| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER LogWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
06.06.2016, 13:46
| #1 |
 |  Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Hallo zusammen, bin neu in dem Forum hier und hoffe ich hab alle Regeln gelesen und beachtet. Nutze Windows 10 Home Premium (Upgrade von Win 7) und bis zum Vorfall AVAST kostenfreie Edition. Mein aktuelles Problem: Wenn ich einen Browser (egal ob Edge, Chrome, Firefox oder sogar STEAM) öffne dann gibt es nach einigen Surf Seiten bei Klicks unerwünschte Weiterleitungen. D.h. Ich rufe z.B. chip.de auf, gehe in die Downloadcharts und dann wenn ich wohin klicke z.B. auf einen Download-Link ruft er im selben Tab die richtige Downloadseite auf aber er macht gleichzeitig einen neuen Tab auf mit diversen Seiten (ob von erotik, a-bloggers.com, sportwetten etc.). Das nervt und gibt mir kein sicheres Gefühl beim Surfen. Da ich die letzten 20 Jahre nahezu alle arten von PC Problemen selber lösen konnte habe ich mich bisher noch an keinen Malewareexperten gewandt. Angefangen hat alles in dem ich von einer Downloadquelle eine xxx.rar.exe runtergeladen habe und dumm wie man ist aus Versehen ausgeführt habe. Danach kamen irgendwelche Meldungen die ich (in Panik wie ich war) nicht protokolliert habe. Danach hab ich irgendwas gemacht, dann bootete der PC nicht mehr, so daß ich mit Reparatur-Boot und DISM Befehle die registry und via Windows Update /RestoreHealth das Ganze repariert habe. Dann gings wieder. Dann die Top 10 der Virenscanner auf Chip runtergeladen und prüfen lassen. Bin von Avast auf Avira auf Kaspersky AntiVir 2016 umgestiegen (permanent) - keiner hat was gefunden. Malwarebytes, Spy Search & Destroy und ADWCleaner haben was gefunden. Einmal eine VideoFetch exe, dann was mit Torrent etc. "Erfahren" und glücklich wie ich war hab ich keine Logs gespeichert. Firefox und Chrome zurückgesetzt - hat nix geholfen. Firefox und chrome deinstalliert. Nur Chrome wieder installiert - noch immer da. Hosts Datei angesehen - scheint normal zu sein. Derzeit nur Edge und Chrome sowie der in Steam enthaltene Browser installiert. Nun finden weder Malwarebytes Antimalware, noch mbar beta, noch ADWCleaner noch Iobit Uninstaller noch sonst einer irgendeine Schadsoftware. Das MS böse Software Entferntool findet während der 4 Stunden Suche zwar 9 infizierte Dateien aber wenn es fertig ist dann heißt es keine bösartige Software gefunden... Dann hab ich Euer Forum gefunden und hab mir GMER gemäß Eurer Anleitung runtergeladen und laufen lassen. Hier das Log. Bitte helft mir meine dumme Tat wieder gradzubügeln...Danke PS: Ich weiß nicht ob ich den Virus oder sonstwas noch drauf habe und nur in irgendeiner ini Datei noch was verändert ist. Deshalb hab ich in dieser Forums Kategorie gepostet. Code:
ATTFilter GMER 2.2.19882 - hxxp://www.gmer.net
Rootkit scan 2016-06-06 14:10:43
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST932042 rev.0002 298,09GB
Running: gmer-2.2.19882.exe; Driver: C:\Users\Starsoul\AppData\Local\Temp\fxlyrkoc.sys
---- Threads - GMER 2.2 ----
Thread C:\WINDOWS\system32\svchost.exe [1080:2668] 00007ffac89b1a50
Thread C:\WINDOWS\system32\svchost.exe [1080:6744] 00007ffab30b1040
Thread C:\WINDOWS\system32\svchost.exe [1080:6784] 00007ffab4964c50
Thread C:\WINDOWS\system32\svchost.exe [1080:5472] 00007ffab4964c50
Thread C:\WINDOWS\system32\svchost.exe [1080:8972] 00007ffaccab2750
Thread C:\WINDOWS\system32\svchost.exe [1284:6684] 00007ffac7576320
Thread C:\WINDOWS\system32\svchost.exe [1284:6688] 00007ffac75886e0
Thread C:\WINDOWS\system32\svchost.exe [1284:7008] 00007ffab41dc550
Thread C:\WINDOWS\system32\svchost.exe [1284:7012] 00007ffab41dc530
Thread C:\WINDOWS\system32\svchost.exe [1540:2500] 00007ffac8c96aa0
Thread C:\WINDOWS\system32\svchost.exe [1540:2504] 00007ffac8c9b0c0
Thread C:\WINDOWS\system32\svchost.exe [1540:3388] 00007ffac7da1240
Thread C:\WINDOWS\system32\svchost.exe [1540:3392] 00007ffac7db9490
Thread C:\WINDOWS\system32\svchost.exe [1540:3396] 00007ffac7d729b0
Thread C:\WINDOWS\system32\svchost.exe [1540:3836] 00007ffac4553d30
Thread C:\WINDOWS\system32\svchost.exe [1540:7160] 00007ffac45522b0
Thread C:\WINDOWS\System32\spoolsv.exe [1992:1408] 00007ffac7576320
Thread C:\WINDOWS\System32\spoolsv.exe [1992:1376] 00007ffac6f629a0
Thread C:\WINDOWS\System32\spoolsv.exe [1992:5232] 00007ffac6f629a0
Thread C:\WINDOWS\System32\spoolsv.exe [1992:4372] 00007ffacaf21180
Thread C:\WINDOWS\System32\spoolsv.exe [1992:1564] 00007ffab719cd90
Thread C:\WINDOWS\system32\svchost.exe [2324:3160] 00007ffac7eb1530
Thread C:\WINDOWS\system32\svchost.exe [2324:3168] 00007ffac7eb1530
Thread C:\WINDOWS\system32\mqsvc.exe [2544:3340] 00007ffac5c97e50
Thread C:\WINDOWS\system32\svchost.exe [2600:4168] 00007ffac7576320
Thread C:\WINDOWS\system32\svchost.exe [2600:2424] 00007ffac6f629a0
Thread C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [3316:3416] 00007ffac604b284
Thread C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [3316:3420] 00007ffac5f559cc
Thread C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [3316:5968] 00007ffacfd71b40
Thread C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [3316:1196] 00007ffac5f559cc
Thread C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [3368:5700] 00007ffacfd71b40
Thread C:\WINDOWS\system32\csrss.exe [8872:6256] fffff961e95d4060
Thread C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [904:3528] 000000006a9505e0
Thread C:\Windows\System32\RuntimeBroker.exe [4164:7404] 00007ffad1af0880
Thread C:\WINDOWS\SYSTEM32\ntdll.dll [1000:4032] 0000000000410f1d
---- EOF - GMER 2.2 ----
|
|
06.06.2016, 14:32
| #2 |
| /// Malwareteam  | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen. Bitte beachte, dass es ein paar Regeln gibt:
Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM! Posten in CODE-Tags  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Los gehts! Schritt # 1: FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Schritt # 2: Bitte Posten
__________________ |
|
06.06.2016, 16:16
| #3 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log hat übrigens am 29.05. angefangen.
__________________Hier die FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-06-2016 02
durchgeführt von Starsoul (Administrator) auf STARSOUL-G73 (06-06-2016 16:56:48)
Gestartet von C:\Users\Starsoul\Desktop
Geladene Profile: Starsoul (Verfügbare Profile: Starsoul & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Mr. John aka japamd) D:\Program Files (x86)\RadeonPro\RadeonProSupport.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices, Inc.) D:\Program Files\AMD\CNext\CNext\cnext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(IObit) D:\Program Files (x86)\IObit Uninstaller\UninstallMonitor.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avpui.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1861416 2009-10-09] (Synaptics Incorporated)
HKLM\...\Run: [StartCN] => d:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NWEReboot] => [X]
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6806144 2010-06-24] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-03] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (CANON INC.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Run: [Google Update] => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{32ffb1ef-1f41-4fe4-85d0-4118c45dead7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}: [NameServer] 138.201.48.176,8.8.8.8
Tcpip\..\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> D:\Program Files (x86)\IObit Uninstaller\UninstallExplorer.dll [2015-12-23] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-26] (Oracle Corporation)
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-26] (Oracle Corporation)
BHO-x32: Kein Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Keine Datei
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
BHO-x32: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei
BHO-x32: Kein Name -> {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} -> Keine Datei
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Keine Datei
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-06-03] ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-05-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-05-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-06-03] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Keine Datei]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> d:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-07-24] (Nullsoft, Inc.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-30] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> d:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Starsoul\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @talk.google.com/O1DPlugin -> C:\Users\Starsoul\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: ubisoft.com/uplaypc -> d:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-05-09] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Starsoul\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Starsoul\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-02-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox [2016-05-30]
FF HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Starsoul\AppData\Roaming\Mozilla\Firefox\Profiles\0lqb71tz.default\extensions\cliqz@cliqz.com => nicht gefunden
Chrome:
=======
CHR Profile: C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-03]
CHR Extension: (Google Docs) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-03]
CHR Extension: (Google Drive) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-03]
CHR Extension: (YouTube) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-03]
CHR Extension: (Kaspersky Protection) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2016-06-03]
CHR Extension: (Google Tabellen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-03]
CHR Extension: (Google Docs Offline) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-03]
CHR Extension: (Google Mail) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-03]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe [194000 2015-12-08] (Kaspersky Lab ZAO)
S4 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-10-15] (BitRaider, LLC)
S4 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-01-21] (BitRaider, LLC)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2010-04-24] (Creative Labs) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2015-01-30] (EasyAntiCheat Ltd)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-05-27] (IObit)
S4 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-10-01] (Intel Corporation) [Datei ist nicht signiert]
S4 Origin Client Service; F:\Origin\OriginClientService.exe [2120712 2016-05-18] (Electronic Arts)
S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
S4 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2012-01-02] ()
R2 RadeonPro Support Service; d:\Program Files (x86)\RadeonPro\RadeonProSupport.exe [20608 2013-04-13] (Mr. John aka japamd) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.)
S2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-10-01] (Intel Corporation) [Datei ist nicht signiert]
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\System32\drivers\athwnx.sys [4207104 2015-10-30] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [111120 2016-03-01] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-09-06] ()
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-01-22] (BitRaider)
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2014-10-15] (BitRaider)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [15416 2009-07-20] ( )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-05-30] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-12-08] (AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [238000 2016-05-30] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [933808 2016-05-30] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49240 2016-05-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-08] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87984 2016-05-30] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-09-06] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2009-09-02] (CyberLink Corp.)
U3 fxlyrkoc; C:\Users\Starsoul\AppData\Local\Temp\fxlyrkoc.sys [56584 2016-06-06] (GMER) [Datei ist nicht signiert]
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-06 16:56 - 2016-06-06 16:57 - 00019948 _____ C:\Users\Starsoul\Desktop\FRST.txt
2016-06-06 16:56 - 2016-06-06 16:56 - 00000000 ____D C:\FRST
2016-06-06 16:55 - 2016-06-06 16:55 - 02384896 _____ (Farbar) C:\Users\Starsoul\Desktop\FRST64.exe
2016-06-06 15:51 - 2016-06-06 16:54 - 00000000 ____D C:\EEK
2016-06-06 15:24 - 2016-06-06 15:27 - 217702232 _____ C:\Users\Starsoul\Downloads\EmsisoftEmergencyKit11.0.0.6082.exe
2016-06-06 14:11 - 2016-06-06 14:11 - 00003865 _____ C:\Users\Starsoul\Downloads\gmer1.txt
2016-06-06 13:42 - 2016-06-06 13:42 - 00380928 _____ C:\Users\Starsoul\Downloads\gmer-2.2.19882.exe
2016-06-06 13:40 - 2016-06-06 13:40 - 00367616 _____ (Avira GmbH) C:\Users\Starsoul\Downloads\removaltool-win32-de18.exe
2016-06-05 08:04 - 2016-06-05 08:04 - 00083682 _____ C:\TDSSKiller.3.1.0.9_05.06.2016_08.04.10_log.txt
2016-06-05 08:02 - 2016-06-05 08:03 - 00916072 _____ (F-Secure Corporation) C:\Users\Starsoul\Downloads\fsbl1067.exe
2016-06-05 08:01 - 2016-06-05 08:02 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Starsoul\Downloads\tdsskiller3109.exe
2016-06-05 07:51 - 2016-06-05 07:53 - 49152216 _____ (Microsoft Corporation) C:\Users\Starsoul\Downloads\Windows-KB890830-x64-V5.36.exe
2016-06-04 23:16 - 2016-06-04 23:16 - 00000000 ____D C:\Users\Starsoul\Desktop\mbar
2016-06-03 23:55 - 2016-06-03 23:55 - 00000000 ____D C:\Users\Starsoul\Documents\Simply Super Software
2016-06-03 23:35 - 2016-06-03 23:35 - 00000826 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-06-03 23:35 - 2016-06-03 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-06-03 23:35 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-06-03 23:35 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-06-03 23:23 - 2016-05-30 20:47 - 00452618 _____ C:\WINDOWS\system32\Drivers\etc\hosts.old-trb
2016-06-03 23:11 - 2016-06-03 23:11 - 00388608 _____ (Trend Micro Inc.) C:\Users\Starsoul\Downloads\HijackThis_2.0.5.exe
2016-06-03 23:09 - 2016-06-03 23:10 - 22851472 _____ (Malwarebytes ) C:\Users\Starsoul\Downloads\mbam-setup-chipde.13595-2.2.1.1043.exe
2016-06-03 21:46 - 2016-06-04 23:09 - 00000000 ____D C:\AdwCleaner
2016-06-03 17:03 - 2016-06-03 17:03 - 00000000 __SHD C:\found.000
2016-06-03 15:07 - 2016-06-03 15:07 - 06541784 _____ (Tim Kosse) C:\Users\Starsoul\Downloads\FileZilla_3.18.0_win64-setup.exe
2016-06-03 14:21 - 2016-06-03 14:21 - 00010096 _____ C:\Users\Starsoul\Documents\cc_20160603_142126.reg
2016-06-03 12:49 - 2016-06-03 12:49 - 00000000 ____D C:\ProgramData\Emsisoft
2016-06-03 12:32 - 2016-06-06 14:07 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Starsoul
2016-06-03 12:32 - 2016-06-06 14:07 - 00000298 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Starsoul.job
2016-06-03 12:32 - 2016-06-03 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-06-03 10:42 - 2016-06-03 10:42 - 00000000 ____D C:\Users\Starsoul\Desktop\homeoffice20160603-2016-06-03
2016-06-03 09:14 - 2016-06-03 09:14 - 00092552 _____ C:\Users\Starsoul\Documents\cc_20160603_091438.reg
2016-06-03 00:10 - 2016-06-03 00:10 - 00000000 ____D C:\Temp
2016-06-02 22:05 - 2016-06-02 23:54 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-06-02 22:04 - 2016-06-03 00:49 - 00760838 _____ C:\WINDOWS\ntbtlog.txt
2016-06-02 21:53 - 2016-06-02 21:53 - 690701624 _____ C:\WINDOWS\MEMORY.DMP
2016-06-02 21:43 - 2016-06-02 21:43 - 00000000 ____D C:\Users\Starsoul\Documents\Die Hochzeitsdrucker
2016-06-02 21:34 - 2016-06-02 21:34 - 00000796 _____ C:\Users\Public\Desktop\Die Hochzeitsdrucker.lnk
2016-06-02 21:34 - 2016-06-02 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Hochzeitsdrucker
2016-06-02 21:33 - 2016-06-02 21:33 - 00000000 ____D C:\ProgramData\Die Hochzeitsdrucker
2016-06-01 20:31 - 2016-06-01 20:49 - 00012254 _____ C:\Users\Starsoul\Desktop\fabian Einladung 16.odt
2016-05-30 21:04 - 2016-06-06 13:20 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-05-30 21:04 - 2016-06-03 10:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-30 20:58 - 2016-06-04 23:16 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-05-30 20:47 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-204729.backup
2016-05-30 20:09 - 2016-05-30 20:09 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-05-30 15:11 - 2016-05-30 15:11 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Code Force Limited
2016-05-30 12:46 - 2016-05-30 12:46 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-30 12:45 - 2016-06-06 16:56 - 00001144 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-30 12:45 - 2016-06-06 13:56 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-30 12:45 - 2016-05-30 13:51 - 00004202 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-30 12:45 - 2016-05-30 13:51 - 00003970 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-30 12:42 - 2016-05-30 12:42 - 00987728 _____ (Google Inc.) C:\Users\Starsoul\Downloads\ChromeSetup (1).exe
2016-05-30 12:21 - 2016-05-30 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2016-05-30 12:21 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2016-05-30 12:20 - 2016-06-06 16:28 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-05-30 12:20 - 2016-05-30 12:49 - 00933808 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2016-05-30 12:20 - 2016-05-30 12:42 - 00238000 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2016-05-30 12:20 - 2016-05-30 12:20 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-05-30 12:20 - 2015-12-08 21:34 - 00181640 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2016-05-30 11:55 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-115535.backup
2016-05-30 00:26 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-002600.backup
2016-05-30 00:20 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-002028.backup
2016-05-30 00:13 - 2016-05-30 00:13 - 00117108 _____ C:\Users\Starsoul\Documents\cc_20160530_001346.reg
2016-05-29 23:54 - 2016-05-30 00:01 - 161808904 _____ (Kaspersky Lab) C:\Users\Starsoul\Downloads\kav16.0.0.614abcdde_9989.exe
2016-05-29 23:52 - 2016-05-30 12:58 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-05-29 23:48 - 2016-05-30 12:43 - 00001466 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-05-29 23:48 - 2016-05-30 12:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-05-29 23:48 - 2016-05-30 12:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-05-29 23:48 - 2015-06-16 17:32 - 00020760 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2016-05-29 23:45 - 2016-05-29 23:47 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Starsoul\Downloads\spybot-2.4.40.exe
2016-05-29 23:21 - 2016-05-30 12:26 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Avira
2016-05-29 23:19 - 2016-05-30 12:30 - 00000000 ____D C:\ProgramData\Avira
2016-05-29 23:19 - 2016-05-30 12:30 - 00000000 ____D C:\Program Files (x86)\Avira
2016-05-29 23:08 - 2016-05-29 23:08 - 01473544 _____ C:\Users\Starsoul\Downloads\AntiVir Avira Free Antivirus - CHIP-Installer.exe
2016-05-29 23:03 - 2016-05-30 21:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-29 22:36 - 2016-06-03 22:57 - 00000008 __RSH C:\Users\Starsoul\ntuser.pol
2016-05-29 22:30 - 2016-05-29 22:30 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\SPI
2016-05-29 22:29 - 2016-06-03 22:57 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-05-29 22:29 - 2016-06-03 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoBox
2016-05-29 22:10 - 2016-05-29 22:10 - 00000209 _____ C:\Users\Starsoul\Desktop\Distant Worlds Universe.url
2016-05-18 21:39 - 2016-05-18 21:39 - 00000000 ____D C:\Users\Starsoul\Documents\Anno 1404
2016-05-18 20:47 - 2016-05-29 23:33 - 00000579 _____ C:\Users\Starsoul\Desktop\Anno4.lnk
2016-05-13 16:30 - 2016-05-13 16:30 - 06513888 _____ (Tim Kosse) C:\Users\Starsoul\Downloads\FileZilla_3.17.0.1_win64-setup.exe
2016-05-13 08:58 - 2016-05-13 08:58 - 00024111 _____ C:\Users\Starsoul\Desktop\_gewinn-rechner1 (1).ods
2016-05-11 13:06 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-05-11 13:06 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-05-11 13:06 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-05-11 13:06 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-05-11 13:06 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-11 13:06 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-05-11 13:06 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-05-11 13:06 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-05-11 13:06 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-05-11 13:06 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-05-11 13:06 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-05-11 13:06 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-05-11 13:06 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-05-11 13:06 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-05-11 13:06 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-05-11 13:05 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
2016-05-11 13:05 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-05-11 13:05 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-05-11 13:05 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-05-11 13:05 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-11 13:05 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-05-11 13:05 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-11 13:05 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-05-11 13:05 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-05-11 13:05 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-05-11 13:05 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-11 13:05 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-05-11 13:05 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-05-11 13:05 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-05-11 13:05 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-05-11 13:05 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-05-11 13:05 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-05-11 13:05 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-05-11 13:05 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
