Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 07.03.2016, 12:20   #1
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hallo zusammen, ich habe mir den websearch Virus (ich weis nicht ob virus die richtige bezeichnung ist - ich nenn Ihn einfach mal so) eingefangen..... komischerweise war es eine bekannte große Website auch von AVast als sicher eingestuft - habe jetzt schon herausgefunden dass man dem nicht immer vertrauen sollte.

Ok, zurück zum Problem. Ich habe Websearch erfolgreich entfernt (oder auch nicht) da Avast jedesmal eine Bedrohungsmeldung bringt sobald ich bei Google Chrome eine Internetseite öffne und man mich hierher umleiten (so verstehe ich die Fehlermeldung) will:

hxxp://95.211.240.247/public/AddOn2/security/s.js

Ich kann dies zwar mit ADW Cleaner und Malewarbytes Anti-Maleware löschen dann ist auch Ruhe, aber nach jedem Systemstart geht die Prozedur mit der Virenmeldung wieder von vorne los und die zuvor von ADW und MAM sind wieder da. Ich denke der Vurus stellt sich da selber wieder her.

Hat hier jemand einen Tipp wie ich das Löschen kann?

Alt 07.03.2016, 12:22   #2
Deathkid535
/// Malwareteam
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........





Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen.

Bitte beachte, dass es ein paar Regeln gibt:
  • Bitte lies meine Posts komplett durch bevor du sie abarbeitest
  • Wenn ein Problem auftauchen sollte, unterbreche deine Arbeit, poste die entstandenen Logs und schildere dieses so genau wie möglich.
  • Bitte kein Crossposting
  • Installiere oder Deinstalliere keine Software ohne Aufforderung
  • Bitte verwende nur die Tools welche hier im Thread erwähnt werden
  • Antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
  • Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen

Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM!

Posten in CODE-Tags

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.


Kannst du mir noch bitte die neusten Logs von AdwCleaner und MBAM posten?

Schritt # 1: FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Schritt # 2: Bitte Posten
  • Die FRST.txt
  • Die Addition.txt
__________________

__________________

Alt 08.03.2016, 15:19   #3
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hallo Dennis,

vielen Dank für deine Hilfe. Ich versuche mich so gut es geht an deine Anweisungen zu halten.

Zuerst einmal ADW habe ich gelöscht. Trotzdem dass ich Ihn von einer bekannten Plattform geladen habe (CH.. .de) hat mir hier AVAST angeschlagen und Ihn als Virus idenifiziert. Deshalb habe ich hier keine Logs :-(.

Anbei der Log von MBAW:

Code:
ATTFilter
<?xml version="1.0" encoding="UTF-8" ?>
<logs>
   <record severity="debug" LoggingEventType="4" datetime="2016-03-08T12:59:52.857928+01:00" source="Protection" type="Error" username="SYSTEM" systemname="ARBEIT" code="13" last_modified_tag="9d6acf92-71cf-4f51-b1bc-58c71252de7d" message="IsLicensed"></record>
   <record severity="debug" LoggingEventType="2" datetime="2016-03-08T12:59:53.045422+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="ARBEIT" last_modified_tag="48e9c732-4bb2-4729-bc3f-f7760c71fd59" result="Stopping" subtype="Malware Protection"></record>
   <record severity="debug" LoggingEventType="2" datetime="2016-03-08T12:59:53.045422+01:00" source="Protection" type="Protection" username="SYSTEM" systemname="ARBEIT" last_modified_tag="da6bd017-d0c3-44e6-8e53-5a0f5bfa1c49" result="Stopped" subtype="Malware Protection"></record>
</logs>
         
Ich lade mir jetzt FRST runter und poste das Ergebnis dann in einem eigenen Post.

Vielen Dank

Hallo Dennis,

nachdem ich Probleme beim Runterladen hatte, habe ich mithilfe eines anderen PC´s endlich FRST runterladen und per Dropbox verschieben können. Mein PC läuft auf einmal deutlich langsamer und beim ausführen von FRST hat er sich 2x verabschiedet.

Hier wie gewünscht die beiden Auswertungen:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von Manfred (Administrator) auf ARBEIT (08-03-2016 15:03:50)
Gestartet von C:\Users\Manfred\Desktop
Geladene Profile: Manfred (Verfügbare Profile: Manfred & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
(Microsoft Corporation) C:\Windows\System32\lpksetup.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe
(NVIDIA Corporation) C:\Users\Manfred\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(SugarSync, Inc.) C:\Program Files (x86)\SugarSync\SugarSync.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Dropbox, Inc.) C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe
(RSA, The Security Division of EMC.) C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe
() C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.)
HKLM-x32\...\Run: [RSA Card Conversion Utility] => C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe [3499728 2010-08-27] (RSA, The Security Division of EMC.)
HKLM-x32\...\Run: [onlinebrief24-ebdhelper] => C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe [692224 2015-04-01] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [221216 2015-11-18] (Geek Software GmbH)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-03-04] (AVAST Software)
HKLM-x32\...\RunOnce: [{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}] => C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe [510976 2015-09-21] (Microsoft Corporation) <===== ACHTUNG
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [SugarSync] => C:\Program Files (x86)\SugarSync\SugarSync.exe [18880528 2015-09-28] (SugarSync, Inc.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2895552 2015-07-24] (Valve Corporation)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [THPanel] => C:\Program Files (x86)\Thunder Master\THPanel.exe [2197288 2014-10-17] (Palit Microsystems Ltd.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify Web Helper] => C:\Users\Manfred\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-04-23] (Spotify Ltd)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify] => C:\Users\Manfred\AppData\Roaming\Spotify\Spotify.exe [7168568 2015-04-23] (Spotify Ltd)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Dropbox Update] => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Adobe Acrobat Synchronizer] => "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\RunOnce: [Uninstall C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [232960 2015-10-30] (Microsoft Corporation)
SSODL: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\system32\SSCbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-04] (AVAST Software)
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\system32\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncSharedSyncing] -> {F7395C2E-A5D8-4a32-9536-5C6A9F1DC450} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncSynced] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2016-03-07]
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-03-07]
ShortcutTarget: Dropbox.lnk -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CHR HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{018df403-5469-41da-bf60-c308cf3fe914}: [DhcpNameServer] 192.168.178.1
ManualProxies: 

