| |
| |||||||
Log-Analyse und Auswertung: Windows 10: DNS Unlocker Adware lässt sich nicht entfernenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
27.01.2016, 11:00
| #1 |
 |  Windows 10: DNS Unlocker Adware lässt sich nicht entfernen Hallo alle zusammen, ich habe mir die ziemlich widerspenstige Adware DNS Unlocker auf meinem Notebook eingefangen. Vermutlich habe ich mir diese über einen Chip-Download (Youtube to Mp3 Converter) geholt. Es tritt in Kombination mit unzähligen Pop-Ups und versteckten Links auf der Site zu s.klmtm-Werbeseiten auf. Dies betrifft vor allem die Browser Firefox und Internet Explorer. Chrome blieb bisher verschont. Ich bin die einzelnen Schritte aus der Anleitung "Ads by DNS Unlocker entfernen" durchgegangen, doch er lässt sich nicht entfernen. Der Prozessschritt mit OTH funktioniert bei mir leider nicht, da jedes Mal nach Kill Process ein Bluescreen erscheint. Ich bitte um eure gütige Hilfe  LG bf_aues Hier dann die einzelnen Logfiles: FRST Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-01-2016
durchgeführt von ACRIS-WJ (Administrator) auf ACRIS-ASUS-PC (27-01-2016 08:47:37)
Gestartet von C:\Users\ACRIS-WJ\Downloads\FRST-OlderVersion
Geladene Profile: ACRIS-WJ (Verfügbare Profile: ACRIS-WJ)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\nsbu.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\nsbu.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\nacl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\conathst.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\POWERPNT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\POWERPNT.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [ETDCtrl] => %ProgramFiles%\Elantech\ETDCtrl.exe
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [90792 2012-05-08] (ASUS)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2012-02-24] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-07] (Intel Corporation)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5142128 2012-04-19] (VIA)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [318080 2011-12-23] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-25] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-20] (CyberLink)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [IBP] => 0
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [HP Officejet Pro 8620 (NET)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3485728 2013-09-11] (Hewlett-Packard Co.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [Google Update] => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-12-10] (Google Inc.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50378880 2015-12-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [GoogleChromeAutoLaunch_40A5C98BD8CFA1CC58D5948299821AC5] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748360 2016-01-12] (Google Inc.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\RunOnce: [Uninstall C:\Users\ACRIS-WJ\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ACRIS-WJ\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177088 2015-07-13] (NVIDIA Corporation)
AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177088 2015-07-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155280 2015-07-13] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\ASUSWSShellExt64.dll [2011-05-25] (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\ASUSWSShellExt64.dll [2011-05-25] (eCareme Technologies, Inc.)
Startup: C:\Users\ACRIS-WJ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2013-07-12]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2012-02-24]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PR-Gateway Desktop.lnk [2013-12-12]
ShortcutTarget: PR-Gateway Desktop.lnk -> C:\Windows\Installer\{C7DBB71E-B7BF-4F81-AD43-0BC30E7CC2D2}\_906AF5C1ECD2DAA0B09805.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 4.4.8.8 10.0.0.138
Tcpip\..\Interfaces\{d1d62b22-1dac-42cf-9e52-f10ad917834e}: [DhcpNameServer] 8.8.8.8 4.4.8.8 10.0.0.138
Tcpip\..\Interfaces\{d348bb80-188a-4a4c-a510-7725021b9d7c}: [DhcpNameServer] 8.8.8.8 10.0.0.138 4.4.8.8
Internet Explorer:
==================
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-at/?pc=UE01&ocid=UE01DHP
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-30] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-30] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default
FF Homepage: hxxps://www.google.at/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Windows\SysWOW64\npdeployJava1.dll [2015-01-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-30] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2015-10-19] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-1028448690-2613926920-131507622-1001: @tools.google.com/Google Update;version=3 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-10] (Google Inc.)
FF Plugin HKU\S-1-5-21-1028448690-2613926920-131507622-1001: @tools.google.com/Google Update;version=9 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-10] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\ACRIS-WJ\AppData\Roaming\mozilla\plugins\npMeetingJoinPluginAOCUser.dll [2013-10-28] ()
FF SearchPlugin: C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\searchplugins\google-images.xml [2014-11-28]
FF SearchPlugin: C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\searchplugins\google-maps.xml [2014-11-28]
FF Extension: alexa lite - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\alexalite@9511.net.xpi [2015-06-01]
FF Extension: PageRank - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\PageRank@addonfactory.in.xpi [2015-06-01]
FF Extension: SearchStatus - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\{d57c9ff1-6389-48fc-b770-f78bd89b6e8a}.xpi [2015-06-01]
FF Extension: Live HTTP headers - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2015-06-01]
FF Extension: MozBar - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\toolbar@seomoz.org.xpi [2015-09-15]
FF Extension: Cliqz - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\cliqz@cliqz.com.xpi [2016-01-07]
FF Extension: Firebug - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\firebug@software.joehewitt.com.xpi [2015-10-27]
FF Extension: Majestic Backlink Analyzer - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\jid1-aY61q9iadjWyYg@jetpack.xpi [2015-09-07]
FF Extension: linkbird - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\linkbird-v001@jetpack.xpi [2015-06-15] [ist nicht signiert]
FF Extension: The Addon Bar (restored) - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2015-08-19]
FF Extension: YSlow - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\yslow@yahoo-inc.com.xpi [2015-06-01]
FF Extension: SeoQuake - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}.xpi [2016-01-25]
FF Extension: Adblock Plus - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-20]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: PDF Architect 4 Creator - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2015-12-01] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.4.24\coFFAddon
FF Extension: Kein Name - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.4.24\coFFAddon [2016-01-14]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2012-09-19] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.4.24\coFFAddon
FF HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Firefox\Extensions: [{ad237ae1-f3b7-49d8-897a-4c6b2373011e}] - C:\Program Files (x86)\TubeSaver\130.xpi => nicht gefunden
FF HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\cliqz@cliqz.com => nicht gefunden
Chrome:
=======
CHR NewTab: Default -> "chrome-extension://ejbdobdndcjhdmljipngpeoekdinlohe/homePageRedirect.html"
CHR DefaultSearchURL: Default -> hxxp://nortonsafe.search.ask.com/web?q={searchTerms}&o=apn10506&prt=cr
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxp://ss-sym.ask.com/query?q={searchTerms}&sstype=prefix&li=ff
CHR Profile: C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (SEOquake) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdgnmcogleenhbclghghlkkdndkjdjc [2016-01-19]
CHR Extension: (Google Docs) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (FoxTrick) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpfbbngccefbbndginomofgpagkjckik [2015-12-11]
CHR Extension: (Norton Security Toolbar) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2015-12-01]
CHR Extension: (Google Search) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (SEO Site Tools) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc [2014-01-10]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbdobdndcjhdmljipngpeoekdinlohe [2015-12-01]
CHR Extension: (Page Analytics (by Google)) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnbdnhhicmebfgdgglcdacdapkcihcoh [2015-11-18]
CHR Extension: (Google Docs Offline) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Open SEO Stats(Formerly: PageRank Status)) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdkkfheckcdppiaiabobmennhijkknn [2015-11-26]
CHR Extension: (META SEO inspector) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibkclpciafdglkjkcibmohobjkcfkaef [2015-08-19]
CHR Extension: (PageRank Replacement by LinkResearchTools) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibmdcomhdlkhkfcpeihnbjchmbnophoi [2015-08-26]
CHR Extension: (Norton Identity Safe) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-12-01]
CHR Extension: (Tag Assistant (by Google)) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2016-01-07]
CHR Extension: (Norton Safe) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmgcfemagnogdodbambjhdcmfcpicngl [2015-12-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
CHR Extension: (Check My Links) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojkcdipcgfaekbeaelaapakgnjflfglf [2015-10-22]
CHR Extension: (Gmail) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR Extension: (Majestic Backlink Analyzer) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmjaflneibolacpepklokkjnakmikmg [2015-09-01]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-07-12] (Adobe Systems) [Datei ist nicht signiert]
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NSBU; C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\NSBU.exe [282016 2015-11-20] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [34528 2013-03-28] (The OpenVPN Project)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2015-10-19] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2015-10-19] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2015-10-19] (pdfforge GmbH)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4334232 2015-09-24] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [100776 2015-08-23] (ASUS Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [1665608 2015-10-22] (Symantec Corporation)
R1 ccSet_NSBU; C:\Windows\system32\drivers\NSBUx64\1605050.00F\ccSetx64.sys [173808 2015-09-23] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-12] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-12] (Symantec Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-01-26] ()
R1 IDSVia64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\IPSDefs\20160126.001\IDSvia64.sys [767224 2015-12-04] (Symantec Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\VirusDefs\20160126.036\ENG64.SYS [138488 2015-10-16] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\VirusDefs\20160126.036\EX64.SYS [2148080 2015-10-16] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\NSBUx64\1605050.00F\SRTSP64.SYS [928496 2015-11-12] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSBUx64\1605050.00F\SRTSPX64.SYS [50936 2015-09-23] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NSBUx64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-12] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NSBUx64\1605050.00F\SymELAM.sys [24192 2015-09-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-11-30] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSBUx64\1605050.00F\Ironx64.SYS [297720 2015-09-23] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NSBUx64\1605050.00F\SYMNETS.SYS [577768 2015-11-12] (Symantec Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-27 08:46 - 2016-01-27 08:46 - 03840080 _____ (AVAST Software) C:\Users\ACRIS-WJ\Downloads\avast-browse104-cleanup-sfx.exe
2016-01-27 07:53 - 2016-01-27 07:55 - 00578748 _____ C:\WINDOWS\Minidump\012716-66031-01.dmp
2016-01-27 07:48 - 2016-01-27 07:48 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\ACRIS-WJ\Downloads\sc-cleaner.exe
2016-01-27 07:33 - 2016-01-27 07:33 - 00632460 _____ C:\WINDOWS\Minidump\012716-55296-01.dmp
2016-01-27 07:25 - 2016-01-27 07:29 - 00259584 _____ (OldTimer Tools) C:\Users\ACRIS-WJ\Downloads\OTH.scr
2016-01-27 05:56 - 2016-01-27 07:28 - 00000000 ____D C:\Users\ACRIS-WJ\Downloads\FRST-OlderVersion
2016-01-27 05:55 - 2016-01-27 08:47 - 00000000 ____D C:\FRST
2016-01-27 05:55 - 2016-01-27 05:56 - 02370560 _____ (Farbar) C:\Users\ACRIS-WJ\Downloads\FRST64.exe
2016-01-27 05:32 - 2016-01-27 05:32 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-01-26 21:25 - 2016-01-27 07:55 - 00000359 _____ C:\Users\ACRIS-WJ\AppData\Roaming\sp_data.sys
2016-01-26 21:19 - 2016-01-26 21:19 - 00001599 _____ C:\Users\ACRIS-WJ\Desktop\JRT.txt
2016-01-26 21:09 - 2016-01-26 21:09 - 01600184 _____ (Malwarebytes) C:\Users\ACRIS-WJ\Downloads\JRT.exe
2016-01-26 21:00 - 2016-01-26 21:00 - 00000000 ____D C:\Program Files (x86)\ESET
2016-01-26 20:57 - 2016-01-26 20:59 - 02870984 _____ (ESET) C:\Users\ACRIS-WJ\Downloads\esetsmartinstaller_deu.exe
2016-01-26 20:12 - 2016-01-26 21:03 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\FreeFixer
2016-01-26 20:12 - 2016-01-26 20:12 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\FreeFixer
2016-01-26 20:11 - 2016-01-26 20:11 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeFixer
2016-01-26 20:11 - 2016-01-26 20:11 - 00000000 ____D C:\Program Files\FreeFixer
2016-01-26 20:08 - 2016-01-26 20:10 - 02687418 _____ (Kephyr) C:\Users\ACRIS-WJ\Downloads\freefixersetup.exe
2016-01-26 20:06 - 2016-01-26 20:07 - 01104336 _____ C:\Users\ACRIS-WJ\Downloads\gsamDV.exe
2016-01-26 19:44 - 2016-01-26 19:52 - 00000000 ____D C:\AdwCleaner
2016-01-26 19:41 - 2016-01-26 19:44 - 01507840 _____ C:\Users\ACRIS-WJ\Downloads\AdwCleaner_5.031.exe
2016-01-26 15:55 - 2016-01-26 15:55 - 00001209 _____ C:\Users\ACRIS-WJ\Desktop\malware.txt
2016-01-26 14:13 - 2016-01-26 16:24 - 00002977 _____ C:\Users\ACRIS-WJ\Desktop\learn.txt
2016-01-26 13:43 - 2016-01-26 21:57 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-26 13:42 - 2016-01-26 13:42 - 00001173 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-26 13:42 - 2016-01-26 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-01-26 13:41 - 2016-01-26 13:42 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-01-26 13:41 - 2016-01-26 13:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-26 13:41 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-26 13:41 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-26 13:41 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-26 13:30 - 2016-01-26 13:31 - 22908888 _____ (Malwarebytes ) C:\Users\ACRIS-WJ\Downloads\mbam-setup-2.2.0.1024.exe
2016-01-26 11:25 - 2016-01-26 19:42 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\Enigma Software Group
2016-01-26 11:24 - 2016-01-26 11:24 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2016-01-26 11:18 - 2016-01-26 11:21 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\ACRIS-WJ\Downloads\SpyHunter-Installer.exe
2016-01-26 09:49 - 2016-01-26 14:25 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\NPE
2016-01-25 13:32 - 2016-01-25 13:32 - 00001920 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-25 at 13_32_18.csv
2016-01-22 14:06 - 2016-01-26 14:31 - 00002198 _____ C:\Users\ACRIS-WJ\Desktop\tätigkeiten.txt
2016-01-22 13:29 - 2016-01-22 13:29 - 00003670 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-22 at 13_28_58.csv