2016-05-11 13:05 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-05-11 13:05 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-05-11 13:05 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-05-11 13:05 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-05-11 13:05 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-05-11 13:05 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-05-11 13:05 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2016-05-11 13:05 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2016-05-11 13:05 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-05-11 13:05 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-05-11 13:05 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2016-05-11 13:05 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-11 13:05 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-05-11 13:05 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-05-11 13:05 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-11 13:05 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-05-11 13:05 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-11 13:05 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-11 13:05 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-05-11 13:05 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-05-11 13:05 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-05-11 13:05 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-11 13:05 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-05-11 13:05 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-05-11 13:05 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-05-11 13:05 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-05-11 13:05 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-05-11 13:05 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-05-11 13:05 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-05-11 13:05 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-11 13:05 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-05-11 13:05 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-05-11 13:05 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-05-11 13:05 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-05-11 13:05 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-05-11 13:05 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-11 13:05 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-11 13:05 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-05-11 13:05 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-05-11 13:04 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-05-11 13:04 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-05-11 13:04 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-05-11 13:04 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-05-11 13:04 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-05-11 13:04 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-11 13:04 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-05-11 13:04 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-05-11 13:04 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-05-11 13:04 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2016-05-11 13:04 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-11 13:04 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-05-11 13:04 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-11 13:04 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
2016-05-11 13:04 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2016-05-11 13:04 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-05-11 13:04 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-05-11 13:04 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-05-11 13:04 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-05-11 13:04 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-05-11 13:04 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-05-11 13:04 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-11 13:04 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-11 13:04 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-05-11 13:04 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2016-05-11 13:04 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2016-05-11 13:04 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-11 13:04 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-05-11 13:04 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2016-05-11 13:04 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-05-11 13:04 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-05-11 13:04 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-05-11 13:04 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-05-11 13:04 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-05-11 13:04 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2016-05-11 13:04 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2016-05-09 12:47 - 2016-04-18 14:06 - 00287528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5C.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 01070904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD37.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00465792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5B.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00166432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5D.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD4A.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD38.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD4B.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD49.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDC4C.tmp
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-06 16:35 - 2012-12-21 13:50 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-06-06 16:27 - 2011-04-24 14:07 - 00001158 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA.job
2016-06-06 13:22 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-06-05 19:45 - 2016-02-13 19:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-06-05 19:45 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-06-05 16:30 - 2010-09-06 14:03 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-05 10:41 - 2015-09-11 21:18 - 00000000 ____D C:\ProgramData\ProductData
2016-06-05 07:32 - 2010-10-07 21:15 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Notepad++
2016-06-04 23:08 - 2011-08-06 23:34 - 00000000 ____D C:\Users\Starsoul\Desktop\DLs
2016-06-04 23:08 - 2011-06-29 19:44 - 00000000 ____D C:\Users\Starsoul\Desktop\video-tools
2016-06-04 22:44 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-03 23:55 - 2014-02-23 20:26 - 00000000 ____D C:\Users\Starsoul\Desktop\System & Tools
2016-06-03 23:49 - 2010-04-24 14:56 - 00002900 _____ C:\WINDOWS\system32\AutoRunFilter.ini
2016-06-03 23:22 - 2010-04-24 14:13 - 00000000 ____D C:\ProgramData\Temp
2016-06-03 22:57 - 2016-04-19 09:45 - 00000000 ____D C:\Users\Starsoul
2016-06-03 22:34 - 2014-02-26 20:29 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-06-03 22:32 - 2014-02-26 20:29 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Battle.net
2016-06-03 21:59 - 2016-04-19 09:44 - 02086232 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-06-03 21:59 - 2016-02-13 18:59 - 00889250 _____ C:\WINDOWS\system32\perfh007.dat
2016-06-03 21:59 - 2016-02-13 18:59 - 00197298 _____ C:\WINDOWS\system32\perfc007.dat
2016-06-03 21:59 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-06-03 21:27 - 2011-04-24 14:07 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core.job
2016-06-03 21:26 - 2011-06-22 09:59 - 00000000 ____D C:\Program Files (x86)\MSECACHE
2016-06-03 16:55 - 2012-08-29 13:16 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Skype
2016-06-03 15:08 - 2011-02-15 20:48 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\FileZilla
2016-06-03 14:37 - 2012-12-21 13:50 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-06-03 13:45 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\ProductData
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\Users\Starsoul\AppData\LocalLow\IObit
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\ProgramData\IObit
2016-06-03 13:45 - 2015-09-11 21:17 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\IObit
2016-06-03 13:45 - 2011-03-11 22:57 - 00000000 ____D C:\WINDOWS\pss
2016-06-03 13:39 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\registration
2016-06-03 12:52 - 2010-04-24 14:56 - 00001967 _____ C:\WINDOWS\system32\ServiceFilter.ini
2016-06-03 12:37 - 2015-05-15 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2016-06-03 12:37 - 2014-02-26 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-06-03 12:37 - 2013-11-08 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2016-06-03 12:37 - 2012-05-14 21:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2016-06-03 12:37 - 2010-09-26 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mass Effect 2
2016-06-03 12:37 - 2010-09-05 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever
2016-06-03 12:37 - 2010-09-04 21:52 - 00000000 ____D C:\Users\Starsoul\Desktop\Spiele
2016-06-03 12:34 - 2013-02-07 09:17 - 00000000 ____D C:\Program Files (x86)\PDF Architect
2016-06-03 11:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-06-03 11:19 - 2010-09-06 08:05 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Mozilla
2016-06-03 10:57 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-03 10:57 - 2010-09-04 13:57 - 00007593 _____ C:\Users\Starsoul\AppData\Local\Resmon.ResmonCfg
2016-06-03 10:19 - 2016-04-19 10:05 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Packages
2016-06-02 22:16 - 2016-02-13 10:21 - 00724112 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-02 21:36 - 2010-04-24 14:21 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-05-31 20:26 - 2016-04-19 10:34 - 00000000 ____D C:\Windows.old
2016-05-31 20:07 - 2010-10-14 22:49 - 00000000 ____D C:\Users\Starsoul\Documents\Eigene PSP-Dateien
2016-05-30 15:11 - 2010-09-04 23:09 - 00000000 ____D C:\Users\Starsoul\Documents\My Games
2016-05-30 12:49 - 2015-12-08 21:34 - 00087984 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwfp.sys
2016-05-30 12:49 - 2015-06-11 19:35 - 00049240 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klim6.sys
2016-05-30 12:49 - 2015-06-06 08:51 - 00077728 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kldisk.sys
2016-05-30 12:46 - 2010-09-04 20:15 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Google
2016-05-30 12:45 - 2010-04-24 14:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-30 12:28 - 2016-04-19 09:41 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-30 12:21 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-05-30 12:21 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-05-30 12:20 - 2014-01-21 20:36 - 00000000 ____D C:\Users\hedev
2016-05-30 12:20 - 2009-07-14 05:20 - 00000000 ____D C:\Users\Default.migrated
2016-05-30 12:14 - 2013-09-10 19:19 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-30 00:22 - 2010-09-06 08:05 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Mozilla
2016-05-29 23:53 - 2015-12-03 20:58 - 00000000 ____D C:\Program Files\Common Files\AV
2016-05-29 23:39 - 2016-04-19 09:52 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-05-29 23:39 - 2016-04-13 22:12 - 00002092 _____ C:\Users\Public\Desktop\Raptr.lnk
2016-05-29 23:39 - 2016-04-01 11:32 - 00001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-05-29 23:39 - 2015-11-22 01:08 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-29 23:39 - 2015-05-15 15:30 - 00000607 _____ C:\Users\Public\Desktop\World of Warships.lnk
2016-05-29 23:39 - 2014-02-26 20:29 - 00001146 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-05-29 23:39 - 2013-02-05 09:16 - 00000526 _____ C:\Users\Public\Desktop\Fraps.lnk
2016-05-29 23:39 - 2012-11-25 17:41 - 00002104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-05-29 23:39 - 2010-04-24 14:21 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
2016-05-29 23:34 - 2016-05-03 13:22 - 00000898 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings.lnk
2016-05-29 23:34 - 2016-04-19 10:10 - 00002413 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-29 23:34 - 2016-04-19 10:10 - 00001053 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-05-29 23:33 - 2015-05-04 22:24 - 00000602 _____ C:\Users\Starsoul\Desktop\Nexus Mod Manager.lnk
2016-05-29 23:33 - 2012-08-03 22:40 - 00000581 _____ C:\Users\Starsoul\Desktop\Steam.lnk
2016-05-29 23:18 - 2010-09-04 21:51 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-05-29 23:18 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-05-29 23:07 - 2016-04-19 10:24 - 00000000 ____D C:\Users\Starsoul\AppData\Local\MicrosoftEdge
2016-05-18 20:48 - 2010-09-06 11:42 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Ubisoft
2016-05-18 16:54 - 2012-03-08 13:04 - 00000000 ____D C:\ProgramData\Origin
2016-05-13 12:45 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-05-12 22:05 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-12 22:00 - 2016-02-13 19:12 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-12 22:00 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-12 21:58 - 2014-12-21 21:31 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Raptr
2016-05-12 21:35 - 2013-10-10 22:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 21:22 - 2011-04-24 14:07 - 00004286 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA
2016-05-11 21:22 - 2011-04-24 14:07 - 00003910 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core
2016-05-11 12:54 - 2014-12-27 00:18 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2011-03-08 20:57 - 2011-06-29 22:11 - 0007859 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.cat
2011-03-08 20:57 - 2011-06-29 22:11 - 0001167 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.inf
2011-03-08 20:58 - 2011-06-29 22:11 - 0000055 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.log
2013-11-17 21:03 - 2014-04-05 20:03 - 0000038 _____ () C:\Users\Starsoul\AppData\Roaming\WB.CFG
2014-01-25 01:03 - 2014-01-25 01:03 - 0000005 _____ () C:\Users\Starsoul\AppData\Roaming\WBPU-TTL.DAT
2016-03-29 20:52 - 2016-03-29 20:52 - 0000792 _____ () C:\Users\Starsoul\AppData\Local\recently-used.xbel
2010-09-04 13:57 - 2016-06-03 10:57 - 0007593 _____ () C:\Users\Starsoul\AppData\Local\Resmon.ResmonCfg
2010-04-24 14:38 - 2009-12-24 14:38 - 0131368 _____ () C:\ProgramData\FullRemove.exe
2010-04-24 14:18 - 2010-04-24 14:18 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-04-24 14:18 - 2010-04-24 14:18 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-06-03 22:39
==================== Ende von FRST.txt ============================
|
|
06.06.2016, 16:17
| #4 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Hier die Addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-06-2016 02
durchgeführt von Starsoul (2016-06-06 16:57:34)
Gestartet von C:\Users\Starsoul\Desktop
Windows 10 Home Version 1511 (X64) (2016-04-19 08:05:43)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2332507749-2589976836-3566542525-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2332507749-2589976836-3566542525-503 - Limited - Disabled)
Gast (S-1-5-21-2332507749-2589976836-3566542525-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2332507749-2589976836-3566542525-1002 - Limited - Enabled)
Starsoul (S-1-5-21-2332507749-2589976836-3566542525-1000 - Administrator - Enabled) => C:\Users\Starsoul
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Anti-Virus (Disabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Kaspersky Anti-Virus (Disabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky Anti-Virus (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
AdBlocker (x32 Version: 4.1.1.0 - StarkIndustry) Hidden <==== ACHTUNG
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.03.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.8 - ASUS)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.0.8 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.28 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.19 - asus)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.11.12 - Atheros Communications Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0005 - ASUS)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 2007514350.48.56.38866290 - Audible, Inc.)
Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5 (64-bit)) (Version: 2.5.4.7200 - )
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 1942 (HKLM-x32\...\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}) (Version: - )
BioShock 2 (x32 Version: 1.0.0003.131 - Take-Two Interactive Software) Hidden
BioShock 2 (x32 Version: 1.0.0005.131 - Take-Two Interactive Software) Hidden
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.7.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.20.13 - Canon Inc.)
Canon MG3600 series Benutzerregistrierung (HKLM-x32\...\Canon MG3600 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MG3600 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3600_series) (Version: 1.00 - Canon Inc.)
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CanoScan LiDE 100 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2413) (Version: - )
Catalyst Control Center Next Localization BR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)
Celestial Command (HKLM-x32\...\Steam App 330460) (Version: - Romenics)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Command & Conquer 3 (HKLM-x32\...\{B0C30E93-D3D9-4F04-A2AC-54749B573275}) (Version: 1.00.0000 - Ihr Firmenname)
Command & Conquer Generals (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Command and Conquer(TM) Generäle Die Stunde Null (HKLM-x32\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and Conquer(TM) Generäle Die Stunde Null (x32 Version: 1.00.0000 - Electronic Arts) Hidden
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.5 - ASUS)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2311 - CyberLink Corp.)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Die Hochzeitsdrucker 3.0 (HKLM-x32\...\Die Hochzeitsdrucker_is1) (Version: 3.0.1 - druckköpfchen)
Distant Worlds: Universe (HKLM\...\Steam App 261470) (Version: - Code Force)
DOSShell 1.8 (HKLM-x32\...\DOSShell) (Version: 1.8 - Loonies Software)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.1.20150424 - Landesfinanzdirektion Thüringen)
Empire Earth Ultimate Edition (HKLM-x32\...\{912CE296-3D73-4A9D-B3FB-70A5CF7A8568}) (Version: 1.0 - The Games Company)
Empyrion - Galactic Survival (HKLM-x32\...\Steam App 383120) (Version: - Eleon Game Studios)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.5 - ASUS)
FileZilla Client 3.15.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.15.0.2 - Tim Kosse)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Galactic Civilizations II - Ultimate Edition (HKLM-x32\...\Galactic Civilizations II - Ultimate Edition) (Version: - Kalypso Media)
Giants (HKLM-x32\...\{97370293-96EC-11D4-9DEF-00104B70C5FB}) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.63 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.18) (Version: 9.18 - Artifex Software Inc.)
Impulse (HKLM-x32\...\Impulse) (Version: 1.0 - Stardock)
Impulse (x32 Version: 1.0 - Stardock Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.4.0.118 - IObit)
Jasc Paint Shop Pro 9 (HKLM-x32\...\{F843C6A3-224D-4615-94F8-3C461BD9AEA0}) (Version: 9.00.0000 - Jasc Software Inc)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version: - Squad)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.02 - Electronic Arts, Inc.)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Thunderbird 17.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 17.0 (x86 de)) (Version: 17.0 - Mozilla)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Manager (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\MusicManager) (Version: - Google, Inc.)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)
PDF Architect (HKLM-x32\...\{80A07844-CA64-4DE4-AB61-D37DDBE8074F}) (Version: 1.0.52.8917 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.0-r112326-release - Raptr, Inc)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
ROTR ECA Beta 1.8 (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\ROTR ECA Beta 1.8) (Version: - )
Scribus 1.4.6 (64bit) (HKLM\...\Scribus 1.4.6) (Version: 1.4.6 - The Scribus Team)
Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.5.43 - Safer-Networking Ltd.)
Star Trek Elite Force II (HKLM-x32\...\Star Trek Elite Force II) (Version: - )
Star Trek Online (HKLM-x32\...\Star Trek Online) (Version: - Cryptic Studios)
Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: - Bioware/EA)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
StarDrive (HKLM-x32\...\Steam App 220660) (Version: - Zero Sum Games)
StarDrive 2 (HKLM-x32\...\Steam App 252450) (Version: - Zero Sum Games)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Subnautica (HKLM-x32\...\Steam App 264710) (Version: - Unknown Worlds Entertainment)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 19.0 - Ubisoft)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - )
Warcraft III: All Products (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Warcraft III) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.1 - ASUS)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.15 - ASUS)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
X3: Albion Prelude (HKLM-x32\...\Steam App 201310) (Version: - Egosoft)
X3: Terran Conflict (HKLM-x32\...\Steam App 2820) (Version: - Egosoft)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {0F2EF7EB-63DC-438E-9610-68910766DED5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {2BB67414-9E81-4EFA-A8AD-DD285A54356F} - System32\Tasks\AMD Updater => D:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {32FDB560-251D-4C1D-8291-34675E0CE473} - System32\Tasks\CCleanerSkipUAC => D:\PROGRAM FILES (X86)\CCLEANER\CCLEANER.EXE [2016-03-11] (Piriform Ltd)
Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4A5BEC49-5C03-46CE-A0C8-4E879C61AEDE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4AF36A77-B82F-4DA6-88B2-B2B1D4679334} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {4CAAE754-531A-4A65-ACCC-B02AE3C8AB9A} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-15] (AVAST Software)
Task: {5EDF1F6F-5489-4A9E-BF6D-A27B5209A883} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {69B7EC8F-50D1-4CBB-8081-445FAC01072C} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {8A10D9C5-CB1C-49FF-B03B-41726A1F46D3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {90BDB066-4A7B-4F89-986F-DE92C19D3D7D} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] ()
Task: {9261B246-ED3D-4D7A-BE19-C2D4E62965EB} - System32\Tasks\{6A83D684-A198-402B-95A1-B91891F852C7} => F:\Starcraft\StarCraft.exe
Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {B01DBD84-4187-41B5-9BB1-53784865A2ED} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()
Task: {BB54ECD6-71FC-42DE-9FA2-D375414F1CCE} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-01-06] (ATK)
Task: {BC92AD75-0040-41B8-ADF0-D36FB313F77A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-30] (Google Inc.)
Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {D37302FD-C7BC-4785-B8E1-B4AAED9E0250} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {D428A33A-41C4-4B8C-9842-0F5F24EB4CBB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D97BC6EE-0EC3-4D5E-94B5-2A2E3A14E771} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-30] (Google Inc.)