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {4E911957-A024-4D49-94F3-E92DB8FBF8EF} URL = hxxp://www.bing.com/search?FORM=BDT3DF&PC=BDT3&dt=072313&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {90BE9D6A-D95E-4831-83DC-579445936B92} URL = 
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-05] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-04] (AVAST Software)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-23] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-04] (AVAST Software)
BHO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-23] (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF NewTab: about:newtab
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: hxxps://www.google.com/?trackid=sp-006
FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-07-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-04] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Manfred\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-10-07] (Citrix Online)
FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-03-24] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\google-avast.xml [2016-03-04]
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\yahoo-avast.xml [2015-06-17]
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\google-avast.xml [2016-03-04]
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo-avast.xml [2015-06-17]
FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert]
FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "hxxp://google.de/","hxxps://mail.google.com/mail/u/0/#inbox","hxxp://www.bing.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\pdf.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll => Keine Datei
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-05]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-05]
CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-05]
CHR Extension: (Google Kalender) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2016-03-05]
CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-07]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-05]
CHR Extension: (Dropbox) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2016-03-05]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-05]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-05]
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Präsentationen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-01]
CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-01]
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-27]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-09]
CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Lumin - Best Document Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbkidnlfklnjanneifjjojofckpcogcl [2015-07-27]
CHR Extension: (Gmail offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-07-27]
CHR Extension: (Google Tabellen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-01]
CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20]
CHR Extension: (In Google Drive speichern) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2015-07-27]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-04]
CHR Extension: (PDF Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jccchjobcggajhnmckffhcahkkbioifn [2015-08-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-01]
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-11]
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-05]
CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-07]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-11]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-11]
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-21]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-21]
CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-21]
CHR Extension: (Avast SafePrice) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-21]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-21]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-26]
CHR Extension: (Google Wallet) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-21]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-04]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-09-15] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-04] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-04] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-19] (Microsoft Corporation) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-04] (Electronic Arts)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Datei ist nicht signiert]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-06] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-13] (Advanced Micro Devices, Inc.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-03-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-04] (AVAST Software)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-03-04] ()
S3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [Datei ist nicht signiert]
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
R3 SSCBFS3; C:\Windows\System32\drivers\sscbfs3.sys [347904 2013-01-30] (EldoS Corporation)
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2013-02-22] (Anchorfree Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Datei ist nicht signiert]
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S0 wypvcacb; System32\drivers\pupio.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 14:54 - 2016-03-08 15:03 - 00039683 _____ C:\Users\Manfred\Desktop\FRST.txt
2016-03-08 14:54 - 2016-03-08 15:03 - 00000000 ____D C:\FRST
2016-03-08 14:53 - 2016-03-08 14:54 - 02374144 _____ (Farbar) C:\Users\Manfred\Desktop\FRST64.exe
2016-03-08 13:02 - 2016-03-08 13:02 - 00000000 ___HD C:\OneDriveTemp
2016-03-08 12:54 - 2016-03-08 12:57 - 00002435 _____ C:\Users\Manfred\Desktop\Manfred - Chrome.lnk
2016-03-07 13:41 - 2016-03-07 13:42 - 03840080 _____ (AVAST Software) C:\Users\Manfred\Downloads\avast-browse104-cleanup-sfx.exe
2016-03-07 13:41 - 2016-03-07 13:42 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (2).pdf
2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (1).pdf
2016-03-07 11:26 - 2016-03-07 11:26 - 03430855 _____ C:\Users\Manfred\Downloads\scan.pdf
2016-03-07 10:50 - 2016-03-07 10:50 - 00244429 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr.pdf
2016-03-07 10:16 - 2016-03-07 10:16 - 00000000 __SHD C:\found.001
2016-03-05 16:13 - 2016-03-04 12:23 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-03-05 16:02 - 2016-03-05 16:02 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup (1).exe
2016-03-05 14:29 - 2016-03-05 14:29 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup.exe
2016-03-04 13:58 - 2016-03-08 14:26 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-03-04 13:53 - 2016-03-07 10:39 - 00001172 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-03-04 13:53 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-03-04 13:53 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-03-04 13:53 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-03-04 13:51 - 2016-03-04 13:51 - 01470472 _____ C:\Users\Manfred\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2016-03-04 13:43 - 2016-03-04 13:43 - 05600464 _____ (Piriform Ltd) C:\Users\Manfred\Downloads\ccsetup515_slim.exe
2016-03-04 13:09 - 2016-03-04 13:09 - 01518592 _____ C:\Users\Manfred\Downloads\adwcleaner_5.037.exe
2016-03-04 13:05 - 2016-03-07 10:39 - 00001915 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-03-04 13:05 - 2016-03-04 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-03-04 12:23 - 2016-03-04 12:23 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-03-04 12:21 - 2016-03-07 10:39 - 00002030 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-03-04 12:21 - 2016-03-07 10:39 - 00002012 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-03-04 12:21 - 2016-03-04 12:21 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\AVAST Software
2016-03-04 12:20 - 2016-03-04 12:25 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-03-04 12:20 - 2016-03-04 12:25 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-04 11:34 - 2016-03-04 11:34 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2016-03-04 11:31 - 2016-03-04 11:32 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Manfred\Downloads\SpyHunter-Installer (1).exe
2016-03-04 11:05 - 2016-03-04 11:05 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\dlg
2016-03-04 11:00 - 2016-03-04 11:10 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-03-04 10:59 - 2016-03-04 10:59 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-03-03 14:43 - 2016-03-03 14:43 - 00066341 _____ C:\Users\Manfred\Desktop\Lohnabrechnung März.pdf
2016-03-03 14:39 - 2016-03-03 14:39 - 00346618 _____ C:\Users\Manfred\Downloads\607673_VAB (1).lo2
2016-03-03 13:44 - 2016-03-03 13:44 - 00119924 _____ C:\Users\Manfred\Downloads\607673_VAB.lo2
2016-03-03 11:53 - 2016-03-03 11:53 - 00092824 _____ C:\Users\Manfred\Downloads\x0392.pdf
2016-03-02 12:28 - 2016-03-02 12:28 - 00011931 _____ C:\Users\Manfred\AppData\Local\recently-used.xbel
2016-03-02 11:49 - 2016-02-23 12:27 - 07475040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 11:49 - 2016-02-23 12:25 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-03-02 11:49 - 2016-02-23 12:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-02 11:49 - 2016-02-23 12:23 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-02 11:49 - 2016-02-23 12:22 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-02 11:49 - 2016-02-23 12:15 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-02 11:49 - 2016-02-23 11:34 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-03-02 11:49 - 2016-02-23 11:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-03-02 11:49 - 2016-02-23 11:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00847656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 11:49 - 2016-02-23 11:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-02 11:49 - 2016-02-23 11:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-02 11:49 - 2016-02-23 11:21 - 06606568 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-03-02 11:49 - 2016-02-23 10:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-03-02 11:49 - 2016-02-23 10:45 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-03-02 11:49 - 2016-02-23 10:45 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-03-02 11:49 - 2016-02-23 10:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-02 11:49 - 2016-02-23 10:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-02 11:49 - 2016-02-23 10:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-02 11:49 - 2016-02-23 10:26 - 05241984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-02 11:49 - 2016-02-23 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-03-02 11:49 - 2016-02-23 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-03-02 11:49 - 2016-02-23 09:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-03-02 11:49 - 2016-02-23 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-03-02 11:49 - 2016-02-23 09:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 11:49 - 2016-02-23 09:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 11:49 - 2016-02-23 09:09 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-03-02 11:49 - 2016-02-23 09:09 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-03-02 11:49 - 2016-02-23 09:06 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-03-02 11:49 - 2016-02-23 09:06 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-03-02 11:49 - 2016-02-23 09:06 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-03-02 11:49 - 2016-02-23 09:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 11:49 - 2016-02-23 09:00 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-03-02 11:49 - 2016-02-23 08:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 11:49 - 2016-02-23 08:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 11:49 - 2016-02-23 08:41 - 03594240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-03-02 11:49 - 2016-02-23 08:30 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-02 11:49 - 2016-02-23 08:30 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-02 11:49 - 2016-02-23 08:26 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-02 11:49 - 2016-02-23 08:25 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-02 11:49 - 2016-02-23 08:24 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-02 11:49 - 2016-02-23 08:22 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-03-02 11:49 - 2016-02-23 08:21 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-03-02 11:49 - 2016-02-23 08:17 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 11:49 - 2016-02-23 07:59 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-02 11:49 - 2016-02-23 07:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-02 11:49 - 2016-02-23 07:55 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-02 11:49 - 2016-02-23 07:55 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-02 11:49 - 2016-02-23 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-03-02 11:49 - 2016-02-23 07:50 - 22396416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-03-02 11:49 - 2016-02-23 07:50 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-03-02 11:49 - 2016-02-23 07:40 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-02 11:49 - 2016-02-23 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-02 11:49 - 2016-02-23 07:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 19341312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 18680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-02 11:49 - 2016-02-23 07:33 - 14254080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-02 11:49 - 2016-02-23 07:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-03-02 11:49 - 2016-02-09 04:24 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 11:49 - 2016-02-09 04:07 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-03-02 11:49 - 2016-02-09 04:04 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-03-02 11:48 - 2016-02-23 12:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-03-02 11:48 - 2016-02-23 12:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-03-02 11:48 - 2016-02-23 12:27 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-03-02 11:48 - 2016-02-23 12:27 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-03-02 11:48 - 2016-02-23 12:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-03-02 11:48 - 2016-02-23 12:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-03-02 11:48 - 2016-02-23 12:09 - 01614176 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-02 11:48 - 2016-02-23 12:08 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-03-02 11:48 - 2016-02-23 11:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 11:48 - 2016-02-23 11:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-03-02 11:48 - 2016-02-23 11:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 11:48 - 2016-02-23 11:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 11:48 - 2016-02-23 11:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-03-02 11:48 - 2016-02-23 11:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-03-02 11:48 - 2016-02-23 11:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-03-02 11:48 - 2016-02-23 10:49 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-02 11:48 - 2016-02-23 10:45 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-03-02 11:48 - 2016-02-23 10:45 - 00259336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-02 11:48 - 2016-02-23 10:44 - 00640984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-02 11:48 - 2016-02-23 10:44 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-02 11:48 - 2016-02-23 10:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-03-02 11:48 - 2016-02-23 10:39 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-03-02 11:48 - 2016-02-23 10:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-02 11:48 - 2016-02-23 10:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-03-02 11:48 - 2016-02-23 10:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-03-02 11:48 - 2016-02-23 10:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-03-02 11:48 - 2016-02-23 10:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-02 11:48 - 2016-02-23 10:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 11:48 - 2016-02-23 10:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-03-02 11:48 - 2016-02-23 10:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 11:48 - 2016-02-23 10:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-03-02 11:48 - 2016-02-23 10:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-03-02 11:48 - 2016-02-23 10:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 11:48 - 2016-02-23 10:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 11:48 - 2016-02-23 10:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 11:48 - 2016-02-23 10:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 11:48 - 2016-02-23 10:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 11:48 - 2016-02-23 10:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 11:48 - 2016-02-23 10:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-02 11:48 - 2016-02-23 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 11:48 - 2016-02-23 10:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-03-02 11:48 - 2016-02-23 09:58 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-02 11:48 - 2016-02-23 09:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-03-02 11:48 - 2016-02-23 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 11:48 - 2016-02-23 09:55 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-02 11:48 - 2016-02-23 09:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-03-02 11:48 - 2016-02-23 09:54 - 00539256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-02 11:48 - 2016-02-23 09:54 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-02 11:48 - 2016-02-23 09:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-03-02 11:48 - 2016-02-23 09:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 11:48 - 2016-02-23 09:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 11:48 - 2016-02-23 09:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 11:48 - 2016-02-23 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-03-02 11:48 - 2016-02-23 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 11:48 - 2016-02-23 09:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 11:48 - 2016-02-23 09:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-03-02 11:48 - 2016-02-23 09:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 11:48 - 2016-02-23 09:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-03-02 11:48 - 2016-02-23 09:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 11:48 - 2016-02-23 09:37 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 11:48 - 2016-02-23 09:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 11:48 - 2016-02-23 09:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 11:48 - 2016-02-23 09:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 11:48 - 2016-02-23 09:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 11:48 - 2016-02-23 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 11:48 - 2016-02-23 09:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-03-02 11:48 - 2016-02-23 09:30 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-03-02 11:48 - 2016-02-23 09:28 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-02 11:48 - 2016-02-23 09:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-03-02 11:48 - 2016-02-23 09:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-03-02 11:48 - 2016-02-23 09:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-03-02 11:48 - 2016-02-23 09:25 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-02 11:48 - 2016-02-23 09:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 11:48 - 2016-02-23 09:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 11:48 - 2016-02-23 09:22 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 11:48 - 2016-02-23 09:19 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 11:48 - 2016-02-23 09:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-03-02 11:48 - 2016-02-23 09:18 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 11:48 - 2016-02-23 09:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 11:48 - 2016-02-23 09:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-03-02 11:48 - 2016-02-23 09:13 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-02 11:48 - 2016-02-23 09:13 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-03-02 11:48 - 2016-02-23 09:12 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 11:48 - 2016-02-23 09:11 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-03-02 11:48 - 2016-02-23 09:11 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-03-02 11:48 - 2016-02-23 09:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-03-02 11:48 - 2016-02-23 09:10 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 11:48 - 2016-02-23 09:09 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 11:48 - 2016-02-23 09:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 11:48 - 2016-02-23 09:06 - 01848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-02 11:48 - 2016-02-23 09:05 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-03-02 11:48 - 2016-02-23 09:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 11:48 - 2016-02-23 09:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 11:48 - 2016-02-23 09:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-03-02 11:48 - 2016-02-23 09:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-03-02 11:48 - 2016-02-23 09:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-03-02 11:48 - 2016-02-23 08:58 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 11:48 - 2016-02-23 08:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 11:48 - 2016-02-23 08:58 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 11:48 - 2016-02-23 08:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-03-02 11:48 - 2016-02-23 08:54 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-02 11:48 - 2016-02-23 08:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-03-02 11:48 - 2016-02-23 08:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-03-02 11:48 - 2016-02-23 08:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-03-02 11:48 - 2016-02-23 08:47 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-03-02 11:48 - 2016-02-23 08:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-03-02 11:48 - 2016-02-23 08:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-03-02 11:48 - 2016-02-23 08:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-03-02 11:48 - 2016-02-23 08:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-03-02 11:48 - 2016-02-23 08:37 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-02 11:48 - 2016-02-23 08:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-02 11:48 - 2016-02-23 08:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-03-02 11:48 - 2016-02-23 08:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 11:48 - 2016-02-23 08:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-03-02 11:48 - 2016-02-23 08:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-03-02 11:48 - 2016-02-23 08:31 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-02 11:48 - 2016-02-23 08:30 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-02 11:48 - 2016-02-23 08:30 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 11:48 - 2016-02-23 08:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-02 11:48 - 2016-02-23 08:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-03-02 11:48 - 2016-02-23 08:28 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-03-02 11:48 - 2016-02-23 08:28 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 11:48 - 2016-02-23 08:26 - 01498112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-02 11:48 - 2016-02-23 08:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 11:48 - 2016-02-23 08:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-03-02 11:48 - 2016-02-23 08:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-03-02 11:48 - 2016-02-23 08:21 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 11:48 - 2016-02-23 08:20 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-03-02 11:48 - 2016-02-23 08:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 11:48 - 2016-02-23 08:11 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 11:48 - 2016-02-23 08:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-02 11:48 - 2016-02-23 08:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-03-02 11:48 - 2016-02-23 07:58 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-03-02 11:48 - 2016-02-23 07:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-02 11:48 - 2016-02-23 07:53 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-03-02 11:48 - 2016-02-23 07:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-02 11:48 - 2016-02-23 07:42 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 11:48 - 2016-02-23 07:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 11:48 - 2016-02-23 07:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-03-02 11:48 - 2016-02-23 07:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-03-02 11:48 - 2016-02-23 07:32 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-03-02 11:48 - 2016-02-23 07:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-03-02 11:48 - 2016-02-23 07:26 - 12587520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-02 11:48 - 2016-02-09 05:28 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-03-02 11:48 - 2016-02-09 05:13 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-03-02 11:48 - 2016-02-09 04:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-03-02 11:48 - 2016-02-09 04:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-03-02 11:48 - 2016-02-09 04:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-02-29 15:25 - 2016-02-29 15:25 - 00130430 _____ C:\Users\Manfred\Desktop\meineSchufaneu (1).pdf
2016-02-29 15:19 - 2016-03-07 10:38 - 00001129 _____ C:\Users\Manfred\Desktop\Free PDF to Word Doc Converter.lnk
2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter
2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\Program Files (x86)\Free PDF to Word Doc Converter
2016-02-29 15:17 - 2016-02-29 15:18 - 01470472 _____ C:\Users\Manfred\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe
2016-02-29 15:15 - 2016-02-29 15:15 - 00104862 _____ C:\Users\Manfred\Downloads\meineSchufaneu (1).pdf
2016-02-29 12:58 - 2016-02-29 12:58 - 00031121 _____ C:\Users\Manfred\Downloads\Angebot11456.pdf
2016-02-29 12:57 - 2016-02-29 12:57 - 00044952 _____ C:\Users\Manfred\Downloads\x0390.pdf
2016-02-25 17:59 - 2016-02-25 17:59 - 00345801 _____ C:\Users\Manfred\Downloads\91_lang__expose (1).pdf
2016-02-25 17:44 - 2016-02-25 17:44 - 00310409 _____ C:\Users\Manfred\Downloads\91_lang__expose.pdf
2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278.pdf
2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278 (1).pdf
2016-02-22 14:14 - 2016-02-22 14:14 - 00292865 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1) (1).pdf
2016-02-22 13:59 - 2016-02-22 13:59 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1).pdf
2016-02-22 13:57 - 2016-02-22 13:57 - 00041343 _____ C:\Users\Manfred\Downloads\SFR-Übertragung - Betriebsübergabe 30053 09 2015.pdf
2016-02-22 13:56 - 2016-02-22 13:56 - 00046393 _____ C:\Users\Manfred\Downloads\SFR-Übertragung auf einen anderen VN (AKB I.6.1.3) 30112 09  2015.pdf
2016-02-22 13:56 - 2016-02-22 13:56 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015.pdf
2016-02-20 13:07 - 2016-03-07 10:39 - 00002923 _____ C:\Users\Public\Desktop\Nero 2016.lnk
2016-02-20 13:07 - 2016-02-20 13:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\Nero
2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016
2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\Program Files (x86)\Nero
2016-02-20 13:06 - 2016-02-20 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2016-02-20 13:02 - 2016-02-20 13:03 - 02559488 _____ (Nero AG) C:\Users\Manfred\Downloads\Nero_BurningROM2016-21.09.2015_stub_trial.exe
2016-02-19 15:20 - 2016-02-19 15:20 - 00114402 _____ C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875.htm
2016-02-19 12:23 - 2016-02-19 12:23 - 00254523 _____ C:\Users\Manfred\Downloads\ent003_0.pdf
2016-02-18 16:05 - 2016-02-19 11:36 - 00000000 ____D C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875-Dateien
2016-02-18 16:03 - 2016-02-18 16:03 - 00085479 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (5).pdf
2016-02-18 16:03 - 2016-02-18 16:03 - 00083820 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (4).pdf
2016-02-18 16:02 - 2016-02-18 16:02 - 00083816 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (3).pdf
2016-02-18 14:35 - 2016-02-18 14:35 - 00106227 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (6).pdf
2016-02-18 14:35 - 2016-02-18 14:35 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (5).pdf
2016-02-18 14:22 - 2016-02-18 14:22 - 00104334 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (4).pdf
2016-02-18 14:21 - 2016-02-18 14:21 - 00106465 _____ C:\Users\Manfred\Downloads\6450_lang__expose (3).pdf
2016-02-18 14:21 - 2016-02-18 14:21 - 00104337 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (3).pdf
2016-02-18 14:20 - 2016-02-18 14:20 - 00019185 _____ C:\Users\Manfred\Downloads\6450_dokument_objektnachweis.pdf
2016-02-18 14:13 - 2016-02-18 14:13 - 00106225 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (2).pdf
2016-02-18 14:11 - 2016-02-18 14:12 - 00107865 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (1).pdf
2016-02-18 14:11 - 2016-02-18 14:11 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose.pdf
2016-02-18 14:10 - 2016-02-18 14:10 - 00106361 _____ C:\Users\Manfred\Downloads\6450_lang__expose (2).pdf
2016-02-18 11:18 - 2016-02-18 11:18 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-02-18 11:14 - 2016-02-18 11:14 - 00000000 ____D C:\Users\Manfred\AppData\Local\sipgate_GmbH
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\sipgate Faxdrucker 3.21.1
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\StandardPlugin
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\eDocPrintPro
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Program Files\Common Files\MAYComputer
2016-02-18 11:07 - 2016-02-18 11:07 - 00096775 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Margarethenstr. 5, Hirten.pdf
2016-02-18 10:59 - 2016-02-18 11:00 - 83174411 _____ C:\Users\Manfred\Downloads\SipgateFaxdrucker_Setup_x64.zip
2016-02-17 16:07 - 2016-02-17 16:07 - 00315387 _____ C:\Users\Manfred\Downloads\931989415_151030_5VB_000000001_133845100.pdf
2016-02-17 13:23 - 2016-02-17 13:23 - 00261008 _____ C:\Users\Manfred\Downloads\Stöckl-Kern.pdf
2016-02-17 11:31 - 2016-02-17 11:31 - 00597297 _____ C:\Users\Manfred\Downloads\bayernatlas.de (3).pdf
2016-02-17 11:29 - 2016-02-17 11:29 - 00831242 _____ C:\Users\Manfred\Downloads\bayernatlas.de (2).pdf
2016-02-17 11:19 - 2016-02-17 11:19 - 07259464 _____ C:\Users\Manfred\Downloads\Teilu.pdf
2016-02-17 11:19 - 2016-02-17 11:19 - 00097875 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Wasserburg Gronow.pdf
2016-02-15 12:32 - 2016-02-15 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2016-02-12 10:15 - 2016-02-12 10:15 - 00318267 _____ C:\Users\Manfred\Downloads\Wegbeschreibung München.pdf
2016-02-11 16:42 - 2016-02-11 16:42 - 01447476 _____ C:\Users\Manfred\Downloads\6450_lang__expose (1).pdf
2016-02-11 16:40 - 2016-02-11 16:40 - 01411647 _____ C:\Users\Manfred\Downloads\6450_lang__expose.pdf
2016-02-11 14:06 - 2016-02-11 14:06 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen (1).pdf
2016-02-11 14:04 - 2016-02-11 14:04 - 01046051 _____ C:\Users\Manfred\Downloads\Protokoll 2015.pdf
2016-02-11 14:00 - 2016-02-11 14:00 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen.pdf
2016-02-10 13:42 - 2016-02-10 13:42 - 00762677 _____ C:\Users\Manfred\Downloads\1890_01_2016_142739_0d8b4bb0eaa6b5bf4537be673ecd84b6.pdf
2016-02-10 11:28 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-10 11:28 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-10 11:28 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-10 11:28 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-10 11:28 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-10 11:28 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-10 11:28 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-10 11:28 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-10 11:28 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-10 11:28 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-10 11:28 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-10 11:28 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-10 11:28 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-10 11:28 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-10 11:28 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-10 11:28 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-10 11:28 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-10 11:28 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-10 11:28 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-10 11:28 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-10 11:28 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-10 11:28 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-10 11:28 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-10 11:28 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-10 11:28 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-10 11:28 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-10 11:28 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-10 11:28 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-10 11:28 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-10 11:28 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-10 11:28 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-10 11:28 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-10 11:27 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-10 11:27 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-10 11:16 - 2016-02-10 11:16 - 03444673 _____ C:\Users\Manfred\Downloads\Anzeige-Wolfsberger.pdf
2016-02-09 13:23 - 2016-02-09 13:23 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\ASCON Programme
2016-02-09 13:20 - 2016-02-10 12:43 - 00000000 ____D C:\Program Files (x86)\SBS
2016-02-09 13:20 - 2016-02-09 13:20 - 00120320 _____ () C:\WINDOWS\SysWOW64\czip.ocx
2016-02-09 13:20 - 2016-02-09 13:20 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfx32.dll
2016-02-09 13:20 - 2016-02-09 13:20 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\SBS Installer
2016-02-09 13:19 - 2016-02-09 13:20 - 28473017 _____ (SBS) C:\Users\Manfred\Downloads\3dwrp_ultralight_setup.exe
2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\WINDOWS\Crystal
2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\MEINHAUSPLANER
2016-02-09 12:48 - 2010-10-13 05:43 - 00882608 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v13.4.2.ocx
2016-02-09 12:48 - 2010-10-13 05:42 - 02369456 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v13.4.2.ocx
2016-02-09 12:48 - 2010-10-13 05:42 - 01370032 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v13.4.2.ocx
2016-02-09 12:48 - 2006-04-06 17:13 - 01276088 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v10.1.ocx
2016-02-09 12:48 - 2006-04-06 17:13 - 00338104 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v10.1.ocx
2016-02-09 12:48 - 2006-04-06 16:13 - 00460984 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v10.1.ocx
2016-02-09 12:48 - 2004-04-27 14:47 - 00167176 _____ (/n software inc. - www.nsoftware.com) C:\WINDOWS\SysWOW64\ftps60.ocx
2016-02-09 12:48 - 2004-03-12 08:18 - 01369264 _____ (FarPoint Technologies, Inc.) C:\WINDOWS\SysWOW64\FPSPR70.ocx
2016-02-09 12:48 - 2003-02-07 13:18 - 00326656 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvec12n.ocx
2016-02-09 12:48 - 2003-02-07 13:18 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.ocx
2016-02-09 12:48 - 2003-02-07 13:18 - 00094208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltodb12n.ocx
2016-02-09 12:48 - 2003-02-07 13:17 - 00140288 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.ocx
2016-02-09 12:48 - 2003-02-07 13:16 - 00340480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.ocx
2016-02-09 12:48 - 2003-02-07 13:04 - 00181248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpng12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00182272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00049664 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfwmf12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00047104 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXpm12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00045568 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXbm12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfxwd12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwpg12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftga12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwfx12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfras12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00102400 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmpg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00089088 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfjbg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00084480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffpx12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00063488 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfplt12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00060416 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpct12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00048128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfica12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00038912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfflc12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00037888 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfeps12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00036864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpsd12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00035328 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgif12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00031744 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflmb12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00031232 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPNM12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00029184 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflma12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00027648 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfiff12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcx12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfimg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcd12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfitg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmsp12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmac12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00482816 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwf12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00215552 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvkrn12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00139264 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdxf12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00067584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwg12N.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00058880 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfcgm12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00049152 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00047616 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdgn12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00046080 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdrw12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfcal12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00032256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00030720 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfbmp12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00028672 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfclp12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfani12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00023040 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfawd12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00021504 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfCUT12n.dll
2016-02-09 12:48 - 2003-02-07 12:59 - 00307712 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.dll
2016-02-09 12:48 - 2003-02-07 12:59 - 00062464 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.dll
2016-02-09 12:48 - 2003-02-07 12:59 - 00053248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.dll
2016-02-09 12:48 - 2003-02-07 12:14 - 00630272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTOCX12n.ocx
2016-02-09 12:48 - 2003-02-07 12:03 - 00358912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMP12n.DLL
2016-02-09 12:48 - 2003-02-07 12:02 - 00141312 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFTIF12n.DLL
2016-02-09 12:48 - 2003-02-07 12:00 - 00073728 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFFAX12n.DLL
2016-02-09 12:48 - 2003-02-07 11:59 - 00208384 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTEFX12n.dll
2016-02-09 12:48 - 2003-02-07 11:59 - 00164864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTIMG12n.dll
2016-02-09 12:48 - 2003-02-07 11:59 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTTWN12n.dll
2016-02-09 12:48 - 2003-02-07 11:58 - 00388096 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTKRN12n.dll
2016-02-09 12:48 - 2003-02-07 11:58 - 00259584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDIS12n.dll
2016-02-09 12:48 - 2003-02-07 11:58 - 00131072 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTFIL12n.dll
2016-02-09 12:48 - 2003-01-24 15:59 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfavi12n.dll
2016-02-09 12:48 - 2002-08-23 16:50 - 00204800 _____ () C:\WINDOWS\SysWOW64\NumX.ocx
2016-02-09 12:48 - 2002-06-27 11:36 - 00598016 _____ (Key Company) C:\WINDOWS\SysWOW64\KeyTV3.ocx
2016-02-09 12:48 - 2002-01-23 11:17 - 00406048 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\WINDOWS\SysWOW64\XceedZip.dll
2016-02-09 12:48 - 2000-12-16 20:45 - 00032768 _____ () C:\WINDOWS\SysWOW64\WKAuxil.dll
2016-02-09 12:48 - 2000-10-12 20:46 - 00220160 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.ocx
2016-02-09 12:48 - 2000-10-12 20:45 - 00160256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.ocx
2016-02-09 12:48 - 2000-10-12 20:44 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.ocx
2016-02-09 12:48 - 2000-10-12 20:19 - 00158208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvdlg12n.dll
2016-02-09 12:48 - 2000-05-02 03:17 - 00212480 _____ (Eastman Kodak) C:\WINDOWS\SysWOW64\PCDLIB32.DLL
2016-02-09 12:48 - 2000-04-12 15:28 - 00118784 _____ () C:\WINDOWS\SysWOW64\lfkodak.dll
2016-02-09 12:48 - 2000-04-12 15:24 - 00338944 _____ () C:\WINDOWS\SysWOW64\lffpx7.dll
2016-02-09 12:48 - 2000-02-10 09:46 - 00745472 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32_res_de.dll
2016-02-09 12:48 - 2000-02-03 03:16 - 00507904 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crviewer.dll
2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p3smnde.dll
2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sodde.dll
2016-02-09 12:48 - 2000-02-01 12:49 - 00848376 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbl6.ocx
2016-02-09 12:48 - 2000-02-01 12:49 - 00242144 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\tdbgpp.dll
2016-02-09 12:48 - 2000-02-01 11:49 - 00106984 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\xarraydb.ocx
2016-02-09 12:48 - 2000-01-28 08:16 - 05550080 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\craxdrt.dll
2016-02-09 12:48 - 2000-01-28 08:16 - 05337088 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32.dll
2016-02-09 12:48 - 2000-01-27 04:05 - 00270336 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sodbc.dll
2016-02-09 12:48 - 2000-01-14 04:58 - 00544768 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\exlate32.dll
2016-02-09 12:48 - 2000-01-11 08:10 - 00442368 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cpeaut32.dll
2016-02-09 12:48 - 2000-01-11 00:09 - 00618496 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crpaig80.dll
2016-02-09 12:48 - 2000-01-07 01:15 - 00040960 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cdo32.dll
2016-02-09 12:48 - 1999-12-15 00:17 - 00147456 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p2smon.dll
2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3rdode.dll
2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3ddode.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sevt.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bdao.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00061440 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2irdao.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00053248 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2ctdao.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00023040 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bbnd.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00017920 _____ C:\WINDOWS\SysWOW64\implode.dll
2016-02-09 12:48 - 1999-12-06 11:47 - 00851420 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crystl32.ocx
2016-02-09 12:48 - 1999-12-01 03:15 - 00004096 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3dbdde.dll
2016-02-09 12:48 - 1999-11-15 06:53 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sevde.dll
2016-02-09 12:48 - 1999-11-08 06:15 - 00020480 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3tdode.dll
2016-02-09 12:48 - 1999-10-22 07:33 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msvcp50.dll
2016-02-09 12:48 - 1999-06-07 12:59 - 00801464 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbg6.ocx
2016-02-09 12:48 - 1999-05-07 01:00 - 00262152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDatGrd.ocx
2016-02-09 12:48 - 1999-05-07 01:00 - 00198640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mci32.ocx
2016-02-09 12:48 - 1999-05-07 01:00 - 00082960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PicClp32.ocx
2016-02-09 12:48 - 1999-04-13 01:00 - 01046288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet35.dll
2016-02-09 12:48 - 1999-04-13 00:00 - 00415504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl35.dll
2016-02-09 12:48 - 1999-03-26 01:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb6stkit.dll
2016-02-09 12:48 - 1998-10-30 03:02 - 00595968 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\Resizer.dll
2016-02-09 12:48 - 1998-10-30 03:02 - 00187904 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizerPPG.ocx
2016-02-09 12:48 - 1998-10-30 03:02 - 00132608 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControl.dll
2016-02-09 12:48 - 1998-10-30 03:02 - 00058880 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControlPPG.ocx
2016-02-09 12:48 - 1998-07-06 01:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2de.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlxGdDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RchTxDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CmDlgDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBLstDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSComDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msprpde.dll
2016-02-09 12:48 - 1998-07-06 00:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Tabctde.dll
2016-02-09 12:48 - 1998-06-24 01:00 - 00525352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBGrid32.ocx
2016-02-09 12:48 - 1998-06-24 01:00 - 00200496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBList32.ocx
2016-02-09 12:48 - 1998-06-24 01:00 - 00103744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMM32.OCX
2016-02-09 12:48 - 1998-06-18 01:00 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDBRPTR.DLL
2016-02-09 12:48 - 1998-06-18 01:00 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msstkprp.dll
2016-02-09 12:48 - 1998-06-18 01:00 - 00089360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb5db.dll
2016-02-09 12:48 - 1998-06-17 01:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC42LOC.DLL
2016-02-09 12:48 - 1998-04-24 01:00 - 00005807 _____ C:\WINDOWS\SysWOW64\MSCALDEU.TLB
2016-02-09 12:48 - 1998-04-24 00:00 - 00287504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msxbse35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mspdox35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msexcl35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00166160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msltus35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00165648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mstext35.dll
2016-02-09 12:48 - 1997-11-10 04:08 - 00368912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbar332.dll
2016-02-09 12:48 - 1997-09-04 09:37 - 03782416 _____ C:\WINDOWS\SysWOW64\mso97.dll
2016-02-09 12:48 - 1997-08-27 00:00 - 00148240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint35.dll
2016-02-09 12:48 - 1997-07-30 12:47 - 00099866 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB5DE.dll
2016-02-09 12:48 - 1997-06-23 00:00 - 00252176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x35.dll
2016-02-09 12:48 - 1997-06-23 00:00 - 00024848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter35.dll
2016-02-09 12:48 - 1997-02-26 01:00 - 00035328 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\DBGrdDE.dll
2016-02-09 12:48 - 1997-01-10 21:37 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddao35.dll
2016-02-09 12:47 - 2016-02-09 12:47 - 00000000 ____D C:\Users\Manfred\Downloads\meinHausplaner2012.3.3
2016-02-09 12:35 - 2016-02-09 12:42 - 622968396 _____ C:\Users\Manfred\Downloads\meinHausplaner2012.3.3.zip
2016-02-09 12:35 - 2016-02-09 12:35 - 01466656 _____ C:\Users\Manfred\Downloads\meinHausplaner - CHIP-Installer.exe
2016-02-09 11:13 - 2016-02-09 11:13 - 05415329 _____ C:\Users\Manfred\Documents\Unbenannt.xcf
2016-02-08 13:11 - 2016-02-08 13:11 - 00121184 _____ C:\Users\Manfred\Downloads\Infinus SZ-Online 24.01.2016.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 15:04 - 2013-03-24 12:52 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Dropbox
2016-03-08 15:03 - 2015-08-04 13:01 - 00000000 ___RD C:\Users\Manfred\OneDrive
2016-03-08 15:03 - 2013-07-31 12:03 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-08 15:01 - 2015-12-19 05:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-08 15:01 - 2015-12-19 04:25 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-08 14:57 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-08 14:51 - 2015-06-16 11:23 - 00001246 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA.job
2016-03-08 14:48 - 2015-12-19 04:28 - 00000000 ____D C:\Users\Manfred
2016-03-08 14:48 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-08 14:39 - 2014-12-08 20:58 - 00000000 ____D C:\Users\Manfred\360Works
2016-03-08 14:17 - 2013-07-31 12:03 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-08 13:59 - 2013-07-31 15:29 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-03-08 12:58 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-03-08 12:51 - 2015-06-16 11:23 - 00001194 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core.job
2016-03-08 11:52 - 2013-03-30 20:55 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{30F240A7-6244-488A-AA21-91030689FD7D}
2016-03-07 10:39 - 2016-01-13 11:29 - 00001108 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk
2016-03-07 10:39 - 2015-12-19 05:20 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-07 10:39 - 2015-11-25 11:05 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002476 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-03-07 10:39 - 2015-09-28 10:25 - 00001365 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2016-03-07 10:39 - 2015-09-21 13:33 - 00001505 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2016-03-07 10:39 - 2015-09-21 13:27 - 00001514 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2016-03-07 10:39 - 2015-09-21 13:20 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk
2016-03-07 10:39 - 2015-09-03 19:39 - 00001377 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2016-03-07 10:39 - 2015-04-23 12:15 - 00002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-07 10:39 - 2015-03-17 12:20 - 00001914 _____ C:\Users\Public\Desktop\SugarSync.lnk
2016-03-07 10:39 - 2015-03-13 12:53 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-03-07 10:39 - 2015-02-12 14:33 - 00001032 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
2016-03-07 10:39 - 2014-11-24 20:48 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2016-03-07 10:39 - 2014-05-28 17:26 - 00001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2016-03-07 10:39 - 2013-10-21 19:00 - 00000984 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2016-03-07 10:39 - 2013-07-31 15:27 - 00001432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-03-07 10:39 - 2013-07-31 12:04 - 00002343 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-07 10:39 - 2013-04-22 16:40 - 00001932 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SugarSync.lnk
2016-03-07 10:39 - 2013-03-27 21:34 - 00000943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2016-03-07 10:39 - 2013-03-23 19:41 - 00002811 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileMaker Pro Advanced.lnk
2016-03-07 10:39 - 2013-03-11 13:30 - 00001397 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-03-07 10:38 - 2015-09-01 17:13 - 00002007 _____ C:\Users\Manfred\Desktop\LobuOnline.lnk
2016-03-07 10:38 - 2015-08-04 13:18 - 00002433 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-07 10:38 - 2015-03-06 20:43 - 00001853 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-03-07 10:38 - 2013-10-21 19:12 - 00000469 _____ C:\Users\Manfred\Desktop\Scan.lnk
2016-03-07 10:38 - 2013-09-17 12:36 - 00000912 _____ C:\Users\Manfred\Desktop\Start.lnk
2016-03-07 10:38 - 2013-04-01 02:01 - 00000906 _____ C:\Users\Manfred\Desktop\Downloads.lnk
2016-03-07 10:38 - 2013-03-23 19:38 - 00000523 _____ C:\Users\Manfred\Desktop\Windows (C).lnk
2016-03-07 10:13 - 2015-08-20 10:16 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Skype
2016-03-05 16:38 - 2015-08-20 10:16 - 00000000 ____D C:\ProgramData\Skype
2016-03-05 16:36 - 2015-08-20 10:16 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-05 16:16 - 2014-06-12 10:39 - 00000000 ____D C:\AdwCleaner
2016-03-05 13:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-05 12:57 - 2015-10-30 08:26 - 00000000 ____D C:\WINDOWS\Setup
2016-03-04 17:13 - 2014-07-11 18:37 - 00000000 ____D C:\Users\Manfred\AppData\Local\com
2016-03-04 13:57 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\Packages
2016-03-04 13:05 - 2013-10-05 22:11 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-03-04 12:30 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-03-04 12:13 - 2014-07-31 12:46 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-03-04 12:11 - 2015-08-03 13:41 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-03-04 12:01 - 2013-03-11 14:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-04 11:43 - 2013-09-09 13:54 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-04 11:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-03-04 11:00 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-03-04 03:42 - 2015-12-19 04:27 - 02092088 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-04 03:42 - 2015-10-30 19:35 - 00890620 _____ C:\WINDOWS\system32\perfh007.dat
2016-03-04 03:42 - 2015-10-30 19:35 - 00197764 _____ C:\WINDOWS\system32\perfc007.dat
2016-03-04 03:34 - 2015-12-19 04:18 - 00489744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-04 03:31 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-03 12:01 - 2015-09-01 17:12 - 00000000 ____D C:\LobuOnlineData
2016-03-03 11:49 - 2013-10-21 15:32 - 00000000 ___RD C:\Scan
2016-03-02 13:33 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-02 12:28 - 2013-03-27 21:35 - 00000000 ____D C:\Users\Manfred\.gimp-2.8
2016-02-23 12:09 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-23 12:07 - 2013-03-11 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-02-20 13:06 - 2014-02-21 09:11 - 00000000 ____D C:\ProgramData\Nero
2016-02-20 13:03 - 2014-02-21 09:17 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Nero
2016-02-10 12:47 - 2013-04-03 17:43 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-02-10 12:46 - 2013-04-03 17:40 - 00000000 ____D C:\ProgramData\Adobe
2016-02-10 12:45 - 2013-10-16 15:09 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-02-10 12:45 - 2013-10-06 15:09 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Apple Computer
2016-02-10 12:42 - 2014-07-14 17:39 - 00000000 ____D C:\Program Files (x86)\Opera
2016-02-10 12:38 - 2013-07-23 17:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-10 12:18 - 2013-03-23 15:06 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-09 13:25 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\VirtualStore
2016-02-09 11:14 - 2014-11-10 14:48 - 00003490 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-03-04 15:15 - 2014-03-24 15:29 - 0038420 _____ () C:\Users\Manfred\AppData\Roaming\Microsoft Excel 97-2003.ADR
2013-04-02 03:18 - 2013-04-02 08:01 - 0000600 _____ () C:\Users\Manfred\AppData\Local\PUTTY.RND
2016-03-02 12:28 - 2016-03-02 12:28 - 0011931 _____ () C:\Users\Manfred\AppData\Local\recently-used.xbel
2014-03-07 14:49 - 2014-03-07 14:52 - 0000007 _____ () C:\Users\Manfred\AppData\Local\~wmrg
2013-10-21 18:59 - 2013-10-21 18:59 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-19 04:24 - 2015-12-19 04:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-12-21 23:05 - 2013-12-21 23:05 - 0004967 _____ () C:\ProgramData\uxxadbmu.rlu