2016-01-22 09:00 - 2016-01-22 09:00 - 00008876 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-22 at 09_00_44.csv
2016-01-22 06:28 - 2016-01-22 06:28 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-01-21 17:47 - 2016-01-25 13:48 - 00986327 _____ C:\Users\ACRIS-WJ\Desktop\MeineKinderparty_SEO_Keyword-Recherche_201601_V02.xlsx
2016-01-21 16:45 - 2016-01-21 16:45 - 00006784 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 16_45_45.csv
2016-01-21 16:18 - 2016-01-21 16:18 - 00002934 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 16_18_51.csv
2016-01-21 15:43 - 2016-01-21 15:43 - 00000053 _____ C:\Users\ACRIS-WJ\Downloads\googlecbd7628e07b0c154(2).html
2016-01-21 14:40 - 2016-01-21 14:40 - 00006866 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 14_40_30.csv
2016-01-21 14:18 - 2016-01-21 14:18 - 00015256 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 14_18_01.csv
2016-01-21 09:25 - 2016-01-21 09:25 - 00011276 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 09_25_50.csv
2016-01-21 08:27 - 2016-01-21 08:27 - 00006772 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 08_27_46.csv
2016-01-20 14:10 - 2016-01-20 14:10 - 00004510 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 14_10_46.csv
2016-01-20 13:53 - 2016-01-20 13:54 - 00004384 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 13_53_54.csv
2016-01-20 13:46 - 2016-01-20 13:46 - 00003508 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 13_46_19.csv
2016-01-20 13:33 - 2016-01-20 13:33 - 00006780 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 13_33_48.csv
2016-01-20 08:56 - 2016-01-20 08:56 - 00004606 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 08_56_28.csv
2016-01-18 09:15 - 2016-01-18 09:21 - 39191120 _____ (DVDVideoSoft Ltd. ) C:\Users\ACRIS-WJ\Downloads\FreeYouTubeToMP3Converter_410.exe
2016-01-18 08:56 - 2016-01-26 20:35 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\DVDVideoSoft
2016-01-18 08:56 - 2016-01-18 08:56 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2016-01-18 08:53 - 2016-01-18 08:53 - 39261864 _____ (DVDVideoSoft Ltd. ) C:\Users\ACRIS-WJ\Downloads\FreeYouTubeDownload.exe
2016-01-14 13:48 - 2016-01-14 13:48 - 00122385 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Abstimmung-Protokoll_201601_V01.pdf
2016-01-14 12:01 - 2016-01-14 12:02 - 00834868 _____ C:\WINDOWS\Minidump\011416-64406-01.dmp
2016-01-14 11:09 - 2016-01-11 14:00 - 00661328 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Suchmaschinenmarketing-Report_201512_V01.pdf
2016-01-14 11:08 - 2016-01-14 08:19 - 00783436 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Abstimmungstermin_201601_V01.pptx
2016-01-14 09:59 - 2016-01-14 13:32 - 00002700 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Abstimmung-Protokoll_201601_V01.mm
2016-01-14 09:29 - 2016-01-14 09:29 - 00001970 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-14 at 09_28_57.csv
2016-01-13 08:34 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-13 08:34 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-13 08:34 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-13 08:34 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-13 08:34 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-13 08:34 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-13 08:34 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-13 08:34 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-13 08:34 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-13 08:34 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-13 08:34 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-13 08:34 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-13 08:34 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-13 08:34 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-13 08:34 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-13 08:34 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-13 08:34 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-13 08:34 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-13 08:34 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-13 08:34 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-13 08:34 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-13 08:34 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-13 08:34 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-13 08:34 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-13 08:34 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-13 08:34 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-13 08:34 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-13 08:34 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-13 08:34 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-13 08:34 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-13 08:34 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-13 08:34 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-13 08:34 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-13 08:34 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-13 08:34 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-13 08:34 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-13 08:34 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-13 08:34 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-13 08:34 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-13 08:34 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-13 08:34 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-13 08:34 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-13 08:34 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-13 08:34 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-13 08:34 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-13 08:34 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-13 08:34 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-13 08:34 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-13 08:34 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-13 08:34 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-13 08:34 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-13 08:34 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-13 08:34 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-13 08:34 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-13 08:34 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-13 08:34 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-13 08:34 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-13 08:34 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-13 08:34 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-13 08:34 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-13 08:34 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-13 08:34 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-13 08:34 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-13 08:34 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-13 08:34 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-13 08:34 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-13 08:34 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-13 08:34 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-13 08:34 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-13 08:34 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-12 07:20 - 2016-01-27 07:57 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2016-01-11 17:01 - 2016-01-11 17:01 - 00000220 _____ C:\Users\ACRIS-WJ\Desktop\mailtext.txt
2016-01-11 08:07 - 2016-01-27 02:49 - 00004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{601DF0AE-DAEF-4271-A25F-1E73E6642EEB}
2016-01-11 07:30 - 2016-01-11 07:30 - 00003628 _____ C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher
2016-01-08 08:18 - 2016-01-08 08:19 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\MicrosoftEdge
2016-01-07 16:16 - 2016-01-07 16:16 - 00052580 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-DE_201512_V01.csv
2016-01-07 15:54 - 2016-01-07 15:54 - 00044556 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-CH_201512_V01.csv
2016-01-07 15:35 - 2016-01-26 22:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-07 15:27 - 2016-01-07 15:27 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2016-01-07 15:27 - 2016-01-07 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-01-07 15:27 - 2016-01-07 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-01-07 14:55 - 2016-01-07 14:55 - 00320788 _____ C:\WINDOWS\Minidump\010716-57718-01.dmp
2016-01-07 11:38 - 2016-01-07 11:38 - 00049624 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-AT_201512_V01.csv
2016-01-07 07:04 - 2012-03-26 05:00 - 00389120 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMB9.DLL
2015-12-31 12:06 - 2016-01-27 07:53 - 685324488 _____ C:\WINDOWS\MEMORY.DMP
2015-12-31 12:06 - 2016-01-27 07:53 - 00000000 ____D C:\WINDOWS\Minidump
2015-12-31 12:06 - 2015-12-31 12:08 - 00822924 _____ C:\WINDOWS\Minidump\123115-80437-01.dmp
2015-12-31 12:03 - 2015-12-31 12:03 - 00000000 _____ C:\Users\ACRIS-WJ\AppData\Local\{0783DA65-9600-48F3-9EDE-8476A0C728F4}
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-27 08:39 - 2014-01-10 13:09 - 00001110 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-27 08:39 - 2014-01-10 13:09 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-27 08:32 - 2012-09-19 08:13 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\Skype
2016-01-27 08:18 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-27 08:02 - 2015-12-02 07:50 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Security with Backup
2016-01-27 08:02 - 2012-09-16 06:59 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-27 07:53 - 2015-12-18 13:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-27 07:53 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-27 07:50 - 2015-12-10 09:45 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001UA.job
2016-01-27 07:34 - 2015-12-18 12:34 - 00000000 ____D C:\Users\ACRIS-WJ
2016-01-27 07:26 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-26 21:22 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-26 14:25 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-01-26 13:34 - 2015-12-02 07:47 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\CrashDumps
2016-01-26 11:15 - 2015-12-18 13:11 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\Packages
2016-01-26 09:50 - 2015-12-10 09:45 - 00001080 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001Core.job
2016-01-26 09:50 - 2015-11-30 09:23 - 00000000 ____D C:\ProgramData\Norton
2016-01-26 07:46 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-25 17:03 - 2012-10-25 09:30 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\IBP
2016-01-22 06:29 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-01-21 15:47 - 2015-04-02 08:13 - 00000053 _____ C:\Users\ACRIS-WJ\Downloads\googlecbd7628e07b0c154.html
2016-01-20 12:32 - 2013-11-26 15:05 - 00000000 ____D C:\Program Files (x86)\Screaming Frog SEO Spider
2016-01-19 16:00 - 2013-10-09 09:04 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\Google
2016-01-19 07:16 - 2015-12-11 10:51 - 00000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2016-01-19 07:15 - 2015-12-11 11:10 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-01-15 07:42 - 2014-01-10 13:11 - 00002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-14 15:19 - 2012-10-01 11:00 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\ElevatedDiagnostics
2016-01-14 13:48 - 2013-04-02 09:11 - 00000000 ____D C:\Users\ACRIS-WJ\.freemind
2016-01-14 12:46 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-14 12:09 - 2015-12-18 12:31 - 02094824 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-14 12:09 - 2015-10-30 19:35 - 00892952 _____ C:\WINDOWS\system32\perfh007.dat
2016-01-14 12:09 - 2015-10-30 19:35 - 00198500 _____ C:\WINDOWS\system32\perfc007.dat
2016-01-14 11:15 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-14 10:54 - 2014-12-29 09:08 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-01-14 10:53 - 2015-11-13 07:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-13 11:19 - 2013-07-19 11:58 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-13 11:04 - 2012-09-15 19:52 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-12 07:14 - 2013-08-28 07:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-11 07:28 - 2015-12-18 13:28 - 00000000 ____D C:\Program Files\DIFX
2016-01-11 07:26 - 2012-02-24 03:42 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-01-11 07:23 - 2015-12-18 13:26 - 00000000 ____D C:\ProgramData\SetupTPDriver
2016-01-07 15:27 - 2014-03-12 07:51 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\Skype
2016-01-07 15:27 - 2012-09-19 08:13 - 00000000 ____D C:\ProgramData\Skype
2016-01-07 15:04 - 2015-12-18 12:18 - 00269632 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-07 14:59 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-07 14:59 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-01-07 14:59 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-07 11:56 - 2012-10-25 09:15 - 00000000 ____D C:\Program Files (x86)\IBP 12
2016-01-07 08:01 - 2013-04-02 08:45 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-01-07 07:17 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2016-01-03 02:40 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-01-26 21:25 - 2016-01-27 07:55 - 0000359 _____ () C:\Users\ACRIS-WJ\AppData\Roaming\sp_data.sys
2015-12-31 12:03 - 2015-12-31 12:03 - 0000000 _____ () C:\Users\ACRIS-WJ\AppData\Local\{0783DA65-9600-48F3-9EDE-8476A0C728F4}
2012-10-19 11:42 - 2012-10-19 11:42 - 0000000 _____ () C:\ProgramData\0x0304A000.sfl
2015-01-07 08:53 - 2015-01-07 08:53 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-02-24 03:42 - 2010-10-06 18:45 - 0131984 _____ () C:\ProgramData\FullRemove.exe
2012-09-18 00:19 - 2015-01-07 08:45 - 0006745 _____ () C:\ProgramData\hpzinstall.log
2013-01-08 18:27 - 2013-01-08 18:27 - 0006080 _____ () C:\ProgramData\NanoRepository.bin
2012-07-26 22:28 - 2012-07-26 22:29 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2012-07-26 22:26 - 2012-07-26 22:27 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2012-07-26 22:26 - 2012-07-26 22:26 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Einige Dateien in TEMP:
====================
C:\Users\ACRIS-WJ\AppData\Local\Temp\GUR48A9.exe
C:\Users\ACRIS-WJ\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-01-25 17:16
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-01-2016
durchgeführt von ACRIS-WJ (2016-01-27 08:51:00)
Gestartet von C:\Users\ACRIS-WJ\Downloads\FRST-OlderVersion
Windows 10 Home (X64) (2015-12-18 12:10:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
ACRIS-WJ (S-1-5-21-1028448690-2613926920-131507622-1001 - Administrator - Enabled) => C:\Users\ACRIS-WJ
Administrator (S-1-5-21-1028448690-2613926920-131507622-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1028448690-2613926920-131507622-503 - Limited - Disabled)
Gast (S-1-5-21-1028448690-2613926920-131507622-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1028448690-2613926920-131507622-1008 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Norton Security mit Backup (Disabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Security mit Backup (Disabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Security mit Backup (Disabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AdWords Editor (HKLM-x32\...\{183BA000-9EB8-11E5-AD70-B8AC6F88925A}) (Version: 11.2.3.0 - Google)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS)
Cisco AnyConnect VPN Client (HKLM-x32\...\{F4C6DD02-8ACA-4354-BA36-9FFC3B767E73}) (Version: 2.5.2014 - Cisco Systems, Inc.)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.31 - Cliqz.com)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ETDWare PS/2-X64 10.5.10.0 (HKLM\...\Elantech) (Version: 10.5.10.0 - ELAN Microelectronic Corp.)
FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
FreeFixer (HKLM-x32\...\FreeFixer1.13) (Version: 1.13 - Kephyr)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.1 - )
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google AdWords Editor (HKLM-x32\...\{14069A87-872C-41E6-9D36-B1BE3870C35A}) (Version: 10.6.0 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HP Officejet Pro 8610 - Grundlegende Software für das Gerät (HKLM\...\{C1586445-E3CA-45F0-A754-E6C2784CDDB7}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP Officejet Pro 8620 - Grundlegende Software für das Gerät (HKLM\...\{9EFED617-DC37-46FC-BFD4-ED096BAD3591}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.1.40.3 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.0.30.219 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
IBP 12.0.4 (HKLM-x32\...\IBP12_is1) (Version: 12.0.4 - Axandra GmbH)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Lync 2010 Attendee (HKLM-x32\...\{44228375-A198-489B-B90F-F88A1A78D5F5}) (Version: 4.0.7577.4415 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}) (Version: - Microsoft)
Microsoft Office Home and Business 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
myBitCast 1.0.0.3 (HKLM\...\myBitCast) (Version: 1.0.0.3 - ASUS Cloud Corporation)
Norton Security mit Backup (HKLM-x32\...\NSBU) (Version: 22.5.5.15 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
OpenVPN 2.3.1-I001 (HKLM\...\OpenVPN) (Version: 2.3.1-I001 - )
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Password Safe and Repository 7 (HKLM\...\{7B6F4DF3-57DA-49AD-8A6B-5639E9D66E8B}) (Version: 7.4.2.2242 - MATESO GmbH)
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.26.25466 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.2.1 - pdfforge)
PR-Gateway Desktop (HKLM-x32\...\{C7DBB71E-B7BF-4F81-AD43-0BC30E7CC2D2}) (Version: 1.0.67 - ADENION GmbH)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 5.1 - Screaming Frog Ltd)
SEO SpyGlass (HKLM-x32\...\seopowersuite) (Version: - )
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Skype™ 7.17 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.17.105 - Skype Technologies S.A.)
SpyHunter 4 (HKLM-x32\...\SpyHunter) (Version: 4.21.18.4608 - Enigma Software Group, LLC)
Synchronize It! (HKLM-x32\...\Synchronize It!_is1) (Version: 3.5 - Grig Software)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VS10Runtimex64 (Version: 1.0.0 - sourcefire) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse (06/17/2015 1.0.0.262) (HKLM\...\14588A15B66655338DBCC021FFA81E31DC281859) (Version: 06/17/2015 1.0.0.262 - ASUS)
Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1028448690-2613926920-131507622-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\ACRIS-WJ\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1028448690-2613926920-131507622-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1028448690-2613926920-131507622-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00A65167-417B-4721-A69D-029BA8E04D79} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {02285EEC-3D02-4661-875E-128CE1EEB2D2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001UA => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe [2015-12-10] (Google Inc.)
Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {0C1BB870-2EF1-4FF4-B346-A8396882ACB5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {0C1E0D1A-5156-4DED-9048-7CB469FE419F} - \ASUS SmartLogon Console Sensor -> Keine Datei <==== ACHTUNG
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {1482538A-3CE9-49DF-8C65-83E008F73FA4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {159F33C0-D36C-4453-A2FA-F2FA9970223D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {18C3CA2C-15AF-4F2D-AD16-AFDDDD500E50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {22486FD4-425B-47CA-86F5-A9C48020AADA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {26A577F7-E82A-4BA0-8AEC-A8FC35793F3E} - System32\Tasks\Norton Security with Backup\Norton Error Processor => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {28DF92BE-D510-4E3C-825D-4415E7512F6F} - \ASUS Quick Gesture -> Keine Datei <==== ACHTUNG
Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {31953383-343C-4096-A0D9-43CC50B622EC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-11-04] (Hewlett-Packard)
Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {44972927-CEA7-432B-B544-9DD166FA8748} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-11-04] (Hewlett-Packard)
Task: {44E0B584-3FAE-4BF8-8389-AEF78547E1AB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {45F4BB6B-0F0E-4CD6-B821-1B6757DB8EAB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5039C69D-63D2-43FE-8942-E31DDB5F1468} - \ATKOSD2 -> Keine Datei <==== ACHTUNG
Task: {5440205A-E883-4170-8CDA-B66A5F993796} - \ASUS Quick Gesture (x64) -> Keine Datei <==== ACHTUNG
Task: {5522A899-1BB1-4E51-88C4-0843C7917048} - \ASUS Live Update -> Keine Datei <==== ACHTUNG
Task: {5555DD55-100B-425D-860D-0D43D72F6715} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2015-09-27] (Hewlett-Packard)
Task: {59566753-1F0B-4E33-8E18-2A6A36CBA072} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\WSCStub.exe [2015-11-23] (Symantec Corporation)
Task: {5C6EDD58-B641-4BF7-AD60-27E34E37D907} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {74AF123A-5E31-4537-BDA8-AF8D777B8372} - System32\Tasks\Norton Security with Backup\Norton Autofix => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {7ADCBC3F-BB42-4A6C-B230-07024A21525C} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {8B03FC8E-C437-4D46-8729-D4B5BC361D20} - \SidebarExecute -> Keine Datei <==== ACHTUNG
Task: {9674329A-D0BE-4B51-9BE7-920F8772FB03} - \ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon -> Keine Datei <==== ACHTUNG
Task: {A06525AB-65D5-41EB-A020-791A2E1FDEF0} - System32\Tasks\Norton Security with Backup\Norton Error Analyzer => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {A1575A80-9EA9-4536-B9E1-7A01BA97E55C} - \ASUS USB Charger Plus -> Keine Datei <==== ACHTUNG
Task: {A876956B-F793-4D0B-9B47-2EC63D2D5F92} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A8F3F303-2786-44EA-8FC4-B00D927E5381} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-08-23] (AsusTek)
Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {AF6314F0-875E-4F05-A4AC-D01E3C3F624C} - \ASUS Wireless Console 3 -> Keine Datei <==== ACHTUNG
Task: {B759A62F-20F0-429F-947C-6843791B329B} - \ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d -> Keine Datei <==== ACHTUNG
Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {C902394F-28AB-4939-A1B6-171B095AA205} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001Core => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe [2015-12-10] (Google Inc.)
Task: {CB25076C-B688-4F26-AA97-FDE38A135211} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {D3F0F16B-E47D-4046-9E35-16BDB983CD5F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {E6B22910-6B71-4632-A84B-F188488A1F5B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {EE6704B7-09F5-4E05-916B-7E1C6E161F5A} - \ASUS P4G -> Keine Datei <==== ACHTUNG
Task: {EE7304C1-79F7-4A88-B83F-C4F524B8DCD6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F8C36CC9-3AC6-4738-903A-FDC9058D6677} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {F9AA969B-279A-47C2-A8EC-87DFB53101C6} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {FB8DCDAC-37AD-4328-A5B1-D9490FF1D014} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001Core.job => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001UA.job => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-18 12:26 - 2015-07-13 18:37 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-07-26 22:01 - 2012-02-21 20:29 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2015-12-18 12:10 - 2015-12-18 12:10 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-18 12:10 - 2015-12-18 12:10 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-18 16:12 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 16:12 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-13 08:34 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-13 08:34 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-13 08:34 - 2016-01-05 02:24 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-13 08:34 - 2016-01-05 02:26 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-01 21:00 - 2015-06-01 21:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-11-20 16:16 - 2012-11-20 16:16 - 00135168 _____ () C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
2016-01-22 06:30 - 2016-01-22 06:31 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2011-03-16 23:07 - 2011-03-16 23:07 - 04297568 _____ () C:\Program Files\Common Files\Microsoft Shared\office14\Cultures\office.odf
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-05-08 00:48 - 2012-05-08 00:48 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2015-12-05 10:21 - 2015-12-05 10:21 - 00933056 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2012-01-13 01:17 - 2012-01-13 01:17 - 00204800 _____ () C:\Program Files (x86)\ASUS\VirtualCamera\virtualCamera.ax
2010-08-20 17:57 - 2010-08-20 17:57 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-20 17:57 - 2010-08-20 17:57 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2016-01-22 06:30 - 2016-01-22 06:31 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 06:30 - 2016-01-22 06:31 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-01-15 07:42 - 2016-01-12 17:35 - 01590088 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libglesv2.dll
2016-01-15 07:42 - 2016-01-12 17:35 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\libegl.dll
2012-07-26 22:01 - 2012-02-21 20:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\100sexlinks.com -> 100sexlinks.com
Da befinden sich 4789 mehr Seiten.
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ACRIS-WJ\AppData\Local\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupreg: FlashPlayerUpdate => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_135_Plugin.exe -update plugin
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{39C4565B-F15C-4D6A-A8A8-02DD2B47F11E}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{FDA8ED5D-CC04-4C25-B67B-93260ADFBD7A}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\Bin\DeviceSetup.exe
FirewallRules: [{DD836349-79DA-4C22-885D-7C64C5E925C1}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\SendAFax.exe
FirewallRules: [{496B55A3-2CC0-470B-810E-4AF72938FB87}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\DigitalWizards.exe
FirewallRules: [{899723B6-5FB6-4B1F-9787-FBC91873C5C1}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\FaxApplications.exe
FirewallRules: [{D9752121-3101-433E-8EDD-60E9A6012F82}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CEA8964A-2E2A-4707-87CF-C52E88267DD7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{00633352-68BE-479F-BB3C-445E975B4A45}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{D55D8AF4-AA05-4547-B33A-7BBE9309E9E6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3C7C44EE-C78A-4153-B0A6-2CE7035E2A6D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7DAE5D82-098F-4251-83D1-A3522729B998}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{72F4E7F5-1D35-46C7-8A7F-7C9754DA6C30}C:\program files (x86)\password safe and repository 7\psr.exe] => (Allow) C:\program files (x86)\password safe and repository 7\psr.exe
FirewallRules: [TCP Query User{0C0D3981-65BA-4EFB-95AF-1DC8C72B7B4C}C:\program files (x86)\password safe and repository 7\psr.exe] => (Allow) C:\program files (x86)\password safe and repository 7\psr.exe
FirewallRules: [{2C949379-DB84-4A8F-AE56-C4A6FE4FEFF9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{19A7CC4D-13A7-4221-AE77-B16FC8885A8F}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{0288AD36-17D8-4A9A-B914-6AD2129D1E32}] => (Allow) LPort=5357
FirewallRules: [{F88101E5-DD06-4553-9CD1-C96E6C899D53}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe
FirewallRules: [{F31A6389-D96F-473D-B70E-5F61A32461EE}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe
FirewallRules: [{B4869BF9-3BA9-4060-9D4A-20602591C8CB}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe
FirewallRules: [{853D4B9A-6339-4A26-8E8E-2E00AE0D29A2}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe
FirewallRules: [{E57157AB-D1BB-4F29-9D3D-90C4F09E05F0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2399799E-70CF-491E-9F40-16829B19BBE2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{45A38301-6AA1-49BC-A998-D0C30CD0B356}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E1B86B90-4CC1-43B0-8D4D-A1B6CB693636}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{35AE5D5B-2357-48DD-9695-80E5AC7F8EC0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F6391E80-81D3-4749-AA06-E5CCB07B4046}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{06B29911-BC74-422D-8A82-3C109F3152E6}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{6181DBF9-FC61-4797-BE71-FE3BD962B634}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{88604617-6521-4547-A9B6-C79E9ADA1DB6}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{B468B4AF-11C9-4E70-BCE5-5E9EB746EB3D}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{D9DEEEA5-4B21-4434-824A-AA415375C567}] => (Allow) C:\Users\ACRIS-WJ\AppData\Local\Microsoft Lync Attendee\AttendeeCommunicator.exe
FirewallRules: [{E542F073-057F-4A07-9E16-2ECE422B3D44}] => (Allow) C:\Users\ACRIS-WJ\AppData\Local\Microsoft Lync Attendee\AttendeeCommunicator.exe
FirewallRules: [{3FC013CE-E8CD-4438-8ABA-794598CE5D0E}] => (Allow) C:\Users\ACRIS-WJ\AppData\Local\Microsoft Lync Attendee\AttendeeCommunicator.exe
FirewallRules: [{7EAC5046-E3D5-4F72-91AE-EAEF3ADA76EC}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{7EECB707-8B06-4848-A2C2-AF2C538DD6D5}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{EDE77172-3CB0-4C62-94DC-7AFB5DC4D7B3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{32E2D853-977D-4469-8D5A-E993AA93F9A6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{AFF626A3-7529-4502-9CFC-E3849BB603AC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{A62C60BD-B965-4BD8-A910-476D8423B82B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{AB61ED48-F6D6-4404-9842-9860A5C143F4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{CBCD2F85-853D-49D5-A5A5-B01AF333B4BA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{200E2CD2-3025-476C-B6FA-946B212869B9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{57A9A445-28C8-4125-9AD2-5BBF96FD40A3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{D64EFC5A-827F-4CF2-B9FF-BDCACD771222}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{75670327-2E62-4A87-810D-FD12E8AAD743}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{4351C3BA-AE0C-47FD-91C7-66FA43503020}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{3B119410-763E-497F-964B-DEE7D604374B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{D649C54C-8DFF-4EE0-BF37-A0F2927D369B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{365D20CB-7B90-4DCC-A209-FA639BB725B2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{7CB0E860-32FD-4CCA-A36C-1CA77211DF5C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{E291272E-73CD-46F8-9D9E-7C4ED1C8A193}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{99E8132B-AF33-42DB-BAA3-42D24F19251C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{93E7086B-6A55-48F2-9784-1F3DF07FE5F5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{418AA845-2FB8-410B-A5B5-E17981E9A4D2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
27-01-2016 05:33:28 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer:
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/27/2016 07:53:44 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
Error: (01/27/2016 07:53:44 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to load Audio DLL [126]
Error: (01/27/2016 07:34:18 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
Error: (01/27/2016 07:34:18 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to load Audio DLL [126]
Error: (01/27/2016 05:33:41 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (01/26/2016 09:35:00 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
Error: (01/26/2016 09:24:22 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
Error: (01/26/2016 09:24:22 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to load Audio DLL [126]
Error: (01/26/2016 09:13:48 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (01/26/2016 09:00:54 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest.
Systemfehler:
=============
Error: (01/27/2016 08:20:05 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200b fehlgeschlagen: Hewlett-Packard - Other hardware, Printer - Null Print - HP Officejet Pro 8620
Error: (01/27/2016 08:11:28 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Intel(R) Management and Security Application User Notification Service" wurde nicht richtig gestartet.