Task: {DBE195D1-8103-4852-AE2A-FDA0E7669507} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {E1A80A31-283F-45DF-89D3-8C792A642CBE} - System32\Tasks\Microsoft\Windows\Media Center\VideoFetcher => C:\ProgramData\VideoFetcher\VideoFetcher.exe <==== ACHTUNG
Task: {E2FE992B-F693-4CFC-87F7-428E5FC3438F} - System32\Tasks\Uninstaller_SkipUac_Starsoul => D:\Program Files (x86)\IObit Uninstaller\IObitUninstaler.exe [2016-05-26] (IObit)
Task: {E4703D0D-5DA1-4A32-BB0A-59C247A51901} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {E81D0CC5-19FD-4F8C-A577-56A003266493} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {EC4FF68E-81DF-46E3-89E4-944096A889AF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F49265F7-82C4-433A-9379-750838D8B352} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {FB5FA95A-33A4-4F5E-A22A-BB9C4E5F7BC2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-03] (Adobe Systems Incorporated)
Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core.job => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA.job => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Starsoul.job => D:\Program Files (x86)\IObit Uninstaller\IObitUninstaler.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Starsoul\Desktop\Spiele\Master of Orion 2.lnk -> F:\Moo2\orion-start.bat ()
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-19 10:31 - 2016-04-19 10:31 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2010-01-05 02:43 - 2010-01-05 02:43 - 01597440 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2016-04-19 10:31 - 2016-04-19 10:31 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2010-10-07 21:16 - 2010-03-15 12:28 - 00052224 _____ () D:\Program Files (x86)\WinRAR\rarext64.dll
2009-12-23 22:12 - 2009-12-23 22:12 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll
2009-12-19 04:11 - 2009-12-19 04:11 - 00033280 _____ () C:\Program Files\P4G\OvrClk.dll
2009-11-24 22:45 - 2009-11-24 22:45 - 00053888 _____ () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-05-11 13:05 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-05-11 13:05 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-05-11 13:05 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-05-11 13:05 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 15:53 - 2015-06-25 15:53 - 00011776 _____ () D:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 15:51 - 2015-06-25 15:51 - 02013696 _____ () D:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-09-11 21:18 - 2015-08-24 14:10 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2016-05-30 12:34 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-05-30 12:34 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-05-30 12:34 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-05-30 12:34 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2016-06-03 12:32 - 2015-12-23 16:27 - 00355616 _____ () D:\Program Files (x86)\IObit Uninstaller\madExcept_.bpl
2016-06-03 12:32 - 2015-12-23 16:27 - 00190240 _____ () D:\Program Files (x86)\IObit Uninstaller\madBasic_.bpl
2016-06-03 12:32 - 2015-12-23 16:27 - 00057632 _____ () D:\Program Files (x86)\IObit Uninstaller\madDisAsm_.bpl
2016-04-19 11:24 - 2016-04-19 11:24 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\kpcengine.2.3.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Temp:AB689DEA [121]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7902 mehr Seiten.
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123simsen.com -> www.123simsen.com
Da befinden sich 7902 mehr Seiten.
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-06-05 07:39 - 00000980 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Starsoul\Desktop\DLs\WANDERERS_ringshine_03.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: a2AntiMalware => 2
MSCONFIG\Services: Adobe LM Service => 3
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdvancedSystemCareService9 => 2
MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: BRSptStub => 3
MSCONFIG\Services: BRSptSvc => 3
MSCONFIG\Services: ehRecvr => 3
MSCONFIG\Services: ehSched => 3
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: lfsvc => 3
MSCONFIG\Services: MapsBroker => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: WinDefend => 2
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxNetApiSvc => 3
MSCONFIG\startupfolder: C:^Users^Starsoul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Starsoul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: BDRegion => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
MSCONFIG\startupreg: CanonSolutionMenu => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: EADM => "F:\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: Google Update => "C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: ImpulseFastStart => "C:\Program Files (x86)\Stardock\Impulse\Impulse.exe" /fastload
MSCONFIG\startupreg: PinnacleDriverCheck => C:\Windows\SysWOW64\PSDrvCheck.exe
MSCONFIG\startupreg: ProductUpdater =>
MSCONFIG\startupreg: Raptr =>
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: RunDLLEntry =>
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UpdateLBPShortCut => "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
HKLM\...\StartupApproved\Run32: => "ProductUpdater"
HKLM\...\StartupApproved\Run32: => "Raptr"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{47D4726C-D9E5-4F3F-B252-1E19D93256C3}] => (Allow) F:\SteamLibrary\SteamApps\common\Celestial Command\CelestialCommand.exe
FirewallRules: [{867E04CD-0046-40D2-9EC4-7FFF26C01084}] => (Allow) F:\SteamLibrary\SteamApps\common\Celestial Command\CelestialCommand.exe
FirewallRules: [{E6A4F911-1691-481D-BF77-D6BED2A97C70}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3AP.exe
FirewallRules: [{C904027F-1BAD-4818-A2EE-14377A5D2B97}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3AP.exe
FirewallRules: [{D9EE36B3-3EE9-4CC1-8380-9C40D1EC56FC}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3TC.exe
FirewallRules: [{3EC00EE2-91F3-4B1E-B594-F1A3F5FF592A}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3TC.exe
FirewallRules: [{4DE514B3-CEEF-4A9E-AC80-48243B9CA4EC}] => (Allow) D:\SteamPowered\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{D695EC96-1A77-4F0A-879C-4A54E2D4EC5D}] => (Allow) D:\SteamPowered\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{97B93E17-A40E-4B5C-B57C-3F169332AB4A}] => (Allow) D:\SteamPowered\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{869E3BAC-3770-4655-B87A-C6631BE1F01D}] => (Allow) D:\SteamPowered\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AF18A5B2-D038-40B4-8672-2BD0A2017461}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{8D724A51-2DED-40FE-9494-0B90E29A89D0}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{C64D194C-F6EC-45CD-BFA2-DCE783E4E57E}] => (Allow) F:\SteamLibrary\SteamApps\common\StarDrive\StarDrive.exe
FirewallRules: [{2EBC6A63-0E24-4EF8-89FD-4EB4124E73C0}] => (Allow) F:\SteamLibrary\SteamApps\common\StarDrive\StarDrive.exe
FirewallRules: [{F051BBDC-8498-4D0F-AD96-5E8059F840D6}] => (Allow) F:\SteamLibrary\SteamApps\common\Subnautica\Subnautica.exe
FirewallRules: [{2E2CB7F9-B4F3-4447-886C-4A0DBA7350DB}] => (Allow) F:\SteamLibrary\SteamApps\common\Subnautica\Subnautica.exe
FirewallRules: [{CC6DB91E-BC2E-421F-9642-1B248B7C06D2}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{AC6C5577-B2E3-4D3E-9B55-F7D1DEF05594}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [UDP Query User{1C4F36ED-E13F-473D-96AC-54E0AEEC1695}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{29833A24-854A-4D50-B99E-AD87DC3DA2D4}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{59EF4EB9-6F04-4638-AD4E-EBE41D85EC74}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{ECBCC841-75FE-45AE-940B-9CB1362A3C62}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [{A1CB59E0-837F-47C4-B6F1-36FB3616625D}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{DC6AE47E-41B3-469B-B75B-A94AAA54BF1D}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{B6BC75EF-DBB9-40EA-835B-3DC8B6A2144C}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{B5A1F873-E04A-45E1-BBDE-85024E51B3F9}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [UDP Query User{CCF9B47B-499E-43E0-9B68-8A51E33D7FA5}D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe] => (Allow) D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe
FirewallRules: [TCP Query User{0266E0CE-30A5-4654-8E21-71F1DEBBA3C3}D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe] => (Allow) D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe
FirewallRules: [{B7E2C63E-8B25-4205-97DF-C03991531F38}] => (Allow) D:\SteamPowered\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{FBA85BE3-1B52-461B-8BBC-7A36F9D8AA07}] => (Allow) D:\SteamPowered\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{F8B68DB4-4328-41E3-971C-E5622BA8BDB0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C3F97965-7C2B-4196-8C8B-D26C869389FA}] => (Allow) D:\SteamPowered\bin\steamwebhelper.exe
FirewallRules: [{7B210E24-B26F-4296-BCA3-9FE9672AFA51}] => (Allow) D:\SteamPowered\bin\steamwebhelper.exe
FirewallRules: [UDP Query User{E86A01FE-7844-4EA1-970E-AADF47578127}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [TCP Query User{2919E551-6C00-4D74-8D01-46C2346A2AE6}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [UDP Query User{62C07B85-CC89-49EA-A069-255AAED83397}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [TCP Query User{4B3B94AA-1F9C-4E78-8EFC-D8262105C248}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [{693B4E23-69C4-4527-85DC-C8A2FFED6D85}] => (Allow) G:\ANNO 2070\InitEngine.exe
FirewallRules: [{5D04F52D-B9AA-46E1-ABAC-732EDF28EDC9}] => (Allow) G:\ANNO 2070\InitEngine.exe
FirewallRules: [{58B33DC7-7B8C-4B13-BD62-B98EBDC0D62E}] => (Allow) G:\ANNO 2070\AutoPatcher.exe
FirewallRules: [{F121D42E-E939-40BB-AD09-5616B3924D03}] => (Allow) G:\ANNO 2070\AutoPatcher.exe
FirewallRules: [{119B12AF-A6C8-4706-B35B-09994BC9FF78}] => (Allow) G:\ANNO 2070\Anno5.exe
FirewallRules: [{5A5938D7-2DE6-4EA4-A4ED-AEF6B5DCCCD5}] => (Allow) G:\ANNO 2070\Anno5.exe
FirewallRules: [{C9F9A8C5-E69B-4EB7-80DF-1FCD95159FAD}] => (Allow) D:\SteamPowered\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{E0DAE25B-BF1C-4DCB-BF1F-26E23D97B66A}] => (Allow) D:\SteamPowered\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{F2C4D52E-7954-4030-B7FA-6C56910134CF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{343EDFDF-7194-42E1-AE17-0847007558F7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{14491256-AF45-40AB-8AA1-ADBB8B2990BE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{281CCC0E-415A-457A-B253-D8DADBFF60F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{0242554B-D206-4169-AA5B-3CDC975C8CFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{DB8BD9B4-0D7C-41E4-B5B4-9B3182E7697F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{80AF7911-87B1-4583-85E5-0DE507165B28}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{28BAB1A8-90B9-4961-ABDA-07F6D9BDC759}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{8AF73425-A390-4736-B3B8-3EA7A94F17E9}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{AC901B1C-5102-4C40-9D4A-D92891C9F71C}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{985F6EF3-A603-44CD-897F-4912562E7AE8}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{B5A61F72-7C91-4B4D-860B-CE1423F0DF45}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{12401D61-F6E2-4C6C-A8D4-E61691AA4E7E}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{BF083164-3604-4578-8141-AA83A163CD57}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{68360BB5-5B39-441F-8E08-E083EB436EDF}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{67CF4579-9D11-40CE-BA1E-CF720EF37EA9}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{7F08011F-0B0B-488C-9744-09F33DCF5D72}] => (Allow) D:\SteamPowered\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{A8B60513-3438-48B8-98A3-2EA03118BD20}] => (Allow) D:\SteamPowered\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{09FBFCE6-D5B7-451D-993B-3226B5DF96C1}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{31B19912-E4E6-4311-BDD2-DB81DD601840}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{0A694A37-1AAC-4B02-80BF-A00B0C781672}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{69A7F069-2D76-4CDE-A453-93960790E1FD}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [UDP Query User{A5240A18-5649-4AD9-9E42-DBA846B41771}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [TCP Query User{87DE2F10-0F07-4D9C-B5C3-6B5958C133F1}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [UDP Query User{B13FBB14-1A53-44F7-AB72-A71525130985}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [TCP Query User{CCBD3468-FEB5-4CC6-91C4-8FE8954036C2}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [UDP Query User{38C90B3F-7C53-489A-814F-57D0827CEE2C}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [TCP Query User{A0B77672-ED30-4EB0-A675-57172217009C}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [UDP Query User{982F9C7D-3F5F-406B-9DD6-FE51F20B29D1}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [TCP Query User{3D26A8BB-69CB-40D6-9EC2-D54F9982B53F}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [UDP Query User{E07BF312-563A-44ED-A4BB-7CCA501C29A3}F:\tmnationsforever\tmforever.exe] => (Block) F:\tmnationsforever\tmforever.exe
FirewallRules: [TCP Query User{FBDB3365-8577-4B3C-9511-0655ACBD7306}F:\tmnationsforever\tmforever.exe] => (Block) F:\tmnationsforever\tmforever.exe
FirewallRules: [{0ACFCEB3-4337-417E-853D-3517F84E1A64}] => (Allow) G:\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{99D7FAF2-F25A-4503-BF7D-5F01E01BD024}] => (Allow) G:\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [UDP Query User{958CBA3A-8426-4A87-B46C-D7E0A78C9A09}G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe] => (Block) G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe
FirewallRules: [TCP Query User{D40985FD-E3A5-4FF3-A31D-F14972FF32E3}G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe] => (Block) G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe
FirewallRules: [{A6E8D4EB-2BCA-4E72-8880-318C25244E90}] => (Allow) d:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{57741FE0-BCB5-4D13-9765-9B3A5436F1B4}] => (Allow) d:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{5AC273A0-4A1A-4666-A521-B5B83E96DB47}] => (Allow) D:\SteamPowered\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{B8F354ED-8D30-4CA2-889F-BE5DC9804E7E}] => (Allow) D:\SteamPowered\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{8E8BE884-A89C-46D6-847A-498034FEF660}] => (Allow) G:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{33A095A3-C39C-435E-9459-8193F9D8ACB6}] => (Allow) G:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [UDP Query User{1F16DCC4-ADB3-4220-8004-936AC8876DE7}F:\mass effect 2\binaries\masseffect2.exe] => (Allow) F:\mass effect 2\binaries\masseffect2.exe
FirewallRules: [TCP Query User{D94CABD7-849A-43BA-A8A0-AA660F156445}F:\mass effect 2\binaries\masseffect2.exe] => (Allow) F:\mass effect 2\binaries\masseffect2.exe
FirewallRules: [UDP Query User{25FE5F2D-466C-429C-B046-2301D690D886}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{71511B28-629B-45B7-B6DD-A7C3137B2F64}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{4D2C9DA6-AA66-4E41-8201-ED98430C70C2}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{CFCADA3B-B4FC-4A81-8930-7E93BFEBC003}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{162EDF5B-10EC-43D5-926B-8D34AD461CC0}] => (Allow) F:\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{0F301E52-38B3-451F-9612-A11E7405E82D}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{48E4DE69-6C9B-4323-8D0C-5FCE7549E28B}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{B9A24157-12CD-42DB-98C5-51BB351520FE}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe
FirewallRules: [{397595FB-D831-4CCE-8459-9226074EBCDD}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe
FirewallRules: [{77334BB3-68C8-4A8A-940E-66AF07EF863C}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{40FB3FDD-AEF7-4418-B0B6-1266055B3875}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{9C289B3C-FCA9-454A-AFCB-E9136B88E697}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{4B81D6EE-3E4E-4149-B58F-FE91C92EBFB5}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{C440B47B-D0D4-4D96-9E11-8B207DCF33D8}G:\cryptic studios\star trek online\live\gameclient.exe] => (Allow) G:\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{B4197EFD-9076-471E-80C3-92AB1A5CFC33}G:\cryptic studios\star trek online\live\gameclient.exe] => (Allow) G:\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [TCP Query User{FBA18227-FB9E-4FBC-892F-DAC050CC5A4E}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{22B28788-7D9C-434E-8DAB-66A09F3A2124}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [TCP Query User{C8323F48-55CC-4D01-95A4-3C5432D0F430}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{023C471C-EFCC-45BB-BFE3-85C057A4513B}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [{77C45AD4-8E28-46F6-917B-4A85B4545106}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{49AE43A2-EB5C-4057-A5DD-C8DFE817808E}] => (Allow) F:\SteamLibrary\SteamApps\common\Distant Worlds Universe\autorun.exe
FirewallRules: [{A46B117F-99C4-4269-9ECB-196BCC2600F7}] => (Allow) F:\SteamLibrary\SteamApps\common\Distant Worlds Universe\autorun.exe
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Wiederherstellungspunkte =========================
03-06-2016 21:17:06 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (06/06/2016 01:47:01 PM) (Source: MsiInstaller) (EventID: 10005) (User: Starsoul-G73)
Description: Produkt: Windows Defender -- Die Installation dieser Software ist nicht notwendig, weil Windows Defender in Windows Vista enthalten ist. Über den Abschnitt "Sicherheit" in der Windows-Systemsteuerung greifen Sie auf Windows Defender zu.
Error: (06/05/2016 07:45:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xae4
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (06/05/2016 07:45:08 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2788) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Error: (06/05/2016 10:08:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 1.0.5.4, Zeitstempel: 0x4b1cb992
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.306, Zeitstempel: 0x571af2eb
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ee6fc
ID des fehlerhaften Prozesses: 0x758
Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0
Pfad der fehlerhaften Anwendung: FBAgent.exe1
Pfad des fehlerhaften Moduls: FBAgent.exe2
Berichtskennung: FBAgent.exe3
Vollständiger Name des fehlerhaften Pakets: FBAgent.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FBAgent.exe5
Error: (06/05/2016 08:05:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x146c
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/05/2016 08:05:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1ca8
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/05/2016 08:04:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1e68
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/03/2016 10:57:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xa88
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (06/03/2016 10:57:34 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2696) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Error: (06/03/2016 10:40:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xae4
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Systemfehler:
=============
Error: (06/06/2016 01:24:32 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewyS-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795
Error: (06/05/2016 07:56:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_323f4" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/05/2016 07:48:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Intel(R) Management & Security Application User Notification Service" ist vom Dienst "Intel(R) Management and Security Application Local Management Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (06/05/2016 07:48:30 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewyS-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795
Error: (06/05/2016 07:46:04 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (06/05/2016 07:45:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "StateRepository-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/05/2016 07:45:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/05/2016 07:45:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (06/05/2016 07:45:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_52e804d" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/05/2016 07:44:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Anmelde-Assistent für Microsoft-Konten" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
CodeIntegrity:
===================================
Date: 2016-06-03 14:11:32.590
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements.