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe


Einige Dateien in TEMP:
====================
C:\Users\Manfred\AppData\Local\Temp\kernel32.dll
C:\Users\Manfred\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-03-01 12:39

==================== Ende von FRST.txt ============================
         
__________________

Alt 08.03.2016, 15:20   #4
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



UNd hier hoch die Addition. txt

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
durchgeführt von Manfred (2016-03-08 15:11:40)
Gestartet von C:\Users\Manfred\Desktop
Windows 10 Home Version 1511 (X64) (2015-12-19 04:45:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2836439086-123312676-467905238-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2836439086-123312676-467905238-503 - Limited - Disabled)
freigabeuser (S-1-5-21-2836439086-123312676-467905238-1007 - Administrator - Enabled)
Gast (S-1-5-21-2836439086-123312676-467905238-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2836439086-123312676-467905238-1015 - Limited - Enabled)
Manfred (S-1-5-21-2836439086-123312676-467905238-1001 - Administrator - Enabled) => C:\Users\Manfred

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.260 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 21 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 21.0.0.174 - Adobe Systems Incorporated)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
Apple Application Support (32-Bit) (HKLM-x32\...\{C5815ACF-FD34-4553-8A22-C7411B7E662B}) (Version: 4.1.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{CBF12D2F-CF64-4CB7-858B-2C1F21068E5F}) (Version: 4.1.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{FD244E19-6EFE-4A2D-948A-0D45D4C168BE}) (Version: 9.0.0.26 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden
Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3 - Microsoft Corporation) Hidden
Ashampoo Burning Studio 2014 v.12.0.5 (HKLM-x32\...\{91B33C97-280F-B76D-E27B-E712D7041B76}_is1) (Version: 12.0.5 - Ashampoo GmbH & Co. KG)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Azure Resource Manager Tools (VS 14) - v2.7 (x32 Version: 2.7.0.0 - Microsoft Corporation) Hidden
Azure Resource Manager Tools (VS 2013) - v2.7 (x32 Version: 2.7.0.0 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.50716.0 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.50429.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 DEU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Citrix Online Launcher (HKLM-x32\...\{678753E6-E526-4AE5-A144-00240772543A}) (Version: 1.0.393 - Citrix)
Cloud Deployment Project for Microsoft Visual Studio 14 - v2.7 (x32 Version: 2.7.30814.3 - Microsoft Corporation) Hidden
Cloud Deployment Project for Microsoft Visual Studio 2013 - v2.7 (x32 Version: 2.7.30814.3 - Microsoft Corporation) Hidden
Cloud Explorer - v1.0 (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden
Company of Heroes 2 (HKLM-x32\...\Steam App 231430) (Version:  - Relic Entertainment)
Crusader No Remorse (HKLM-x32\...\{2AEA735F-B393-4D89-93EF-5849CB72B4A3}) (Version: 1.0.0.2 - Electronic Arts)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack 5.18.1 de-DE (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
Dropbox (HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Dropbox) (Version: 3.14.7 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.2.24.20150630 - Landesfinanzdirektion Thüringen)
Entity Framework 6.1.1 Tools  for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
Entity Framework 6.1.3 Tools  for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation)
Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)
FileMaker Pro 12 Advanced (HKLM-x32\...\{71A1C9DF-A5F0-4331-BAC0-6DF4B8069950}_FileMaker) (Version: 12.0.4.0 - FileMaker, Inc.)
FileMaker Pro 12 Advanced (x32 Version: 12.0.4.0 - FileMaker, Inc.) Hidden
Finalizer deinstallieren (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden
Finalizer installieren (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Free YouTube to MP3 Converter version 3.12.59.525 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.525 - DVDVideoSoft Ltd.)
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 49.0.2623.75 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
GoPro Studio 2.5.4 (HKLM-x32\...\GoPro Studio) (Version: 2.5.4 - GoPro, Inc.)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Officejet Pro 8600 - Grundlegende Software für das Gerät (HKLM\...\{D2D05FDB-4EDA-462D-8DB6-E0B9AD4FA25F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Officejet Pro 8600 Hilfe (HKLM-x32\...\{FDE820DD-CC88-4395-AD5C-801365B8F316}) (Version: 28.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version:  - )
Install Finalizer (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{96984DE8-1DB8-425C-AC8C-3098BC696F04}) (Version: 12.3.0.44 - Apple Inc.)
Java 7 Update 65 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417065FF}) (Version: 7.0.650 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Java SE Development Kit 7 Update 21 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170210}) (Version: 1.7.0.210 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
LobuOnline 15.0.2 (nur entfernen) (HKLM-x32\...\LobuOnline) (Version: 15.0.2 - a.b.s. Rechenzentrum GmbH)
LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for de-de Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{21B0F482-5EF9-45DA-8840-340AFE705A6C}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (Deutsch) (HKLM-x32\...\{EE8BD24B-75E1-4BBF-86B9-91FE16ADE71C}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft ASP.NET and Web Tools 2013.5 - Visual Studio 2013 - deu (HKLM-x32\...\{6D98300C-E96E-3BD8-987F-914722EEAA63}) (Version: 12.5.60814.0 - Microsoft Corporation)
Microsoft ASP.NET and Web Tools 2013.5 - Visual Studio 2013 (HKLM-x32\...\{D3787E6F-BA5D-3588-A665-2E61E3C84551}) (Version: 12.5.60814.0 - Microsoft Corporation)
Microsoft ASP.NET and Web Tools 2015 - Visual Studio 2015 - deu (HKLM-x32\...\{B3A51135-5980-35E9-88B9-BBD12A496EE4}) (Version: 14.0.60814.0 - Microsoft Corporation)
Microsoft ASP.NET and Web Tools 2015 - Visual Studio 2015 (HKLM-x32\...\{DCEEB371-BB66-3E62-8466-70D49565A280}) (Version: 14.0.60814.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Azure Authoring Tools - v2.7.1 (HKLM\...\{85692F27-8551-4717-A238-FA7FA06867F7}) (Version: 2.7.6499.8 - Microsoft Corporation)
Microsoft Azure Command Line Tools (HKLM-x32\...\{96D19CAC-1D2E-4C27-9784-39376952F370}) (Version: 0.9.9 - Microsoft Corporation)
Microsoft Azure Compute Emulator - v2.7 (HKLM\...\Microsoft Azure Compute Emulator - v2.7) (Version: 2.7.6499.8 - Microsoft Corporation)
Microsoft Azure Data Factory Tools for Visual Studio (HKLM-x32\...\{0E7E834F-4617-4A2C-B28E-E3F3820CEDD9}) (Version: 0.9.3050.2 - Microsoft Corporation)
Microsoft Azure HDInsight Tools for Visual Studio 2013 (HKLM-x32\...\{C50B159B-A292-435B-BF83-F5BAFCA1170D}) (Version: 2.0.2600.0 - Microsoft Corporation)
Microsoft Azure HDInsight Tools for Visual Studio 2015 (HKLM-x32\...\{C898279C-5105-4E2F-9468-52CDFDC67830}) (Version: 2.0.2600.0 - Microsoft Corporation)
Microsoft Azure Libraries for .NET – v2.7 (HKLM\...\{CBF95044-8CCB-492A-B46C-87CE75325CAD}) (Version: 2.7.0707.060 - Microsoft Corporation)
Microsoft Azure Mobile App SDK V1.0 (HKLM-x32\...\{D627CBA2-99EA-4823-B8A6-A571B0542ACB}) (Version: 1.0.30626.0 - Microsoft Corporation)
Microsoft Azure Mobile App SDK V2.0 (HKLM-x32\...\{55682DAE-D723-40A1-B448-3D259DEF5073}) (Version: 2.0.30626.0 - Microsoft Corporation)
Microsoft Azure PowerShell - September 2015 (HKLM-x32\...\{07FA4F62-DDDE-4C8C-8BFD-A7F667789B64}) (Version: 0.9.8 - Microsoft Corporation)
Microsoft Azure Quickstarts (HKLM-x32\...\{A6ACA586-9C39-3F57-82B6-9345FF1672F9}) (Version: 1.6 - Microsoft Corporation)
Microsoft Azure Storage Emulator - v4.1 (HKLM-x32\...\Microsoft Azure Storage Emulator - v4.1) (Version: 4.1.6848.8 - Microsoft Corporation)
Microsoft Azure Storage Tools - v3.2.0 (HKLM-x32\...\{9374C90A-0784-4F19-92B5-FB7161AE0B1C}) (Version: 3.2.0.0 - Microsoft Corporation)
Microsoft Azure Tools for Microsoft Visual Studio 2013 - v2.7 (HKLM-x32\...\{9b11fa6b-50da-4b9e-8636-658b9f775772}) (Version: 2.7.30818.1601 - Microsoft Corporation)
Microsoft Azure Tools for Microsoft Visual Studio 2015 - v2.7 (HKLM-x32\...\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}) (Version: 2.7.30818.1601 - Microsoft Corporation)
Microsoft Azure-Tools für Microsoft Visual Studio 2013 Sprachpaket (DEU) - v2.7 (HKLM-x32\...\{68f2107d-bc6e-4a5b-bef4-ed8b84133726}) (Version: 2.7.30818.1601 - Microsoft Corporation)
Microsoft Azure-Tools für Microsoft Visual Studio 2015 Sprachpaket (DEU) - v2.7 (HKLM-x32\...\{0f36e693-828f-4406-8590-89abd88b30f9}) (Version: 2.7.30818.1601 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.1 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.1 Sprachpaket - DEU) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft Help Viewer 2.2 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.2 Sprachpaket - DEU) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft Hive ODBC Driver (HKLM\...\{AC9970E8-7F55-4F50-A6D3-2BC041589904}) (Version: 1.0.5.5 - Microsoft Corporation)
Microsoft Hive ODBC Driver (HKLM-x32\...\{7A580208-9E61-47FD-9AEB-DDDAA67CF0F6}) (Version: 1.0.5.5 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.6568.2025 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{58FED865-4F13-408D-A5BF-996019C4B936}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB  (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (14.0.50616.0) (HKLM-x32\...\{FA604873-01A0-4834-AF87-418534E465BB}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM-x32\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{9634d50a-0c4d-4f52-8a9f-894a2baae370}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio Community 2013 with Update 4 (HKLM-x32\...\{96a8b90c-0a91-4e76-ab34-730c23923d11}) (Version: 12.0.31101 - Microsoft Corporation)
Microsoft Visual Studio Community 2015 (HKLM-x32\...\{5c2b89b0-08cc-492f-b086-21e4d6ae7be4}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Microsoft Web Platform Installer 5.0 (HKLM\...\{4D84C195-86F0-4B34-8FDE-4A17EB41306A}) (Version: 5.0.50430.0 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2014 (HKLM\...\{63967E7E-5D53-42FA-A7B2-DC50FB0F976F}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2014 (HKLM-x32\...\{2ADB6B9D-83C6-494E-B8AE-E815956A4670}) (Version: 12.0.2402.11 - Microsoft Corporation)
Mit C# erstellte geräteübergreifende Hybrid-Apps - Vorlagen - DEU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Nero BurningROM 2016 (HKLM-x32\...\{57A3796C-EDE9-43DA-86C4-92279B6B9AB1}) (Version: 17.0.00300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 16.0.2000 - Nero AG)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 347.52 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6528.1011 - Microsoft Corporation) Hidden
onlinebrief24.de (HKLM-x32\...\eBriefdienst-onlinebrief24) (Version:  - )
OpenSSL 1.0.1e Light (32-bit) (HKLM-x32\...\OpenSSL Light (32-bit)_is1) (Version:  - OpenSSL Win32 Installer Team)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 RC für Windows Store-Apps (Deutsch) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM-x32\...\{3F514FDC-F0F2-3B99-86D6-F7B3A2679B39}) (Version: 4.5.51209 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.6 (Deutsch) (HKLM-x32\...\{7227EFF8-BC26-44D4-B91D-969A82DBDF4A}) (Version: 4.6.00081 - Microsoft Corporation)
PDF24 Creator 7.4.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.316.0 - Tracker Software Products Ltd)
Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)
PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Prerequisite installer (x32 Version: 17.0.0002 - Nero AG) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Prerequisites for SSDT  (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Python Tools - Umleitungsvorlage (x32 Version: 1.3 - Microsoft Corporation) Hidden
Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
RSA Smart Card Middleware 3.5 (HKLM-x32\...\{AC2F9FCC-170E-4B0B-84AB-7307A373570F}) (Version: 3.5.3.36 - RSA, The Security Division of EMC)
SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
sipgate Faxdrucker (HKLM\...\{F4950C66-CC26-4BB6-A7E7-D913565573B8}) (Version: 3.21.1 - sipgate GmbH)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
Stashimi Stub Installer (x32 Version: 18.001.1 - Nero AG) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Studie zur Verbesserung von HP Officejet Pro 8600 Produkten (HKLM\...\{B9824225-2055-4700-BCD4-64B25EC88264}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
SugarSync (HKLM-x32\...\SugarSync) (Version: 3.7.0.14.141281 - SugarSync, Inc.)
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Thunder Master v2.7 (HKLM-x32\...\{EE04522C-0814-4B63-AE57-0B63E5A355BB}_is1) (Version: 2.7.0.1 - Palit Microsystems Ltd.)
TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
Uninstall Finalizer (x32 Version: 2.7.30818.1601 - Microsoft Corporation) Hidden
Unity Web Player (HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft)
Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\...\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 DEU Language Pack (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (HKLM\...\0B624A43DD66DBF5CF3EDFA9741A364E688062A4) (Version: 03/07/2012  - GoPro)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Phone 8.1 Emulators - ENU (HKLM-x32\...\{166a69f6-6512-47ea-a342-17d954fc059a}) (Version: 12.0.31010.0 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)
Windows-Treiberpaket - Microsoft (USBCCID) SmartCardReader  (05/17/2005 5.2.3790.2444) (HKLM\...\E38B2136962D21A7BDE5AAC98CD1C6EA6B6D0687) (Version: 05/17/2005 5.2.3790.2444 - Microsoft)
Wing Commander III (HKLM-x32\...\{F96B9930-E22A-44D6-81B5-6C8E92C21B4B}) (Version: 2.0.0.2 - Electronic Arts)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2836439086-123312676-467905238-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1955B4FF-4F99-4205-88AE-F79705201A80} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {1FE0B01E-B554-4CBC-A5C4-D833B77A92C6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {2830F66F-52A4-47D1-AE45-5E7519F65CDF} - System32\Tasks\HPCustParticipation HP Officejet Pro 8600 => C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {37FA49DA-B481-4A18-8AD2-91299D4DB869} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {38A1BDD3-24D1-4FE7-88B8-3018ED152DC5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {4630406F-1E16-4741-855B-0674743F7176} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {4CDD364E-16DE-4277-B7E2-FA278DD0B2D7} - System32\Tasks\{6EBF54A7-593D-4801-A245-2DBA63F22C30} => pcalua.exe -a C:\Users\Manfred\AppData\Roaming\mystartsearch\UninstallManager.exe -c  -ptid=cor
Task: {56358E8E-9617-4DE2-BEA1-EA388563D193} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-07-31] (AVAST Software)
Task: {5CCA06E5-7B55-474B-B8DC-5B05362F8B6D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {5D5A3436-10B7-4583-9F2F-862A55A0AF84} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {616C2811-F46C-482C-9CC9-E2F4AC8ED37C} - \globalUpdateUpdateTaskMachineCore -> Keine Datei <==== ACHTUNG
Task: {618AD729-3145-41E3-9447-E4F1BE220E9B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-10] (Microsoft Corporation)
Task: {743ECEC6-3529-41EB-9338-03CD9A4A74B3} - \globalUpdateUpdateTaskMachineUA -> Keine Datei <==== ACHTUNG
Task: {7BF0B805-B3E6-45D7-B52F-95C926E95A36} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {8331C5DA-6950-4558-8D4F-EE8CA4B588CE} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {859BE674-FAED-4320-964C-B5F081992F2E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {87EA2625-4855-4DE6-A3D2-BDFB9FA9ED9B} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe
Task: {8D1C48F0-A717-4B4A-ACE1-AC561EC7ACF8} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-02-04] (Microsoft Corporation)
Task: {9212D9E3-17C5-4977-B702-A47E75234CDC} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {9CE70186-90B3-4B02-9E18-83F107F75BB8} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-2836439086-123312676-467905238-1001
Task: {9EE86667-A976-4845-BCDF-69C4CCA40C81} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {A1F1D41E-4C96-4B0C-A5F3-AE51655C3128} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-04] (Adobe Systems Incorporated)
Task: {A6D37FE3-2805-4F41-8AC9-BCE0B5C18505} - System32\Tasks\Opera scheduled Autoupdate 1375280827 => C:\Program Files (x86)\Opera\launcher.exe
Task: {B84801B8-C5B9-41B6-87E6-7DE80572B8A1} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2015-06-04] (Nero AG)
Task: {C3CF7D7B-B32B-4B0F-A2CE-E48E10B31879} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {C87CDE4D-0488-4B57-9E46-806691D90E7F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D56A10CE-6A95-45DA-9B27-64AB6CA18826} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe
Task: {D598B635-3924-4192-822E-2DED5EB200F2} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-02-23] (Microsoft Corporation)
Task: {DA22BF39-558E-4AB3-B460-18CA8F71A88C} - \Desk 365 RunAsStdUser -> Keine Datei <==== ACHTUNG
Task: {E2F6A9E6-06DC-43B4-8E28-97451CEE4B00} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E796724E-956D-47BD-9273-509C57D0E0D8} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-16] (Dropbox, Inc.)
Task: {EB02B5EC-7474-446E-81F2-2F498D992E21} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-01-11] (Tracker Software Products (Canada) Ltd.) <==== ACHTUNG
Task: {EB21667F-BFBE-4D00-9DEE-9CD22345B28F} - System32\Tasks\{A04B8675-B084-4776-A12C-318EDD7BDE8B} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {ED85231D-DB17-4DB7-8BF8-72EC1AB47D7E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {EF954B3B-FFC3-4360-8488-BACE03B104C3} - \avast! Emergency Update -> Keine Datei <==== ACHTUNG
Task: {F66FC328-0B5D-4513-B080-4EEA26D11645} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core.job => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA.job => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe <==== ACHTUNG