Error: (01/27/2016 08:07:09 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Software Protection" wurde nicht richtig gestartet.
Error: (01/27/2016 08:04:47 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Manager für heruntergeladene Karten" wurde nicht richtig gestartet.
Error: (01/27/2016 08:02:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Intel(R) Management and Security Application Local Management Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/27/2016 08:02:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LMS erreicht.
Error: (01/27/2016 08:01:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "HP Support Solutions Framework Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/27/2016 08:01:37 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst HPSupportSolutionsFrameworkService erreicht.
Error: (01/27/2016 08:00:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/27/2016 08:00:15 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst gupdate erreicht.
CodeIntegrity:
===================================
Date: 2016-01-26 20:13:53.762
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:53.745
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:53.725
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:53.556
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:49.911
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-22 10:02:43.177
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-01-22 10:02:42.920
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2016-01-22 10:02:42.652
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements.
Date: 2016-01-22 10:02:42.270
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
Date: 2016-01-22 10:02:42.167
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Pentium(R) CPU B970 @ 2.30GHz
Prozentuale Nutzung des RAM: 82%
Installierter physikalischer RAM: 3979.91 MB
Verfügbarer physikalischer RAM: 690.42 MB
Summe virtueller Speicher: 8075.91 MB
Verfügbarer virtueller Speicher: 3653.06 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:185.87 GB) (Free:129.88 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (DATA) (Fixed) (Total:254.14 GB) (Free:253.97 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 8DED5BA9)
Partition: GPT.
==================== Ende von Addition.txt ============================
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 26.01.2016 Suchlaufzeit: 18:00 Protokolldatei: mbam-log.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2016.01.26.05 Rootkit-Datenbank: v2016.01.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: ACRIS-WJ Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 364214 Abgelaufene Zeit: 1 Std., 6 Min., 14 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 11 PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\APPID\{608D3067-77E8-463D-9084-908966806826}, In Quarantäne, [3a03c87630690c2a633396fd7c86b749], PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{608D3067-77E8-463D-9084-908966806826}, In Quarantäne, [3a03c87630690c2a633396fd7c86b749], PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{608D3067-77E8-463D-9084-908966806826}, In Quarantäne, [3a03c87630690c2a633396fd7c86b749], Adware.1ClickDownloader, HKLM\SOFTWARE\CLASSES\APPID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}, In Quarantäne, [96a7ba8485140d29bcd8454efe04ca36], Adware.1ClickDownloader, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}, In Quarantäne, [96a7ba8485140d29bcd8454efe04ca36], Adware.1ClickDownloader, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}, In Quarantäne, [96a7ba8485140d29bcd8454efe04ca36], PUP.Optional.AppBario, HKU\S-1-5-21-1028448690-2613926920-131507622-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{72cabc40-64b2-46ed-8648-26d831761150}, In Quarantäne, [e35a70ce4f4acc6a64fb8ef35ba79070], PUP.Optional.DealPly, HKU\S-1-5-21-1028448690-2613926920-131507622-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}, In Quarantäne, [a994023cdfbaf93db81bf191c53d9769], PUP.Optional.PricePeep, HKU\S-1-5-21-1028448690-2613926920-131507622-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}, In Quarantäne, [6bd20539950488ae47fab0d714ee16ea], PUP.Optional.Yontoo, HKU\S-1-5-21-1028448690-2613926920-131507622-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, In Quarantäne, [c974fe40415858ded310b9d0bf43c739], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110011501160}, In Quarantäne, [2d10271766336fc767eeebd9e61d7a86], Registrierungswerte: 1 PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{21111111-1111-1111-1111-110011501160}|AppName, Savings Sidekick-bg.exe, In Quarantäne, [2d10271766336fc767eeebd9e61d7a86] Registrierungsdaten: 1 PUP.Optional.SnapDo, HKU\S-1-5-21-1028448690-2613926920-131507622-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=AT&userid=292dc5a0-06e2-416d-abb5-4ea24f5bc02f&searchtype=ds&q={searchTerms}&installDate=05/08/2013, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=AT&userid=292dc5a0-06e2-416d-abb5-4ea24f5bc02f&searchtype=ds&q={searchTerms}&installDate=05/08/2013),Ersetzt,[0b329f9fb6e3ea4c4e4b675fcf35ad53] Ordner: 6 PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.WinZipRegOp, C:\Program Files (x86)\WinZip Registry Optimizer, In Quarantäne, [cc71a49a8c0d91a5b8164d839c66b848], PUP.Optional.BrowseToSave.ChrPRST, C:\ProgramData\Browse2save, In Quarantäne, [e95492ac47522f0750cf8a4c976b9d63], PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer, In Quarantäne, [7fbe1a2464353402a1ac17c03ec4a45c], Dateien: 9 PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\00, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\01, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\02, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\10, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\11, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\12, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\20, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\21, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], PUP.Optional.BrowserManager, C:\ProgramData\Browser Manager\2.2.580.182\{d1538445-ebd9-4c43-882a-854eff8d928c}\traking_settings\22, In Quarantäne, [8cb192ac8e0b6fc72eda4b627b877e82], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v5.031 - Logfile created 26/01/2016 at 19:44:57
# Updated 25/01/2016 by Xplode
# Database : 2016-01-25.3 [Server]
# Operating system : Windows 10 Home (x64)
# Username : ACRIS-WJ - ACRIS-ASUS-PC
# Running from : C:\Users\ACRIS-WJ\Downloads\AdwCleaner_5.031.exe
# Option : Scan
# Support : hxxp://toolslib.net/forum
***** [ Services ] *****
***** [ Folders ] *****
Folder Found : C:\ProgramData\Browser Manager
Folder Found : C:\Users\ACRIS-WJ\AppData\Roaming\NCdownloader
Folder Found : C:\Users\ACRIS-WJ\Documents\Updater
***** [ Files ] *****
File Found : C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gaiilaahiahdejapggenmdmafpmbipje_0.localstorage
***** [ DLL ] *****
***** [ Shortcuts ] *****
***** [ Scheduled tasks ] *****
***** [ Registry ] *****
Key Found : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
Key Found : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Key Found : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
Key Found : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
Key Found : HKCU\Software\580da8be66fbe42
Key Found : HKLM\SOFTWARE\580da8be66fbe42
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ojcdnngpmbenohhjlickdajclhbcaada
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0CBC0D18-8580-4D16-B0B0-8D4B4CC83C8D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EAFA656F-94AF-4186-942B-70F7B44A971A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0CBC0D18-8580-4D16-B0B0-8D4B4CC83C8D}
Key Found : HKCU\Software\OCS
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\AppDataLow\Software\TubeSaver
Key Found : HKLM\SOFTWARE\SP Global
Key Found : [x64] HKLM\SOFTWARE\Tarma Installer
Key Found : HKU\.DEFAULT\Software\bProtector
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://isearch.glarysoft.com/?src=iehome
Data Found : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=AT&userid=292dc5a0-06e2-416d-abb5-4ea24f5bc02f&searchtype=ds&q={searchTerms}&installDate=05/08/2013
Data Found : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=AT&userid=292dc5a0-06e2-416d-abb5-4ea24f5bc02f&searchtype=ds&q={searchTerms}&installDate=05/08/2013
***** [ Web browsers ] *****
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2986 bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.2 (01.06.2016)
Operating System: Windows 10 Home x64
Ran by ACRIS-WJ (Administrator) on 26.01.2016 at 21:12:44,34
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 6
Successfully deleted: C:\ProgramData\cloud software ltd (Folder)
Successfully deleted: C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\searchplugins\norton-safe-search.xml (File)
Successfully deleted: C:\Users\ACRIS-WJ\AppData\Roaming\my_intel.sys (File)
Successfully deleted: C:\Users\ACRIS-WJ\AppData\Roaming\nico mak computing (Folder)
Successfully deleted: C:\Users\ACRIS-WJ\AppData\Roaming\sp_data.sys (File)
Successfully deleted: C:\WINDOWS\wininit.ini (File)
Registry: 4
Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_40A5C98BD8CFA1CC58D5948299821AC5 (Registry Value)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{38279E1A-7019-40C1-B579-E99DFB3312E8} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{23FD9C33-A9E1-48A1-8404-E5925CF1C8E1} (Registry Value)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.01.2016 at 21:19:40,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=2f2817bd9111114a8cd6b78697f42bda
# end=init
# utc_time=2016-01-26 08:01:32
# local_time=2016-01-26 09:01:32 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27832
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 27832
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 27832
|
|
27.01.2016, 11:01
| #2 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen Shortcut Cleaner:
__________________Code:
ATTFilter Shortcut Cleaner 1.3.9 by Lawrence Abrams (Grinler)
hxxp://www.bleepingcomputer.com/
Copyright 2008-2016 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
hxxp://www.bleepingcomputer.com/download/shortcut-cleaner/
Windows Version: Windows 10 Home
Program started at: 01/27/2016 09:46:20 AM.
Scanning for registry hijacks:
* No issues found in the Registry.
Searching for Hijacked Shortcuts:
Searching C:\Users\ACRIS-WJ\AppData\Roaming\Microsoft\Windows\Start Menu\
Searching C:\ProgramData\Microsoft\Windows\Start Menu\
Searching C:\Users\ACRIS-WJ\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\
Searching C:\Users\Public\Desktop\
Searching C:\Users\ACRIS-WJ\Desktop\
Searching C:\Users\Public\Desktop\
0 bad shortcuts found.
Program finished at: 01/27/2016 09:46:25 AM
Execution time: 0 hours(s), 0 minute(s), and 5 seconds(s)
|
|
01.02.2016, 10:06
| #3 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen addition.txt Logfile von FRST fehlt, bittte nachreichen
__________________
__________________ |
|
01.02.2016, 16:31
| #4 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen Die Addition.txt ist doch das von mir zweite eingefügte Logfile, oder hab ich da was verwechselt?! |
|
01.02.2016, 16:33
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen wo kommt denn das Log auf einmal her???   Ich brauch wohl bald ne Brülle  Hast du die Funde mit dem adwCleaner entfernt?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
01.02.2016, 16:45
| #6 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen Hab mir jz die bebilderte Anleitung vom AdwCleaner gelesen, die Funde habe ich wohl nicht entfernt :/ soll ich nochmaligen Suchlauf starten und die Funde dieses Mal entfernen? |
|
01.02.2016, 20:11
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen ja bitte machen
__________________ Logfiles bitte immer in CODE-Tags posten |
|
05.02.2016, 11:29
| #8 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen sorry, lag jetzt ein paar Tage wegen Grippe flach! AdwCleaner habe ich wieder durchlaufen lassen und anschließend die Funde entfernen lassen. Hier der Log: Code:
ATTFilter # AdwCleaner v5.031 - Bericht erstellt am 01/02/2016 um 16:39:24
# Aktualisiert am 25/01/2016 von Xplode
# Datenbank : 2016-01-31.1 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : ACRIS-WJ - ACRIS-ASUS-PC
# Gestartet von : C:\Users\ACRIS-WJ\Downloads\AdwCleaner_5.031.exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
Ordner Gefunden : C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp
***** [ Dateien ] *****
Datei Gefunden : C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eakacpaijcpapndcfffdgphdiccmpknp
***** [ DLL ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Internetbrowser ] *****
[C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gefunden : eakacpaijcpapndcfffdgphdiccmpknp
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1040 Bytes] ##########
|
|
05.02.2016, 11:29
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen adwCleaner neu runterladen, nochmal machen
__________________ Logfiles bitte immer in CODE-Tags posten |
|
05.02.2016, 13:42
| #10 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen ...durchgeführt und entfernt AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v5.031 - Logfile created 26/01/2016 at 19:44:57
# Updated 25/01/2016 by Xplode
# Database : 2016-01-25.3 [Server]
# Operating system : Windows 10 Home (x64)
# Username : ACRIS-WJ - ACRIS-ASUS-PC
# Running from : C:\Users\ACRIS-WJ\Downloads\AdwCleaner_5.031.exe
# Option : Scan
# Support : hxxp://toolslib.net/forum
***** [ Services ] *****
***** [ Folders ] *****
Folder Found : C:\ProgramData\Browser Manager
Folder Found : C:\Users\ACRIS-WJ\AppData\Roaming\NCdownloader
Folder Found : C:\Users\ACRIS-WJ\Documents\Updater
***** [ Files ] *****
File Found : C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gaiilaahiahdejapggenmdmafpmbipje_0.localstorage
***** [ DLL ] *****
***** [ Shortcuts ] *****
***** [ Scheduled tasks ] *****
***** [ Registry ] *****
Key Found : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
Key Found : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Key Found : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
Key Found : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
Key Found : HKCU\Software\580da8be66fbe42
Key Found : HKLM\SOFTWARE\580da8be66fbe42
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ojcdnngpmbenohhjlickdajclhbcaada
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0CBC0D18-8580-4D16-B0B0-8D4B4CC83C8D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EAFA656F-94AF-4186-942B-70F7B44A971A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0CBC0D18-8580-4D16-B0B0-8D4B4CC83C8D}
Key Found : HKCU\Software\OCS
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\AppDataLow\Software\TubeSaver
Key Found : HKLM\SOFTWARE\SP Global
Key Found : [x64] HKLM\SOFTWARE\Tarma Installer
Key Found : HKU\.DEFAULT\Software\bProtector
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://isearch.glarysoft.com/?src=iehome
Data Found : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=AT&userid=292dc5a0-06e2-416d-abb5-4ea24f5bc02f&searchtype=ds&q={searchTerms}&installDate=05/08/2013
Data Found : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=AT&userid=292dc5a0-06e2-416d-abb5-4ea24f5bc02f&searchtype=ds&q={searchTerms}&installDate=05/08/2013
***** [ Web browsers ] *****
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2986 bytes] ##########
AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v5.032 - Bericht erstellt am 05/02/2016 um 13:25:42
# Aktualisiert am 31/01/2016 von Xplode
# Datenbank : 2016-02-02.1 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : ACRIS-WJ - ACRIS-ASUS-PC
# Gestartet von : C:\Users\ACRIS-WJ\Downloads\AdwCleaner_5.032.exe
# Option : Suchlauf
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
Ordner Gefunden : C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp
***** [ Dateien ] *****
Datei Gefunden : C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eakacpaijcpapndcfffdgphdiccmpknp
***** [ DLL ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1028448690-2613926920-131507622-1001\Software\SweetIM
***** [ Internetbrowser ] *****
[C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gefunden : eakacpaijcpapndcfffdgphdiccmpknp
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4402 Bytes] ##########
|
|
05.02.2016, 13:49
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen Du Funde auch gelöscht? 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
05.02.2016, 15:13
| #12 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen Klaro, den Fehler mach ich nicht nochmal  |
|
05.02.2016, 18:23
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken
__________________ Logfiles bitte immer in CODE-Tags posten |
|
06.02.2016, 14:04
| #14 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernenCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-01-2016
durchgeführt von ACRIS-WJ (Administrator) auf ACRIS-ASUS-PC (06-02-2016 13:48:45)
Gestartet von C:\Users\ACRIS-WJ\Downloads\FRST-OlderVersion
Geladene Profile: ACRIS-WJ (Verfügbare Profile: ACRIS-WJ)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\nsbu.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(pdfforge GmbH) C:\Program Files\PDF Architect 4\creator-ws.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\nsbu.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6568.16731.0_x64__8wekyb3d8bbwe\HxTsr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
() C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\nacl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.0_none_95e4f9a171a1ad95\TiWorker.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [ETDCtrl] => %ProgramFiles%\Elantech\ETDCtrl.exe
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [90792 2012-05-08] (ASUS)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2012-02-24] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-07] (Intel Corporation)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5142128 2012-04-19] (VIA)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [318080 2011-12-23] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-25] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-20] (CyberLink)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [IBP] => 0
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [HP Officejet Pro 8620 (NET)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3485728 2013-09-11] (Hewlett-Packard Co.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [Google Update] => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-12-10] (Google Inc.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-02] (Skype Technologies S.A.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Run: [GoogleChromeAutoLaunch_40A5C98BD8CFA1CC58D5948299821AC5] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [748872 2016-02-03] (Google Inc.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\RunOnce: [Uninstall C:\Users\ACRIS-WJ\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ACRIS-WJ\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177088 2015-07-13] (NVIDIA Corporation)
AppInit_DLLs: , C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177088 2015-07-13] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155280 2015-07-13] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\buShell.dll [2015-11-05] (Symantec Corporation)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\ASUSWSShellExt64.dll [2011-05-25] (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\ASUSWSShellExt64.dll [2011-05-25] (eCareme Technologies, Inc.)