Date: 2016-06-03 14:09:04.328
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-16 22:00:03.629
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 22:05:24.265
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 21:56:18.956
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-26 20:10:40.321
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:22:35.869
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:15:16.710
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:01:34.166
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 09:59:44.295
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 8044.57 MB
Verfügbarer physikalischer RAM: 5633.36 MB
Summe virtueller Speicher: 9945.57 MB
Verfügbarer virtueller Speicher: 7486.31 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:74.08 GB) (Free:35.18 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (DATA) (Fixed) (Total:204.03 GB) (Free:30.75 GB) NTFS
Drive f: (SDATA1) (Fixed) (Total:149.04 GB) (Free:24.6 GB) NTFS
Drive g: (SDATA2) (Fixed) (Total:149.05 GB) (Free:33.75 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 76692CA8)
Partition 1: (Not Active) - (Size=19.5 GB) - (Type=1C)
Partition 2: (Active) - (Size=74.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=449 MB) - (Type=27)
Partition 4: (Not Active) - (Size=204 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: BBC58B91)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
06.06.2016, 16:52
| #5 |
| /// Malwareteam | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Hi, Schritt # 1: AdwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt # 2: FRST Bitte noch ein frisches FRST-Log. Schritt # 3: Bitte Posten
|
|
07.06.2016, 09:46
| #6 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER LogCode:
ATTFilter # AdwCleaner v5.119 - Bericht erstellt am 07/06/2016 um 10:25:33
# Aktualisiert am 30/05/2016 von Xplode
# Datenbank : 2016-06-03.1 [Lokal]
# Betriebssystem : Windows 10 Home (X64)
# Benutzername : Starsoul - STARSOUL-G73
# Gestartet von : C:\Users\Starsoul\Desktop\AdwCleaner_5.119.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
[-] Schlüssel gelöscht : HKCU\Software\OCS
***** [ Internetbrowser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [2344 Bytes] - [03/06/2016 21:51:18]
C:\AdwCleaner\AdwCleaner[C2].txt - [1302 Bytes] - [03/06/2016 22:40:04]
C:\AdwCleaner\AdwCleaner[C3].txt - [1670 Bytes] - [03/06/2016 22:57:16]
C:\AdwCleaner\AdwCleaner[C4].txt - [1296 Bytes] - [07/06/2016 10:25:33]
C:\AdwCleaner\AdwCleaner[S1].txt - [2365 Bytes] - [03/06/2016 21:46:31]
C:\AdwCleaner\AdwCleaner[S2].txt - [1115 Bytes] - [03/06/2016 22:35:24]
C:\AdwCleaner\AdwCleaner[S3].txt - [1262 Bytes] - [03/06/2016 22:55:22]
C:\AdwCleaner\AdwCleaner[S4].txt - [1408 Bytes] - [03/06/2016 23:54:00]
C:\AdwCleaner\AdwCleaner[S5].txt - [1481 Bytes] - [03/06/2016 23:55:42]
C:\AdwCleaner\AdwCleaner[S6].txt - [1554 Bytes] - [04/06/2016 23:09:05]
C:\AdwCleaner\AdwCleaner[S7].txt - [1739 Bytes] - [07/06/2016 10:22:56]
########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [1880 Bytes] ##########
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:06-06-2016
durchgeführt von Starsoul (Administrator) auf STARSOUL-G73 (07-06-2016 10:34:45)
Gestartet von C:\Users\Starsoul\Desktop
Geladene Profile: Starsoul (Verfügbare Profile: Starsoul & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Mr. John aka japamd) D:\Program Files (x86)\RadeonPro\RadeonProSupport.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(ASUS) C:\Windows\AsScrPro.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avpui.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices, Inc.) D:\Program Files\AMD\CNext\CNext\cnext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(IObit) D:\Program Files (x86)\IObit Uninstaller\UninstallMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuapihost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1861416 2009-10-09] (Synaptics Incorporated)
HKLM\...\Run: [StartCN] => d:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NWEReboot] => [X]
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6806144 2010-06-24] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-03] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (CANON INC.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Run: [Google Update] => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{32ffb1ef-1f41-4fe4-85d0-4118c45dead7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}: [NameServer] 138.201.48.176,8.8.8.8
Tcpip\..\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> D:\Program Files (x86)\IObit Uninstaller\UninstallExplorer.dll [2015-12-23] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-26] (Oracle Corporation)
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-26] (Oracle Corporation)
BHO-x32: Kein Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Keine Datei
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
BHO-x32: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei
BHO-x32: Kein Name -> {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} -> Keine Datei
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Keine Datei
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-06-03] ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-05-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-05-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-06-03] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Keine Datei]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> d:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-07-24] (Nullsoft, Inc.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-30] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> d:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Starsoul\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @talk.google.com/O1DPlugin -> C:\Users\Starsoul\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: ubisoft.com/uplaypc -> d:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-05-09] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Starsoul\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Starsoul\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-02-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox [2016-05-30]
FF HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Starsoul\AppData\Roaming\Mozilla\Firefox\Profiles\0lqb71tz.default\extensions\cliqz@cliqz.com => nicht gefunden
Chrome:
=======
CHR Profile: C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-03]
CHR Extension: (Google Docs) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-03]
CHR Extension: (Google Drive) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-03]
CHR Extension: (YouTube) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-03]
CHR Extension: (Kaspersky Protection) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2016-06-03]
CHR Extension: (Google Tabellen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-03]
CHR Extension: (Google Docs Offline) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-03]
CHR Extension: (Google Mail) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-03]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe [194000 2015-12-08] (Kaspersky Lab ZAO)
S4 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-10-15] (BitRaider, LLC)
S4 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-01-21] (BitRaider, LLC)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2010-04-24] (Creative Labs) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2015-01-30] (EasyAntiCheat Ltd)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-05-27] (IObit)
S4 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-10-01] (Intel Corporation) [Datei ist nicht signiert]
S4 Origin Client Service; F:\Origin\OriginClientService.exe [2120712 2016-05-18] (Electronic Arts)
S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
S4 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2012-01-02] ()
R2 RadeonPro Support Service; d:\Program Files (x86)\RadeonPro\RadeonProSupport.exe [20608 2013-04-13] (Mr. John aka japamd) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.)
S2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-10-01] (Intel Corporation) [Datei ist nicht signiert]
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\System32\drivers\athwnx.sys [4207104 2015-10-30] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [111120 2016-03-01] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-09-06] ()
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-01-22] (BitRaider)
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2014-10-15] (BitRaider)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [15416 2009-07-20] ( )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-05-30] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-12-08] (AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [238000 2016-05-30] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [933808 2016-05-30] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49240 2016-05-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-08] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87984 2016-05-30] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-09-06] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2009-09-02] (CyberLink Corp.)
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-07 10:34 - 2016-06-07 10:35 - 00020075 _____ C:\Users\Starsoul\Desktop\FRST.txt
2016-06-07 10:34 - 2016-06-07 10:34 - 00000000 ____D C:\Users\Starsoul\Desktop\FRST-OlderVersion
2016-06-07 10:31 - 2016-06-07 10:31 - 00001962 _____ C:\Users\Starsoul\Desktop\AdwCleaner[C4].txt
2016-06-07 10:18 - 2016-06-07 10:18 - 03677248 _____ C:\Users\Starsoul\Desktop\AdwCleaner_5.119.exe
2016-06-06 16:56 - 2016-06-07 10:34 - 00000000 ____D C:\FRST
2016-06-06 16:55 - 2016-06-07 10:34 - 02385408 _____ (Farbar) C:\Users\Starsoul\Desktop\FRST64.exe
2016-06-06 15:51 - 2016-06-06 16:54 - 00000000 ____D C:\EEK
2016-06-06 15:24 - 2016-06-06 15:27 - 217702232 _____ C:\Users\Starsoul\Downloads\EmsisoftEmergencyKit11.0.0.6082.exe
2016-06-06 14:11 - 2016-06-06 14:11 - 00003865 _____ C:\Users\Starsoul\Downloads\gmer1.txt
2016-06-06 13:42 - 2016-06-06 13:42 - 00380928 _____ C:\Users\Starsoul\Downloads\gmer-2.2.19882.exe
2016-06-06 13:40 - 2016-06-06 13:40 - 00367616 _____ (Avira GmbH) C:\Users\Starsoul\Downloads\removaltool-win32-de18.exe
2016-06-05 08:04 - 2016-06-05 08:04 - 00083682 _____ C:\TDSSKiller.3.1.0.9_05.06.2016_08.04.10_log.txt
2016-06-05 08:02 - 2016-06-05 08:03 - 00916072 _____ (F-Secure Corporation) C:\Users\Starsoul\Downloads\fsbl1067.exe
2016-06-05 08:01 - 2016-06-05 08:02 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Starsoul\Downloads\tdsskiller3109.exe
2016-06-05 07:51 - 2016-06-05 07:53 - 49152216 _____ (Microsoft Corporation) C:\Users\Starsoul\Downloads\Windows-KB890830-x64-V5.36.exe
2016-06-04 23:16 - 2016-06-04 23:16 - 00000000 ____D C:\Users\Starsoul\Desktop\mbar
2016-06-03 23:55 - 2016-06-03 23:55 - 00000000 ____D C:\Users\Starsoul\Documents\Simply Super Software
2016-06-03 23:35 - 2016-06-03 23:35 - 00000826 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-06-03 23:35 - 2016-06-03 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-06-03 23:35 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-06-03 23:35 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-06-03 23:23 - 2016-05-30 20:47 - 00452618 _____ C:\WINDOWS\system32\Drivers\etc\hosts.old-trb
2016-06-03 23:11 - 2016-06-03 23:11 - 00388608 _____ (Trend Micro Inc.) C:\Users\Starsoul\Downloads\HijackThis_2.0.5.exe
2016-06-03 23:09 - 2016-06-03 23:10 - 22851472 _____ (Malwarebytes ) C:\Users\Starsoul\Downloads\mbam-setup-chipde.13595-2.2.1.1043.exe
2016-06-03 21:46 - 2016-06-07 10:25 - 00000000 ____D C:\AdwCleaner
2016-06-03 17:03 - 2016-06-03 17:03 - 00000000 __SHD C:\found.000
2016-06-03 15:07 - 2016-06-03 15:07 - 06541784 _____ (Tim Kosse) C:\Users\Starsoul\Downloads\FileZilla_3.18.0_win64-setup.exe
2016-06-03 14:21 - 2016-06-03 14:21 - 00010096 _____ C:\Users\Starsoul\Documents\cc_20160603_142126.reg
2016-06-03 12:49 - 2016-06-03 12:49 - 00000000 ____D C:\ProgramData\Emsisoft
2016-06-03 12:32 - 2016-06-07 10:19 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Starsoul
2016-06-03 12:32 - 2016-06-07 10:19 - 00000298 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Starsoul.job
2016-06-03 12:32 - 2016-06-03 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-06-03 10:42 - 2016-06-03 10:42 - 00000000 ____D C:\Users\Starsoul\Desktop\homeoffice20160603-2016-06-03
2016-06-03 09:14 - 2016-06-03 09:14 - 00092552 _____ C:\Users\Starsoul\Documents\cc_20160603_091438.reg
2016-06-03 00:10 - 2016-06-03 00:10 - 00000000 ____D C:\Temp
2016-06-02 22:05 - 2016-06-02 23:54 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-06-02 22:04 - 2016-06-03 00:49 - 00760838 _____ C:\WINDOWS\ntbtlog.txt
2016-06-02 21:53 - 2016-06-02 21:53 - 690701624 _____ C:\WINDOWS\MEMORY.DMP
2016-06-02 21:43 - 2016-06-02 21:43 - 00000000 ____D C:\Users\Starsoul\Documents\Die Hochzeitsdrucker
2016-06-02 21:34 - 2016-06-02 21:34 - 00000796 _____ C:\Users\Public\Desktop\Die Hochzeitsdrucker.lnk
2016-06-02 21:34 - 2016-06-02 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Die Hochzeitsdrucker
2016-06-02 21:33 - 2016-06-02 21:33 - 00000000 ____D C:\ProgramData\Die Hochzeitsdrucker
2016-06-01 20:31 - 2016-06-01 20:49 - 00012254 _____ C:\Users\Starsoul\Desktop\fabian Einladung 16.odt
2016-05-30 21:04 - 2016-06-06 13:20 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-05-30 21:04 - 2016-06-03 10:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-30 20:58 - 2016-06-04 23:16 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-05-30 20:47 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-204729.backup
2016-05-30 20:09 - 2016-05-30 20:09 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-05-30 15:11 - 2016-05-30 15:11 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Code Force Limited
2016-05-30 12:46 - 2016-05-30 12:46 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-30 12:45 - 2016-06-07 10:27 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-30 12:45 - 2016-06-06 16:56 - 00001144 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-30 12:45 - 2016-05-30 13:51 - 00004202 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-30 12:45 - 2016-05-30 13:51 - 00003970 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-30 12:42 - 2016-05-30 12:42 - 00987728 _____ (Google Inc.) C:\Users\Starsoul\Downloads\ChromeSetup (1).exe
2016-05-30 12:21 - 2016-05-30 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2016-05-30 12:21 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2016-05-30 12:20 - 2016-06-07 10:27 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-05-30 12:20 - 2016-05-30 12:49 - 00933808 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2016-05-30 12:20 - 2016-05-30 12:42 - 00238000 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2016-05-30 12:20 - 2016-05-30 12:20 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-05-30 12:20 - 2015-12-08 21:34 - 00181640 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2016-05-30 11:55 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-115535.backup
2016-05-30 00:26 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-002600.backup
2016-05-30 00:20 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-002028.backup
2016-05-30 00:13 - 2016-05-30 00:13 - 00117108 _____ C:\Users\Starsoul\Documents\cc_20160530_001346.reg
2016-05-29 23:54 - 2016-05-30 00:01 - 161808904 _____ (Kaspersky Lab) C:\Users\Starsoul\Downloads\kav16.0.0.614abcdde_9989.exe
2016-05-29 23:52 - 2016-05-30 12:58 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-05-29 23:48 - 2016-05-30 12:43 - 00001466 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-05-29 23:48 - 2016-05-30 12:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-05-29 23:48 - 2016-05-30 12:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-05-29 23:48 - 2015-06-16 17:32 - 00020760 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2016-05-29 23:45 - 2016-05-29 23:47 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Starsoul\Downloads\spybot-2.4.40.exe
2016-05-29 23:21 - 2016-05-30 12:26 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Avira
2016-05-29 23:19 - 2016-05-30 12:30 - 00000000 ____D C:\ProgramData\Avira
2016-05-29 23:19 - 2016-05-30 12:30 - 00000000 ____D C:\Program Files (x86)\Avira
2016-05-29 23:08 - 2016-05-29 23:08 - 01473544 _____ C:\Users\Starsoul\Downloads\AntiVir Avira Free Antivirus - CHIP-Installer.exe
2016-05-29 23:03 - 2016-05-30 21:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-29 22:36 - 2016-06-03 22:57 - 00000008 __RSH C:\Users\Starsoul\ntuser.pol
2016-05-29 22:30 - 2016-05-29 22:30 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\SPI
2016-05-29 22:29 - 2016-06-03 22:57 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-05-29 22:29 - 2016-06-03 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoBox
2016-05-29 22:10 - 2016-05-29 22:10 - 00000209 _____ C:\Users\Starsoul\Desktop\Distant Worlds Universe.url
2016-05-18 21:39 - 2016-05-18 21:39 - 00000000 ____D C:\Users\Starsoul\Documents\Anno 1404
2016-05-18 20:47 - 2016-05-29 23:33 - 00000579 _____ C:\Users\Starsoul\Desktop\Anno4.lnk
2016-05-13 16:30 - 2016-05-13 16:30 - 06513888 _____ (Tim Kosse) C:\Users\Starsoul\Downloads\FileZilla_3.17.0.1_win64-setup.exe
2016-05-13 08:58 - 2016-05-13 08:58 - 00024111 _____ C:\Users\Starsoul\Desktop\_gewinn-rechner1 (1).ods
2016-05-11 13:06 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-05-11 13:06 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-05-11 13:06 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-05-11 13:06 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-05-11 13:06 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-11 13:06 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-05-11 13:06 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-05-11 13:06 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-05-11 13:06 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-05-11 13:06 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-05-11 13:06 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-05-11 13:06 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-05-11 13:06 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-05-11 13:06 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-05-11 13:06 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-05-11 13:05 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
2016-05-11 13:05 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-05-11 13:05 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-05-11 13:05 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-05-11 13:05 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-11 13:05 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-05-11 13:05 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-11 13:05 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-05-11 13:05 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-05-11 13:05 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-05-11 13:05 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-11 13:05 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-05-11 13:05 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-05-11 13:05 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-05-11 13:05 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-05-11 13:05 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-05-11 13:05 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-05-11 13:05 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-05-11 13:05 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
2016-05-11 13:05 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-05-11 13:05 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-05-11 13:05 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-05-11 13:05 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-05-11 13:05 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-05-11 13:05 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-05-11 13:05 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2016-05-11 13:05 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2016-05-11 13:05 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-05-11 13:05 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-05-11 13:05 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2016-05-11 13:05 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-11 13:05 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-05-11 13:05 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-05-11 13:05 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-11 13:05 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-05-11 13:05 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-11 13:05 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-11 13:05 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-05-11 13:05 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-05-11 13:05 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-05-11 13:05 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-11 13:05 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-05-11 13:05 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-05-11 13:05 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-05-11 13:05 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-05-11 13:05 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-05-11 13:05 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-05-11 13:05 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-05-11 13:05 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-11 13:05 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-05-11 13:05 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-05-11 13:05 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-05-11 13:05 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-05-11 13:05 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-05-11 13:05 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-11 13:05 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-11 13:05 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-05-11 13:05 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-05-11 13:04 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-05-11 13:04 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-05-11 13:04 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-05-11 13:04 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-05-11 13:04 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-05-11 13:04 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-11 13:04 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-05-11 13:04 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-05-11 13:04 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-05-11 13:04 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2016-05-11 13:04 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-11 13:04 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-05-11 13:04 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-11 13:04 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