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-19 04:24 - 2015-08-25 16:57 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-15 17:13 - 2014-09-15 17:13 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-11-20 14:57 - 2015-11-20 14:57 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-10-07 14:01 - 2016-02-04 05:51 - 00173256 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-01-13 11:03 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-22 14:56 - 2015-12-22 14:56 - 00109568 _____ () C:\Users\Manfred\AppData\Local\Packages\facebook.facebook_8xx8rvfyw5nnt\AC\Microsoft\CLR_v4.0\NativeImages\Facebook.Ba70e54e13#\e1ffd5dff508192182dad7589b397628\Facebook.BackgroundTasks.ni.dll
2015-12-22 14:52 - 2015-12-22 14:52 - 04276736 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Windows.App640a3541#\39e564537c5352e2b8188b12b36ef6c7\Windows.ApplicationModel.ni.dll
2016-02-11 14:34 - 2016-02-11 14:34 - 01053696 _____ () C:\Users\Manfred\AppData\Local\Packages\facebook.facebook_8xx8rvfyw5nnt\AC\Microsoft\CLR_v4.0\NativeImages\Facebook-Win8-Base\a2e3020fcc8f0170039d85fde0116236\Facebook-Win8-Base.ni.dll
2015-12-22 14:56 - 2015-12-22 14:56 - 00557568 _____ () C:\Users\Manfred\AppData\Local\Packages\facebook.facebook_8xx8rvfyw5nnt\AC\Microsoft\CLR_v4.0\NativeImages\Facebook-Base\0ddda6f89e29604ad9744d19638f886e\Facebook-Base.ni.dll
2016-01-22 11:59 - 2016-01-22 12:00 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-01-13 11:03 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-13 11:03 - 2016-01-05 02:24 - 00936960 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-01-28 12:23 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-28 12:23 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-12-19 04:14 - 2015-12-19 04:14 - 00150016 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2016-01-13 11:03 - 2016-01-05 02:23 - 01645056 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.IntentExtraction.dll
2015-12-21 12:44 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-03-02 11:48 - 2016-02-23 09:36 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-04-01 11:32 - 2015-04-01 11:32 - 00692224 _____ () C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe
2016-03-04 12:23 - 2016-03-04 12:23 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-03-04 12:23 - 2016-03-04 12:23 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-03-08 13:03 - 2016-03-08 13:03 - 02838016 _____ () C:\Program Files\AVAST Software\Avast\defs\16030800\algo.dll
2016-03-04 12:23 - 2016-03-04 12:23 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-05-06 15:36 - 2015-08-27 01:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2013-10-03 23:28 - 2015-09-28 23:11 - 00052736 _____ () C:\Program Files (x86)\SugarSync\librsync.dll
2015-03-13 01:11 - 2015-09-28 23:11 - 00769024 _____ () C:\Program Files (x86)\SugarSync\libGLESv2.dll
2015-03-13 01:11 - 2015-09-28 23:11 - 00875008 _____ () C:\Program Files (x86)\SugarSync\platforms\qwindows.dll
2015-03-13 01:11 - 2015-09-28 23:11 - 00047104 _____ () C:\Program Files (x86)\SugarSync\libEGL.dll
2015-03-13 01:11 - 2015-09-28 23:11 - 00021504 _____ () C:\Program Files (x86)\SugarSync\imageformats\qgif.dll
2015-03-13 01:11 - 2015-09-28 23:11 - 00020992 _____ () C:\Program Files (x86)\SugarSync\imageformats\qico.dll
2015-03-13 01:11 - 2015-09-28 23:11 - 00204800 _____ () C:\Program Files (x86)\SugarSync\imageformats\qjpeg.dll
2015-12-14 12:47 - 2016-01-12 19:44 - 00034768 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-02-18 11:17 - 2016-01-12 19:45 - 00019408 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2015-12-14 12:47 - 2016-01-12 19:44 - 00116688 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2015-12-14 12:47 - 2016-01-12 19:44 - 00093640 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2015-12-14 12:47 - 2016-01-12 19:44 - 00018376 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\select.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00019760 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2015-12-14 12:47 - 2016-01-12 19:46 - 00105928 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32api.pyd
2015-12-14 12:47 - 2016-01-12 19:44 - 00392144 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2015-12-14 12:47 - 2016-02-16 19:39 - 00381752 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2015-12-14 12:47 - 2016-01-12 19:44 - 00692688 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-02-18 11:17 - 2016-02-16 19:38 - 00020816 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2015-12-14 12:47 - 2016-01-12 19:45 - 00112592 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-02-18 11:17 - 2016-02-16 19:38 - 01682760 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-02-18 11:17 - 2016-02-16 19:38 - 00020808 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00021840 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-02-18 11:17 - 2016-02-16 19:39 - 00038696 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\fastpath.pyd
2015-12-14 12:47 - 2016-01-12 19:46 - 00020936 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2015-12-14 12:47 - 2016-01-12 19:46 - 00024528 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32event.pyd
2015-12-14 12:47 - 2016-01-12 19:47 - 00114640 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32security.pyd
2015-12-14 12:47 - 2016-01-12 19:46 - 00124880 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-02-18 11:18 - 2016-02-16 19:39 - 00021832 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2015-12-14 12:47 - 2016-01-12 19:46 - 00024016 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2015-12-14 12:47 - 2016-01-12 19:46 - 00175560 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32gui.pyd
2015-12-14 12:47 - 2016-01-12 19:47 - 00030160 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2015-12-14 12:47 - 2016-01-12 19:47 - 00043472 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32process.pyd
2015-12-14 12:47 - 2016-01-12 19:47 - 00028616 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32ts.pyd
2015-12-14 12:47 - 2016-01-12 19:47 - 00048592 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-02-18 11:17 - 2016-02-16 19:39 - 00026456 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2015-12-14 12:47 - 2016-01-12 19:46 - 00057808 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2015-12-14 12:47 - 2016-01-12 19:47 - 00024016 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-02-18 11:17 - 2016-02-16 19:38 - 00117056 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00024392 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-02-18 11:17 - 2016-01-12 19:47 - 00036296 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\librsync.dll
2016-02-18 11:17 - 2016-02-16 19:39 - 00031568 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd
2016-02-18 11:17 - 2015-11-05 01:04 - 00293392 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll
2015-12-14 12:47 - 2016-02-16 19:39 - 00023376 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-14 12:47 - 2016-01-12 19:44 - 00134608 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_elementtree.pyd
2015-12-14 12:47 - 2016-01-12 19:44 - 00134088 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-02-18 11:17 - 2016-01-12 19:45 - 00240584 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\jpegtran.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00052024 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2016-02-18 11:18 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-18 11:18 - 2016-02-16 19:39 - 00021824 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.kernel32._winffi_kernel32.pyd
2016-02-18 11:18 - 2016-02-16 19:39 - 00019776 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-02-18 11:18 - 2016-02-16 19:39 - 00020800 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2016-02-18 11:17 - 2016-02-16 19:38 - 00020280 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2015-12-14 12:47 - 2016-01-12 19:47 - 00350152 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-02-18 11:18 - 2016-02-16 19:39 - 00022352 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-02-18 11:17 - 2016-02-16 19:39 - 00084792 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2015-12-14 12:47 - 2016-02-16 19:39 - 01826096 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2015-12-14 12:47 - 2016-01-12 19:45 - 00083912 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\sip.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 03928880 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 01971504 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00531248 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00132912 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00223544 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00207672 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2016-02-18 11:17 - 2016-02-16 19:39 - 00158008 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2016-02-18 11:17 - 2016-02-16 19:39 - 00042808 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2016-02-18 11:17 - 2016-01-12 19:49 - 00017864 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\libEGL.dll
2016-02-18 11:17 - 2016-01-12 19:49 - 01631184 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-12-14 12:47 - 2016-02-16 19:39 - 00024904 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00546096 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2015-12-14 12:47 - 2016-02-16 19:39 - 00357680 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2015-03-04 22:45 - 2016-01-12 19:52 - 00697304 _____ () C:\Users\Manfred\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2013-04-22 13:58 - 2015-11-18 13:04 - 00074272 _____ () C:\Program Files (x86)\PDF24\zlib.dll
2013-04-22 13:58 - 2015-11-18 13:04 - 00052256 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll
2016-03-04 12:20 - 2016-03-04 12:20 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-03-05 14:30 - 2016-03-02 05:47 - 01675928 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libglesv2.dll
2016-03-05 14:30 - 2016-03-02 05:47 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\libegl.dll
2016-01-22 11:59 - 2016-01-22 11:59 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 11:59 - 2016-01-22 12:00 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [312]
AlternateDataStreams: C:\ProgramData\TEMP:9FF7C773 [128]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\localhost -> hxxps://localhost

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2012-07-26 06:26 - 2013-03-31 22:49 - 00000903 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost
127.0.0.1       localhost
127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2836439086-123312676-467905238-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Manfred\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\space-dual-screen-earth-from-1128431.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "CineForm Status.lnk"
HKLM\...\StartupApproved\StartupFolder: => "GoPro Importer.lnk"
HKLM\...\StartupApproved\Run32: => "BTnetPortComm"
HKLM\...\StartupApproved\Run32: => "BingDesktop"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\StartupFolder: => "XAMPP Control Panel Autostart.lnk"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\StartupFolder: => "Easy2Sync für Outlook.lnk"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "ApplePhotoStreams"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "THPanel"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TCP Query User{D6BF20D9-96EA-4412-B2F3-6AD340E860FB}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{19C0C140-12D9-4493-9D48-B6BD31A5DD30}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Block) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{A74780F4-7FE7-4B90-8703-F44445F3A929}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{C2D6E90D-68F0-4B82-AE86-638B417CA1FF}C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{EB74AE82-59FA-4E0B-8101-5DA353B34179}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{4EC91E47-6586-4B77-B419-9EBDBA307046}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{9E38FC53-7060-470E-8346-F81633ADC2E3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F919D8CD-C415-48F7-AE4A-779B57DC06F8}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C2D5F889-7DAE-498E-9AD2-86A28369AAA6}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{D5EF9AAB-D844-4298-8E1E-39AB821B3CF6}C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\manfred\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{3FD70C65-2E93-4C62-8319-9EF130B8EDF8}C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe
FirewallRules: [UDP Query User{78A15451-B020-4DDB-9973-C0AC26C51CA2}C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\filemaker pro advanced.exe
FirewallRules: [TCP Query User{DDAB343C-87FA-49BE-864B-C373C7657A16}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe
FirewallRules: [UDP Query User{BDEE13F8-D1CC-46A5-B445-7453621D0D20}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\web support\fm web publishing.exe
FirewallRules: [TCP Query User{F1CC27FD-BA39-424A-B4A5-05C22E74158A}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe
FirewallRules: [UDP Query User{F268F5B3-59CD-479A-B05A-2D458332BEC2}C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe] => (Allow) C:\program files (x86)\filemaker\filemaker pro 12 advanced\extensions\xdbc support\fmxdbc_listener.exe

==================== Wiederherstellungspunkte =========================

15-02-2016 12:58:58 TypeScript Tools for Microsoft Visual Studio 2015 1.6.3.0
01-03-2016 03:51:38 Geplanter Prüfpunkt
04-03-2016 11:07:05 Removed gs_x64
05-03-2016 16:34:32 ASU_MSI_TRAN
08-03-2016 12:55:38 Microsoft Azure Tools for Microsoft Visual Studio 2015 - v2.7

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (03/08/2016 03:11:44 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 12) (User: ARBEIT)
Description: Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe1018

Error: (03/08/2016 03:11:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/08/2016 03:11:30 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2147024865. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/08/2016 03:10:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT)
Description: Bei der Aktivierung der App „C27EB4BA.Dropbox_xbfy0k16fey96!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/08/2016 03:08:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.71.14, Zeitstempel: 0x54261084
Name des fehlerhaften Moduls: USER32.dll, Version: 10.0.10586.20, Zeitstempel: 0x56542632
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00051538
ID des fehlerhaften Prozesses: 0x1ec0
Startzeit der fehlerhaften Anwendung: 0xjusched.exe0
Pfad der fehlerhaften Anwendung: jusched.exe1
Pfad des fehlerhaften Moduls: jusched.exe2
Berichtskennung: jusched.exe3
Vollständiger Name des fehlerhaften Pakets: jusched.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: jusched.exe5

Error: (03/08/2016 03:02:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: ARBEIT)
Description: Das Paket „Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (03/08/2016 02:53:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.71.14, Zeitstempel: 0x54261084
Name des fehlerhaften Moduls: USER32.dll, Version: 10.0.10586.20, Zeitstempel: 0x56542632
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00051538
ID des fehlerhaften Prozesses: 0x2254
Startzeit der fehlerhaften Anwendung: 0xjusched.exe0
Pfad der fehlerhaften Anwendung: jusched.exe1
Pfad des fehlerhaften Moduls: jusched.exe2
Berichtskennung: jusched.exe3
Vollständiger Name des fehlerhaften Pakets: jusched.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: jusched.exe5

Error: (03/08/2016 02:49:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT)
Description: Bei der Aktivierung der App „C27EB4BA.Dropbox_xbfy0k16fey96!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (03/08/2016 01:06:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: jusched.exe, Version: 2.1.71.14, Zeitstempel: 0x54261084
Name des fehlerhaften Moduls: USER32.dll, Version: 10.0.10586.20, Zeitstempel: 0x56542632
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00051538
ID des fehlerhaften Prozesses: 0x2068
Startzeit der fehlerhaften Anwendung: 0xjusched.exe0
Pfad der fehlerhaften Anwendung: jusched.exe1
Pfad des fehlerhaften Moduls: jusched.exe2
Berichtskennung: jusched.exe3
Vollständiger Name des fehlerhaften Pakets: jusched.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: jusched.exe5

Error: (03/08/2016 01:04:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ARBEIT)
Description: Bei der Aktivierung der App „C27EB4BA.Dropbox_xbfy0k16fey96!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (03/08/2016 03:11:30 PM) (Source: DCOM) (EventID: 10001) (User: ARBEIT)
Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca31CortanaUI.AppXjxtspbn4351hrtx8tc95e89kaz3h2f1f.mcaNicht verfügbarNicht verfügbar

Error: (03/08/2016 03:11:30 PM) (Source: DCOM) (EventID: 10001) (User: ARBEIT)
Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca31CortanaUI.AppX711wbbqg58k5e6x44f02q8a6ngaz9f50.mcaNicht verfügbarNicht verfügbar

Error: (03/08/2016 03:07:11 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Manager für heruntergeladene Karten" wurde nicht richtig gestartet.