Startup: C:\Users\ACRIS-WJ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2013-07-12]
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2012-02-24]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PR-Gateway Desktop.lnk [2013-12-12]
ShortcutTarget: PR-Gateway Desktop.lnk -> C:\Windows\Installer\{C7DBB71E-B7BF-4F81-AD43-0BC30E7CC2D2}\_906AF5C1ECD2DAA0B09805.exe ()
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{d1d62b22-1dac-42cf-9e52-f10ad917834e}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{d348bb80-188a-4a4c-a510-7725021b9d7c}: [DhcpNameServer] 8.8.8.8 10.0.0.138 4.4.8.8
Internet Explorer:
==================
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-at/?pc=UE01&ocid=UE01DHP
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-05-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-30] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-30] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine64\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\coIEPlg.dll [2015-11-05] (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default
FF Homepage: hxxps://www.google.at/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Windows\SysWOW64\npdeployJava1.dll [2015-01-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-30] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 4 -> C:\Program Files (x86)\PDF Architect 4\np-previewer.dll [2015-10-19] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-1028448690-2613926920-131507622-1001: @tools.google.com/Google Update;version=3 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin HKU\S-1-5-21-1028448690-2613926920-131507622-1001: @tools.google.com/Google Update;version=9 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\ACRIS-WJ\AppData\Roaming\mozilla\plugins\npMeetingJoinPluginAOCUser.dll [2013-10-28] ()
FF SearchPlugin: C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\searchplugins\google-images.xml [2014-11-28]
FF SearchPlugin: C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\searchplugins\google-maps.xml [2014-11-28]
FF Extension: alexa lite - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\alexalite@9511.net.xpi [2015-06-01]
FF Extension: PageRank - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\PageRank@addonfactory.in.xpi [2015-06-01]
FF Extension: SearchStatus - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\{d57c9ff1-6389-48fc-b770-f78bd89b6e8a}.xpi [2015-06-01]
FF Extension: Live HTTP headers - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2015-06-01]
FF Extension: MozBar - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\extensions\toolbar@seomoz.org.xpi [2015-09-15]
FF Extension: Firebug - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\firebug@software.joehewitt.com.xpi [2015-10-27]
FF Extension: Majestic Backlink Analyzer - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\jid1-aY61q9iadjWyYg@jetpack.xpi [2015-09-07]
FF Extension: The Addon Bar (restored) - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\the-addon-bar@GeekInTraining-GiT.xpi [2016-01-28]
FF Extension: YSlow - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\yslow@yahoo-inc.com.xpi [2015-06-01]
FF Extension: SeoQuake - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}.xpi [2016-02-02]
FF Extension: Adblock Plus - C:\Users\ACRIS-WJ\AppData\Roaming\Mozilla\Firefox\Profiles\fr2riqq7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-20]
FF HKLM\...\Firefox\Extensions: [pdf_architect_4_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension
FF Extension: PDF Architect 4 Creator - C:\Program Files\PDF Architect 4\resources\pdfarchitect4firefoxextension [2015-12-01] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.4.24\coFFAddon
FF Extension: Kein Name - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.4.24\coFFAddon [2016-01-14]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2012-09-19] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NSBU_22.5.4.24\coFFAddon
FF HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\Firefox\Extensions: [{ad237ae1-f3b7-49d8-897a-4c6b2373011e}] - C:\Program Files (x86)\TubeSaver\130.xpi => nicht gefunden
Chrome:
=======
CHR DefaultSearchURL: Default -> hxxp://nortonsafe.search.ask.com/web?q={searchTerms}&o=apn10506&prt=cr
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxp://ss-sym.ask.com/query?q={searchTerms}&sstype=prefix&li=ff
CHR Profile: C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (SEOquake) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdgnmcogleenhbclghghlkkdndkjdjc [2016-01-28]
CHR Extension: (Google Docs) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Norton Security Toolbar) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-01-28]
CHR Extension: (Google-Suche) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (SEO Site Tools) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\diahigjngdnkdgajdbpjdeomopbpkjjc [2014-01-10]
CHR Extension: (MozBar) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2016-02-05]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbdobdndcjhdmljipngpeoekdinlohe [2015-12-01]
CHR Extension: (Page Analytics (by Google)) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnbdnhhicmebfgdgglcdacdapkcihcoh [2015-11-18]
CHR Extension: (Google Docs Offline) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Open SEO Stats(Formerly: PageRank Status)) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdkkfheckcdppiaiabobmennhijkknn [2015-11-26]
CHR Extension: (META SEO inspector) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibkclpciafdglkjkcibmohobjkcfkaef [2015-08-19]
CHR Extension: (PageRank Replacement by LinkResearchTools) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibmdcomhdlkhkfcpeihnbjchmbnophoi [2015-08-26]
CHR Extension: (Norton Identity Safe) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-12-01]
CHR Extension: (Tag Assistant (by Google)) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2016-02-05]
CHR Extension: (Norton Safe) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmgcfemagnogdodbambjhdcmfcpicngl [2016-01-29]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
CHR Extension: (Check My Links) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojkcdipcgfaekbeaelaapakgnjflfglf [2015-10-22]
CHR Extension: (Google Mail) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR Extension: (Majestic Backlink Analyzer) - C:\Users\ACRIS-WJ\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnmjaflneibolacpepklokkjnakmikmg [2015-09-01]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\Exts\Chrome.crx [2015-12-01]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-07-12] (Adobe Systems) [Datei ist nicht signiert]
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [25800 2015-09-28] (Hewlett-Packard Company)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NSBU; C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\NSBU.exe [282016 2015-11-20] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [34528 2013-03-28] (The OpenVPN Project)
S3 PDF Architect 4; C:\Program Files\PDF Architect 4\ws.exe [2417376 2015-10-19] (pdfforge GmbH)
S3 PDF Architect 4 CrashHandler; C:\Program Files\PDF Architect 4\crash-handler-ws.exe [1038048 2015-10-19] (pdfforge GmbH)
R2 PDF Architect 4 Creator; C:\Program Files\PDF Architect 4\creator-ws.exe [851168 2015-10-19] (pdfforge GmbH)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4334232 2015-09-24] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [100776 2015-08-23] (ASUS Corporation)
R1 BHDrvx64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\BASHDefs\20160125.001\BHDrvx64.sys [1665608 2015-10-22] (Symantec Corporation)
R1 ccSet_NSBU; C:\Windows\system32\drivers\NSBUx64\1605050.00F\ccSetx64.sys [173808 2015-09-23] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-12] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [157520 2015-11-12] (Symantec Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-01-26] ()
R1 IDSVia64; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\IPSDefs\20160204.001\IDSvia64.sys [767224 2015-12-04] (Symantec Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\VirusDefs\20160204.052\ENG64.SYS [138488 2015-10-16] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Security with Backup\NortonData\22.5.4.24\Definitions\VirusDefs\20160204.052\EX64.SYS [2148080 2015-10-16] (Symantec Corporation)
R3 SRTSP; C:\Windows\System32\Drivers\NSBUx64\1605050.00F\SRTSP64.SYS [928496 2015-11-12] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NSBUx64\1605050.00F\SRTSPX64.SYS [50936 2015-09-23] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NSBUx64\1605050.00F\SYMEFASI64.SYS [1621232 2015-11-12] (Symantec Corporation)
S0 SymELAM; C:\Windows\System32\drivers\NSBUx64\1605050.00F\SymELAM.sys [24192 2015-09-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [111344 2015-11-30] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NSBUx64\1605050.00F\Ironx64.SYS [297720 2015-09-23] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NSBUx64\1605050.00F\SYMNETS.SYS [577768 2015-11-12] (Symantec Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-02-05 13:24 - 2016-02-05 13:25 - 01508352 _____ C:\Users\ACRIS-WJ\Downloads\AdwCleaner_5.032.exe
2016-02-05 13:11 - 2016-02-05 13:13 - 00755204 _____ C:\WINDOWS\Minidump\020516-54953-01.dmp
2016-02-05 11:13 - 2016-02-05 11:13 - 00003068 _____ C:\Users\ACRIS-WJ\Desktop\T-Mobile-Business_SEO_Keyword-Recherche-Telefonanlage_201602_V01.csv
2016-02-05 10:47 - 2016-02-05 10:47 - 00002696 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-02-05 at 10-47-53.csv
2016-02-04 12:01 - 2016-02-04 12:01 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\LocalLow\Temp
2016-02-04 09:51 - 2016-02-04 09:52 - 00578236 _____ C:\WINDOWS\Minidump\020416-54171-01.dmp
2016-02-02 12:10 - 2016-02-01 16:53 - 01004487 _____ C:\Users\ACRIS-WJ\Desktop\MeineKinderparty_SEM_Suchmaschinenmarketing-Report_201601_V02.pptx
2016-02-01 16:47 - 2016-02-01 16:47 - 00150475 _____ C:\Users\ACRIS-WJ\Downloads\Umkehrtorte.pdf
2016-02-01 08:42 - 2016-02-01 08:42 - 00050586 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-DE_201601.csv
2016-02-01 08:33 - 2016-02-01 08:33 - 00045492 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-AT_201601.csv
2016-02-01 08:30 - 2016-02-01 08:30 - 00043288 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_CH-ERP_201601.csv
2016-01-28 11:01 - 2016-01-16 07:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-01-28 11:01 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-01-28 11:01 - 2016-01-16 07:20 - 06600904 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-01-28 11:01 - 2016-01-16 07:16 - 05238360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-01-28 11:01 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-28 11:01 - 2016-01-16 06:44 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-28 11:01 - 2016-01-16 06:40 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-01-28 11:01 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-28 11:01 - 2016-01-16 06:32 - 24602624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-01-28 11:01 - 2016-01-16 06:30 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-01-28 11:01 - 2016-01-16 06:26 - 19338752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-01-28 11:01 - 2016-01-16 06:24 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-28 11:01 - 2016-01-16 06:19 - 12126208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-01-28 11:00 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2016-01-28 11:00 - 2016-01-16 07:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-28 11:00 - 2016-01-16 07:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-28 11:00 - 2016-01-16 07:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-28 11:00 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2016-01-28 11:00 - 2016-01-16 07:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-28 11:00 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-28 11:00 - 2016-01-16 07:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-01-28 11:00 - 2016-01-16 07:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-01-28 11:00 - 2016-01-16 07:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-01-28 11:00 - 2016-01-16 07:21 - 22572624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-01-28 11:00 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2016-01-28 11:00 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-28 11:00 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2016-01-28 11:00 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2016-01-28 11:00 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-28 11:00 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2016-01-28 11:00 - 2016-01-16 07:17 - 21125400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-01-28 11:00 - 2016-01-16 07:13 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-01-28 11:00 - 2016-01-16 07:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-01-28 11:00 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-01-28 11:00 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2016-01-28 11:00 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-01-28 11:00 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2016-01-28 11:00 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-01-28 11:00 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-01-28 11:00 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll
2016-01-28 11:00 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll
2016-01-28 11:00 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll
2016-01-28 11:00 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-01-28 11:00 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll
2016-01-28 11:00 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2016-01-28 11:00 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll
2016-01-28 11:00 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe
2016-01-28 11:00 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe
2016-01-28 11:00 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll
2016-01-28 11:00 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-01-28 11:00 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-01-28 11:00 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll
2016-01-28 11:00 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2016-01-28 11:00 - 2016-01-16 06:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-01-28 11:00 - 2016-01-16 06:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-01-28 11:00 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-01-28 11:00 - 2016-01-16 06:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-01-28 11:00 - 2016-01-16 06:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-28 11:00 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2016-01-28 11:00 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-01-28 11:00 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll
2016-01-28 11:00 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll
2016-01-28 11:00 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-01-28 11:00 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2016-01-28 11:00 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-01-28 11:00 - 2016-01-16 06:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-01-28 11:00 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2016-01-28 11:00 - 2016-01-16 06:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-01-28 11:00 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll
2016-01-28 11:00 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2016-01-28 11:00 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll
2016-01-28 11:00 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-01-28 11:00 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2016-01-28 11:00 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe
2016-01-28 11:00 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-01-28 11:00 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-01-28 11:00 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-01-28 11:00 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2016-01-28 11:00 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2016-01-28 11:00 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-01-28 11:00 - 2016-01-16 06:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-01-28 11:00 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-01-28 11:00 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll
2016-01-28 11:00 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2016-01-28 11:00 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2016-01-28 11:00 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-01-28 11:00 - 2016-01-16 06:28 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-01-28 11:00 - 2016-01-16 06:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-01-28 11:00 - 2016-01-16 06:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-01-28 11:00 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2016-01-28 11:00 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll
2016-01-28 11:00 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-01-28 11:00 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2016-01-28 11:00 - 2016-01-16 06:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-01-28 11:00 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll
2016-01-28 11:00 - 2016-01-16 06:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-01-28 11:00 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2016-01-28 11:00 - 2016-01-16 06:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-01-28 11:00 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
2016-01-28 11:00 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2016-01-28 11:00 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2016-01-28 11:00 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-01-28 11:00 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2016-01-28 11:00 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-01-28 11:00 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-01-28 11:00 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-01-28 11:00 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-01-28 11:00 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-01-28 11:00 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-01-28 11:00 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2016-01-28 11:00 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-01-28 11:00 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-01-28 11:00 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
2016-01-28 11:00 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-01-28 11:00 - 2016-01-16 06:18 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-01-28 11:00 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-28 11:00 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-01-28 11:00 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-01-28 11:00 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-28 11:00 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-01-28 11:00 - 2016-01-16 06:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-01-28 11:00 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-01-28 11:00 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-01-28 11:00 - 2016-01-16 06:09 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-01-27 13:37 - 2016-01-27 13:42 - 00238116 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Protokoll-Abstimmung_2016_V02.pdf
2016-01-27 13:37 - 2016-01-27 13:41 - 00004347 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Protokoll-Abstimmung_2016_V02.mm
2016-01-27 10:00 - 2016-01-27 10:00 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2016-01-27 09:57 - 2016-01-27 10:00 - 00280740 _____ C:\WINDOWS\Minidump\012716-71500-01.dmp
2016-01-27 09:51 - 2016-01-27 07:29 - 00259584 _____ (OldTimer Tools) C:\Users\ACRIS-WJ\Desktop\OTH.scr
2016-01-27 09:50 - 2016-01-27 17:12 - 00001726 _____ C:\Users\ACRIS-WJ\Desktop\anleitung.txt
2016-01-27 09:48 - 2016-01-26 13:31 - 22908888 _____ (Malwarebytes ) C:\Users\ACRIS-WJ\Desktop\mbam-setup-2.2.0.1024.exe
2016-01-27 08:55 - 2016-01-29 10:58 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\AVAST Software
2016-01-27 08:46 - 2016-01-27 08:53 - 03840080 _____ (AVAST Software) C:\Users\ACRIS-WJ\Downloads\avast-browse104-cleanup-sfx.exe
2016-01-27 07:53 - 2016-01-27 07:55 - 00578748 _____ C:\WINDOWS\Minidump\012716-66031-01.dmp
2016-01-27 07:48 - 2016-01-27 07:48 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\ACRIS-WJ\Downloads\sc-cleaner.exe
2016-01-27 07:33 - 2016-01-27 07:33 - 00632460 _____ C:\WINDOWS\Minidump\012716-55296-01.dmp
2016-01-27 07:25 - 2016-01-27 07:29 - 00259584 _____ (OldTimer Tools) C:\Users\ACRIS-WJ\Downloads\OTH.scr
2016-01-27 05:56 - 2016-01-27 08:51 - 00000000 ____D C:\Users\ACRIS-WJ\Downloads\FRST-OlderVersion
2016-01-27 05:55 - 2016-02-06 13:48 - 00000000 ____D C:\FRST
2016-01-27 05:55 - 2016-01-27 05:56 - 02370560 _____ (Farbar) C:\Users\ACRIS-WJ\Downloads\FRST64.exe
2016-01-27 05:32 - 2016-01-27 05:32 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-01-26 21:25 - 2016-02-06 13:42 - 00000387 _____ C:\Users\ACRIS-WJ\AppData\Roaming\sp_data.sys
2016-01-26 21:09 - 2016-01-26 21:09 - 01600184 _____ (Malwarebytes) C:\Users\ACRIS-WJ\Downloads\JRT.exe
2016-01-26 21:00 - 2016-01-26 21:00 - 00000000 ____D C:\Program Files (x86)\ESET
2016-01-26 20:57 - 2016-01-26 20:59 - 02870984 _____ (ESET) C:\Users\ACRIS-WJ\Downloads\esetsmartinstaller_deu.exe
2016-01-26 20:12 - 2016-01-26 21:03 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\FreeFixer
2016-01-26 20:12 - 2016-01-26 20:12 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\FreeFixer
2016-01-26 20:11 - 2016-01-29 11:13 - 00000000 ____D C:\Program Files\FreeFixer
2016-01-26 20:08 - 2016-01-26 20:10 - 02687418 _____ (Kephyr) C:\Users\ACRIS-WJ\Downloads\freefixersetup.exe
2016-01-26 20:06 - 2016-01-26 20:07 - 01104336 _____ C:\Users\ACRIS-WJ\Downloads\gsamDV.exe
2016-01-26 19:44 - 2016-02-01 16:55 - 00000000 ____D C:\AdwCleaner
2016-01-26 19:41 - 2016-01-26 19:44 - 01507840 _____ C:\Users\ACRIS-WJ\Downloads\AdwCleaner_5.031.exe
2016-01-26 14:13 - 2016-01-26 16:24 - 00002977 _____ C:\Users\ACRIS-WJ\Desktop\learn.txt
2016-01-26 13:43 - 2016-01-27 10:29 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-26 13:42 - 2016-01-26 13:42 - 00001173 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-26 13:42 - 2016-01-26 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-01-26 13:41 - 2016-01-26 13:42 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-01-26 13:41 - 2016-01-26 13:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-26 13:41 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-26 13:41 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-26 13:41 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-26 13:30 - 2016-01-26 13:31 - 22908888 _____ (Malwarebytes ) C:\Users\ACRIS-WJ\Downloads\mbam-setup-2.2.0.1024.exe
2016-01-26 11:25 - 2016-01-26 19:42 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\Enigma Software Group
2016-01-26 11:24 - 2016-01-26 11:24 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2016-01-26 11:18 - 2016-01-26 11:21 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\ACRIS-WJ\Downloads\SpyHunter-Installer.exe
2016-01-26 09:49 - 2016-01-27 15:39 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\NPE
2016-01-25 13:32 - 2016-01-25 13:32 - 00001920 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-25 at 13_32_18.csv
2016-01-22 14:06 - 2016-01-27 17:12 - 00005515 _____ C:\Users\ACRIS-WJ\Desktop\tätigkeiten.txt
2016-01-22 13:29 - 2016-01-22 13:29 - 00003670 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-22 at 13_28_58.csv
2016-01-22 09:00 - 2016-01-22 09:00 - 00008876 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-22 at 09_00_44.csv
2016-01-22 06:28 - 2016-01-22 06:28 - 00000000 ___HD C:\ProgramData\CanonBJ
2016-01-21 17:47 - 2016-01-25 13:48 - 00986327 _____ C:\Users\ACRIS-WJ\Desktop\MeineKinderparty_SEO_Keyword-Recherche_201601_V02.xlsx
2016-01-21 16:45 - 2016-01-21 16:45 - 00006784 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 16_45_45.csv
2016-01-21 16:18 - 2016-01-21 16:18 - 00002934 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 16_18_51.csv
2016-01-21 15:43 - 2016-01-21 15:43 - 00000053 _____ C:\Users\ACRIS-WJ\Downloads\googlecbd7628e07b0c154(2).html
2016-01-21 14:40 - 2016-01-21 14:40 - 00006866 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 14_40_30.csv
2016-01-21 14:18 - 2016-01-21 14:18 - 00015256 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 14_18_01.csv
2016-01-21 09:25 - 2016-01-21 09:25 - 00011276 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 09_25_50.csv
2016-01-21 08:27 - 2016-01-21 08:27 - 00006772 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-21 at 08_27_46.csv
2016-01-20 14:10 - 2016-01-20 14:10 - 00004510 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 14_10_46.csv
2016-01-20 13:53 - 2016-01-20 13:54 - 00004384 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 13_53_54.csv
2016-01-20 13:46 - 2016-01-20 13:46 - 00003508 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 13_46_19.csv
2016-01-20 13:33 - 2016-01-20 13:33 - 00006780 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 13_33_48.csv
2016-01-20 08:56 - 2016-01-20 08:56 - 00004606 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-20 at 08_56_28.csv
2016-01-18 09:15 - 2016-01-18 09:21 - 39191120 _____ (DVDVideoSoft Ltd. ) C:\Users\ACRIS-WJ\Downloads\FreeYouTubeToMP3Converter_410.exe
2016-01-18 08:56 - 2016-01-26 20:35 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\DVDVideoSoft
2016-01-18 08:56 - 2016-01-18 08:56 - 00000000 ____D C:\Program Files (x86)\FreeCodecPack
2016-01-18 08:53 - 2016-01-18 08:53 - 39261864 _____ (DVDVideoSoft Ltd. ) C:\Users\ACRIS-WJ\Downloads\FreeYouTubeDownload.exe
2016-01-14 13:48 - 2016-01-14 13:48 - 00122385 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Abstimmung-Protokoll_201601_V01.pdf
2016-01-14 12:01 - 2016-01-14 12:02 - 00834868 _____ C:\WINDOWS\Minidump\011416-64406-01.dmp
2016-01-14 11:09 - 2016-01-11 14:00 - 00661328 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Suchmaschinenmarketing-Report_201512_V01.pdf
2016-01-14 11:08 - 2016-01-14 08:19 - 00783436 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Abstimmungstermin_201601_V01.pptx
2016-01-14 09:59 - 2016-01-14 13:32 - 00002700 _____ C:\Users\ACRIS-WJ\Desktop\Learn-at-home_SEO_Abstimmung-Protokoll_201601_V01.mm
2016-01-14 09:29 - 2016-01-14 09:29 - 00001970 _____ C:\Users\ACRIS-WJ\Downloads\Keyword Planner 2016-01-14 at 09_28_57.csv
2016-01-13 08:34 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-13 08:34 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-13 08:34 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-13 08:34 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-13 08:34 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-13 08:34 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-13 08:34 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-13 08:34 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-13 08:34 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-13 08:34 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-13 08:34 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-13 08:34 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-13 08:34 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-13 08:34 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-13 08:34 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-13 08:34 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-13 08:34 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-13 08:34 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-13 08:34 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-13 08:34 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-13 08:34 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-13 08:34 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-13 08:34 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-13 08:34 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-13 08:34 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-13 08:34 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-13 08:34 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-13 08:34 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-13 08:34 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-13 08:34 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-13 08:34 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-13 08:34 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-13 08:34 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-13 08:34 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-13 08:34 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-13 08:34 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-13 08:34 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-13 08:34 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-13 08:34 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-13 08:34 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-13 08:34 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-13 08:34 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-13 08:34 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-13 08:34 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-13 08:34 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-13 08:34 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-13 08:34 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-13 08:34 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-13 08:34 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-13 08:34 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-13 08:34 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-13 08:34 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-13 08:34 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-13 08:34 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-13 08:34 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-13 08:34 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-13 08:34 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-13 08:34 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-13 08:34 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-13 08:34 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-13 08:34 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-13 08:34 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-13 08:34 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-12 07:20 - 2016-02-06 13:44 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2016-01-11 17:01 - 2016-01-11 17:01 - 00000220 _____ C:\Users\ACRIS-WJ\Desktop\mailtext.txt
2016-01-11 08:07 - 2016-02-06 13:48 - 00004172 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{601DF0AE-DAEF-4271-A25F-1E73E6642EEB}
2016-01-11 07:30 - 2016-01-11 07:30 - 00003628 _____ C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher
2016-01-08 08:18 - 2016-01-08 08:19 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\MicrosoftEdge
2016-01-07 16:16 - 2016-01-07 16:16 - 00052580 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-DE_201512_V01.csv
2016-01-07 15:54 - 2016-01-07 15:54 - 00044556 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-CH_201512_V01.csv
2016-01-07 15:35 - 2016-01-28 11:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-07 15:27 - 2016-01-07 15:27 - 00002642 _____ C:\Users\Public\Desktop\Skype.lnk