2016-05-11 13:04 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2016-05-11 13:04 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-05-11 13:04 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-05-11 13:04 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-05-11 13:04 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-05-11 13:04 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-05-11 13:04 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-05-11 13:04 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-11 13:04 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-11 13:04 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-05-11 13:04 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2016-05-11 13:04 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2016-05-11 13:04 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-11 13:04 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-05-11 13:04 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2016-05-11 13:04 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-05-11 13:04 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-05-11 13:04 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-05-11 13:04 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-05-11 13:04 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-05-11 13:04 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2016-05-11 13:04 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2016-05-09 12:47 - 2016-04-18 14:06 - 00287528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5C.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 01070904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD37.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00465792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5B.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00166432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5D.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD4A.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD38.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD4B.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD49.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDC4C.tmp
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-07 10:35 - 2012-12-21 13:50 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-06-07 10:27 - 2016-02-13 19:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-06-07 10:26 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-06-07 10:25 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-06-07 10:19 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-07 10:15 - 2015-09-11 21:18 - 00000000 ____D C:\ProgramData\ProductData
2016-06-06 16:27 - 2011-04-24 14:07 - 00001158 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA.job
2016-06-05 16:30 - 2010-09-06 14:03 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-05 07:32 - 2010-10-07 21:15 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Notepad++
2016-06-04 23:08 - 2011-08-06 23:34 - 00000000 ____D C:\Users\Starsoul\Desktop\DLs
2016-06-04 23:08 - 2011-06-29 19:44 - 00000000 ____D C:\Users\Starsoul\Desktop\video-tools
2016-06-03 23:55 - 2014-02-23 20:26 - 00000000 ____D C:\Users\Starsoul\Desktop\System & Tools
2016-06-03 23:49 - 2010-04-24 14:56 - 00002900 _____ C:\WINDOWS\system32\AutoRunFilter.ini
2016-06-03 23:22 - 2010-04-24 14:13 - 00000000 ____D C:\ProgramData\Temp
2016-06-03 22:57 - 2016-04-19 09:45 - 00000000 ____D C:\Users\Starsoul
2016-06-03 22:34 - 2014-02-26 20:29 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-06-03 22:32 - 2014-02-26 20:29 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Battle.net
2016-06-03 21:59 - 2016-04-19 09:44 - 02086232 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-06-03 21:59 - 2016-02-13 18:59 - 00889250 _____ C:\WINDOWS\system32\perfh007.dat
2016-06-03 21:59 - 2016-02-13 18:59 - 00197298 _____ C:\WINDOWS\system32\perfc007.dat
2016-06-03 21:59 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-06-03 21:27 - 2011-04-24 14:07 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core.job
2016-06-03 21:26 - 2011-06-22 09:59 - 00000000 ____D C:\Program Files (x86)\MSECACHE
2016-06-03 16:55 - 2012-08-29 13:16 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Skype
2016-06-03 15:08 - 2011-02-15 20:48 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\FileZilla
2016-06-03 14:37 - 2012-12-21 13:50 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-06-03 13:45 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\ProductData
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\Users\Starsoul\AppData\LocalLow\IObit
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\ProgramData\IObit
2016-06-03 13:45 - 2015-09-11 21:17 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\IObit
2016-06-03 13:45 - 2011-03-11 22:57 - 00000000 ____D C:\WINDOWS\pss
2016-06-03 13:39 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\registration
2016-06-03 12:52 - 2010-04-24 14:56 - 00001967 _____ C:\WINDOWS\system32\ServiceFilter.ini
2016-06-03 12:37 - 2015-05-15 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2016-06-03 12:37 - 2014-02-26 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-06-03 12:37 - 2013-11-08 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2016-06-03 12:37 - 2012-05-14 21:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2016-06-03 12:37 - 2010-09-26 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mass Effect 2
2016-06-03 12:37 - 2010-09-05 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever
2016-06-03 12:37 - 2010-09-04 21:52 - 00000000 ____D C:\Users\Starsoul\Desktop\Spiele
2016-06-03 12:34 - 2013-02-07 09:17 - 00000000 ____D C:\Program Files (x86)\PDF Architect
2016-06-03 11:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-06-03 11:19 - 2010-09-06 08:05 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Mozilla
2016-06-03 10:57 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-03 10:57 - 2010-09-04 13:57 - 00007593 _____ C:\Users\Starsoul\AppData\Local\Resmon.ResmonCfg
2016-06-03 10:19 - 2016-04-19 10:05 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Packages
2016-06-02 22:16 - 2016-02-13 10:21 - 00724112 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-02 21:36 - 2010-04-24 14:21 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-05-31 20:26 - 2016-04-19 10:34 - 00000000 ____D C:\Windows.old
2016-05-31 20:07 - 2010-10-14 22:49 - 00000000 ____D C:\Users\Starsoul\Documents\Eigene PSP-Dateien
2016-05-30 15:11 - 2010-09-04 23:09 - 00000000 ____D C:\Users\Starsoul\Documents\My Games
2016-05-30 12:49 - 2015-12-08 21:34 - 00087984 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwfp.sys
2016-05-30 12:49 - 2015-06-11 19:35 - 00049240 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klim6.sys
2016-05-30 12:49 - 2015-06-06 08:51 - 00077728 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kldisk.sys
2016-05-30 12:46 - 2010-09-04 20:15 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Google
2016-05-30 12:45 - 2010-04-24 14:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-30 12:28 - 2016-04-19 09:41 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-30 12:21 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-05-30 12:21 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-05-30 12:20 - 2014-01-21 20:36 - 00000000 ____D C:\Users\hedev
2016-05-30 12:20 - 2009-07-14 05:20 - 00000000 ____D C:\Users\Default.migrated
2016-05-30 12:14 - 2013-09-10 19:19 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-30 00:22 - 2010-09-06 08:05 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Mozilla
2016-05-29 23:53 - 2015-12-03 20:58 - 00000000 ____D C:\Program Files\Common Files\AV
2016-05-29 23:39 - 2016-04-19 09:52 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-05-29 23:39 - 2016-04-13 22:12 - 00002092 _____ C:\Users\Public\Desktop\Raptr.lnk
2016-05-29 23:39 - 2016-04-01 11:32 - 00001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-05-29 23:39 - 2015-11-22 01:08 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-29 23:39 - 2015-05-15 15:30 - 00000607 _____ C:\Users\Public\Desktop\World of Warships.lnk
2016-05-29 23:39 - 2014-02-26 20:29 - 00001146 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-05-29 23:39 - 2013-02-05 09:16 - 00000526 _____ C:\Users\Public\Desktop\Fraps.lnk
2016-05-29 23:39 - 2012-11-25 17:41 - 00002104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-05-29 23:39 - 2010-04-24 14:21 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
2016-05-29 23:34 - 2016-05-03 13:22 - 00000898 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings.lnk
2016-05-29 23:34 - 2016-04-19 10:10 - 00002413 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-29 23:34 - 2016-04-19 10:10 - 00001053 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-05-29 23:33 - 2015-05-04 22:24 - 00000602 _____ C:\Users\Starsoul\Desktop\Nexus Mod Manager.lnk
2016-05-29 23:33 - 2012-08-03 22:40 - 00000581 _____ C:\Users\Starsoul\Desktop\Steam.lnk
2016-05-29 23:18 - 2010-09-04 21:51 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-05-29 23:18 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-05-29 23:07 - 2016-04-19 10:24 - 00000000 ____D C:\Users\Starsoul\AppData\Local\MicrosoftEdge
2016-05-18 20:48 - 2010-09-06 11:42 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Ubisoft
2016-05-18 16:54 - 2012-03-08 13:04 - 00000000 ____D C:\ProgramData\Origin
2016-05-13 12:45 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-05-12 22:05 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-12 22:00 - 2016-02-13 19:12 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-12 22:00 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-12 21:58 - 2014-12-21 21:31 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Raptr
2016-05-12 21:35 - 2013-10-10 22:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 21:22 - 2011-04-24 14:07 - 00004286 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA
2016-05-11 21:22 - 2011-04-24 14:07 - 00003910 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core
2016-05-11 12:54 - 2014-12-27 00:18 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2011-03-08 20:57 - 2011-06-29 22:11 - 0007859 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.cat
2011-03-08 20:57 - 2011-06-29 22:11 - 0001167 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.inf
2011-03-08 20:58 - 2011-06-29 22:11 - 0000055 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.log
2013-11-17 21:03 - 2014-04-05 20:03 - 0000038 _____ () C:\Users\Starsoul\AppData\Roaming\WB.CFG
2014-01-25 01:03 - 2014-01-25 01:03 - 0000005 _____ () C:\Users\Starsoul\AppData\Roaming\WBPU-TTL.DAT
2016-03-29 20:52 - 2016-03-29 20:52 - 0000792 _____ () C:\Users\Starsoul\AppData\Local\recently-used.xbel
2010-09-04 13:57 - 2016-06-03 10:57 - 0007593 _____ () C:\Users\Starsoul\AppData\Local\Resmon.ResmonCfg
2010-04-24 14:38 - 2009-12-24 14:38 - 0131368 _____ () C:\ProgramData\FullRemove.exe
2010-04-24 14:18 - 2010-04-24 14:18 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-04-24 14:18 - 2010-04-24 14:18 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Einige Dateien in TEMP:
====================
C:\Users\Starsoul\AppData\Local\Temp\libeay32.dll
C:\Users\Starsoul\AppData\Local\Temp\msvcr120.dll
C:\Users\Starsoul\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-06-03 22:39
==================== Ende von FRST.txt ============================
|
|
07.06.2016, 09:47
| #7 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Und hier die neue Addition.txt (falls nötig) Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:06-06-2016
durchgeführt von Starsoul (2016-06-07 10:35:44)
Gestartet von C:\Users\Starsoul\Desktop
Windows 10 Home Version 1511 (X64) (2016-04-19 08:05:43)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2332507749-2589976836-3566542525-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2332507749-2589976836-3566542525-503 - Limited - Disabled)
Gast (S-1-5-21-2332507749-2589976836-3566542525-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2332507749-2589976836-3566542525-1002 - Limited - Enabled)
Starsoul (S-1-5-21-2332507749-2589976836-3566542525-1000 - Administrator - Enabled) => C:\Users\Starsoul
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Anti-Virus (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky Anti-Virus (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
AdBlocker (x32 Version: 4.1.1.0 - StarkIndustry) Hidden <==== ACHTUNG
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.03.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.8 - ASUS)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.0.8 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.28 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.19 - asus)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.11.12 - Atheros Communications Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0005 - ASUS)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 2007514350.48.56.38866290 - Audible, Inc.)
Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5 (64-bit)) (Version: 2.5.4.7200 - )
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 1942 (HKLM-x32\...\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}) (Version: - )
BioShock 2 (x32 Version: 1.0.0003.131 - Take-Two Interactive Software) Hidden
BioShock 2 (x32 Version: 1.0.0005.131 - Take-Two Interactive Software) Hidden
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.7.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.20.13 - Canon Inc.)
Canon MG3600 series Benutzerregistrierung (HKLM-x32\...\Canon MG3600 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MG3600 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3600_series) (Version: 1.00 - Canon Inc.)
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CanoScan LiDE 100 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2413) (Version: - )
Catalyst Control Center Next Localization BR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)
Celestial Command (HKLM-x32\...\Steam App 330460) (Version: - Romenics)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Command & Conquer 3 (HKLM-x32\...\{B0C30E93-D3D9-4F04-A2AC-54749B573275}) (Version: 1.00.0000 - Ihr Firmenname)
Command & Conquer Generals (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Command and Conquer(TM) Generäle Die Stunde Null (HKLM-x32\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and Conquer(TM) Generäle Die Stunde Null (x32 Version: 1.00.0000 - Electronic Arts) Hidden
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.5 - ASUS)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2311 - CyberLink Corp.)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Die Hochzeitsdrucker 3.0 (HKLM-x32\...\Die Hochzeitsdrucker_is1) (Version: 3.0.1 - druckköpfchen)
Distant Worlds: Universe (HKLM\...\Steam App 261470) (Version: - Code Force)
DOSShell 1.8 (HKLM-x32\...\DOSShell) (Version: 1.8 - Loonies Software)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.1.20150424 - Landesfinanzdirektion Thüringen)
Empire Earth Ultimate Edition (HKLM-x32\...\{912CE296-3D73-4A9D-B3FB-70A5CF7A8568}) (Version: 1.0 - The Games Company)
Empyrion - Galactic Survival (HKLM-x32\...\Steam App 383120) (Version: - Eleon Game Studios)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.5 - ASUS)
FileZilla Client 3.15.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.15.0.2 - Tim Kosse)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Galactic Civilizations II - Ultimate Edition (HKLM-x32\...\Galactic Civilizations II - Ultimate Edition) (Version: - Kalypso Media)
Giants (HKLM-x32\...\{97370293-96EC-11D4-9DEF-00104B70C5FB}) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.63 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.18) (Version: 9.18 - Artifex Software Inc.)
Impulse (HKLM-x32\...\Impulse) (Version: 1.0 - Stardock)
Impulse (x32 Version: 1.0 - Stardock Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.4.0.118 - IObit)
Jasc Paint Shop Pro 9 (HKLM-x32\...\{F843C6A3-224D-4615-94F8-3C461BD9AEA0}) (Version: 9.00.0000 - Jasc Software Inc)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version: - Squad)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.02 - Electronic Arts, Inc.)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Thunderbird 17.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 17.0 (x86 de)) (Version: 17.0 - Mozilla)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Manager (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\MusicManager) (Version: - Google, Inc.)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)
PDF Architect (HKLM-x32\...\{80A07844-CA64-4DE4-AB61-D37DDBE8074F}) (Version: 1.0.52.8917 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.0-r112326-release - Raptr, Inc)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
ROTR ECA Beta 1.8 (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\ROTR ECA Beta 1.8) (Version: - )
Scribus 1.4.6 (64bit) (HKLM\...\Scribus 1.4.6) (Version: 1.4.6 - The Scribus Team)
Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.5.43 - Safer-Networking Ltd.)
Star Trek Elite Force II (HKLM-x32\...\Star Trek Elite Force II) (Version: - )
Star Trek Online (HKLM-x32\...\Star Trek Online) (Version: - Cryptic Studios)
Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: - Bioware/EA)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
StarDrive (HKLM-x32\...\Steam App 220660) (Version: - Zero Sum Games)
StarDrive 2 (HKLM-x32\...\Steam App 252450) (Version: - Zero Sum Games)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Subnautica (HKLM-x32\...\Steam App 264710) (Version: - Unknown Worlds Entertainment)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 19.0 - Ubisoft)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - )
Warcraft III: All Products (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Warcraft III) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.1 - ASUS)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.15 - ASUS)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
X3: Albion Prelude (HKLM-x32\...\Steam App 201310) (Version: - Egosoft)
X3: Terran Conflict (HKLM-x32\...\Steam App 2820) (Version: - Egosoft)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {007B1963-6D4E-4296-9E54-5A81CE69C3B2} - System32\Tasks\Uninstaller_SkipUac_Starsoul => D:\Program Files (x86)\IObit Uninstaller\IObitUninstaler.exe [2016-05-26] (IObit)
Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {0F2EF7EB-63DC-438E-9610-68910766DED5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {2BB67414-9E81-4EFA-A8AD-DD285A54356F} - System32\Tasks\AMD Updater => D:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {32FDB560-251D-4C1D-8291-34675E0CE473} - System32\Tasks\CCleanerSkipUAC => D:\PROGRAM FILES (X86)\CCLEANER\CCLEANER.EXE [2016-03-11] (Piriform Ltd)
Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4A5BEC49-5C03-46CE-A0C8-4E879C61AEDE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4AF36A77-B82F-4DA6-88B2-B2B1D4679334} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {4CAAE754-531A-4A65-ACCC-B02AE3C8AB9A} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-15] (AVAST Software)
Task: {5EDF1F6F-5489-4A9E-BF6D-A27B5209A883} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {69B7EC8F-50D1-4CBB-8081-445FAC01072C} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {8A10D9C5-CB1C-49FF-B03B-41726A1F46D3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {90BDB066-4A7B-4F89-986F-DE92C19D3D7D} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] ()
Task: {9261B246-ED3D-4D7A-BE19-C2D4E62965EB} - System32\Tasks\{6A83D684-A198-402B-95A1-B91891F852C7} => F:\Starcraft\StarCraft.exe
Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {B01DBD84-4187-41B5-9BB1-53784865A2ED} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()
Task: {BB54ECD6-71FC-42DE-9FA2-D375414F1CCE} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-01-06] (ATK)
Task: {BC92AD75-0040-41B8-ADF0-D36FB313F77A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-30] (Google Inc.)
Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {D37302FD-C7BC-4785-B8E1-B4AAED9E0250} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {D428A33A-41C4-4B8C-9842-0F5F24EB4CBB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D97BC6EE-0EC3-4D5E-94B5-2A2E3A14E771} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-30] (Google Inc.)
Task: {DBE195D1-8103-4852-AE2A-FDA0E7669507} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {E1A80A31-283F-45DF-89D3-8C792A642CBE} - System32\Tasks\Microsoft\Windows\Media Center\VideoFetcher => C:\ProgramData\VideoFetcher\VideoFetcher.exe <==== ACHTUNG
Task: {E4703D0D-5DA1-4A32-BB0A-59C247A51901} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {E81D0CC5-19FD-4F8C-A577-56A003266493} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {EC4FF68E-81DF-46E3-89E4-944096A889AF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F49265F7-82C4-433A-9379-750838D8B352} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {FB5FA95A-33A4-4F5E-A22A-BB9C4E5F7BC2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-03] (Adobe Systems Incorporated)
Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core.job => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA.job => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Starsoul.job => D:\Program Files (x86)\IObit Uninstaller\IObitUninstaler.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Starsoul\Desktop\Spiele\Master of Orion 2.lnk -> F:\Moo2\orion-start.bat ()
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-19 10:31 - 2016-04-19 10:31 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2009-11-24 22:45 - 2009-11-24 22:45 - 00053888 _____ () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
2010-01-05 02:43 - 2010-01-05 02:43 - 01597440 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2009-12-23 22:12 - 2009-12-23 22:12 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll
2009-12-19 04:11 - 2009-12-19 04:11 - 00033280 _____ () C:\Program Files\P4G\OvrClk.dll
2016-04-19 10:31 - 2016-04-19 10:31 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-05-11 13:05 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-05-11 13:05 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-05-11 13:05 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-05-11 13:05 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-25 16:34 - 2015-06-25 16:34 - 00014336 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2015-06-25 16:37 - 2015-06-25 16:37 - 00739840 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-06-25 16:35 - 2015-06-25 16:35 - 00014336 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2015-06-25 16:38 - 2015-06-25 16:38 - 00071168 _____ () D:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-06-25 15:53 - 2015-06-25 15:53 - 00011776 _____ () D:\Program Files\AMD\CNext\CNext\libEGL.dll
2015-06-25 15:51 - 2015-06-25 15:51 - 02013696 _____ () D:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-05-30 12:46 - 2016-05-25 01:24 - 02334360 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.63\libglesv2.dll
2016-05-30 12:46 - 2016-05-25 01:24 - 00105112 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.63\libegl.dll
2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\kpcengine.2.3.dll
2016-05-30 12:34 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-05-30 12:34 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-05-30 12:34 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-09-11 21:18 - 2015-08-24 14:10 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2016-05-30 12:34 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2016-06-03 12:32 - 2015-12-23 16:27 - 00355616 _____ () D:\Program Files (x86)\IObit Uninstaller\madExcept_.bpl
2016-06-03 12:32 - 2015-12-23 16:27 - 00190240 _____ () D:\Program Files (x86)\IObit Uninstaller\madBasic_.bpl
2016-06-03 12:32 - 2015-12-23 16:27 - 00057632 _____ () D:\Program Files (x86)\IObit Uninstaller\madDisAsm_.bpl
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Temp:AB689DEA [121]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7902 mehr Seiten.
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123simsen.com -> www.123simsen.com
Da befinden sich 7902 mehr Seiten.