Error: (03/08/2016 03:05:34 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

Error: (03/08/2016 03:01:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AODDriver4.3" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (03/08/2016 03:01:14 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎08.‎03.‎2016 um 14:45:08 unerwartet heruntergefahren.

Error: (03/08/2016 02:52:11 PM) (Source: DCOM) (EventID: 10016) (User: ARBEIT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ArbeitManfredS-1-5-21-2836439086-123312676-467905238-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (03/08/2016 02:52:11 PM) (Source: DCOM) (EventID: 10016) (User: ARBEIT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ArbeitManfredS-1-5-21-2836439086-123312676-467905238-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (03/08/2016 02:52:11 PM) (Source: DCOM) (EventID: 10016) (User: ARBEIT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ArbeitManfredS-1-5-21-2836439086-123312676-467905238-1001LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (03/08/2016 02:52:09 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Manager für heruntergeladene Karten" wurde nicht richtig gestartet.


CodeIntegrity:
===================================
  Date: 2016-03-04 12:13:08.978
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.947
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.906
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.872
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.824
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.789
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.720
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.685
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.639
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-04 12:13:08.618
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: AMD A8-3870 APU with Radeon(tm) HD Graphics
Prozentuale Nutzung des RAM: 41%
Installierter physikalischer RAM: 8153.29 MB
Verfügbarer physikalischer RAM: 4748.98 MB
Summe virtueller Speicher: 9433.29 MB
Verfügbarer virtueller Speicher: 5767.59 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:919.68 GB) (Free:349.67 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B26C2600)
Partition 1: (Active) - (Size=346 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=919.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=469 MB) - (Type=27)
Partition 4: (Not Active) - (Size=11 GB) - (Type=27)

==================== Ende von Addition.txt ============================
         

Alt 08.03.2016, 15:22   #5
Deathkid535
/// Malwareteam
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hi,

von Downloads von Chip raten wir schon seit einiger Zeit ab: CHIP-Installer - was ist das? - Anleitungen

Hast du den Ordner C:\AdwCleaner bzw. C:\Program Files\AdwCleaner?

Wenn ja, dann müsste es darin eine AdwCleaner[Cx].txt geben, einfach den Inhalt der neusten hier posten.

Und ich bräuchte das MBAM Log hier: Malwarebytes Anti-Malware Logfile finden - Anleitungen


Alt 08.03.2016, 15:33   #6
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hallo Dennis, vielen Dank für den Tipp. Ja habe ich gefunden hier die gewünschte TXT.

Ja im Nachhinein habe ich dann gelesen dass der Chip - Installer nicht gerade Optimal war ;-)




Code:
ATTFilter
# AdwCleaner v5.037 - Bericht erstellt am 05/03/2016 um 16:16:12
# Aktualisiert am 28/02/2016 von Xplode
# Datenbank : 2016-03-02.1 [Server]
# Betriebssystem : Windows 10 Home  (x64)
# Benutzername : Manfred - ARBEIT
# Gestartet von : C:\Users\Manfred\Desktop\adwcleaner_5.037.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Internetbrowser ] *****

[-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : istartpageing
[-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : webssearches
[-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://www.yessearches.com/?mode=nnnb&ptid=cos1&uid=03B1E295670E29870B715AE686CA03BB&v=20160301&ts=AHEpBn0sBHIoC0..
[-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://www.istartpageing.com/?type=hp&ts=1457088613&z=cefd9fdfdbb0eec97434cfcg1z2w2mde6b3baq9e6m&from=pcs&uid=TOSHIBAXDT01ACA100_13G8H2JPSXX13G8H2JPSX
[-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : lfmhcpmkbdkbgbmkjoiopeeegenkdikp
[-] [C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : ombmmloebnfnpehgjnmkcgoegfachobp

*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [22205 Bytes] - [04/03/2016 13:18:43]
C:\AdwCleaner\AdwCleaner[C2].txt - [1833 Bytes] - [04/03/2016 13:46:57]
C:\AdwCleaner\AdwCleaner[C3].txt - [1988 Bytes] - [05/03/2016 16:16:12]
C:\AdwCleaner\AdwCleaner[R0].txt - [11869 Bytes] - [12/06/2014 10:39:48]
C:\AdwCleaner\AdwCleaner[R1].txt - [7511 Bytes] - [14/07/2014 15:16:28]
C:\AdwCleaner\AdwCleaner[R2].txt - [1142 Bytes] - [14/07/2014 17:12:35]
C:\AdwCleaner\AdwCleaner[S0].txt - [10433 Bytes] - [12/06/2014 10:40:52]
C:\AdwCleaner\AdwCleaner[S1].txt - [28394 Bytes] - [14/07/2014 16:36:48]
C:\AdwCleaner\AdwCleaner[S2].txt - [3393 Bytes] - [14/07/2014 17:15:36]
C:\AdwCleaner\AdwCleaner[S3].txt - [2263 Bytes] - [04/03/2016 13:42:59]
C:\AdwCleaner\AdwCleaner[S4].txt - [1757 Bytes] - [04/03/2016 13:47:31]
C:\AdwCleaner\AdwCleaner[S5].txt - [2584 Bytes] - [05/03/2016 16:08:01]

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [2721 Bytes] ##########
         
Hier die gewünschte Datei.

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 07.03.2016
Suchlaufzeit: 13:55
Protokolldatei: scan neu+.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2016.03.07.03
Rootkit-Datenbank: v2016.02.27.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Manfred

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 675685
Abgelaufene Zeit: 1 Std., 20 Min., 10 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         

Alt 08.03.2016, 15:45   #7
Deathkid535
/// Malwareteam
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hi,

Schritt # 1: Spyhunter Cleaner

Deaktiviere bitte dein Antivirenprogramm, da es die Entfernung von SpyHunter blockieren kann.
Bitte downloade SpyHunterCleaner und speichere die Datei auf dem Desktop. (Bebilderte Anleitung)
  • Speichere alle Arbeiten und schließe alle noch offenen Programme und Browser.
  • Starte die SpyHunterCleaner.exe.
  • Drücke eine beliebige Taste, um den Entfernungsprozess zu starten.
  • Wenn das Tool fertig ist, wird es automatisch einen Neustart durchführen.
  • Nach dem Neustart sollte SpyHunter entfernt sein. Solltest du trotzdem noch Reste entdecken, so teile mir das bitte mit.


Schritt # 2: JRT

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.



Schritt # 3: FRST Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
CHR HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
ManualProxies:
HO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [312]
AlternateDataStreams: C:\ProgramData\TEMP:9FF7C773 [128]

RemoveProxy:
Hosts:
EmptyTemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Schritt # 4: FRST

Und noch ein frisches FRST-Log bitte.



Schritt # 5: Bitte Posten
  • Das Log von JRT
  • Das Fixlog von FRST
  • Das frische FRST-Log

Alt 08.03.2016, 16:35   #8
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hallo Dennis, hier der log von JRT:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.3 (02.09.2016)
Operating System: Windows 10 Home x64 
Ran by Manfred (Administrator) on 08.03.2016 at 16:09:01,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 4 

Successfully deleted: C:\Users\Manfred\AppData\Local\com (Folder) 
Successfully deleted: C:\Users\Manfred\AppData\Roaming\getrighttogo (Folder) 
Successfully deleted: C:\WINDOWS\prefetch\AVAST-FREE-ANTIVIRUS.EXE-3061D725.pf (File) 
Successfully deleted: C:\WINDOWS\prefetch\AVAST-FREE-ANTIVIRUS.EXE-8DEFFCD0.pf (File) 



Registry: 3 

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{90BE9D6A-D95E-4831-83DC-579445936B92} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.03.2016 at 16:15:55,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Hier das Fixlog:

Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
durchgeführt von Manfred (2016-03-08 16:17:41) Run:1
Gestartet von C:\Users\Manfred\Desktop
Geladene Profile: Manfred (Verfügbare Profile: Manfred & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
CHR HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
ManualProxies:
HO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
AlternateDataStreams: C:\ProgramData\TEMP:054203E4 [312]
AlternateDataStreams: C:\ProgramData\TEMP:9FF7C773 [128]

RemoveProxy:
Hosts:
EmptyTemp:
         
*****************

"HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Policies\Google" => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\ => Wert erfolgreich entfernt
HO-x32: YouProxy.YouProxy.YouProxy -> {bb4c50c9-d7f0-48ef-a67c-daf6a86830e4} -> C:\WINDOWS\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation) => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
C:\ProgramData\TEMP => ":054203E4" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":9FF7C773" ADS erfolgreich entfernt.

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2836439086-123312676-467905238-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========

C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.
EmptyTemp: => 6.8 GB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 16:21:15 ====
         
