downloaderguide, pup.optional.goobzo, pup.optional.shopperpro, pup.optional.wordshark, registry, software, svchost.exe, symantec, windowsapps |
dann auf 
und dann auf 
. 
Linear-Darstellung