2016-01-07 15:27 - 2016-01-07 15:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-01-07 15:27 - 2016-01-07 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-01-07 14:55 - 2016-01-07 14:55 - 00320788 _____ C:\WINDOWS\Minidump\010716-57718-01.dmp
2016-01-07 11:38 - 2016-01-07 11:38 - 00049624 _____ C:\Users\ACRIS-WJ\Downloads\Keywords_ERP-AT_201512_V01.csv
2016-01-07 07:04 - 2012-03-26 05:00 - 00389120 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMB9.DLL
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-02-06 13:48 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-06 13:47 - 2015-12-02 07:47 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\CrashDumps
2016-02-06 13:46 - 2012-09-19 08:13 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\Skype
2016-02-06 13:45 - 2014-01-10 13:09 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-06 13:45 - 2012-09-19 08:13 - 00000000 ____D C:\ProgramData\Skype
2016-02-06 13:43 - 2014-01-10 13:09 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-05 13:55 - 2015-12-10 09:45 - 00001160 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001UA.job
2016-02-05 13:38 - 2015-12-02 07:50 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Security with Backup
2016-02-05 13:32 - 2015-12-18 13:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-05 13:31 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-05 13:30 - 2015-12-18 12:34 - 00000000 ____D C:\Users\ACRIS-WJ
2016-02-05 13:28 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-05 13:11 - 2015-12-31 12:06 - 540361352 _____ C:\WINDOWS\MEMORY.DMP
2016-02-05 13:11 - 2015-12-31 12:06 - 00000000 ____D C:\WINDOWS\Minidump
2016-02-05 13:11 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-02-05 11:01 - 2012-09-16 06:59 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-02-05 10:47 - 2014-01-10 13:11 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-05 10:47 - 2014-01-10 13:11 - 00002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-04 09:56 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-02-03 15:55 - 2015-12-10 09:45 - 00001108 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001Core.job
2016-02-03 15:50 - 2015-12-10 09:45 - 00004286 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001UA
2016-02-03 15:50 - 2015-12-10 09:45 - 00003910 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001Core
2016-02-03 15:39 - 2014-01-10 13:09 - 00004196 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-03 15:39 - 2014-01-10 13:09 - 00003964 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-02 12:09 - 2012-10-25 09:30 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\IBP
2016-02-01 13:46 - 2012-10-25 09:15 - 00000000 ____D C:\Program Files (x86)\IBP 12
2016-02-01 12:40 - 2013-09-30 08:37 - 00591953 _____ C:\Users\ACRIS-WJ\Desktop\ACRIS_PPTX_Vorlage_Martin_Auinger_V01.pptx
2016-02-01 07:39 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-02-01 07:22 - 2015-12-18 13:12 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-01-29 14:05 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2016-01-29 14:05 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-01-29 14:05 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-29 14:05 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-29 14:04 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-01-29 14:04 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-01-29 14:04 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-28 11:38 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-27 14:04 - 2012-10-31 12:18 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\MySEOSolution_DB_Dir
2016-01-27 14:04 - 2012-09-09 15:15 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\VirtualStore
2016-01-27 13:42 - 2013-04-02 09:11 - 00000000 ____D C:\Users\ACRIS-WJ\.freemind
2016-01-26 11:15 - 2015-12-18 13:11 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\Packages
2016-01-26 09:50 - 2015-11-30 09:23 - 00000000 ____D C:\ProgramData\Norton
2016-01-22 06:29 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-01-21 15:47 - 2015-04-02 08:13 - 00000053 _____ C:\Users\ACRIS-WJ\Downloads\googlecbd7628e07b0c154.html
2016-01-20 12:32 - 2013-11-26 15:05 - 00000000 ____D C:\Program Files (x86)\Screaming Frog SEO Spider
2016-01-19 16:00 - 2013-10-09 09:04 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Roaming\Google
2016-01-19 07:16 - 2015-12-11 10:51 - 00000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2016-01-19 07:15 - 2015-12-11 11:10 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2016-01-14 15:19 - 2012-10-01 11:00 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\ElevatedDiagnostics
2016-01-14 12:09 - 2015-12-18 12:31 - 02094824 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-14 12:09 - 2015-10-30 19:35 - 00892952 _____ C:\WINDOWS\system32\perfh007.dat
2016-01-14 12:09 - 2015-10-30 19:35 - 00198500 _____ C:\WINDOWS\system32\perfc007.dat
2016-01-14 10:54 - 2014-12-29 09:08 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-01-14 10:53 - 2015-11-13 07:36 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-13 11:19 - 2013-07-19 11:58 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-13 11:04 - 2012-09-15 19:52 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-12 07:14 - 2013-08-28 07:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-11 07:28 - 2015-12-18 13:28 - 00000000 ____D C:\Program Files\DIFX
2016-01-11 07:26 - 2012-02-24 03:42 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-01-11 07:23 - 2015-12-18 13:26 - 00000000 ____D C:\ProgramData\SetupTPDriver
2016-01-07 15:27 - 2014-03-12 07:51 - 00000000 ____D C:\Users\ACRIS-WJ\AppData\Local\Skype
2016-01-07 15:04 - 2015-12-18 12:18 - 00269632 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-07 14:59 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-01-07 08:01 - 2013-04-02 08:45 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-01-07 07:17 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-01-26 21:25 - 2016-02-06 13:42 - 0000387 _____ () C:\Users\ACRIS-WJ\AppData\Roaming\sp_data.sys
2015-12-31 12:03 - 2015-12-31 12:03 - 0000000 _____ () C:\Users\ACRIS-WJ\AppData\Local\{0783DA65-9600-48F3-9EDE-8476A0C728F4}
2012-10-19 11:42 - 2012-10-19 11:42 - 0000000 _____ () C:\ProgramData\0x0304A000.sfl
2015-01-07 08:53 - 2015-01-07 08:53 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-02-24 03:42 - 2010-10-06 18:45 - 0131984 _____ () C:\ProgramData\FullRemove.exe
2012-09-18 00:19 - 2015-01-07 08:45 - 0006745 _____ () C:\ProgramData\hpzinstall.log
2013-01-08 18:27 - 2013-01-08 18:27 - 0006080 _____ () C:\ProgramData\NanoRepository.bin
2012-07-26 22:28 - 2012-07-26 22:29 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2012-07-26 22:26 - 2012-07-26 22:27 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2012-07-26 22:26 - 2012-07-26 22:26 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Einige Dateien in TEMP:
====================
C:\Users\ACRIS-WJ\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-02-02 08:44
==================== Ende von FRST.txt ============================
|
|
06.02.2016, 14:05
| #15 |
| | Windows 10: DNS Unlocker Adware lässt sich nicht entfernen und die Addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-01-2016
durchgeführt von ACRIS-WJ (2016-02-06 13:51:10)
Gestartet von C:\Users\ACRIS-WJ\Downloads\FRST-OlderVersion
Windows 10 Home (X64) (2015-12-18 12:10:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
ACRIS-WJ (S-1-5-21-1028448690-2613926920-131507622-1001 - Administrator - Enabled) => C:\Users\ACRIS-WJ
Administrator (S-1-5-21-1028448690-2613926920-131507622-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1028448690-2613926920-131507622-503 - Limited - Disabled)
Gast (S-1-5-21-1028448690-2613926920-131507622-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1028448690-2613926920-131507622-1008 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Norton Security mit Backup (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Security mit Backup (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton Security mit Backup (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
AdWords Editor (HKLM-x32\...\{183BA000-9EB8-11E5-AD70-B8AC6F88925A}) (Version: 11.2.3.0 - Google)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS)
Cisco AnyConnect VPN Client (HKLM-x32\...\{F4C6DD02-8ACA-4354-BA36-9FFC3B767E73}) (Version: 2.5.2014 - Cisco Systems, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ETDWare PS/2-X64 10.5.10.0 (HKLM\...\Elantech) (Version: 10.5.10.0 - ELAN Microelectronic Corp.)
FileZilla Client 3.7.3 (HKLM-x32\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.1 - )
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Google AdWords Editor (HKLM-x32\...\{14069A87-872C-41E6-9D36-B1BE3870C35A}) (Version: 10.6.0 - Google)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.103 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
HP Officejet Pro 8610 - Grundlegende Software für das Gerät (HKLM\...\{C1586445-E3CA-45F0-A754-E6C2784CDDB7}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP Officejet Pro 8620 - Grundlegende Software für das Gerät (HKLM\...\{9EFED617-DC37-46FC-BFD4-ED096BAD3591}) (Version: 32.0.90.45518 - Hewlett-Packard Co.)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.1.40.3 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.0.30.219 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
IBP 12.0.4 (HKLM-x32\...\IBP12_is1) (Version: 12.0.4 - Axandra GmbH)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft Lync 2010 Attendee (HKLM-x32\...\{44228375-A198-489B-B90F-F88A1A78D5F5}) (Version: 4.0.7577.4415 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}) (Version: - Microsoft)
Microsoft Office Home and Business 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 43.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 de)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
myBitCast 1.0.0.3 (HKLM\...\myBitCast) (Version: 1.0.0.3 - ASUS Cloud Corporation)
Norton Security mit Backup (HKLM-x32\...\NSBU) (Version: 22.5.5.15 - Symantec Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation)
OpenVPN 2.3.1-I001 (HKLM\...\OpenVPN) (Version: 2.3.1-I001 - )
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Password Safe and Repository 7 (HKLM\...\{7B6F4DF3-57DA-49AD-8A6B-5639E9D66E8B}) (Version: 7.4.2.2242 - MATESO GmbH)
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.26.25466 - pdfforge GmbH)
PDF Architect 4 Create Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (Version: 4.0.9.25450 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.2.1 - pdfforge)
PR-Gateway Desktop (HKLM-x32\...\{C7DBB71E-B7BF-4F81-AD43-0BC30E7CC2D2}) (Version: 1.0.67 - ADENION GmbH)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 5.1 - Screaming Frog Ltd)
SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.)
SpyHunter 4 (HKLM-x32\...\SpyHunter) (Version: 4.21.18.4608 - Enigma Software Group, LLC)
Synchronize It! (HKLM-x32\...\Synchronize It!_is1) (Version: 3.5 - Grig Software)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VS10Runtimex64 (Version: 1.0.0 - sourcefire) Hidden
Windows-Treiberpaket - ASUS (ATP) Mouse (06/17/2015 1.0.0.262) (HKLM\...\14588A15B66655338DBCC021FFA81E31DC281859) (Version: 06/17/2015 1.0.0.262 - ASUS)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1028448690-2613926920-131507622-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\ACRIS-WJ\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1028448690-2613926920-131507622-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1028448690-2613926920-131507622-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1028448690-2613926920-131507622-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\ACRIS-WJ\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll (Google Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00A65167-417B-4721-A69D-029BA8E04D79} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)
Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {02285EEC-3D02-4661-875E-128CE1EEB2D2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001UA => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe [2015-12-10] (Google Inc.)
Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {0C1BB870-2EF1-4FF4-B346-A8396882ACB5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {0C1E0D1A-5156-4DED-9048-7CB469FE419F} - \ASUS SmartLogon Console Sensor -> Keine Datei <==== ACHTUNG
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {1482538A-3CE9-49DF-8C65-83E008F73FA4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {159F33C0-D36C-4453-A2FA-F2FA9970223D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {18C3CA2C-15AF-4F2D-AD16-AFDDDD500E50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {22486FD4-425B-47CA-86F5-A9C48020AADA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {26A577F7-E82A-4BA0-8AEC-A8FC35793F3E} - System32\Tasks\Norton Security with Backup\Norton Error Processor => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {28DF92BE-D510-4E3C-825D-4415E7512F6F} - \ASUS Quick Gesture -> Keine Datei <==== ACHTUNG
Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {314EE703-4253-4154-BEFC-21DF1718EA63} - System32\Tasks\Norton Security with Backup\Norton Autofix => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {31953383-343C-4096-A0D9-43CC50B622EC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-11-04] (Hewlett-Packard)
Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {44972927-CEA7-432B-B544-9DD166FA8748} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2015-11-04] (Hewlett-Packard)
Task: {44E0B584-3FAE-4BF8-8389-AEF78547E1AB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {45F4BB6B-0F0E-4CD6-B821-1B6757DB8EAB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {5039C69D-63D2-43FE-8942-E31DDB5F1468} - \ATKOSD2 -> Keine Datei <==== ACHTUNG
Task: {5440205A-E883-4170-8CDA-B66A5F993796} - \ASUS Quick Gesture (x64) -> Keine Datei <==== ACHTUNG
Task: {5522A899-1BB1-4E51-88C4-0843C7917048} - \ASUS Live Update -> Keine Datei <==== ACHTUNG
Task: {5555DD55-100B-425D-860D-0D43D72F6715} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-01-06] (Hewlett-Packard)
Task: {59566753-1F0B-4E33-8E18-2A6A36CBA072} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\WSCStub.exe [2015-11-23] (Symantec Corporation)
Task: {5C6EDD58-B641-4BF7-AD60-27E34E37D907} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {694C80B2-AD7E-4EFC-838F-EB7D84A07685} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-01-12] (Hewlett-Packard Company)
Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {7ADCBC3F-BB42-4A6C-B230-07024A21525C} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {8B03FC8E-C437-4D46-8729-D4B5BC361D20} - \SidebarExecute -> Keine Datei <==== ACHTUNG
Task: {9674329A-D0BE-4B51-9BE7-920F8772FB03} - \ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon -> Keine Datei <==== ACHTUNG
Task: {A06525AB-65D5-41EB-A020-791A2E1FDEF0} - System32\Tasks\Norton Security with Backup\Norton Error Analyzer => C:\Program Files (x86)\Norton Security with Backup\Engine\22.5.5.15\SymErr.exe [2015-11-05] (Symantec Corporation)
Task: {A1575A80-9EA9-4536-B9E1-7A01BA97E55C} - \ASUS USB Charger Plus -> Keine Datei <==== ACHTUNG
Task: {A876956B-F793-4D0B-9B47-2EC63D2D5F92} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A8F3F303-2786-44EA-8FC4-B00D927E5381} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-08-23] (AsusTek)
Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {AF6314F0-875E-4F05-A4AC-D01E3C3F624C} - \ASUS Wireless Console 3 -> Keine Datei <==== ACHTUNG
Task: {B759A62F-20F0-429F-947C-6843791B329B} - \ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d -> Keine Datei <==== ACHTUNG
Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {C902394F-28AB-4939-A1B6-171B095AA205} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001Core => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe [2015-12-10] (Google Inc.)