Und hier die letzte Datei:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von Manfred (Administrator) auf ARBEIT (08-03-2016 16:29:22)
Gestartet von C:\Users\Manfred\Desktop
Geladene Profile: Manfred (Verfügbare Profile: Manfred & .NET v4.5 & DefaultAppPool & .NET v4.5 Classic)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(SugarSync, Inc.) C:\Program Files (x86)\SugarSync\SugarSync.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
(Dropbox, Inc.) C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(RSA, The Security Division of EMC.) C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.113_none_7689896a26389b16\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-23] (Apple Inc.)
HKLM-x32\...\Run: [RSA Card Conversion Utility] => C:\Program Files (x86)\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe [3499728 2010-08-27] (RSA, The Security Division of EMC.)
HKLM-x32\...\Run: [onlinebrief24-ebdhelper] => C:\Program Files (x86)\onlinebrief24.de\ebdhelper.exe [692224 2015-04-01] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [221216 2015-11-18] (Geek Software GmbH)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-03-04] (AVAST Software)
HKLM-x32\...\RunOnce: [{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}] => C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe [510976 2015-09-21] (Microsoft Corporation) <===== ACHTUNG
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [SugarSync] => C:\Program Files (x86)\SugarSync\SugarSync.exe [18880528 2015-09-28] (SugarSync, Inc.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [2895552 2015-07-24] (Valve Corporation)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [THPanel] => C:\Program Files (x86)\Thunder Master\THPanel.exe [2197288 2014-10-17] (Palit Microsystems Ltd.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify Web Helper] => C:\Users\Manfred\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2020920 2015-04-23] (Spotify Ltd)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Spotify] => C:\Users\Manfred\AppData\Roaming\Spotify\Spotify.exe [7168568 2015-04-23] (Spotify Ltd)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Dropbox Update] => C:\Users\Manfred\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-16] (Dropbox, Inc.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Adobe Acrobat Synchronizer] => "C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2836439086-123312676-467905238-1001\...\RunOnce: [Uninstall C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [232960 2015-10-30] (Microsoft Corporation)
SSODL: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\system32\SSCbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {C28617FD-4FE7-4043-AD51-C8132CE90106} - C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64\FileSyncShell64.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Manfred\AppData\Roaming\Dropbox\bin\DropboxExt64.33.dll [2016-02-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-04] (AVAST Software)
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\system32\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncSharedSyncing] -> {F7395C2E-A5D8-4a32-9536-5C6A9F1DC450} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncSynced] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2015-09-28] (SugarSync, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Manfred\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\FileSyncShell.dll [2016-02-11] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {69925D1B-6A0F-4413-861A-81AB98039DB9} => C:\WINDOWS\SysWow64\SSCbFsMntNtf3.dll [2013-01-30] (EldoS Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2016-03-07]
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-03-07]
ShortcutTarget: Dropbox.lnk -> C:\Users\Manfred\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{018df403-5469-41da-bf60-c308cf3fe914}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKU\S-1-5-21-2836439086-123312676-467905238-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {4E911957-A024-4D49-94F3-E92DB8FBF8EF} URL = hxxp://www.bing.com/search?FORM=BDT3DF&PC=BDT3&dt=072313&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-2836439086-123312676-467905238-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-02-05] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-04] (AVAST Software)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-02-04] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-20] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-23] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-04] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-23] (Oracle Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-02-04] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
FF NewTab: about:newtab
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: hxxps://www.google.com/search?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Homepage: hxxps://www.google.com/?trackid=sp-006
FF Keyword.URL: hxxps://www.google.com/search?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-07-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-02-04] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Manfred\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-10-07] (Citrix Online)
FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2836439086-123312676-467905238-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-03-24] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2016-01-11] (Tracker Software Products (Canada) Ltd.)
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\google-avast.xml [2016-03-04]
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\searchplugins\yahoo-avast.xml [2015-06-17]
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\google-avast.xml [2016-03-04]
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\yahoo-avast.xml [2015-06-17]
FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\u93s10rd.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert]
FF Extension: Greasemonkey - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-23] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "hxxp://google.de/","hxxps://mail.google.com/mail/u/0/#inbox","hxxp://www.bing.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.75\pdf.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Unity Player) - C:\Users\Manfred\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll => Keine Datei
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-05]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-05]
CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-05]
CHR Extension: (Google Kalender) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2016-03-05]
CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-07]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-05]
CHR Extension: (Dropbox) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2016-03-05]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-05]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-05]
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Präsentationen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-01]
CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-01]
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-27]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-09]
CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Lumin - Best Document Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbkidnlfklnjanneifjjojofckpcogcl [2015-07-27]
CHR Extension: (Gmail offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2015-07-27]
CHR Extension: (Google Tabellen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-01]
CHR Extension: (Google Docs Offline) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20]
CHR Extension: (In Google Drive speichern) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2015-07-27]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-04]
CHR Extension: (PDF Viewer) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jccchjobcggajhnmckffhcahkkbioifn [2015-08-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-01]
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Docs) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-08-11]
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-05]
CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-07]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-11]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-08-11]
CHR Profile: C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3
CHR Extension: (Google Drive) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-21]
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-21]
CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-21]
CHR Extension: (Avast SafePrice) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-04-21]
CHR Extension: (Avast Online Security) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-21]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-26]
CHR Extension: (Google Wallet) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-21]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-04]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-09-15] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-04] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2804976 2016-02-04] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-19] (Microsoft Corporation) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-04] (Electronic Arts)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Datei ist nicht signiert]
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-06] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36520 2012-09-13] (Advanced Micro Devices, Inc.)
S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-03-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-04] (AVAST Software)
S3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
S3 Netaapl; C:\Windows\system32\DRIVERS\netaapl64.sys [23040 2013-07-25] (Apple Inc.) [Datei ist nicht signiert]
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
R3 SSCBFS3; C:\Windows\System32\drivers\sscbfs3.sys [347904 2013-01-30] (EldoS Corporation)
S3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42184 2013-02-22] (Anchorfree Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-17] (Apple, Inc.) [Datei ist nicht signiert]
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S0 wypvcacb; System32\drivers\pupio.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 16:17 - 2016-03-08 16:21 - 00002365 _____ C:\Users\Manfred\Desktop\Fixlog.txt
2016-03-08 16:15 - 2016-03-08 16:15 - 00001328 _____ C:\Users\Manfred\Desktop\JRT.txt
2016-03-08 16:08 - 2016-03-08 16:08 - 01609216 _____ (Malwarebytes) C:\Users\Manfred\Downloads\JRT.exe
2016-03-08 16:08 - 2016-03-08 16:08 - 01609216 _____ (Malwarebytes) C:\Users\Manfred\Desktop\JRT.exe
2016-03-08 16:04 - 2016-03-08 16:04 - 00000000 ___HD C:\OneDriveTemp
2016-03-08 16:00 - 2016-03-08 16:00 - 00508416 _____ C:\Users\Manfred\Downloads\SpyHunterCleaner.exe
2016-03-08 15:31 - 2016-03-08 15:31 - 00001209 _____ C:\Users\Manfred\Desktop\scan neu+.txt
2016-03-08 15:11 - 2016-03-08 15:18 - 00078949 _____ C:\Users\Manfred\Desktop\Addition.txt
2016-03-08 14:54 - 2016-03-08 16:29 - 00039957 _____ C:\Users\Manfred\Desktop\FRST.txt
2016-03-08 14:54 - 2016-03-08 16:29 - 00000000 ____D C:\FRST
2016-03-08 14:53 - 2016-03-08 14:54 - 02374144 _____ (Farbar) C:\Users\Manfred\Desktop\FRST64.exe
2016-03-08 12:54 - 2016-03-08 12:57 - 00002435 _____ C:\Users\Manfred\Desktop\Manfred - Chrome.lnk
2016-03-07 13:41 - 2016-03-07 13:42 - 03840080 _____ (AVAST Software) C:\Users\Manfred\Downloads\avast-browse104-cleanup-sfx.exe
2016-03-07 13:41 - 2016-03-07 13:42 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (2).pdf
2016-03-07 12:25 - 2016-03-07 12:25 - 00205349 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr (1).pdf
2016-03-07 11:26 - 2016-03-07 11:26 - 03430855 _____ C:\Users\Manfred\Downloads\scan.pdf
2016-03-07 10:50 - 2016-03-07 10:50 - 00244429 _____ C:\Users\Manfred\Downloads\Wentenschuh-Schnorr.pdf
2016-03-07 10:16 - 2016-03-07 10:16 - 00000000 __SHD C:\found.001
2016-03-05 16:13 - 2016-03-04 12:23 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-03-05 16:02 - 2016-03-05 16:02 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup (1).exe
2016-03-05 14:29 - 2016-03-05 14:29 - 00987728 _____ (Google Inc.) C:\Users\Manfred\Downloads\ChromeSetup.exe
2016-03-04 13:58 - 2016-03-08 15:29 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-03-04 13:53 - 2016-03-07 10:39 - 00001172 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-03-04 13:53 - 2016-03-04 13:53 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-03-04 13:53 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-03-04 13:53 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-03-04 13:53 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-03-04 13:51 - 2016-03-04 13:51 - 01470472 _____ C:\Users\Manfred\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2016-03-04 13:43 - 2016-03-04 13:43 - 05600464 _____ (Piriform Ltd) C:\Users\Manfred\Downloads\ccsetup515_slim.exe
2016-03-04 13:09 - 2016-03-04 13:09 - 01518592 _____ C:\Users\Manfred\Downloads\adwcleaner_5.037.exe
2016-03-04 13:05 - 2016-03-07 10:39 - 00001915 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2016-03-04 13:05 - 2016-03-04 13:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2016-03-04 12:23 - 2016-03-04 12:23 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-03-04 12:21 - 2016-03-07 10:39 - 00002030 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-03-04 12:21 - 2016-03-07 10:39 - 00002012 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-03-04 12:21 - 2016-03-04 12:21 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\AVAST Software
2016-03-04 12:20 - 2016-03-04 12:25 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-03-04 12:20 - 2016-03-04 12:25 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-03-04 12:20 - 2016-03-04 12:23 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-04 11:38 - 2016-03-04 11:38 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-04 11:05 - 2016-03-04 11:05 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\dlg
2016-03-04 11:00 - 2016-03-04 11:10 - 00000306 __RSH C:\ProgramData\ntuser.pol
2016-03-04 10:59 - 2016-03-04 10:59 - 00000000 ____D C:\Users\Public\Documents\dmp
2016-03-03 14:43 - 2016-03-03 14:43 - 00066341 _____ C:\Users\Manfred\Desktop\Lohnabrechnung März.pdf
2016-03-03 14:39 - 2016-03-03 14:39 - 00346618 _____ C:\Users\Manfred\Downloads\607673_VAB (1).lo2
2016-03-03 13:44 - 2016-03-03 13:44 - 00119924 _____ C:\Users\Manfred\Downloads\607673_VAB.lo2
2016-03-03 11:53 - 2016-03-03 11:53 - 00092824 _____ C:\Users\Manfred\Downloads\x0392.pdf
2016-03-02 12:28 - 2016-03-02 12:28 - 00011931 _____ C:\Users\Manfred\AppData\Local\recently-used.xbel
2016-03-02 11:49 - 2016-02-23 12:27 - 07475040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-03-02 11:49 - 2016-02-23 12:27 - 02654872 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2016-03-02 11:49 - 2016-02-23 12:25 - 02152288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2016-03-02 11:49 - 2016-02-23 12:25 - 01818696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-03-02 11:49 - 2016-02-23 12:23 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-03-02 11:49 - 2016-02-23 12:22 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-03-02 11:49 - 2016-02-23 12:15 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-03-02 11:49 - 2016-02-23 11:34 - 01859960 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2016-03-02 11:49 - 2016-02-23 11:34 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 08705672 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2016-03-02 11:49 - 2016-02-23 11:32 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2016-03-02 11:49 - 2016-02-23 11:31 - 01017032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00847656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00819648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2016-03-02 11:49 - 2016-02-23 11:31 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2016-03-02 11:49 - 2016-02-23 11:25 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-03-02 11:49 - 2016-02-23 11:21 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-03-02 11:49 - 2016-02-23 11:21 - 06606568 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-03-02 11:49 - 2016-02-23 10:45 - 02773096 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2016-03-02 11:49 - 2016-02-23 10:45 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-03-02 11:49 - 2016-02-23 10:45 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-03-02 11:49 - 2016-02-23 10:38 - 06952088 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00980352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00895080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00882720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-03-02 11:49 - 2016-02-23 10:38 - 00709176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-03-02 11:49 - 2016-02-23 10:30 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-03-02 11:49 - 2016-02-23 10:27 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-03-02 11:49 - 2016-02-23 10:26 - 05241984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-03-02 11:49 - 2016-02-23 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2016-03-02 11:49 - 2016-02-23 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2016-03-02 11:49 - 2016-02-23 09:56 - 02186864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-03-02 11:49 - 2016-02-23 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-03-02 11:49 - 2016-02-23 09:29 - 00591872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2016-03-02 11:49 - 2016-02-23 09:28 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2016-03-02 11:49 - 2016-02-23 09:09 - 01390592 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-03-02 11:49 - 2016-02-23 09:09 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2016-03-02 11:49 - 2016-02-23 09:06 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-03-02 11:49 - 2016-02-23 09:06 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2016-03-02 11:49 - 2016-02-23 09:06 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2016-03-02 11:49 - 2016-02-23 09:02 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-03-02 11:49 - 2016-02-23 09:00 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2016-03-02 11:49 - 2016-02-23 08:58 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2016-03-02 11:49 - 2016-02-23 08:52 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2016-03-02 11:49 - 2016-02-23 08:41 - 03594240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-03-02 11:49 - 2016-02-23 08:30 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-02 11:49 - 2016-02-23 08:30 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-03-02 11:49 - 2016-02-23 08:26 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-03-02 11:49 - 2016-02-23 08:25 - 01996288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-03-02 11:49 - 2016-02-23 08:24 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-03-02 11:49 - 2016-02-23 08:22 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2016-03-02 11:49 - 2016-02-23 08:21 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2016-03-02 11:49 - 2016-02-23 08:17 - 02635264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-03-02 11:49 - 2016-02-23 07:59 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-03-02 11:49 - 2016-02-23 07:55 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-03-02 11:49 - 2016-02-23 07:55 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-03-02 11:49 - 2016-02-23 07:55 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2016-03-02 11:49 - 2016-02-23 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-03-02 11:49 - 2016-02-23 07:50 - 22396416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-03-02 11:49 - 2016-02-23 07:50 - 09919488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-03-02 11:49 - 2016-02-23 07:40 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-03-02 11:49 - 2016-02-23 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-03-02 11:49 - 2016-02-23 07:39 - 02581504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 19341312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 18680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-03-02 11:49 - 2016-02-23 07:36 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-03-02 11:49 - 2016-02-23 07:33 - 14254080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2016-03-02 11:49 - 2016-02-23 07:30 - 02061312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-03-02 11:49 - 2016-02-09 04:24 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-03-02 11:49 - 2016-02-09 04:07 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-03-02 11:49 - 2016-02-09 04:04 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-03-02 11:48 - 2016-02-23 12:29 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-03-02 11:48 - 2016-02-23 12:29 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-03-02 11:48 - 2016-02-23 12:27 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-03-02 11:48 - 2016-02-23 12:27 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-03-02 11:48 - 2016-02-23 12:25 - 00563552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2016-03-02 11:48 - 2016-02-23 12:15 - 00779384 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2016-03-02 11:48 - 2016-02-23 12:09 - 01614176 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-03-02 11:48 - 2016-02-23 12:08 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2016-03-02 11:48 - 2016-02-23 11:33 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-03-02 11:48 - 2016-02-23 11:33 - 00389992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-03-02 11:48 - 2016-02-23 11:32 - 01152328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2016-03-02 11:48 - 2016-02-23 11:32 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-03-02 11:48 - 2016-02-23 11:31 - 00476728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2016-03-02 11:48 - 2016-02-23 11:22 - 00572272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2016-03-02 11:48 - 2016-02-23 11:17 - 00146272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2016-03-02 11:48 - 2016-02-23 10:49 - 00216416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-03-02 11:48 - 2016-02-23 10:45 - 00394080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-03-02 11:48 - 2016-02-23 10:45 - 00259336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqmapi.dll
2016-03-02 11:48 - 2016-02-23 10:44 - 00640984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2016-03-02 11:48 - 2016-02-23 10:44 - 00147808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2016-03-02 11:48 - 2016-02-23 10:40 - 00430944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-03-02 11:48 - 2016-02-23 10:39 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-03-02 11:48 - 2016-02-23 10:38 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-03-02 11:48 - 2016-02-23 10:38 - 00450912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-03-02 11:48 - 2016-02-23 10:38 - 00420928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2016-03-02 11:48 - 2016-02-23 10:37 - 00713824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2016-03-02 11:48 - 2016-02-23 10:32 - 00791744 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-03-02 11:48 - 2016-02-23 10:27 - 00376536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2016-03-02 11:48 - 2016-02-23 10:25 - 00534368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-03-02 11:48 - 2016-02-23 10:20 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblGameSave.dll
2016-03-02 11:48 - 2016-02-23 10:20 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2016-03-02 11:48 - 2016-02-23 10:19 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2016-03-02 11:48 - 2016-02-23 10:17 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-03-02 11:48 - 2016-02-23 10:12 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll
2016-03-02 11:48 - 2016-02-23 10:10 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2016-03-02 11:48 - 2016-02-23 10:07 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2016-03-02 11:48 - 2016-02-23 10:07 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2016-03-02 11:48 - 2016-02-23 10:06 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2016-03-02 11:48 - 2016-02-23 10:01 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rasl2tp.sys
2016-03-02 11:48 - 2016-02-23 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-03-02 11:48 - 2016-02-23 10:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2016-03-02 11:48 - 2016-02-23 09:58 - 00187744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-03-02 11:48 - 2016-02-23 09:58 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\irmon.dll
2016-03-02 11:48 - 2016-02-23 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-03-02 11:48 - 2016-02-23 09:55 - 00221600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqmapi.dll
2016-03-02 11:48 - 2016-02-23 09:55 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2016-03-02 11:48 - 2016-02-23 09:54 - 00539256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2016-03-02 11:48 - 2016-02-23 09:54 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2016-03-02 11:48 - 2016-02-23 09:53 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2016-03-02 11:48 - 2016-02-23 09:53 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll
2016-03-02 11:48 - 2016-02-23 09:52 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-03-02 11:48 - 2016-02-23 09:50 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-03-02 11:48 - 2016-02-23 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-03-02 11:48 - 2016-02-23 09:48 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerClient.dll
2016-03-02 11:48 - 2016-02-23 09:40 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2016-03-02 11:48 - 2016-02-23 09:39 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2016-03-02 11:48 - 2016-02-23 09:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2016-03-02 11:48 - 2016-02-23 09:38 - 00287712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2016-03-02 11:48 - 2016-02-23 09:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2016-03-02 11:48 - 2016-02-23 09:37 - 00204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-03-02 11:48 - 2016-02-23 09:36 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2016-03-02 11:48 - 2016-02-23 09:34 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifiprofilessettinghandler.dll
2016-03-02 11:48 - 2016-02-23 09:34 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2016-03-02 11:48 - 2016-02-23 09:33 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-03-02 11:48 - 2016-02-23 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-03-02 11:48 - 2016-02-23 09:31 - 00463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2016-03-02 11:48 - 2016-02-23 09:30 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2016-03-02 11:48 - 2016-02-23 09:28 - 00685568 _____ (Microsoft Corporation) C:\WINDOWS\system32\scapi.dll
2016-03-02 11:48 - 2016-02-23 09:27 - 00307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2016-03-02 11:48 - 2016-02-23 09:26 - 00372224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2016-03-02 11:48 - 2016-02-23 09:25 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2016-03-02 11:48 - 2016-02-23 09:25 - 00229376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2016-03-02 11:48 - 2016-02-23 09:23 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2016-03-02 11:48 - 2016-02-23 09:22 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2016-03-02 11:48 - 2016-02-23 09:22 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00493568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2016-03-02 11:48 - 2016-02-23 09:20 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 11:48 - 2016-02-23 09:19 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2016-03-02 11:48 - 2016-02-23 09:19 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-03-02 11:48 - 2016-02-23 09:18 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2016-03-02 11:48 - 2016-02-23 09:14 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2016-03-02 11:48 - 2016-02-23 09:14 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-03-02 11:48 - 2016-02-23 09:13 - 00915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2016-03-02 11:48 - 2016-02-23 09:13 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2016-03-02 11:48 - 2016-02-23 09:12 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2016-03-02 11:48 - 2016-02-23 09:11 - 01224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2016-03-02 11:48 - 2016-02-23 09:11 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-03-02 11:48 - 2016-02-23 09:10 - 00997376 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2016-03-02 11:48 - 2016-02-23 09:10 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-03-02 11:48 - 2016-02-23 09:09 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-03-02 11:48 - 2016-02-23 09:09 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-03-02 11:48 - 2016-02-23 09:06 - 01848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2016-03-02 11:48 - 2016-02-23 09:05 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-03-02 11:48 - 2016-02-23 09:04 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2016-03-02 11:48 - 2016-02-23 09:04 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-03-02 11:48 - 2016-02-23 09:04 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2016-03-02 11:48 - 2016-02-23 09:02 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2016-03-02 11:48 - 2016-02-23 09:02 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-03-02 11:48 - 2016-02-23 08:58 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2016-03-02 11:48 - 2016-02-23 08:58 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2016-03-02 11:48 - 2016-02-23 08:58 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2016-03-02 11:48 - 2016-02-23 08:57 - 00031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TimeBrokerClient.dll
2016-03-02 11:48 - 2016-02-23 08:54 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sharemediacpl.dll
2016-03-02 11:48 - 2016-02-23 08:50 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2016-03-02 11:48 - 2016-02-23 08:49 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2016-03-02 11:48 - 2016-02-23 08:48 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2016-03-02 11:48 - 2016-02-23 08:47 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2016-03-02 11:48 - 2016-02-23 08:47 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2016-03-02 11:48 - 2016-02-23 08:38 - 00480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-03-02 11:48 - 2016-02-23 08:37 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-03-02 11:48 - 2016-02-23 08:37 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-03-02 11:48 - 2016-02-23 08:37 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2016-03-02 11:48 - 2016-02-23 08:36 - 00713728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2016-03-02 11:48 - 2016-02-23 08:36 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2016-03-02 11:48 - 2016-02-23 08:36 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2016-03-02 11:48 - 2016-02-23 08:35 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-03-02 11:48 - 2016-02-23 08:31 - 00585216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2016-03-02 11:48 - 2016-02-23 08:31 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2016-03-02 11:48 - 2016-02-23 08:30 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-03-02 11:48 - 2016-02-23 08:30 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-03-02 11:48 - 2016-02-23 08:29 - 00949248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2016-03-02 11:48 - 2016-02-23 08:29 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-03-02 11:48 - 2016-02-23 08:28 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-03-02 11:48 - 2016-02-23 08:28 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
2016-03-02 11:48 - 2016-02-23 08:26 - 01498112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2016-03-02 11:48 - 2016-02-23 08:24 - 04827136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2016-03-02 11:48 - 2016-02-23 08:24 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2016-03-02 11:48 - 2016-02-23 08:24 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-03-02 11:48 - 2016-02-23 08:21 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2016-03-02 11:48 - 2016-02-23 08:20 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2016-03-02 11:48 - 2016-02-23 08:14 - 00990720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-03-02 11:48 - 2016-02-23 08:11 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-03-02 11:48 - 2016-02-23 08:05 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-03-02 11:48 - 2016-02-23 08:01 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2016-03-02 11:48 - 2016-02-23 07:58 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2016-03-02 11:48 - 2016-02-23 07:56 - 04412928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-03-02 11:48 - 2016-02-23 07:53 - 01799168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2016-03-02 11:48 - 2016-02-23 07:51 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-03-02 11:48 - 2016-02-23 07:42 - 03425792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-03-02 11:48 - 2016-02-23 07:41 - 02912256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2016-03-02 11:48 - 2016-02-23 07:35 - 07533568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2016-03-02 11:48 - 2016-02-23 07:33 - 02604032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-03-02 11:48 - 2016-02-23 07:32 - 02793472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-03-02 11:48 - 2016-02-23 07:28 - 06740992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2016-03-02 11:48 - 2016-02-23 07:26 - 12587520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-03-02 11:48 - 2016-02-09 05:28 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2016-03-02 11:48 - 2016-02-09 05:13 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2016-03-02 11:48 - 2016-02-09 04:18 - 00297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2016-03-02 11:48 - 2016-02-09 04:18 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2016-03-02 11:48 - 2016-02-09 04:07 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-02-29 15:25 - 2016-02-29 15:25 - 00130430 _____ C:\Users\Manfred\Desktop\meineSchufaneu (1).pdf
2016-02-29 15:19 - 2016-03-07 10:38 - 00001129 _____ C:\Users\Manfred\Desktop\Free PDF to Word Doc Converter.lnk
2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free PDF to Word Doc Converter
2016-02-29 15:19 - 2016-02-29 15:19 - 00000000 ____D C:\Program Files (x86)\Free PDF to Word Doc Converter
2016-02-29 15:17 - 2016-02-29 15:18 - 01470472 _____ C:\Users\Manfred\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe
2016-02-29 15:15 - 2016-02-29 15:15 - 00104862 _____ C:\Users\Manfred\Downloads\meineSchufaneu (1).pdf
2016-02-29 12:58 - 2016-02-29 12:58 - 00031121 _____ C:\Users\Manfred\Downloads\Angebot11456.pdf
2016-02-29 12:57 - 2016-02-29 12:57 - 00044952 _____ C:\Users\Manfred\Downloads\x0390.pdf
2016-02-25 17:59 - 2016-02-25 17:59 - 00345801 _____ C:\Users\Manfred\Downloads\91_lang__expose (1).pdf
2016-02-25 17:44 - 2016-02-25 17:44 - 00310409 _____ C:\Users\Manfred\Downloads\91_lang__expose.pdf
2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278.pdf
2016-02-22 15:57 - 2016-02-22 15:57 - 00042689 _____ C:\Users\Manfred\Downloads\Fax_2198905e9_498936082240_1455369278 (1).pdf
2016-02-22 14:14 - 2016-02-22 14:14 - 00292865 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1) (1).pdf
2016-02-22 13:59 - 2016-02-22 13:59 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015 (1).pdf
2016-02-22 13:57 - 2016-02-22 13:57 - 00041343 _____ C:\Users\Manfred\Downloads\SFR-Übertragung - Betriebsübergabe 30053 09 2015.pdf
2016-02-22 13:56 - 2016-02-22 13:56 - 00046393 _____ C:\Users\Manfred\Downloads\SFR-Übertragung auf einen anderen VN (AKB I.6.1.3) 30112 09  2015.pdf
2016-02-22 13:56 - 2016-02-22 13:56 - 00039032 _____ C:\Users\Manfred\Downloads\BV ueber Versicherungsnehmergemeinschaft 30072 09 2015.pdf
2016-02-20 13:07 - 2016-03-07 10:39 - 00002923 _____ C:\Users\Public\Desktop\Nero 2016.lnk
2016-02-20 13:07 - 2016-02-20 13:07 - 00000000 ____D C:\WINDOWS\System32\Tasks\Nero
2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016
2016-02-20 13:06 - 2016-02-20 13:07 - 00000000 ____D C:\Program Files (x86)\Nero
2016-02-20 13:06 - 2016-02-20 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2016-02-20 13:02 - 2016-02-20 13:03 - 02559488 _____ (Nero AG) C:\Users\Manfred\Downloads\Nero_BurningROM2016-21.09.2015_stub_trial.exe
2016-02-19 15:20 - 2016-02-19 15:20 - 00114402 _____ C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875.htm
2016-02-19 12:23 - 2016-02-19 12:23 - 00254523 _____ C:\Users\Manfred\Downloads\ent003_0.pdf
2016-02-18 16:05 - 2016-02-19 11:36 - 00000000 ____D C:\Users\Manfred\Downloads\Expose_kurz!1635!!10875-Dateien
2016-02-18 16:03 - 2016-02-18 16:03 - 00085479 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (5).pdf
2016-02-18 16:03 - 2016-02-18 16:03 - 00083820 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (4).pdf
2016-02-18 16:02 - 2016-02-18 16:02 - 00083816 _____ C:\Users\Manfred\Downloads\6568_kurz__expose (3).pdf
2016-02-18 14:35 - 2016-02-18 14:35 - 00106227 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (6).pdf
2016-02-18 14:35 - 2016-02-18 14:35 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (5).pdf
2016-02-18 14:22 - 2016-02-18 14:22 - 00104334 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (4).pdf
2016-02-18 14:21 - 2016-02-18 14:21 - 00106465 _____ C:\Users\Manfred\Downloads\6450_lang__expose (3).pdf
2016-02-18 14:21 - 2016-02-18 14:21 - 00104337 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (3).pdf
2016-02-18 14:20 - 2016-02-18 14:20 - 00019185 _____ C:\Users\Manfred\Downloads\6450_dokument_objektnachweis.pdf
2016-02-18 14:13 - 2016-02-18 14:13 - 00106225 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (2).pdf
2016-02-18 14:11 - 2016-02-18 14:12 - 00107865 _____ C:\Users\Manfred\Downloads\6450_kurz__expose (1).pdf
2016-02-18 14:11 - 2016-02-18 14:11 - 00104329 _____ C:\Users\Manfred\Downloads\6450_kurz__expose.pdf
2016-02-18 14:10 - 2016-02-18 14:10 - 00106361 _____ C:\Users\Manfred\Downloads\6450_lang__expose (2).pdf
2016-02-18 11:18 - 2016-02-18 11:18 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-02-18 11:14 - 2016-02-18 11:14 - 00000000 ____D C:\Users\Manfred\AppData\Local\sipgate_GmbH
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\sipgate Faxdrucker 3.21.1
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\StandardPlugin
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\ProgramData\eDocPrintPro
2016-02-18 11:13 - 2016-02-18 11:13 - 00000000 ____D C:\Program Files\Common Files\MAYComputer
2016-02-18 11:07 - 2016-02-18 11:07 - 00096775 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Margarethenstr. 5, Hirten.pdf
2016-02-18 10:59 - 2016-02-18 11:00 - 83174411 _____ C:\Users\Manfred\Downloads\SipgateFaxdrucker_Setup_x64.zip
2016-02-17 16:07 - 2016-02-17 16:07 - 00315387 _____ C:\Users\Manfred\Downloads\931989415_151030_5VB_000000001_133845100.pdf
2016-02-17 13:23 - 2016-02-17 13:23 - 00261008 _____ C:\Users\Manfred\Downloads\Stöckl-Kern.pdf
2016-02-17 11:31 - 2016-02-17 11:31 - 00597297 _____ C:\Users\Manfred\Downloads\bayernatlas.de (3).pdf
2016-02-17 11:29 - 2016-02-17 11:29 - 00831242 _____ C:\Users\Manfred\Downloads\bayernatlas.de (2).pdf
2016-02-17 11:19 - 2016-02-17 11:19 - 07259464 _____ C:\Users\Manfred\Downloads\Teilu.pdf
2016-02-17 11:19 - 2016-02-17 11:19 - 00097875 _____ C:\Users\Manfred\Downloads\BEURKUNDUNGSAUFTRAG Wasserburg Gronow.pdf
2016-02-15 12:32 - 2016-02-15 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2016-02-12 10:15 - 2016-02-12 10:15 - 00318267 _____ C:\Users\Manfred\Downloads\Wegbeschreibung München.pdf
2016-02-11 16:42 - 2016-02-11 16:42 - 01447476 _____ C:\Users\Manfred\Downloads\6450_lang__expose (1).pdf
2016-02-11 16:40 - 2016-02-11 16:40 - 01411647 _____ C:\Users\Manfred\Downloads\6450_lang__expose.pdf
2016-02-11 14:06 - 2016-02-11 14:06 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen (1).pdf
2016-02-11 14:04 - 2016-02-11 14:04 - 01046051 _____ C:\Users\Manfred\Downloads\Protokoll 2015.pdf
2016-02-11 14:00 - 2016-02-11 14:00 - 05781974 _____ C:\Users\Manfred\Downloads\Rücklagen.pdf
2016-02-10 13:42 - 2016-02-10 13:42 - 00762677 _____ C:\Users\Manfred\Downloads\1890_01_2016_142739_0d8b4bb0eaa6b5bf4537be673ecd84b6.pdf
2016-02-10 11:28 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-02-10 11:28 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-02-10 11:28 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-02-10 11:28 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-02-10 11:28 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2016-02-10 11:28 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2016-02-10 11:28 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2016-02-10 11:28 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2016-02-10 11:28 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-02-10 11:28 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2016-02-10 11:28 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2016-02-10 11:28 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-02-10 11:28 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2016-02-10 11:28 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-02-10 11:28 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
2016-02-10 11:28 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll
2016-02-10 11:28 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
2016-02-10 11:28 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-02-10 11:28 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll
2016-02-10 11:28 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll
2016-02-10 11:28 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
2016-02-10 11:28 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2016-02-10 11:28 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-02-10 11:28 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll
2016-02-10 11:28 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-02-10 11:28 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-02-10 11:28 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-02-10 11:28 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll
2016-02-10 11:28 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-02-10 11:28 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-02-10 11:28 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2016-02-10 11:28 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll
2016-02-10 11:27 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2016-02-10 11:27 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-02-10 11:16 - 2016-02-10 11:16 - 03444673 _____ C:\Users\Manfred\Downloads\Anzeige-Wolfsberger.pdf
2016-02-09 13:23 - 2016-02-09 13:23 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\ASCON Programme
2016-02-09 13:20 - 2016-02-10 12:43 - 00000000 ____D C:\Program Files (x86)\SBS
2016-02-09 13:20 - 2016-02-09 13:20 - 00120320 _____ () C:\WINDOWS\SysWOW64\czip.ocx
2016-02-09 13:20 - 2016-02-09 13:20 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sfx32.dll
2016-02-09 13:20 - 2016-02-09 13:20 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\SBS Installer
2016-02-09 13:19 - 2016-02-09 13:20 - 28473017 _____ (SBS) C:\Users\Manfred\Downloads\3dwrp_ultralight_setup.exe
2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\WINDOWS\Crystal
2016-02-09 12:48 - 2016-02-09 12:48 - 00000000 ____D C:\MEINHAUSPLANER
2016-02-09 12:48 - 2010-10-13 05:43 - 00882608 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v13.4.2.ocx
2016-02-09 12:48 - 2010-10-13 05:42 - 02369456 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v13.4.2.ocx
2016-02-09 12:48 - 2010-10-13 05:42 - 01370032 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v13.4.2.ocx
2016-02-09 12:48 - 2006-04-06 17:13 - 01276088 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.CommandBars.v10.1.ocx
2016-02-09 12:48 - 2006-04-06 17:13 - 00338104 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.TaskPanel.v10.1.ocx
2016-02-09 12:48 - 2006-04-06 16:13 - 00460984 _____ (Codejock Software) C:\WINDOWS\SysWOW64\Codejock.ReportControl.v10.1.ocx
2016-02-09 12:48 - 2004-04-27 14:47 - 00167176 _____ (/n software inc. - www.nsoftware.com) C:\WINDOWS\SysWOW64\ftps60.ocx
2016-02-09 12:48 - 2004-03-12 08:18 - 01369264 _____ (FarPoint Technologies, Inc.) C:\WINDOWS\SysWOW64\FPSPR70.ocx
2016-02-09 12:48 - 2003-02-07 13:18 - 00326656 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvec12n.ocx
2016-02-09 12:48 - 2003-02-07 13:18 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.ocx
2016-02-09 12:48 - 2003-02-07 13:18 - 00094208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltodb12n.ocx
2016-02-09 12:48 - 2003-02-07 13:17 - 00140288 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.ocx
2016-02-09 12:48 - 2003-02-07 13:16 - 00340480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.ocx
2016-02-09 12:48 - 2003-02-07 13:04 - 00181248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpng12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00182272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00049664 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfwmf12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00047104 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXpm12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00045568 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfXbm12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfxwd12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwpg12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lftga12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfwfx12n.dll
2016-02-09 12:48 - 2003-02-07 13:02 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfras12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00102400 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmpg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00089088 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfjbg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00084480 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lffpx12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00063488 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfplt12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00060416 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfpct12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00048128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfica12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00038912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfflc12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00037888 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfeps12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00036864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpsd12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00035328 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfgif12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00031744 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflmb12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00031232 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFPNM12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00029184 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lflma12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00027648 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfiff12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcx12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00020992 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfimg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfpcd12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00019968 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfitg12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00019456 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmsp12n.dll
2016-02-09 12:48 - 2003-02-07 13:01 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfmac12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00482816 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwf12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00215552 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvkrn12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00139264 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdxf12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00067584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfdwg12N.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00058880 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfcgm12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00049152 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltlst12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00047616 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdgn12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00046080 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lfdrw12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfcal12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00032256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lttmb12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00030720 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfbmp12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00028672 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfclp12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00026112 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfani12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00023040 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfawd12n.dll
2016-02-09 12:48 - 2003-02-07 13:00 - 00021504 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfCUT12n.dll
2016-02-09 12:48 - 2003-02-07 12:59 - 00307712 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDLG12n.dll
2016-02-09 12:48 - 2003-02-07 12:59 - 00062464 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.dll
2016-02-09 12:48 - 2003-02-07 12:59 - 00053248 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.dll
2016-02-09 12:48 - 2003-02-07 12:14 - 00630272 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTOCX12n.ocx
2016-02-09 12:48 - 2003-02-07 12:03 - 00358912 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFCMP12n.DLL
2016-02-09 12:48 - 2003-02-07 12:02 - 00141312 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFTIF12n.DLL
2016-02-09 12:48 - 2003-02-07 12:00 - 00073728 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LFFAX12n.DLL
2016-02-09 12:48 - 2003-02-07 11:59 - 00208384 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTEFX12n.dll
2016-02-09 12:48 - 2003-02-07 11:59 - 00164864 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTIMG12n.dll
2016-02-09 12:48 - 2003-02-07 11:59 - 00035840 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTTWN12n.dll
2016-02-09 12:48 - 2003-02-07 11:58 - 00388096 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTKRN12n.dll
2016-02-09 12:48 - 2003-02-07 11:58 - 00259584 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTDIS12n.dll
2016-02-09 12:48 - 2003-02-07 11:58 - 00131072 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\LTFIL12n.dll
2016-02-09 12:48 - 2003-01-24 15:59 - 00018944 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\lfavi12n.dll
2016-02-09 12:48 - 2002-08-23 16:50 - 00204800 _____ () C:\WINDOWS\SysWOW64\NumX.ocx
2016-02-09 12:48 - 2002-06-27 11:36 - 00598016 _____ (Key Company) C:\WINDOWS\SysWOW64\KeyTV3.ocx
2016-02-09 12:48 - 2002-01-23 11:17 - 00406048 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\WINDOWS\SysWOW64\XceedZip.dll
2016-02-09 12:48 - 2000-12-16 20:45 - 00032768 _____ () C:\WINDOWS\SysWOW64\WKAuxil.dll
2016-02-09 12:48 - 2000-10-12 20:46 - 00220160 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltvid12n.ocx
2016-02-09 12:48 - 2000-10-12 20:45 - 00160256 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltnet12n.ocx
2016-02-09 12:48 - 2000-10-12 20:44 - 00176128 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\ltcap12n.ocx
2016-02-09 12:48 - 2000-10-12 20:19 - 00158208 _____ (LEAD Technologies, Inc.) C:\WINDOWS\SysWOW64\Lvdlg12n.dll
2016-02-09 12:48 - 2000-05-02 03:17 - 00212480 _____ (Eastman Kodak) C:\WINDOWS\SysWOW64\PCDLIB32.DLL
2016-02-09 12:48 - 2000-04-12 15:28 - 00118784 _____ () C:\WINDOWS\SysWOW64\lfkodak.dll
2016-02-09 12:48 - 2000-04-12 15:24 - 00338944 _____ () C:\WINDOWS\SysWOW64\lffpx7.dll
2016-02-09 12:48 - 2000-02-10 09:46 - 00745472 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32_res_de.dll
2016-02-09 12:48 - 2000-02-03 03:16 - 00507904 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crviewer.dll
2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p3smnde.dll
2016-02-09 12:48 - 2000-02-02 00:48 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sodde.dll
2016-02-09 12:48 - 2000-02-01 12:49 - 00848376 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbl6.ocx
2016-02-09 12:48 - 2000-02-01 12:49 - 00242144 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\tdbgpp.dll
2016-02-09 12:48 - 2000-02-01 11:49 - 00106984 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\xarraydb.ocx
2016-02-09 12:48 - 2000-01-28 08:16 - 05550080 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\craxdrt.dll
2016-02-09 12:48 - 2000-01-28 08:16 - 05337088 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crpe32.dll
2016-02-09 12:48 - 2000-01-27 04:05 - 00270336 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sodbc.dll
2016-02-09 12:48 - 2000-01-14 04:58 - 00544768 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\exlate32.dll
2016-02-09 12:48 - 2000-01-11 08:10 - 00442368 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cpeaut32.dll
2016-02-09 12:48 - 2000-01-11 00:09 - 00618496 _____ (Seagate Software) C:\WINDOWS\SysWOW64\crpaig80.dll
2016-02-09 12:48 - 2000-01-07 01:15 - 00040960 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\cdo32.dll
2016-02-09 12:48 - 1999-12-15 00:17 - 00147456 _____ (Seagate Software, Inc) C:\WINDOWS\SysWOW64\p2smon.dll
2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3rdode.dll
2016-02-09 12:48 - 1999-12-08 02:59 - 00024576 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3ddode.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2sevt.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00094208 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bdao.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00061440 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2irdao.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00053248 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2ctdao.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00023040 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p2bbnd.dll
2016-02-09 12:48 - 1999-12-07 00:31 - 00017920 _____ C:\WINDOWS\SysWOW64\implode.dll
2016-02-09 12:48 - 1999-12-06 11:47 - 00851420 _____ (Seagate Software, Inc.) C:\WINDOWS\SysWOW64\crystl32.ocx
2016-02-09 12:48 - 1999-12-01 03:15 - 00004096 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3dbdde.dll
2016-02-09 12:48 - 1999-11-15 06:53 - 00036864 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3sevde.dll
2016-02-09 12:48 - 1999-11-08 06:15 - 00020480 _____ (Seagate Software Information Management Group, Inc.) C:\WINDOWS\SysWOW64\p3tdode.dll
2016-02-09 12:48 - 1999-10-22 07:33 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msvcp50.dll
2016-02-09 12:48 - 1999-06-07 12:59 - 00801464 _____ (APEX Software Corporation) C:\WINDOWS\SysWOW64\tdbg6.ocx
2016-02-09 12:48 - 1999-05-07 01:00 - 00262152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDatGrd.ocx
2016-02-09 12:48 - 1999-05-07 01:00 - 00198640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mci32.ocx
2016-02-09 12:48 - 1999-05-07 01:00 - 00082960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PicClp32.ocx
2016-02-09 12:48 - 1999-04-13 01:00 - 01046288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet35.dll
2016-02-09 12:48 - 1999-04-13 00:00 - 00415504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl35.dll
2016-02-09 12:48 - 1999-03-26 01:00 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb6stkit.dll
2016-02-09 12:48 - 1998-10-30 03:02 - 00595968 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\Resizer.dll
2016-02-09 12:48 - 1998-10-30 03:02 - 00187904 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizerPPG.ocx
2016-02-09 12:48 - 1998-10-30 03:02 - 00132608 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControl.dll
2016-02-09 12:48 - 1998-10-30 03:02 - 00058880 _____ (KL Group Inc.) C:\WINDOWS\SysWOW64\ResizableControlPPG.ocx
2016-02-09 12:48 - 1998-07-06 01:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2de.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlxGdDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RchTxDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CmDlgDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBLstDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSComDE.dll
2016-02-09 12:48 - 1998-07-06 01:00 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msprpde.dll
2016-02-09 12:48 - 1998-07-06 00:00 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Tabctde.dll
2016-02-09 12:48 - 1998-06-24 01:00 - 00525352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBGrid32.ocx
2016-02-09 12:48 - 1998-06-24 01:00 - 00200496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DBList32.ocx
2016-02-09 12:48 - 1998-06-24 01:00 - 00103744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMM32.OCX
2016-02-09 12:48 - 1998-06-18 01:00 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDBRPTR.DLL
2016-02-09 12:48 - 1998-06-18 01:00 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msstkprp.dll
2016-02-09 12:48 - 1998-06-18 01:00 - 00089360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Vb5db.dll
2016-02-09 12:48 - 1998-06-17 01:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC42LOC.DLL
2016-02-09 12:48 - 1998-04-24 01:00 - 00005807 _____ C:\WINDOWS\SysWOW64\MSCALDEU.TLB
2016-02-09 12:48 - 1998-04-24 00:00 - 00287504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msxbse35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mspdox35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00250128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msexcl35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00166160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msltus35.dll
2016-02-09 12:48 - 1998-04-24 00:00 - 00165648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mstext35.dll
2016-02-09 12:48 - 1997-11-10 04:08 - 00368912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbar332.dll
2016-02-09 12:48 - 1997-09-04 09:37 - 03782416 _____ C:\WINDOWS\SysWOW64\mso97.dll
2016-02-09 12:48 - 1997-08-27 00:00 - 00148240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint35.dll
2016-02-09 12:48 - 1997-07-30 12:47 - 00099866 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB5DE.dll
2016-02-09 12:48 - 1997-06-23 00:00 - 00252176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x35.dll
2016-02-09 12:48 - 1997-06-23 00:00 - 00024848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter35.dll
2016-02-09 12:48 - 1997-02-26 01:00 - 00035328 _____ (Apex Software Corporation) C:\WINDOWS\SysWOW64\DBGrdDE.dll
2016-02-09 12:48 - 1997-01-10 21:37 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddao35.dll
2016-02-09 12:47 - 2016-02-09 12:47 - 00000000 ____D C:\Users\Manfred\Downloads\meinHausplaner2012.3.3
2016-02-09 12:35 - 2016-02-09 12:42 - 622968396 _____ C:\Users\Manfred\Downloads\meinHausplaner2012.3.3.zip
2016-02-09 12:35 - 2016-02-09 12:35 - 01466656 _____ C:\Users\Manfred\Downloads\meinHausplaner - CHIP-Installer.exe
2016-02-09 11:13 - 2016-02-09 11:13 - 05415329 _____ C:\Users\Manfred\Documents\Unbenannt.xcf
2016-02-08 13:11 - 2016-02-08 13:11 - 00121184 _____ C:\Users\Manfred\Downloads\Infinus SZ-Online 24.01.2016.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 16:26 - 2013-03-24 12:52 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Dropbox
2016-03-08 16:24 - 2015-08-04 13:01 - 00000000 ___RD C:\Users\Manfred\OneDrive
2016-03-08 16:24 - 2013-07-31 12:03 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-08 16:22 - 2015-12-19 05:34 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-08 16:22 - 2015-12-19 04:25 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-08 16:21 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-03-08 16:17 - 2013-07-31 12:03 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-08 16:17 - 2013-04-03 17:21 - 00000000 ____D C:\Users\Manfred\AppData\LocalLow\Temp
2016-03-08 16:01 - 2015-12-19 04:28 - 00000000 ____D C:\Users\Manfred
2016-03-08 15:59 - 2013-07-31 15:29 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-03-08 15:51 - 2015-06-16 11:23 - 00001246 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001UA.job
2016-03-08 15:23 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-08 14:48 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-03-08 14:39 - 2014-12-08 20:58 - 00000000 ____D C:\Users\Manfred\360Works
2016-03-08 12:51 - 2015-06-16 11:23 - 00001194 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2836439086-123312676-467905238-1001Core.job
2016-03-08 11:52 - 2013-03-30 20:55 - 00004154 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{30F240A7-6244-488A-AA21-91030689FD7D}
2016-03-07 10:39 - 2016-01-13 11:29 - 00001108 _____ C:\Users\Public\Desktop\PDF-Viewer.lnk
2016-03-07 10:39 - 2015-12-19 05:20 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-07 10:39 - 2015-11-25 11:05 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002590 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002586 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002504 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2016-03-07 10:39 - 2015-10-07 14:06 - 00002476 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2016-03-07 10:39 - 2015-09-28 10:25 - 00001365 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2016-03-07 10:39 - 2015-09-21 13:33 - 00001505 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2016-03-07 10:39 - 2015-09-21 13:27 - 00001514 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2016-03-07 10:39 - 2015-09-21 13:20 - 00002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk
2016-03-07 10:39 - 2015-09-03 19:39 - 00001377 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2016-03-07 10:39 - 2015-04-23 12:15 - 00002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-07 10:39 - 2015-03-17 12:20 - 00001914 _____ C:\Users\Public\Desktop\SugarSync.lnk
2016-03-07 10:39 - 2015-03-13 12:53 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-03-07 10:39 - 2015-02-12 14:33 - 00001032 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk
2016-03-07 10:39 - 2014-11-24 20:48 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2016-03-07 10:39 - 2014-05-28 17:26 - 00001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2016-03-07 10:39 - 2013-10-21 19:00 - 00000984 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2016-03-07 10:39 - 2013-07-31 15:27 - 00001432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-03-07 10:39 - 2013-07-31 12:04 - 00002343 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-07 10:39 - 2013-04-22 16:40 - 00001932 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SugarSync.lnk
2016-03-07 10:39 - 2013-03-27 21:34 - 00000943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2016-03-07 10:39 - 2013-03-23 19:41 - 00002811 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileMaker Pro Advanced.lnk
2016-03-07 10:39 - 2013-03-11 13:30 - 00001397 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-03-07 10:38 - 2015-09-01 17:13 - 00002007 _____ C:\Users\Manfred\Desktop\LobuOnline.lnk
2016-03-07 10:38 - 2015-08-04 13:18 - 00002433 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-03-07 10:38 - 2015-03-06 20:43 - 00001853 _____ C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-03-07 10:38 - 2013-10-21 19:12 - 00000469 _____ C:\Users\Manfred\Desktop\Scan.lnk
2016-03-07 10:38 - 2013-09-17 12:36 - 00000912 _____ C:\Users\Manfred\Desktop\Start.lnk
2016-03-07 10:38 - 2013-04-01 02:01 - 00000906 _____ C:\Users\Manfred\Desktop\Downloads.lnk
2016-03-07 10:38 - 2013-03-23 19:38 - 00000523 _____ C:\Users\Manfred\Desktop\Windows (C).lnk
2016-03-07 10:13 - 2015-08-20 10:16 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Skype
2016-03-05 16:38 - 2015-08-20 10:16 - 00000000 ____D C:\ProgramData\Skype
2016-03-05 16:36 - 2015-08-20 10:16 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-05 16:16 - 2014-06-12 10:39 - 00000000 ____D C:\AdwCleaner
2016-03-05 13:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-03-05 12:57 - 2015-10-30 08:26 - 00000000 ____D C:\WINDOWS\Setup
2016-03-04 13:57 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\Packages
2016-03-04 13:05 - 2013-10-05 22:11 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-03-04 12:30 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-03-04 12:13 - 2014-07-31 12:46 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2016-03-04 12:11 - 2015-08-03 13:41 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-03-04 12:01 - 2013-03-11 14:38 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-04 11:43 - 2013-09-09 13:54 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-04 11:00 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2016-03-04 11:00 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-03-04 03:42 - 2015-12-19 04:27 - 02092088 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-04 03:42 - 2015-10-30 19:35 - 00890620 _____ C:\WINDOWS\system32\perfh007.dat
2016-03-04 03:42 - 2015-10-30 19:35 - 00197764 _____ C:\WINDOWS\system32\perfc007.dat
2016-03-04 03:34 - 2015-12-19 04:18 - 00489744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-04 03:31 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Portable Devices
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Multimedia Platform
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-03-04 03:31 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-03-04 03:31 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-03 12:01 - 2015-09-01 17:12 - 00000000 ____D C:\LobuOnlineData
2016-03-03 11:49 - 2013-10-21 15:32 - 00000000 ___RD C:\Scan
2016-03-02 13:33 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-02 12:28 - 2013-03-27 21:35 - 00000000 ____D C:\Users\Manfred\.gimp-2.8
2016-02-23 12:09 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-02-23 12:07 - 2013-03-11 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-02-20 13:06 - 2014-02-21 09:11 - 00000000 ____D C:\ProgramData\Nero
2016-02-20 13:03 - 2014-02-21 09:17 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Nero
2016-02-10 12:47 - 2013-04-03 17:43 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-02-10 12:46 - 2013-04-03 17:40 - 00000000 ____D C:\ProgramData\Adobe
2016-02-10 12:45 - 2013-10-16 15:09 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-02-10 12:45 - 2013-10-06 15:09 - 00000000 ____D C:\Users\Manfred\AppData\Roaming\Apple Computer
2016-02-10 12:42 - 2014-07-14 17:39 - 00000000 ____D C:\Program Files (x86)\Opera
2016-02-10 12:38 - 2013-07-23 17:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-02-10 12:18 - 2013-03-23 15:06 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-02-09 13:25 - 2013-03-23 13:50 - 00000000 ____D C:\Users\Manfred\AppData\Local\VirtualStore
2016-02-09 11:14 - 2014-11-10 14:48 - 00003490 _____ C:\WINDOWS\System32\Tasks\Apple Diagnostics