Task: {CB25076C-B688-4F26-AA97-FDE38A135211} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {D3F0F16B-E47D-4046-9E35-16BDB983CD5F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {E6B22910-6B71-4632-A84B-F188488A1F5B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {EE6704B7-09F5-4E05-916B-7E1C6E161F5A} - \ASUS P4G -> Keine Datei <==== ACHTUNG
Task: {EE7304C1-79F7-4A88-B83F-C4F524B8DCD6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F8C36CC9-3AC6-4738-903A-FDC9058D6677} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {F9AA969B-279A-47C2-A8EC-87DFB53101C6} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {FB8DCDAC-37AD-4328-A5B1-D9490FF1D014} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001Core.job => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1028448690-2613926920-131507622-1001UA.job => C:\Users\ACRIS-WJ\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2012-07-26 22:01 - 2012-02-21 20:29 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-18 12:26 - 2015-07-13 18:37 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-12-18 12:10 - 2015-12-18 12:10 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-18 12:10 - 2015-12-18 12:10 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-18 16:12 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 16:12 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-13 08:34 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-13 08:34 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-28 11:00 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-28 11:00 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-01 21:00 - 2015-06-01 21:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-11-20 16:16 - 2012-11-20 16:16 - 00135168 _____ () C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
2016-01-22 06:30 - 2016-01-22 06:31 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-10-30 08:18 - 2015-10-30 08:18 - 00218456 _____ () c:\windows\system32\WerEtw.dll
2012-07-26 22:01 - 2012-02-21 20:09 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2012-05-08 00:48 - 2012-05-08 00:48 - 00009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-08-20 17:57 - 2010-08-20 17:57 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-20 17:57 - 2010-08-20 17:57 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2016-02-05 10:47 - 2016-02-03 08:27 - 01632584 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libglesv2.dll
2016-02-05 10:47 - 2016-02-03 08:27 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\libegl.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2012-01-13 01:17 - 2012-01-13 01:17 - 00204800 _____ () C:\Program Files (x86)\ASUS\VirtualCamera\virtualCamera.ax
2016-01-22 06:30 - 2016-01-22 06:31 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 06:30 - 2016-01-22 06:31 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1028448690-2613926920-131507622-1001\...\100sexlinks.com -> 100sexlinks.com
Da befinden sich 4789 mehr Seiten.
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1028448690-2613926920-131507622-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ACRIS-WJ\AppData\Local\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupreg: FlashPlayerUpdate => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_135_Plugin.exe -update plugin
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{39C4565B-F15C-4D6A-A8A8-02DD2B47F11E}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{FDA8ED5D-CC04-4C25-B67B-93260ADFBD7A}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\Bin\DeviceSetup.exe
FirewallRules: [{DD836349-79DA-4C22-885D-7C64C5E925C1}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\SendAFax.exe
FirewallRules: [{496B55A3-2CC0-470B-810E-4AF72938FB87}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\DigitalWizards.exe
FirewallRules: [{899723B6-5FB6-4B1F-9787-FBC91873C5C1}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\FaxApplications.exe
FirewallRules: [{D9752121-3101-433E-8EDD-60E9A6012F82}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CEA8964A-2E2A-4707-87CF-C52E88267DD7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{00633352-68BE-479F-BB3C-445E975B4A45}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{D55D8AF4-AA05-4547-B33A-7BBE9309E9E6}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{3C7C44EE-C78A-4153-B0A6-2CE7035E2A6D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7DAE5D82-098F-4251-83D1-A3522729B998}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{72F4E7F5-1D35-46C7-8A7F-7C9754DA6C30}C:\program files (x86)\password safe and repository 7\psr.exe] => (Allow) C:\program files (x86)\password safe and repository 7\psr.exe
FirewallRules: [TCP Query User{0C0D3981-65BA-4EFB-95AF-1DC8C72B7B4C}C:\program files (x86)\password safe and repository 7\psr.exe] => (Allow) C:\program files (x86)\password safe and repository 7\psr.exe
FirewallRules: [{2C949379-DB84-4A8F-AE56-C4A6FE4FEFF9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{19A7CC4D-13A7-4221-AE77-B16FC8885A8F}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{0288AD36-17D8-4A9A-B914-6AD2129D1E32}] => (Allow) LPort=5357
FirewallRules: [{F88101E5-DD06-4553-9CD1-C96E6C899D53}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe
FirewallRules: [{F31A6389-D96F-473D-B70E-5F61A32461EE}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe
FirewallRules: [{B4869BF9-3BA9-4060-9D4A-20602591C8CB}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe
FirewallRules: [{853D4B9A-6339-4A26-8E8E-2E00AE0D29A2}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe
FirewallRules: [{E57157AB-D1BB-4F29-9D3D-90C4F09E05F0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2399799E-70CF-491E-9F40-16829B19BBE2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{45A38301-6AA1-49BC-A998-D0C30CD0B356}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E1B86B90-4CC1-43B0-8D4D-A1B6CB693636}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{35AE5D5B-2357-48DD-9695-80E5AC7F8EC0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F6391E80-81D3-4749-AA06-E5CCB07B4046}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{06B29911-BC74-422D-8A82-3C109F3152E6}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{6181DBF9-FC61-4797-BE71-FE3BD962B634}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{88604617-6521-4547-A9B6-C79E9ADA1DB6}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{B468B4AF-11C9-4E70-BCE5-5E9EB746EB3D}] => (Allow) C:\Program Files (x86)\PR-Gateway Desktop\PR-GatewayDesktop.exe
FirewallRules: [{D9DEEEA5-4B21-4434-824A-AA415375C567}] => (Allow) C:\Users\ACRIS-WJ\AppData\Local\Microsoft Lync Attendee\AttendeeCommunicator.exe
FirewallRules: [{E542F073-057F-4A07-9E16-2ECE422B3D44}] => (Allow) C:\Users\ACRIS-WJ\AppData\Local\Microsoft Lync Attendee\AttendeeCommunicator.exe
FirewallRules: [{3FC013CE-E8CD-4438-8ABA-794598CE5D0E}] => (Allow) C:\Users\ACRIS-WJ\AppData\Local\Microsoft Lync Attendee\AttendeeCommunicator.exe
FirewallRules: [{7EAC5046-E3D5-4F72-91AE-EAEF3ADA76EC}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{7EECB707-8B06-4848-A2C2-AF2C538DD6D5}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{EDE77172-3CB0-4C62-94DC-7AFB5DC4D7B3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{32E2D853-977D-4469-8D5A-E993AA93F9A6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{AFF626A3-7529-4502-9CFC-E3849BB603AC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{A62C60BD-B965-4BD8-A910-476D8423B82B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{AB61ED48-F6D6-4404-9842-9860A5C143F4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{CBCD2F85-853D-49D5-A5A5-B01AF333B4BA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{200E2CD2-3025-476C-B6FA-946B212869B9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{57A9A445-28C8-4125-9AD2-5BBF96FD40A3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{D64EFC5A-827F-4CF2-B9FF-BDCACD771222}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{75670327-2E62-4A87-810D-FD12E8AAD743}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{4351C3BA-AE0C-47FD-91C7-66FA43503020}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{3B119410-763E-497F-964B-DEE7D604374B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{D649C54C-8DFF-4EE0-BF37-A0F2927D369B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{365D20CB-7B90-4DCC-A209-FA639BB725B2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{7CB0E860-32FD-4CCA-A36C-1CA77211DF5C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{E291272E-73CD-46F8-9D9E-7C4ED1C8A193}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{99E8132B-AF33-42DB-BAA3-42D24F19251C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{93E7086B-6A55-48F2-9784-1F3DF07FE5F5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{A085C990-4926-40D6-BBD2-4FF576B24614}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
27-01-2016 05:33:28 Geplanter Prüfpunkt
01-02-2016 11:38:34 Windows Update
05-02-2016 09:55:39 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer:
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (02/06/2016 01:47:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 11.10.13.1, Zeitstempel: 0x52f202d0
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 11.10.13.1, Zeitstempel: 0x52f20257
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000c292
ID des fehlerhaften Prozesses: 0x3d0
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3
Vollständiger Name des fehlerhaften Pakets: NvBackend.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NvBackend.exe5
Error: (02/06/2016 01:47:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 11.10.13.1, Zeitstempel: 0x52f202d0
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 11.10.13.1, Zeitstempel: 0x52f20257
Ausnahmecode: 0xc00001a5
Fehleroffset: 0x000c9860
ID des fehlerhaften Prozesses: 0x3d0
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3
Vollständiger Name des fehlerhaften Pakets: NvBackend.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NvBackend.exe5
Error: (02/05/2016 01:32:23 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
Error: (02/05/2016 01:32:23 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to load Audio DLL [126]
Error: (02/05/2016 01:27:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 11.10.13.1, Zeitstempel: 0x52f202d0
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 11.10.13.1, Zeitstempel: 0x52f20257
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000c292
ID des fehlerhaften Prozesses: 0x778
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3
Vollständiger Name des fehlerhaften Pakets: NvBackend.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NvBackend.exe5
Error: (02/05/2016 01:27:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvBackend.exe, Version: 11.10.13.1, Zeitstempel: 0x52f202d0
Name des fehlerhaften Moduls: nvspcap.dll_unloaded, Version: 11.10.13.1, Zeitstempel: 0x52f20257
Ausnahmecode: 0xc00001a5
Fehleroffset: 0x000c9860
ID des fehlerhaften Prozesses: 0x778
Startzeit der fehlerhaften Anwendung: 0xNvBackend.exe0
Pfad der fehlerhaften Anwendung: NvBackend.exe1
Pfad des fehlerhaften Moduls: NvBackend.exe2
Berichtskennung: NvBackend.exe3
Vollständiger Name des fehlerhaften Pakets: NvBackend.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NvBackend.exe5
Error: (02/05/2016 01:12:11 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [0]
Error: (02/05/2016 01:12:11 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to load Audio DLL [126]
Error: (02/05/2016 09:56:08 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/04/2016 05:44:44 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (EventID: 1) (User: )
Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008]
Systemfehler:
=============
Error: (02/06/2016 01:47:03 PM) (Source: DCOM) (EventID: 10010) (User: ACRIS-ASUS-PC)
Description: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
Error: (02/06/2016 01:43:53 PM) (Source: DCOM) (EventID: 10010) (User: ACRIS-ASUS-PC)
Description: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
Error: (02/05/2016 01:56:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_358e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/05/2016 01:56:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _358e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/05/2016 01:56:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_358e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/05/2016 01:56:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_358e8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (02/05/2016 01:56:10 PM) (Source: DCOM) (EventID: 10010) (User: ACRIS-ASUS-PC)
Description: {0E442A7D-63CD-4F8F-BFE2-D29A0DBE6664}
Error: (02/05/2016 01:34:51 PM) (Source: DCOM) (EventID: 10010) (User: ACRIS-ASUS-PC)
Description: {5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}
Error: (02/05/2016 01:32:19 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.
Error: (02/05/2016 01:30:18 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
CodeIntegrity:
===================================
Date: 2016-02-01 07:34:39.526
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-01 07:34:39.507
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-01 07:34:38.871
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-02-01 07:34:38.863
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-26 20:13:53.762
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:53.745
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:53.725
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:53.556
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-26 20:13:49.911
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-22 10:02:43.177
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Pentium(R) CPU B970 @ 2.30GHz
Prozentuale Nutzung des RAM: 58%
Installierter physikalischer RAM: 3979.91 MB
Verfügbarer physikalischer RAM: 1640.97 MB
Summe virtueller Speicher: 8075.91 MB
Verfügbarer virtueller Speicher: 5493.46 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:185.87 GB) (Free:126.15 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (DATA) (Fixed) (Total:254.14 GB) (Free:253.97 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 8DED5BA9)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
| Themen zu Windows 10: DNS Unlocker Adware lässt sich nicht entfernen |
| bluescreen, browser, computer, converter, desktop, dns unlocker, dnsapi.dll, entfernen, error, esgscanner.sys, failed, firefox, flash player, google, home, homepage, internet, mozilla, mp3, officejet, onedrive, registry, scan, security, software, suchmaschine, symantec, system, tarma, usb, windows, windowsapps |
Linear-Darstellung