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-03-04 15:15 - 2014-03-24 15:29 - 0038420 _____ () C:\Users\Manfred\AppData\Roaming\Microsoft Excel 97-2003.ADR
2013-04-02 03:18 - 2013-04-02 08:01 - 0000600 _____ () C:\Users\Manfred\AppData\Local\PUTTY.RND
2016-03-02 12:28 - 2016-03-02 12:28 - 0011931 _____ () C:\Users\Manfred\AppData\Local\recently-used.xbel
2014-03-07 14:49 - 2014-03-07 14:52 - 0000007 _____ () C:\Users\Manfred\AppData\Local\~wmrg
2013-10-21 18:59 - 2013-10-21 18:59 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-19 04:24 - 2015-12-19 04:24 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-12-21 23:05 - 2013-12-21 23:05 - 0004967 _____ () C:\ProgramData\uxxadbmu.rlu

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\Package Cache\{d2c374d4-7d96-4dfb-8892-ecec0d6b4433}\MicrosoftAzureTools.VS140.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-03-01 12:39

==================== Ende von FRST.txt ============================
         

Alt 08.03.2016, 23:23   #9
Deathkid535
/// Malwareteam
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Besteht das Problem noch? Wenn ja, in allen Browsern?

Alt 09.03.2016, 10:52   #10
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hallo Dennis,

die Weiterleitungen sind weg. Vielen Dank. Meinst du wir haben alles erwischt? LG

Alt 09.03.2016, 10:53   #11
Deathkid535
/// Malwareteam
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hi,

wir machen noch einen Kontrollscan zur Sicherheit

Schritt # 1: ESET


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt # 2: Bitte Posten
  • Das Log von ESET

Alt 10.03.2016, 13:32   #12
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hallo Dennis,

erst mal vielen Dank für deine Mühen, jetzt hat es etwas gedauert, habe den Scanner über nacht laufen lassen..... 9 Bedrohungen hat er gefunden hier die Log datei:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f50188835272d94cae63be4fe447cb41
# end=init
# utc_time=2016-03-09 10:21:10
# local_time=2016-03-09 11:21:10 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 28494
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f50188835272d94cae63be4fe447cb41
# end=updated
# utc_time=2016-03-09 10:23:33
# local_time=2016-03-09 11:23:33 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f50188835272d94cae63be4fe447cb41
# engine=28494
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-03-09 11:33:05
# local_time=2016-03-09 12:33:05 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=788 16777213 100 98 331908 436376 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 442591 11337328 0 0
# scanned=184064
# found=5
# cleaned=0
# scan_time=4171
sh=3AEB3F19AB22354A6AAA0D231805325B4A3277DC ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\web\js\xagainit.js.vir"
sh=4E36757475FB5BA3AFAF017C6C6D787122D459F4 ft=1 fh=52f519951b273060 vn="Variante von Win32/ELEX.FF evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\4WdM4\WdMan.exe.vir"
sh=019273ADFAF31F36E1297FB2DB6AD8B3D4EF8966 ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.4.7_0\js\xagainit.js.vir"
sh=5331448737649E9CB3F81D90D929BF80BD8F94A4 ft=1 fh=78700c4f007807de vn="Variante von Win32/ELEX.GQ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Roaming\istartpageing\UninstallManager.exe.vir"
sh=F684B1290DE1EC6D2C348E3B884BCF1D84F3A944 ft=1 fh=e43fd8b8b63ad450 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\SysNative\roboot64.exe.vir"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f50188835272d94cae63be4fe447cb41
# end=init
# utc_time=2016-03-09 12:03:27
# local_time=2016-03-09 01:03:27 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f50188835272d94cae63be4fe447cb41
# end=init
# utc_time=2016-03-09 12:03:37
# local_time=2016-03-09 01:03:37 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 28494
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f50188835272d94cae63be4fe447cb41
# end=updated
# utc_time=2016-03-09 12:04:02
# local_time=2016-03-09 01:04:02 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f50188835272d94cae63be4fe447cb41
# engine=28494
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-03-09 04:44:54
# local_time=2016-03-09 05:44:54 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=788 16777213 100 98 354217 455085 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 464900 11356037 0 0
# scanned=543164
# found=9
# cleaned=0
# scan_time=16851
sh=3AEB3F19AB22354A6AAA0D231805325B4A3277DC ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\web\js\xagainit.js.vir"
sh=4E36757475FB5BA3AFAF017C6C6D787122D459F4 ft=1 fh=52f519951b273060 vn="Variante von Win32/ELEX.FF evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\4WdM4\WdMan.exe.vir"
sh=019273ADFAF31F36E1297FB2DB6AD8B3D4EF8966 ft=0 fh=0000000000000000 vn="JS/Lightning.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\4.4.7_0\js\xagainit.js.vir"
sh=5331448737649E9CB3F81D90D929BF80BD8F94A4 ft=1 fh=78700c4f007807de vn="Variante von Win32/ELEX.GQ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Manfred\AppData\Roaming\istartpageing\UninstallManager.exe.vir"
sh=F684B1290DE1EC6D2C348E3B884BCF1D84F3A944 ft=1 fh=e43fd8b8b63ad450 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\SysNative\roboot64.exe.vir"
sh=52DD7D18DAC83C24D48284BF0ACFDC148EBC9E8B ft=1 fh=3396adde71e315f0 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe"
sh=8221CA33EEA188F171990445FDBE3D01FC0E570A ft=1 fh=24ab96437044cc4c vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"
sh=10B9F13C3FC7CE9B4BD7ED594A79A5E342025C6A ft=1 fh=161f4771f9311d61 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\meinHausplaner - CHIP-Installer.exe"
sh=E8C6D46B8EB252CA6B7BCF613CB1990994213A7C ft=1 fh=ece7f765455d75ac vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Manfred\Downloads\PDF XChange Viewer - CHIP-Installer.exe"
         

Alt 10.03.2016, 15:08   #13
Deathkid535
/// Malwareteam
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hi,

ist alles entweder schon in Quarantäne oder der CHIP-Installer. Zu dem noch weiter unten mehr Infos.

Deinstalliere bitte alle deine Java Versionen. Falls dus unbedingt brauchst, dann kannst dus dir neu herunterladen.

Dann wären wir hier durch. Deine Logs sind sauber

Falls du deine Passwörter nicht regelmäßig änderst - jetzt ist der Zeitpunkt dafür!

Schritt # 1: Entfernen unserer Tools

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Abschließend noch ein paar Tipps von mir:

Schritt # 2: Empfohlene Software

Habe immer ein aktuelles Antivirenprogramm deiner Wahl installiert und aktiviere die automatischen Updates (standardmäßig eingeschaltet).

Ich empfehle:

Verwende nach Möglichkeit nicht den Internet Explorer, da dieser viele Sicherheitslücken enthält. Achte aber darauf, dass er immer up to date bleibt, weil viele Programme diesen zum Anzeigen von Websites benutzen.

Alternativ kannst du verwenden:Dazu sind folgende Add-ons empfehlenswert:

uBlock Origin (Chrome) --> Blockiert Werbung. Werbung kann sehr nervig sein, aber auch auf schädliche Links verweisen. uBlock ist effizienter als der Konkurrent AdblockPlus.
Ghostery --> Blockiert Tracker und Cookies, welche dich im Internet nachverfolgen können. Stelle jedoch bei der Installation sicher, dass du Ghostrank nicht zustimmst.

Du kannst auch Malwarebytes Anti-Exploit verwenden, um aktuelle Sicherheitslücken zu stopfen.

Halte immer deine Plug-ins und Software aktuell, vor allem:Du kannst diese komfortabel regelmäßig hiermit überprüfen:

PluginCheck
Filehippo App Manager



Schritt # 3: Tipps um eine Neuinfektion zu vermeiden

Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal wie FilePony.de. Von Downloadern wie die von Chip, Softonic und Sourceforge raten wir ab: CHIP-Installer - was ist das? - Anleitungen

Auch versuchen sich immer mehr Programme durch Installationsroutinen auf den PC "durchzumogeln". Das klappt ganz gut, weil viele Anwender sich diese nicht genau durchlesen und schnell durchklicken. Manchmal steht auch in den Lizenzvereinbarungen, dass ein Programm, was eigentlich als Freeware angepriesen wird, nur genutzt werden kann, wenn man sich bestimmte Toolbars oder andere Programme mitinstallieren lässt.
Da hilft es nur aufmerksam zu sein.

Ein Tool, welches dich dabei gut unterstützen kann, ist: Unchecky. Dieses überwacht im Hintergrund Installationsprozesse und hakt automatisch nervige Adwarekomponenten wie Toolbars ab. Falls man etwas übersieht, warnt noch ein Pop-up, bevor man fortfahren kann.

Wir raten von jeglichen Optimizern, Cleanern, SpeedUps und Ähnlichem ab, da diese Softwareprodukte meist keinen Performancegewinn bringen. Du kannst jedoch regelmäßig deinen PC mit der windowsinternen Datenträgerbereinigung behandeln.

Überprüfe regelmäßig (mind. 1x pro Monat) deinen PC mit Malwarebytes Anti-Malware und ESET.

Falls du dir unsicher bist, ob ein Download wirklich sauber ist, kannst du immer https://www.virustotal.com/ zurate ziehen.



Schritt # 4: Unterstütze uns!

Wenn du uns mit einer kleinen Spende unterstützen möchtest, so kannst du dies hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html

Es reicht aber auch schon ein simples hier, wenn du mit uns zufrieden warst.

unsere Facebook-Seite!

Bitte gib mir bescheid, wenn du das alles gelesen hast und alles klar ist, damit ich dieses Thema aus meinen Abos löschen kann.

Alt 10.03.2016, 19:23   #14
Namlus
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Hallo Dennis,

nochmal vielen herzlichen Dank.

Java 7 lässt sich aufgrund einer fehlenden MSI Datei nicht löschen.... ich habe gerade gegoogelt, da gibt es ein Tool, das das anscheinend reparieren soll.... aber ich trau mich echt nichts runterladen.

LG

Manfred

Alt 10.03.2016, 23:38   #15
Deathkid535
/// Malwareteam
 
Das bringt mich zur verzweiflung......   http://95.211.240.247/public/AddOn2/security/s.js ........ - Standard

Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........



Kannst du mir mal bitte die Fehlermeldung und einen Link zum Tool posten?

Antwort

Themen zu Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........
avast, bekannte, cleaner, einfach, eingestuft, entfernt, erfolgreich, fehlermeldung, google, große, hallo zusammen, inter, interne, internetseite, löschen, malewarbytes, seite, sobald, systems, systemstart, virus, vorne, websearch, website, zusammen, zuvor




Ähnliche Themen: Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........


  1. Apache Traffic Server 6 bringt HTTP/2-Support
    Nachrichten - 22.09.2015 (0)
  2. Microsoft Security Essentials bringt jeden Tag Backdoor:PHP/ Meldungen
    Plagegeister aller Art und deren Bekämpfung - 31.07.2015 (23)
  3. Avast gibt Alarm URL: hxxps://securityguard1.net/public/AddOn2/static/gc.js
    Log-Analyse und Auswertung - 28.11.2014 (9)
  4. Antivirus Security pro - mich hats erwischt
    Plagegeister aller Art und deren Bekämpfung - 08.11.2013 (11)
  5. Windows XP: Habe mich mit Antivirus Security Pro infiziert
    Log-Analyse und Auswertung - 06.11.2013 (3)
  6. Amazon bringt neues Security-Tool für seine Cloud-Dienste
    Nachrichten - 28.03.2013 (0)
  7. Life Security Platinum auch für mich
    Plagegeister aller Art und deren Bekämpfung - 30.07.2012 (1)
  8. Firewall ist geschreddert und consrv.dll bringt mich um
    Log-Analyse und Auswertung - 15.07.2011 (17)
  9. Google bringt mich immer auf falsche Seiten...habe ich einen Trojaner?
    Log-Analyse und Auswertung - 02.05.2011 (27)
  10. Trojaner: Proxy.AMDX Bringt mich zur kriese
    Log-Analyse und Auswertung - 22.04.2011 (1)
  11. HILFEE !!! Security Tool macht mich wahnsinnig !!!
    Plagegeister aller Art und deren Bekämpfung - 28.09.2010 (8)
  12. google umleitung? (klick bringt mich zu dubiösen Seiten alle Browser)
    Plagegeister aller Art und deren Bekämpfung - 20.07.2010 (1)
  13. Auch mich erwischt es mal... (AV Security Suite)
    Plagegeister aller Art und deren Bekämpfung - 13.07.2010 (2)
  14. Psoido Virenscanner bringt mich zur Verzweiflung
    Plagegeister aller Art und deren Bekämpfung - 02.09.2008 (1)
  15. eine exe und dll datei bringt mich noch um-hilfe!
    Plagegeister aller Art und deren Bekämpfung - 11.07.2007 (2)
  16. Microsoft Internet Explorer bringt mich zur Verzweiflung
    Log-Analyse und Auswertung - 24.05.2005 (19)
  17. Verzweiflung: Super Spider nervt mich zu Tode - kann mir jemand helfen?
    Log-Analyse und Auswertung - 26.10.2004 (5)

Zum Thema Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ - Hallo zusammen, ich habe mir den websearch Virus (ich weis nicht ob virus die richtige bezeichnung ist - ich nenn Ihn einfach mal so) eingefangen..... komischerweise war es eine bekannte - Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ...........
Archiv
Du betrachtest: Das bringt mich zur verzweiflung...... http://95.211.240.247/public/AddOn2/security/s.js ........ auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.