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-06-05 07:39 - 00000980 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Starsoul\Desktop\DLs\WANDERERS_ringshine_03.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: a2AntiMalware => 2
MSCONFIG\Services: Adobe LM Service => 3
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdvancedSystemCareService9 => 2
MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: BRSptStub => 3
MSCONFIG\Services: BRSptSvc => 3
MSCONFIG\Services: ehRecvr => 3
MSCONFIG\Services: ehSched => 3
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: lfsvc => 3
MSCONFIG\Services: MapsBroker => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: WinDefend => 2
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxNetApiSvc => 3
MSCONFIG\startupfolder: C:^Users^Starsoul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Starsoul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: BDRegion => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
MSCONFIG\startupreg: CanonSolutionMenu => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: EADM => "F:\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: Google Update => "C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: ImpulseFastStart => "C:\Program Files (x86)\Stardock\Impulse\Impulse.exe" /fastload
MSCONFIG\startupreg: PinnacleDriverCheck => C:\Windows\SysWOW64\PSDrvCheck.exe
MSCONFIG\startupreg: ProductUpdater =>
MSCONFIG\startupreg: Raptr =>
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: RunDLLEntry =>
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UpdateLBPShortCut => "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
HKLM\...\StartupApproved\Run32: => "ProductUpdater"
HKLM\...\StartupApproved\Run32: => "Raptr"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{47D4726C-D9E5-4F3F-B252-1E19D93256C3}] => (Allow) F:\SteamLibrary\SteamApps\common\Celestial Command\CelestialCommand.exe
FirewallRules: [{867E04CD-0046-40D2-9EC4-7FFF26C01084}] => (Allow) F:\SteamLibrary\SteamApps\common\Celestial Command\CelestialCommand.exe
FirewallRules: [{E6A4F911-1691-481D-BF77-D6BED2A97C70}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3AP.exe
FirewallRules: [{C904027F-1BAD-4818-A2EE-14377A5D2B97}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3AP.exe
FirewallRules: [{D9EE36B3-3EE9-4CC1-8380-9C40D1EC56FC}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3TC.exe
FirewallRules: [{3EC00EE2-91F3-4B1E-B594-F1A3F5FF592A}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3TC.exe
FirewallRules: [{4DE514B3-CEEF-4A9E-AC80-48243B9CA4EC}] => (Allow) D:\SteamPowered\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{D695EC96-1A77-4F0A-879C-4A54E2D4EC5D}] => (Allow) D:\SteamPowered\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{97B93E17-A40E-4B5C-B57C-3F169332AB4A}] => (Allow) D:\SteamPowered\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{869E3BAC-3770-4655-B87A-C6631BE1F01D}] => (Allow) D:\SteamPowered\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AF18A5B2-D038-40B4-8672-2BD0A2017461}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{8D724A51-2DED-40FE-9494-0B90E29A89D0}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{C64D194C-F6EC-45CD-BFA2-DCE783E4E57E}] => (Allow) F:\SteamLibrary\SteamApps\common\StarDrive\StarDrive.exe
FirewallRules: [{2EBC6A63-0E24-4EF8-89FD-4EB4124E73C0}] => (Allow) F:\SteamLibrary\SteamApps\common\StarDrive\StarDrive.exe
FirewallRules: [{F051BBDC-8498-4D0F-AD96-5E8059F840D6}] => (Allow) F:\SteamLibrary\SteamApps\common\Subnautica\Subnautica.exe
FirewallRules: [{2E2CB7F9-B4F3-4447-886C-4A0DBA7350DB}] => (Allow) F:\SteamLibrary\SteamApps\common\Subnautica\Subnautica.exe
FirewallRules: [{CC6DB91E-BC2E-421F-9642-1B248B7C06D2}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{AC6C5577-B2E3-4D3E-9B55-F7D1DEF05594}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [UDP Query User{1C4F36ED-E13F-473D-96AC-54E0AEEC1695}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{29833A24-854A-4D50-B99E-AD87DC3DA2D4}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{59EF4EB9-6F04-4638-AD4E-EBE41D85EC74}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{ECBCC841-75FE-45AE-940B-9CB1362A3C62}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [{A1CB59E0-837F-47C4-B6F1-36FB3616625D}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{DC6AE47E-41B3-469B-B75B-A94AAA54BF1D}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{B6BC75EF-DBB9-40EA-835B-3DC8B6A2144C}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{B5A1F873-E04A-45E1-BBDE-85024E51B3F9}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [UDP Query User{CCF9B47B-499E-43E0-9B68-8A51E33D7FA5}D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe] => (Allow) D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe
FirewallRules: [TCP Query User{0266E0CE-30A5-4654-8E21-71F1DEBBA3C3}D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe] => (Allow) D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe
FirewallRules: [{B7E2C63E-8B25-4205-97DF-C03991531F38}] => (Allow) D:\SteamPowered\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{FBA85BE3-1B52-461B-8BBC-7A36F9D8AA07}] => (Allow) D:\SteamPowered\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{F8B68DB4-4328-41E3-971C-E5622BA8BDB0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C3F97965-7C2B-4196-8C8B-D26C869389FA}] => (Allow) D:\SteamPowered\bin\steamwebhelper.exe
FirewallRules: [{7B210E24-B26F-4296-BCA3-9FE9672AFA51}] => (Allow) D:\SteamPowered\bin\steamwebhelper.exe
FirewallRules: [UDP Query User{E86A01FE-7844-4EA1-970E-AADF47578127}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [TCP Query User{2919E551-6C00-4D74-8D01-46C2346A2AE6}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [UDP Query User{62C07B85-CC89-49EA-A069-255AAED83397}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [TCP Query User{4B3B94AA-1F9C-4E78-8EFC-D8262105C248}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [{693B4E23-69C4-4527-85DC-C8A2FFED6D85}] => (Allow) G:\ANNO 2070\InitEngine.exe
FirewallRules: [{5D04F52D-B9AA-46E1-ABAC-732EDF28EDC9}] => (Allow) G:\ANNO 2070\InitEngine.exe
FirewallRules: [{58B33DC7-7B8C-4B13-BD62-B98EBDC0D62E}] => (Allow) G:\ANNO 2070\AutoPatcher.exe
FirewallRules: [{F121D42E-E939-40BB-AD09-5616B3924D03}] => (Allow) G:\ANNO 2070\AutoPatcher.exe
FirewallRules: [{119B12AF-A6C8-4706-B35B-09994BC9FF78}] => (Allow) G:\ANNO 2070\Anno5.exe
FirewallRules: [{5A5938D7-2DE6-4EA4-A4ED-AEF6B5DCCCD5}] => (Allow) G:\ANNO 2070\Anno5.exe
FirewallRules: [{C9F9A8C5-E69B-4EB7-80DF-1FCD95159FAD}] => (Allow) D:\SteamPowered\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{E0DAE25B-BF1C-4DCB-BF1F-26E23D97B66A}] => (Allow) D:\SteamPowered\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{F2C4D52E-7954-4030-B7FA-6C56910134CF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{343EDFDF-7194-42E1-AE17-0847007558F7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{14491256-AF45-40AB-8AA1-ADBB8B2990BE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{281CCC0E-415A-457A-B253-D8DADBFF60F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{0242554B-D206-4169-AA5B-3CDC975C8CFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{DB8BD9B4-0D7C-41E4-B5B4-9B3182E7697F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{80AF7911-87B1-4583-85E5-0DE507165B28}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{28BAB1A8-90B9-4961-ABDA-07F6D9BDC759}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{8AF73425-A390-4736-B3B8-3EA7A94F17E9}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{AC901B1C-5102-4C40-9D4A-D92891C9F71C}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{985F6EF3-A603-44CD-897F-4912562E7AE8}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{B5A61F72-7C91-4B4D-860B-CE1423F0DF45}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{12401D61-F6E2-4C6C-A8D4-E61691AA4E7E}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{BF083164-3604-4578-8141-AA83A163CD57}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{68360BB5-5B39-441F-8E08-E083EB436EDF}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{67CF4579-9D11-40CE-BA1E-CF720EF37EA9}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{7F08011F-0B0B-488C-9744-09F33DCF5D72}] => (Allow) D:\SteamPowered\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{A8B60513-3438-48B8-98A3-2EA03118BD20}] => (Allow) D:\SteamPowered\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{09FBFCE6-D5B7-451D-993B-3226B5DF96C1}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{31B19912-E4E6-4311-BDD2-DB81DD601840}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{0A694A37-1AAC-4B02-80BF-A00B0C781672}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{69A7F069-2D76-4CDE-A453-93960790E1FD}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [UDP Query User{A5240A18-5649-4AD9-9E42-DBA846B41771}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [TCP Query User{87DE2F10-0F07-4D9C-B5C3-6B5958C133F1}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [UDP Query User{B13FBB14-1A53-44F7-AB72-A71525130985}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [TCP Query User{CCBD3468-FEB5-4CC6-91C4-8FE8954036C2}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [UDP Query User{38C90B3F-7C53-489A-814F-57D0827CEE2C}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [TCP Query User{A0B77672-ED30-4EB0-A675-57172217009C}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [UDP Query User{982F9C7D-3F5F-406B-9DD6-FE51F20B29D1}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [TCP Query User{3D26A8BB-69CB-40D6-9EC2-D54F9982B53F}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [UDP Query User{E07BF312-563A-44ED-A4BB-7CCA501C29A3}F:\tmnationsforever\tmforever.exe] => (Block) F:\tmnationsforever\tmforever.exe
FirewallRules: [TCP Query User{FBDB3365-8577-4B3C-9511-0655ACBD7306}F:\tmnationsforever\tmforever.exe] => (Block) F:\tmnationsforever\tmforever.exe
FirewallRules: [{0ACFCEB3-4337-417E-853D-3517F84E1A64}] => (Allow) G:\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{99D7FAF2-F25A-4503-BF7D-5F01E01BD024}] => (Allow) G:\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [UDP Query User{958CBA3A-8426-4A87-B46C-D7E0A78C9A09}G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe] => (Block) G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe
FirewallRules: [TCP Query User{D40985FD-E3A5-4FF3-A31D-F14972FF32E3}G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe] => (Block) G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe
FirewallRules: [{A6E8D4EB-2BCA-4E72-8880-318C25244E90}] => (Allow) d:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{57741FE0-BCB5-4D13-9765-9B3A5436F1B4}] => (Allow) d:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{5AC273A0-4A1A-4666-A521-B5B83E96DB47}] => (Allow) D:\SteamPowered\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{B8F354ED-8D30-4CA2-889F-BE5DC9804E7E}] => (Allow) D:\SteamPowered\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{8E8BE884-A89C-46D6-847A-498034FEF660}] => (Allow) G:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{33A095A3-C39C-435E-9459-8193F9D8ACB6}] => (Allow) G:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [UDP Query User{1F16DCC4-ADB3-4220-8004-936AC8876DE7}F:\mass effect 2\binaries\masseffect2.exe] => (Allow) F:\mass effect 2\binaries\masseffect2.exe
FirewallRules: [TCP Query User{D94CABD7-849A-43BA-A8A0-AA660F156445}F:\mass effect 2\binaries\masseffect2.exe] => (Allow) F:\mass effect 2\binaries\masseffect2.exe
FirewallRules: [UDP Query User{25FE5F2D-466C-429C-B046-2301D690D886}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{71511B28-629B-45B7-B6DD-A7C3137B2F64}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{4D2C9DA6-AA66-4E41-8201-ED98430C70C2}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{CFCADA3B-B4FC-4A81-8930-7E93BFEBC003}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{162EDF5B-10EC-43D5-926B-8D34AD461CC0}] => (Allow) F:\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{0F301E52-38B3-451F-9612-A11E7405E82D}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{48E4DE69-6C9B-4323-8D0C-5FCE7549E28B}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{B9A24157-12CD-42DB-98C5-51BB351520FE}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe
FirewallRules: [{397595FB-D831-4CCE-8459-9226074EBCDD}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe
FirewallRules: [{77334BB3-68C8-4A8A-940E-66AF07EF863C}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{40FB3FDD-AEF7-4418-B0B6-1266055B3875}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{9C289B3C-FCA9-454A-AFCB-E9136B88E697}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{4B81D6EE-3E4E-4149-B58F-FE91C92EBFB5}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{C440B47B-D0D4-4D96-9E11-8B207DCF33D8}G:\cryptic studios\star trek online\live\gameclient.exe] => (Allow) G:\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{B4197EFD-9076-471E-80C3-92AB1A5CFC33}G:\cryptic studios\star trek online\live\gameclient.exe] => (Allow) G:\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [TCP Query User{FBA18227-FB9E-4FBC-892F-DAC050CC5A4E}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{22B28788-7D9C-434E-8DAB-66A09F3A2124}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [TCP Query User{C8323F48-55CC-4D01-95A4-3C5432D0F430}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{023C471C-EFCC-45BB-BFE3-85C057A4513B}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [{77C45AD4-8E28-46F6-917B-4A85B4545106}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{49AE43A2-EB5C-4057-A5DD-C8DFE817808E}] => (Allow) F:\SteamLibrary\SteamApps\common\Distant Worlds Universe\autorun.exe
FirewallRules: [{A46B117F-99C4-4269-9ECB-196BCC2600F7}] => (Allow) F:\SteamLibrary\SteamApps\common\Distant Worlds Universe\autorun.exe
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Wiederherstellungspunkte =========================
03-06-2016 21:17:06 Windows Update
07-06-2016 10:19:01 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (06/07/2016 10:19:26 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (06/06/2016 01:47:01 PM) (Source: MsiInstaller) (EventID: 10005) (User: Starsoul-G73)
Description: Produkt: Windows Defender -- Die Installation dieser Software ist nicht notwendig, weil Windows Defender in Windows Vista enthalten ist. Über den Abschnitt "Sicherheit" in der Windows-Systemsteuerung greifen Sie auf Windows Defender zu.
Error: (06/05/2016 07:45:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xae4
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (06/05/2016 07:45:08 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2788) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Error: (06/05/2016 10:08:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 1.0.5.4, Zeitstempel: 0x4b1cb992
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.306, Zeitstempel: 0x571af2eb
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ee6fc
ID des fehlerhaften Prozesses: 0x758
Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0
Pfad der fehlerhaften Anwendung: FBAgent.exe1
Pfad des fehlerhaften Moduls: FBAgent.exe2
Berichtskennung: FBAgent.exe3
Vollständiger Name des fehlerhaften Pakets: FBAgent.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FBAgent.exe5
Error: (06/05/2016 08:05:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x146c
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/05/2016 08:05:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1ca8
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/05/2016 08:04:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1e68
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/03/2016 10:57:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xa88
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (06/03/2016 10:57:34 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2696) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Systemfehler:
=============
Error: (06/07/2016 10:29:33 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Intel(R) Management & Security Application User Notification Service" ist vom Dienst "Intel(R) Management and Security Application Local Management Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (06/07/2016 10:27:13 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (06/07/2016 10:26:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_2b76782" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/07/2016 10:25:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/07/2016 10:25:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/07/2016 10:25:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Spybot-S&D 2 Updating Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/07/2016 10:25:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "RadeonPro Support Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/07/2016 10:25:33 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/07/2016 10:25:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "LiveUpdate" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/07/2016 10:25:32 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2016-06-03 14:11:32.590
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements.
Date: 2016-06-03 14:09:04.328
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-16 22:00:03.629
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 22:05:24.265
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 21:56:18.956
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-26 20:10:40.321
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:22:35.869
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:15:16.710
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:01:34.166
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 09:59:44.295
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 8044.57 MB
Verfügbarer physikalischer RAM: 5969.32 MB
Summe virtueller Speicher: 9945.57 MB
Verfügbarer virtueller Speicher: 7738.31 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:74.08 GB) (Free:35.34 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (DATA) (Fixed) (Total:204.03 GB) (Free:30.75 GB) NTFS
Drive f: (SDATA1) (Fixed) (Total:149.04 GB) (Free:24.6 GB) NTFS
Drive g: (SDATA2) (Fixed) (Total:149.05 GB) (Free:33.75 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 76692CA8)
Partition 1: (Not Active) - (Size=19.5 GB) - (Type=1C)
Partition 2: (Active) - (Size=74.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=449 MB) - (Type=27)
Partition 4: (Not Active) - (Size=204 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: BBC58B91)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
07.06.2016, 15:07
| #8 |
| /// Malwareteam | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Hi, hast du das Problem in allen Browsern? |
|
07.06.2016, 20:51
| #9 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Ja hab ich - Firefox (deinstalliert), Chrome, Edge und Steam. Soeben getestet - wie gehabt da. Dachte schon er ist weg. Hab ca. 3-4 Webseiten gesurft und dann auf trojaner-board.de ins login feld geklickt und da ist der neue Tab  Bei manchen Seiten geht ein popup auf und fragt man wirklich verlassen will - mach dann immer das popup mit X zu. Hat für mich einen leicht russischen Touch das Ganze.... Vielleicht hier nochwas hilfreiches: Als ich die ...rar.exe angeklickt hab hat der Virus neue Verknüpfungen von Programmen auf dem Desktop angelegt und den Link bearbeitet und so z.B. Battle.net und Steam auf falsche Launcher leiten wollen - wohl zum fischen... Diese original Verlinkungen waren versteckt aber noch da. Und als der PC nicht startete kam ab und zu beim Windowsladebildschirm ein Bluescreen mit einer Fehlermeldung machine_.... usw. Nach Google Recherche hatte ich einen Beitrag gefunden wo einer meinte der Bootmanager sei infiziert bzw. gehackt. Fanden 167 Leute als nützliche Antwort. Aber da ichs so reparieren konnte hab ichs nicht weiter verfolgt... Ach und ich hab mit dem Tool Spy Search & Destroy die Immunisieren Funktion angewendet.... falls das wichtig ist. Ist das Tool eigenltich gut oder eher runter damit? Es geht ja alles - ist nur die nervige Browserweiterleitung... Und Kaspersky hat noch kein einziges Mal Alarm geschlagen. Geändert von Starsoul (07.06.2016 um 21:17 Uhr) |
|
07.06.2016, 21:41
| #10 |
| /// Malwareteam | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Hi, Schritt # 1: Revo Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Schritt # 2: FRST-Fix Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM-x32\...\Run: [NWEReboot] => [X]
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
Tcpip\..\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}: [NameServer] 138.201.48.176,8.8.8.8
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO-x32: Kein Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Keine Datei
BHO-x32: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei
BHO-x32: Kein Name -> {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} -> Keine Datei
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Keine Datei
FF HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Starsoul\AppData\Roaming\Mozilla\Firefox\Profiles\0lqb71tz.default\extensions\cliqz@cliqz.com => nicht gefunden
2016-05-29 22:30 - 2016-05-29 22:30 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\SPI
Task: {E1A80A31-283F-45DF-89D3-8C792A642CBE} - System32\Tasks\Microsoft\Windows\Media Center\VideoFetcher => C:\ProgramData\VideoFetcher\VideoFetcher.exe <==== ACHTUNG
C:\ProgramData\VideoFetcher
EmptyTemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt # 3: FRST Und noch ein frisches FRST-Log, mit Addition.txt angehakt bitte. Schritt # 4: Bitte Posten
|
|
07.06.2016, 21:59
| #11 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Sorry kann Schritt 1 nicht ausführen - der Uninstaller kann das Programm AdBlocker nicht finden bzw. es ist nicht aufgelistet. Hab Ansicht auch auf Details geändert und über Suchfunktion gesucht. Nicht drin. War glaub ich eins der Programme die ich bei meiner eigenen Recherche gefunden habe, deinstallieren wollte - russisches popup fenster. Dann hab ich Verzeichnis wo es gespeichert war per Hand gelöscht... Soll ich Schritt 1 überspringen und einfach mit Schritt 2 weitermachen? |
|
07.06.2016, 22:00
| #12 |
| /// Malwareteam | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Hi, schau mal ob du es über die Systemsteuerung deinstallieren kannst. Wenn nicht, dann überspring es einfach. |
|
07.06.2016, 22:20
| #13 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Fixlog.txt (Programm wollte nach Entfernen PC Neustart) Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-06-2016
durchgeführt von Starsoul (2016-06-07 23:10:24) Run:1
Gestartet von C:\Users\Starsoul\Desktop
Geladene Profile: Starsoul (Verfügbare Profile: Starsoul & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
HKLM-x32\...\Run: [NWEReboot] => [X]
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Keine Datei
Tcpip\..\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}: [NameServer] 138.201.48.176,8.8.8.8
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO-x32: Kein Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Keine Datei
BHO-x32: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei
BHO-x32: Kein Name -> {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} -> Keine Datei
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Keine Datei
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Keine Datei
FF HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Starsoul\AppData\Roaming\Mozilla\Firefox\Profiles\0lqb71tz.default\extensions\cliqz@cliqz.com => nicht gefunden
2016-05-29 22:30 - 2016-05-29 22:30 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\SPI
Task: {E1A80A31-283F-45DF-89D3-8C792A642CBE} - System32\Tasks\Microsoft\Windows\Media Center\VideoFetcher => C:\ProgramData\VideoFetcher\VideoFetcher.exe <==== ACHTUNG
C:\ProgramData\VideoFetcher
EmptyTemp:
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NWEReboot => Wert erfolgreich entfernt
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon" => Schlüssel erfolgreich entfernt
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Schlüssel nicht gefunden.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}\\NameServer => Wert erfolgreich entfernt
"HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Schlüssel nicht gefunden.
"HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}" => Schlüssel erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB} => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Schlüssel erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}" => Schlüssel erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} => Schlüssel nicht gefunden.
"HKCR\PROTOCOLS\Handler\livecall" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{828030A1-22C1-4009-854F-8E305202313F} => Schlüssel nicht gefunden.
"HKCR\PROTOCOLS\Handler\msnim" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{828030A1-22C1-4009-854F-8E305202313F} => Schlüssel nicht gefunden.
"HKCR\PROTOCOLS\Handler\wlmailhtml" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{03C514A3-1EFB-4856-9F99-10D7BE1653C0} => Schlüssel nicht gefunden.
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\Software\Mozilla\Firefox\Extensions\\cliqz@cliqz.com => Wert erfolgreich entfernt
C:\Users\Starsoul\AppData\Roaming\SPI => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E1A80A31-283F-45DF-89D3-8C792A642CBE}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E1A80A31-283F-45DF-89D3-8C792A642CBE}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Media Center\VideoFetcher => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\VideoFetcher" => Schlüssel erfolgreich entfernt
"C:\ProgramData\VideoFetcher" => nicht gefunden.
EmptyTemp: => 394.5 MB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 23:10:31 ====
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:07-06-2016
durchgeführt von Starsoul (Administrator) auf STARSOUL-G73 (07-06-2016 23:16:48)
Gestartet von C:\Users\Starsoul\Desktop
Geladene Profile: Starsoul (Verfügbare Profile: Starsoul & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Mr. John aka japamd) D:\Program Files (x86)\RadeonPro\RadeonProSupport.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
() C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
(ATK) C:\Program Files\P4G\BatteryLife.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avpui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Advanced Micro Devices, Inc.) D:\Program Files\AMD\CNext\CNext\cnext.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(IObit) D:\Program Files (x86)\IObit Uninstaller\UninstallMonitor.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.168_none_76587b40265ca57e\TiWorker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1861416 2009-10-09] (Synaptics Incorporated)
HKLM\...\Run: [StartCN] => d:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [6806144 2010-06-24] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-05-03] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (CANON INC.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4127488 2015-06-16] (Safer-Networking Ltd.)
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Run: [Google Update] => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{32ffb1ef-1f41-4fe4-85d0-4118c45dead7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{36e963d0-db26-4d0a-bd1f-4e6c00598a56}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> D:\Program Files (x86)\IObit Uninstaller\UninstallExplorer.dll [2015-12-23] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-26] (Oracle Corporation)
BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-26] (Oracle Corporation)
BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-06-03] ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-05-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-05-26] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-06-03] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Keine Datei]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> d:\Program Files (x86)\Winamp Detect\npwachk.dll [2013-07-24] (Nullsoft, Inc.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-30] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> d:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Starsoul\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @talk.google.com/O1DPlugin -> C:\Users\Starsoul\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin HKU\S-1-5-21-2332507749-2589976836-3566542525-1000: ubisoft.com/uplaypc -> d:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-05-09] ()
FF Plugin ProgramFiles/Appdata: C:\Users\Starsoul\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Starsoul\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-02-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox
FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox [2016-05-30]
Chrome:
=======
CHR Profile: C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-06-03]
CHR Extension: (Google Docs) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-06-03]
CHR Extension: (Google Drive) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-03]
CHR Extension: (YouTube) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-03]
CHR Extension: (Kaspersky Protection) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2016-06-03]
CHR Extension: (Google Tabellen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-06-03]
CHR Extension: (Google Docs Offline) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-03]
CHR Extension: (Google Mail) - C:\Users\Starsoul\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-06-03]
CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe [194000 2015-12-08] (Kaspersky Lab ZAO)
S4 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-10-15] (BitRaider, LLC)
S4 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-01-21] (BitRaider, LLC)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2010-04-24] (Creative Labs) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [174112 2015-01-30] (EasyAntiCheat Ltd)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2960672 2016-05-27] (IObit)
S4 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-10-01] (Intel Corporation) [Datei ist nicht signiert]
S4 Origin Client Service; F:\Origin\OriginClientService.exe [2120712 2016-05-18] (Electronic Arts)
S4 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
S4 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
S4 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2012-01-02] ()
R2 RadeonPro Support Service; d:\Program Files (x86)\RadeonPro\RadeonProSupport.exe [20608 2013-04-13] (Mr. John aka japamd) [Datei ist nicht signiert]
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1750712 2015-06-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2102496 2015-06-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [224712 2015-07-24] (Safer-Networking Ltd.)
S2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-10-01] (Intel Corporation) [Datei ist nicht signiert]
S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\System32\drivers\athwnx.sys [4207104 2015-10-30] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [111120 2016-03-01] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-09-06] ()
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-01-22] (BitRaider)
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2014-10-15] (BitRaider)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [15416 2009-07-20] ( )
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-05-30] (AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab)
R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-12-08] (AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [238000 2016-05-30] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [933808 2016-05-30] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49240 2016-05-30] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-08] (AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87984 2016-05-30] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-09-06] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2009-09-02] (CyberLink Corp.)
U3 idsvc; kein ImagePath
U3 wpcsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-07 23:16 - 2016-06-07 23:17 - 00019158 _____ C:\Users\Starsoul\Desktop\FRST.txt
2016-06-07 23:10 - 2016-06-07 23:10 - 00005174 _____ C:\Users\Starsoul\Desktop\Fixlog.txt
2016-06-07 23:10 - 2016-06-07 23:10 - 00000000 ____D C:\Users\Starsoul\Desktop\FRST-OlderVersion
2016-06-07 22:48 - 2016-06-07 22:48 - 00001343 _____ C:\Users\Starsoul\Desktop\Revo Uninstaller.lnk
2016-06-07 22:48 - 2016-06-07 22:48 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-06-07 22:48 - 2016-06-07 22:48 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-06-07 22:47 - 2016-06-07 22:48 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Starsoul\Downloads\revosetup95.exe
2016-06-07 10:18 - 2016-06-07 10:18 - 03677248 _____ C:\Users\Starsoul\Desktop\AdwCleaner_5.119.exe
2016-06-06 16:56 - 2016-06-07 23:16 - 00000000 ____D C:\FRST
2016-06-06 16:55 - 2016-06-07 23:10 - 02385408 _____ (Farbar) C:\Users\Starsoul\Desktop\FRST64.exe
2016-06-06 15:51 - 2016-06-06 16:54 - 00000000 ____D C:\EEK
2016-06-06 15:24 - 2016-06-06 15:27 - 217702232 _____ C:\Users\Starsoul\Downloads\EmsisoftEmergencyKit11.0.0.6082.exe
2016-06-06 14:11 - 2016-06-06 14:11 - 00003865 _____ C:\Users\Starsoul\Downloads\gmer1.txt
2016-06-06 13:42 - 2016-06-06 13:42 - 00380928 _____ C:\Users\Starsoul\Downloads\gmer-2.2.19882.exe
2016-06-06 13:40 - 2016-06-06 13:40 - 00367616 _____ (Avira GmbH) C:\Users\Starsoul\Downloads\removaltool-win32-de18.exe
2016-06-05 08:04 - 2016-06-05 08:04 - 00083682 _____ C:\TDSSKiller.3.1.0.9_05.06.2016_08.04.10_log.txt
2016-06-05 08:02 - 2016-06-05 08:03 - 00916072 _____ (F-Secure Corporation) C:\Users\Starsoul\Downloads\fsbl1067.exe
2016-06-05 08:01 - 2016-06-05 08:02 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Starsoul\Downloads\tdsskiller3109.exe
2016-06-05 07:51 - 2016-06-05 07:53 - 49152216 _____ (Microsoft Corporation) C:\Users\Starsoul\Downloads\Windows-KB890830-x64-V5.36.exe
2016-06-04 23:16 - 2016-06-04 23:16 - 00000000 ____D C:\Users\Starsoul\Desktop\mbar
2016-06-03 23:55 - 2016-06-03 23:55 - 00000000 ____D C:\Users\Starsoul\Documents\Simply Super Software
2016-06-03 23:35 - 2016-06-03 23:35 - 00000826 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-06-03 23:35 - 2016-06-03 23:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-06-03 23:35 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-06-03 23:35 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-06-03 23:23 - 2016-05-30 20:47 - 00452618 _____ C:\WINDOWS\system32\Drivers\etc\hosts.old-trb
2016-06-03 23:11 - 2016-06-03 23:11 - 00388608 _____ (Trend Micro Inc.) C:\Users\Starsoul\Downloads\HijackThis_2.0.5.exe
2016-06-03 23:09 - 2016-06-03 23:10 - 22851472 _____ (Malwarebytes ) C:\Users\Starsoul\Downloads\mbam-setup-chipde.13595-2.2.1.1043.exe
2016-06-03 21:46 - 2016-06-07 10:25 - 00000000 ____D C:\AdwCleaner
2016-06-03 17:03 - 2016-06-03 17:03 - 00000000 __SHD C:\found.000
2016-06-03 15:07 - 2016-06-03 15:07 - 06541784 _____ (Tim Kosse) C:\Users\Starsoul\Downloads\FileZilla_3.18.0_win64-setup.exe
2016-06-03 14:21 - 2016-06-03 14:21 - 00010096 _____ C:\Users\Starsoul\Documents\cc_20160603_142126.reg
2016-06-03 12:49 - 2016-06-03 12:49 - 00000000 ____D C:\ProgramData\Emsisoft
2016-06-03 12:32 - 2016-06-07 22:05 - 00000298 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Starsoul.job
2016-06-03 12:32 - 2016-06-07 22:03 - 00002496 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Starsoul
2016-06-03 12:32 - 2016-06-03 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2016-06-03 10:42 - 2016-06-03 10:42 - 00000000 ____D C:\Users\Starsoul\Desktop\homeoffice20160603-2016-06-03
2016-06-03 09:14 - 2016-06-03 09:14 - 00092552 _____ C:\Users\Starsoul\Documents\cc_20160603_091438.reg
2016-06-03 00:10 - 2016-06-03 00:10 - 00000000 ____D C:\Temp
2016-06-02 22:05 - 2016-06-02 23:54 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2016-06-02 22:04 - 2016-06-03 00:49 - 00760838 _____ C:\WINDOWS\ntbtlog.txt
2016-06-02 21:53 - 2016-06-02 21:53 - 690701624 _____ C:\WINDOWS\MEMORY.DMP
2016-06-02 21:43 - 2016-06-02 21:43 - 00000000 ____D C:\Users\Starsoul\Documents\Die Hochzeitsdrucker
2016-06-01 20:31 - 2016-06-01 20:49 - 00012254 _____ C:\Users\Starsoul\Desktop\fabian Einladung 16.odt
2016-05-30 21:04 - 2016-06-06 13:20 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-05-30 21:04 - 2016-06-03 10:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-05-30 20:58 - 2016-06-04 23:16 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-05-30 20:47 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-204729.backup
2016-05-30 20:09 - 2016-05-30 20:09 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-05-30 15:11 - 2016-05-30 15:11 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Code Force Limited
2016-05-30 12:46 - 2016-05-30 12:46 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-30 12:45 - 2016-06-07 23:14 - 00001140 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-30 12:45 - 2016-06-07 22:56 - 00001144 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-30 12:45 - 2016-05-30 13:51 - 00004202 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-30 12:45 - 2016-05-30 13:51 - 00003970 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-30 12:42 - 2016-05-30 12:42 - 00987728 _____ (Google Inc.) C:\Users\Starsoul\Downloads\ChromeSetup (1).exe
2016-05-30 12:21 - 2016-05-30 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2016-05-30 12:21 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2016-05-30 12:20 - 2016-06-07 23:13 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-05-30 12:20 - 2016-05-30 12:49 - 00933808 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klif.sys
2016-05-30 12:20 - 2016-05-30 12:42 - 00238000 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys
2016-05-30 12:20 - 2016-05-30 12:20 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2016-05-30 12:20 - 2015-12-08 21:34 - 00181640 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klflt.sys
2016-05-30 11:55 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-115535.backup
2016-05-30 00:26 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-002600.backup
2016-05-30 00:20 - 2009-06-10 23:00 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160530-002028.backup
2016-05-30 00:13 - 2016-05-30 00:13 - 00117108 _____ C:\Users\Starsoul\Documents\cc_20160530_001346.reg
2016-05-29 23:54 - 2016-05-30 00:01 - 161808904 _____ (Kaspersky Lab) C:\Users\Starsoul\Downloads\kav16.0.0.614abcdde_9989.exe
2016-05-29 23:52 - 2016-05-30 12:58 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-05-29 23:48 - 2016-05-30 12:43 - 00001466 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-05-29 23:48 - 2016-05-30 12:43 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-05-29 23:48 - 2016-05-30 12:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-05-29 23:48 - 2015-06-16 17:32 - 00020760 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2016-05-29 23:45 - 2016-05-29 23:47 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Starsoul\Downloads\spybot-2.4.40.exe
2016-05-29 23:21 - 2016-05-30 12:26 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Avira
2016-05-29 23:19 - 2016-05-30 12:30 - 00000000 ____D C:\ProgramData\Avira
2016-05-29 23:19 - 2016-05-30 12:30 - 00000000 ____D C:\Program Files (x86)\Avira
2016-05-29 23:08 - 2016-05-29 23:08 - 01473544 _____ C:\Users\Starsoul\Downloads\AntiVir Avira Free Antivirus - CHIP-Installer.exe
2016-05-29 23:03 - 2016-05-30 21:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-05-29 22:36 - 2016-06-03 22:57 - 00000008 __RSH C:\Users\Starsoul\ntuser.pol
2016-05-29 22:29 - 2016-06-03 22:57 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-05-29 22:29 - 2016-06-03 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoBox
2016-05-29 22:10 - 2016-05-29 22:10 - 00000209 _____ C:\Users\Starsoul\Desktop\Distant Worlds Universe.url
2016-05-18 21:39 - 2016-05-18 21:39 - 00000000 ____D C:\Users\Starsoul\Documents\Anno 1404
2016-05-18 20:47 - 2016-05-29 23:33 - 00000579 _____ C:\Users\Starsoul\Desktop\Anno4.lnk
2016-05-13 16:30 - 2016-05-13 16:30 - 06513888 _____ (Tim Kosse) C:\Users\Starsoul\Downloads\FileZilla_3.17.0.1_win64-setup.exe
2016-05-13 08:58 - 2016-05-13 08:58 - 00024111 _____ C:\Users\Starsoul\Desktop\_gewinn-rechner1 (1).ods
2016-05-11 13:06 - 2016-04-23 07:09 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2016-05-11 13:06 - 2016-04-23 07:08 - 06605504 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2016-05-11 13:06 - 2016-04-23 06:31 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-05-11 13:06 - 2016-04-23 06:30 - 22379008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-05-11 13:06 - 2016-04-23 06:28 - 16984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-05-11 13:06 - 2016-04-23 06:23 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-05-11 13:06 - 2016-04-23 06:22 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-05-11 13:06 - 2016-04-23 06:20 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-05-11 13:06 - 2016-04-23 06:20 - 18676224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-05-11 13:06 - 2016-04-23 06:19 - 07977472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-05-11 13:06 - 2016-04-23 06:19 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2016-05-11 13:06 - 2016-04-23 06:18 - 24604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-05-11 13:06 - 2016-04-23 06:15 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2016-05-11 13:06 - 2016-04-23 06:14 - 13383168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-05-11 13:06 - 2016-04-23 06:02 - 07832576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-05-11 13:05 - 2016-05-06 06:53 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdport.sys
2016-05-11 13:05 - 2016-05-06 06:05 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2016-05-11 13:05 - 2016-05-06 06:03 - 00649216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2016-05-11 13:05 - 2016-05-06 05:53 - 00351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2016-05-11 13:05 - 2016-05-06 05:49 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2016-05-11 13:05 - 2016-05-06 05:44 - 00582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2016-05-11 13:05 - 2016-05-06 05:23 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-05-11 13:05 - 2016-04-30 08:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-05-11 13:05 - 2016-04-30 08:31 - 03591168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-05-11 13:05 - 2016-04-23 08:12 - 01401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 01184960 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00713920 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00514752 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00294592 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00190144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-05-11 13:05 - 2016-04-23 08:12 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-05-11 13:05 - 2016-04-23 08:12 - 00046784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-05-11 13:05 - 2016-04-23 07:28 - 01557768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2016-05-11 13:05 - 2016-04-23 07:28 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2016-05-11 13:05 - 2016-04-23 07:26 - 00707608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 07474528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-05-11 13:05 - 2016-04-23 07:24 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 01819208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 00754664 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2016-05-11 13:05 - 2016-04-23 07:24 - 00638816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2016-05-11 13:05 - 2016-04-23 07:24 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2016-05-11 13:05 - 2016-04-23 07:22 - 01161120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2016-05-11 13:05 - 2016-04-23 07:13 - 00306832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00451928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2016-05-11 13:05 - 2016-04-23 07:12 - 00413536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2016-05-11 13:05 - 2016-04-23 07:11 - 01092464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00498960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00390496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2016-05-11 13:05 - 2016-04-23 07:11 - 00131424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufxsynopsys.sys
2016-05-11 13:05 - 2016-04-23 07:10 - 03673424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-05-11 13:05 - 2016-04-23 07:10 - 02919832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-05-11 13:05 - 2016-04-23 07:10 - 00330072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-05-11 13:05 - 2016-04-23 07:09 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 05240960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00569744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2016-05-11 13:05 - 2016-04-23 07:09 - 00565600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-05-11 13:05 - 2016-04-23 07:09 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
2016-05-11 13:05 - 2016-04-23 07:08 - 04515256 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-05-11 13:05 - 2016-04-23 07:08 - 00725776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 01848072 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 01536088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 00204048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2016-05-11 13:05 - 2016-04-23 07:07 - 00183904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2016-05-11 13:05 - 2016-04-23 07:06 - 00291360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2016-05-11 13:05 - 2016-04-23 07:02 - 00188256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 01996640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00650304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00619296 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00577368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00513368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2016-05-11 13:05 - 2016-04-23 07:01 - 00393568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2016-05-11 13:05 - 2016-04-23 07:01 - 00217440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01776768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01594920 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01522152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01372304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00550656 _____ (Microsoft Corporation) C:\WINDOWS\system32\directmanipulation.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00453472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2016-05-11 13:05 - 2016-04-23 07:00 - 00058208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwminit.dll
2016-05-11 13:05 - 2016-04-23 06:56 - 00534872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2016-05-11 13:05 - 2016-04-23 06:35 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-05-11 13:05 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2016-05-11 13:05 - 2016-04-23 06:32 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll
2016-05-11 13:05 - 2016-04-23 06:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-05-11 13:05 - 2016-04-23 06:30 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2016-05-11 13:05 - 2016-04-23 06:29 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2016-05-11 13:05 - 2016-04-23 06:29 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-05-11 13:05 - 2016-04-23 06:28 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2016-05-11 13:05 - 2016-04-23 06:28 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
2016-05-11 13:05 - 2016-04-23 06:27 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-05-11 13:05 - 2016-04-23 06:26 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-05-11 13:05 - 2016-04-23 06:26 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-05-11 13:05 - 2016-04-23 06:26 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2016-05-11 13:05 - 2016-04-23 06:25 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2016-05-11 13:05 - 2016-04-23 06:24 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SubscriptionMgr.dll
2016-05-11 13:05 - 2016-04-23 06:23 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2016-05-11 13:05 - 2016-04-23 06:23 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrowserSettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:22 - 00460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-05-11 13:05 - 2016-04-23 06:21 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2016-05-11 13:05 - 2016-04-23 06:20 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 00853504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-05-11 13:05 - 2016-04-23 06:19 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00988672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-05-11 13:05 - 2016-04-23 06:18 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2016-05-11 13:05 - 2016-04-23 06:18 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2016-05-11 13:05 - 2016-04-23 06:17 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 01319424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2016-05-11 13:05 - 2016-04-23 06:16 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 01073152 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-05-11 13:05 - 2016-04-23 06:14 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 07200256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00489984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2016-05-11 13:05 - 2016-04-23 06:13 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2016-05-11 13:05 - 2016-04-23 06:12 - 00667648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-05-11 13:05 - 2016-04-23 06:10 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-05-11 13:05 - 2016-04-23 06:10 - 00639488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2016-05-11 13:05 - 2016-04-23 06:09 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-05-11 13:05 - 2016-04-23 06:09 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-05-11 13:05 - 2016-04-23 06:08 - 05324288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-05-11 13:05 - 2016-04-23 06:08 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 02598912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-05-11 13:05 - 2016-04-23 06:07 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2016-05-11 13:05 - 2016-04-23 06:06 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 05502976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 02066432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2016-05-11 13:05 - 2016-04-23 06:05 - 00613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:04 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2016-05-11 13:05 - 2016-04-23 06:04 - 01731072 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 04894208 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 02000896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2016-05-11 13:05 - 2016-04-23 06:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2016-05-11 13:05 - 2016-04-23 06:02 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2016-05-11 13:05 - 2016-04-23 06:01 - 04775424 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-05-11 13:05 - 2016-04-23 06:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-05-11 13:05 - 2016-04-23 06:00 - 00984576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2016-05-11 13:05 - 2016-04-23 05:45 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2016-05-11 13:05 - 2016-04-23 04:10 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-05-11 13:04 - 2016-05-06 05:43 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2016-05-11 13:04 - 2016-04-23 07:24 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2016-05-11 13:04 - 2016-04-23 07:18 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-05-11 13:04 - 2016-04-23 07:13 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-05-11 13:04 - 2016-04-23 07:13 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-05-11 13:04 - 2016-04-23 07:11 - 00696672 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-05-11 13:04 - 2016-04-23 07:11 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-05-11 13:04 - 2016-04-23 06:39 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-05-11 13:04 - 2016-04-23 06:34 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys
2016-05-11 13:04 - 2016-04-23 06:34 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\hmkd.dll
2016-05-11 13:04 - 2016-04-23 06:34 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2016-05-11 13:04 - 2016-04-23 06:33 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2016-05-11 13:04 - 2016-04-23 06:32 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2016-05-11 13:04 - 2016-04-23 06:32 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-05-11 13:04 - 2016-04-23 06:30 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\filecrypt.sys
2016-05-11 13:04 - 2016-04-23 06:29 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hmkd.dll
2016-05-11 13:04 - 2016-04-23 06:29 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2016-05-11 13:04 - 2016-04-23 06:29 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-05-11 13:04 - 2016-04-23 06:28 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2016-05-11 13:04 - 2016-04-23 06:27 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2016-05-11 13:04 - 2016-04-23 06:24 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-05-11 13:04 - 2016-04-23 06:24 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
2016-05-11 13:04 - 2016-04-23 06:23 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-05-11 13:04 - 2016-04-23 06:23 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-05-11 13:04 - 2016-04-23 06:22 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-05-11 13:04 - 2016-04-23 06:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-05-11 13:04 - 2016-04-23 06:20 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2016-05-11 13:04 - 2016-04-23 06:19 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2016-05-11 13:04 - 2016-04-23 06:19 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BrowserSettingSync.dll
2016-05-11 13:04 - 2016-04-23 06:18 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2016-05-11 13:04 - 2016-04-23 06:18 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
2016-05-11 13:04 - 2016-04-23 06:17 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2016-05-11 13:04 - 2016-04-23 06:15 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2016-05-11 13:04 - 2016-04-23 06:14 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-05-11 13:04 - 2016-04-23 06:05 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-05-11 13:04 - 2016-04-23 06:05 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-05-11 13:04 - 2016-04-23 06:03 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-05-11 13:04 - 2016-04-23 04:10 - 00002186 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2016-05-11 13:04 - 2016-04-19 00:30 - 00002186 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2016-05-09 12:47 - 2016-04-18 14:06 - 00287528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5C.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 01070904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD37.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00465792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5B.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00166432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD5D.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD4A.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD38.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD4B.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDD49.tmp
2016-05-09 12:47 - 2016-04-18 14:05 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswDC4C.tmp
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-06-07 23:12 - 2016-02-13 19:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-06-07 23:12 - 2015-10-30 08:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-06-07 22:35 - 2012-12-21 13:50 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-06-07 22:29 - 2015-09-11 21:18 - 00000000 ____D C:\ProgramData\ProductData
2016-06-07 22:27 - 2011-04-24 14:07 - 00001158 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA.job
2016-06-07 14:46 - 2014-02-26 20:29 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Battle.net
2016-06-07 12:06 - 2014-02-26 20:29 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-06-07 10:25 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-06-07 10:19 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-05 16:30 - 2010-09-06 14:03 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-05 07:32 - 2010-10-07 21:15 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Notepad++
2016-06-04 23:08 - 2011-08-06 23:34 - 00000000 ____D C:\Users\Starsoul\Desktop\DLs
2016-06-04 23:08 - 2011-06-29 19:44 - 00000000 ____D C:\Users\Starsoul\Desktop\video-tools
2016-06-03 23:55 - 2014-02-23 20:26 - 00000000 ____D C:\Users\Starsoul\Desktop\System & Tools
2016-06-03 23:49 - 2010-04-24 14:56 - 00002900 _____ C:\WINDOWS\system32\AutoRunFilter.ini
2016-06-03 23:22 - 2010-04-24 14:13 - 00000000 ____D C:\ProgramData\Temp
2016-06-03 22:57 - 2016-04-19 09:45 - 00000000 ____D C:\Users\Starsoul
2016-06-03 21:59 - 2016-04-19 09:44 - 02086232 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-06-03 21:59 - 2016-02-13 18:59 - 00889250 _____ C:\WINDOWS\system32\perfh007.dat
2016-06-03 21:59 - 2016-02-13 18:59 - 00197298 _____ C:\WINDOWS\system32\perfc007.dat
2016-06-03 21:59 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-06-03 21:27 - 2011-04-24 14:07 - 00001106 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core.job
2016-06-03 21:26 - 2011-06-22 09:59 - 00000000 ____D C:\Program Files (x86)\MSECACHE
2016-06-03 16:55 - 2012-08-29 13:16 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Skype
2016-06-03 15:08 - 2011-02-15 20:48 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\FileZilla
2016-06-03 14:37 - 2012-12-21 13:50 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-06-03 13:45 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\ProductData
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\Users\Starsoul\AppData\LocalLow\IObit
2016-06-03 13:45 - 2015-09-11 21:18 - 00000000 ____D C:\ProgramData\IObit
2016-06-03 13:45 - 2015-09-11 21:17 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\IObit
2016-06-03 13:45 - 2011-03-11 22:57 - 00000000 ____D C:\WINDOWS\pss
2016-06-03 13:39 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\registration
2016-06-03 12:52 - 2010-04-24 14:56 - 00001967 _____ C:\WINDOWS\system32\ServiceFilter.ini
2016-06-03 12:37 - 2015-05-15 15:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warships
2016-06-03 12:37 - 2014-02-26 20:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-06-03 12:37 - 2013-11-08 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
2016-06-03 12:37 - 2012-05-14 21:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2016-06-03 12:37 - 2010-09-26 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mass Effect 2
2016-06-03 12:37 - 2010-09-05 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever
2016-06-03 12:37 - 2010-09-04 21:52 - 00000000 ____D C:\Users\Starsoul\Desktop\Spiele
2016-06-03 12:34 - 2013-02-07 09:17 - 00000000 ____D C:\Program Files (x86)\PDF Architect
2016-06-03 11:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-06-03 11:19 - 2010-09-06 08:05 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Mozilla
2016-06-03 10:57 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-03 10:57 - 2010-09-04 13:57 - 00007593 _____ C:\Users\Starsoul\AppData\Local\Resmon.ResmonCfg
2016-06-03 10:19 - 2016-04-19 10:05 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Packages
2016-06-02 22:16 - 2016-02-13 10:21 - 00724112 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-02 21:36 - 2010-04-24 14:21 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-05-31 20:26 - 2016-04-19 10:34 - 00000000 ____D C:\Windows.old
2016-05-31 20:07 - 2010-10-14 22:49 - 00000000 ____D C:\Users\Starsoul\Documents\Eigene PSP-Dateien
2016-05-30 15:11 - 2010-09-04 23:09 - 00000000 ____D C:\Users\Starsoul\Documents\My Games
2016-05-30 12:49 - 2015-12-08 21:34 - 00087984 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klwfp.sys
2016-05-30 12:49 - 2015-06-11 19:35 - 00049240 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klim6.sys
2016-05-30 12:49 - 2015-06-06 08:51 - 00077728 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\kldisk.sys
2016-05-30 12:46 - 2010-09-04 20:15 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Google
2016-05-30 12:45 - 2010-04-24 14:22 - 00000000 ____D C:\Program Files (x86)\Google
2016-05-30 12:28 - 2016-04-19 09:41 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-30 12:21 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-05-30 12:21 - 2015-10-30 08:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-05-30 12:20 - 2014-01-21 20:36 - 00000000 ____D C:\Users\hedev
2016-05-30 12:20 - 2009-07-14 05:20 - 00000000 ____D C:\Users\Default.migrated
2016-05-30 12:14 - 2013-09-10 19:19 - 00000000 ____D C:\ProgramData\AVAST Software
2016-05-30 00:22 - 2010-09-06 08:05 - 00000000 ____D C:\Users\Starsoul\AppData\Local\Mozilla
2016-05-29 23:53 - 2015-12-03 20:58 - 00000000 ____D C:\Program Files\Common Files\AV
2016-05-29 23:39 - 2016-04-19 09:52 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-05-29 23:39 - 2016-04-13 22:12 - 00002092 _____ C:\Users\Public\Desktop\Raptr.lnk
2016-05-29 23:39 - 2016-04-01 11:32 - 00001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-05-29 23:39 - 2015-11-22 01:08 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-05-29 23:39 - 2015-05-15 15:30 - 00000607 _____ C:\Users\Public\Desktop\World of Warships.lnk
2016-05-29 23:39 - 2014-02-26 20:29 - 00001146 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-05-29 23:39 - 2013-02-05 09:16 - 00000526 _____ C:\Users\Public\Desktop\Fraps.lnk
2016-05-29 23:39 - 2012-11-25 17:41 - 00002104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2016-05-29 23:39 - 2010-04-24 14:21 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
2016-05-29 23:34 - 2016-05-03 13:22 - 00000898 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings.lnk
2016-05-29 23:34 - 2016-04-19 10:10 - 00002413 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-05-29 23:34 - 2016-04-19 10:10 - 00001053 _____ C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
2016-05-29 23:33 - 2015-05-04 22:24 - 00000602 _____ C:\Users\Starsoul\Desktop\Nexus Mod Manager.lnk
2016-05-29 23:33 - 2012-08-03 22:40 - 00000581 _____ C:\Users\Starsoul\Desktop\Steam.lnk
2016-05-29 23:18 - 2010-09-04 21:51 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-05-29 23:18 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-05-29 23:07 - 2016-04-19 10:24 - 00000000 ____D C:\Users\Starsoul\AppData\Local\MicrosoftEdge
2016-05-18 20:48 - 2010-09-06 11:42 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Ubisoft
2016-05-18 16:54 - 2012-03-08 13:04 - 00000000 ____D C:\ProgramData\Origin
2016-05-13 12:45 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache
2016-05-12 22:05 - 2016-02-13 19:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-05-12 22:00 - 2016-02-13 19:12 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-12 22:00 - 2015-10-30 09:24 - 00015703 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-05-12 22:00 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-05-12 21:58 - 2014-12-21 21:31 - 00000000 ____D C:\Users\Starsoul\AppData\Roaming\Raptr
2016-05-12 21:35 - 2013-10-10 22:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-11 21:57 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-05-11 21:57 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 21:22 - 2011-04-24 14:07 - 00004286 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA
2016-05-11 21:22 - 2011-04-24 14:07 - 00003910 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core
2016-05-11 12:54 - 2014-12-27 00:18 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2011-03-08 20:57 - 2011-06-29 22:11 - 0007859 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.cat
2011-03-08 20:57 - 2011-06-29 22:11 - 0001167 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.inf
2011-03-08 20:58 - 2011-06-29 22:11 - 0000055 _____ () C:\Users\Starsoul\AppData\Roaming\pcouffin.log
2013-11-17 21:03 - 2014-04-05 20:03 - 0000038 _____ () C:\Users\Starsoul\AppData\Roaming\WB.CFG
2014-01-25 01:03 - 2014-01-25 01:03 - 0000005 _____ () C:\Users\Starsoul\AppData\Roaming\WBPU-TTL.DAT
2016-03-29 20:52 - 2016-03-29 20:52 - 0000792 _____ () C:\Users\Starsoul\AppData\Local\recently-used.xbel
2010-09-04 13:57 - 2016-06-03 10:57 - 0007593 _____ () C:\Users\Starsoul\AppData\Local\Resmon.ResmonCfg
2010-04-24 14:38 - 2009-12-24 14:38 - 0131368 _____ () C:\ProgramData\FullRemove.exe
2010-04-24 14:18 - 2010-04-24 14:18 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-04-24 14:18 - 2010-04-24 14:18 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-06-03 22:39
==================== Ende von FRST.txt ============================
|
|
07.06.2016, 22:21
| #14 |
| | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:07-06-2016
durchgeführt von Starsoul (2016-06-07 23:18:10)
Gestartet von C:\Users\Starsoul\Desktop
Windows 10 Home Version 1511 (X64) (2016-04-19 08:05:43)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2332507749-2589976836-3566542525-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2332507749-2589976836-3566542525-503 - Limited - Disabled)
Gast (S-1-5-21-2332507749-2589976836-3566542525-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2332507749-2589976836-3566542525-1002 - Limited - Enabled)
Starsoul (S-1-5-21-2332507749-2589976836-3566542525-1000 - Administrator - Enabled) => C:\Users\Starsoul
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Anti-Virus (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: Kaspersky Anti-Virus (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7 Days to Die (HKLM-x32\...\Steam App 251570) (Version: - The Fun Pimps)
7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version: - )
AdBlocker (x32 Version: 4.1.1.0 - StarkIndustry) Hidden <==== ACHTUNG
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.03.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
ASUS AI Recovery (HKLM-x32\...\{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}) (Version: 1.0.8 - ASUS)
ASUS FancyStart (HKLM-x32\...\{2B81872B-A054-48DA-BE3B-FA5C164C303A}) (Version: 1.0.8 - ASUSTeK Computer Inc.)
ASUS LifeFrame3 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 3.0.20 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}) (Version: 1.1.28 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.19 - asus)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.0.11.12 - Atheros Communications Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0005 - ASUS)
AudibleManager (HKLM-x32\...\AudibleManager) (Version: 2007514350.48.56.38866290 - Audible, Inc.)
Avidemux 2.5 (HKLM-x32\...\Avidemux 2.5 (64-bit)) (Version: 2.5.4.7200 - )
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 1942 (HKLM-x32\...\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}) (Version: - )
BioShock 2 (x32 Version: 1.0.0003.131 - Take-Two Interactive Software) Hidden
BioShock 2 (x32 Version: 1.0.0005.131 - Take-Two Interactive Software) Hidden
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.7.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.20.13 - Canon Inc.)
Canon MG3600 series Benutzerregistrierung (HKLM-x32\...\Canon MG3600 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MG3600 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3600_series) (Version: 1.00 - Canon Inc.)
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version: - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - )
CanoScan LiDE 100 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ2413) (Version: - )
Catalyst Control Center Next Localization BR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (Version: 2016.0226.1531.27895 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform)
Celestial Command (HKLM-x32\...\Steam App 330460) (Version: - Romenics)
Choice Guard (x32 Version: 1.2.87.0 - Microsoft Corporation) Hidden
Command & Conquer 3 (HKLM-x32\...\{B0C30E93-D3D9-4F04-A2AC-54749B573275}) (Version: 1.00.0000 - Ihr Firmenname)
Command & Conquer Generals (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Command and Conquer(TM) Generäle Die Stunde Null (HKLM-x32\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and Conquer(TM) Generäle Die Stunde Null (x32 Version: 1.00.0000 - Electronic Arts) Hidden
ControlDeck (HKLM-x32\...\{5B65EF64-1DFA-414A-8C94-7BB726158E21}) (Version: 1.0.5 - ASUS)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1908 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.2311 - CyberLink Corp.)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Distant Worlds: Universe (HKLM\...\Steam App 261470) (Version: - Code Force)
DOSShell 1.8 (HKLM-x32\...\DOSShell) (Version: 1.8 - Loonies Software)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.1.20150424 - Landesfinanzdirektion Thüringen)
Empire Earth Ultimate Edition (HKLM-x32\...\{912CE296-3D73-4A9D-B3FB-70A5CF7A8568}) (Version: 1.0 - The Games Company)
Empyrion - Galactic Survival (HKLM-x32\...\Steam App 383120) (Version: - Eleon Game Studios)
Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks)
Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version: - Obsidian Entertainment)
Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.5 - ASUS)
FileZilla Client 3.15.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.15.0.2 - Tim Kosse)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Galactic Civilizations II - Ultimate Edition (HKLM-x32\...\Galactic Civilizations II - Ultimate Edition) (Version: - Kalypso Media)
Giants (HKLM-x32\...\{97370293-96EC-11D4-9DEF-00104B70C5FB}) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.63 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.18) (Version: 9.18 - Artifex Software Inc.)
Impulse (HKLM-x32\...\Impulse) (Version: 1.0 - Stardock)
Impulse (x32 Version: 1.0 - Stardock Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Intel(R) Turbo Boost Technology Monitor (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.115.11 - Intel)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 5.4.0.118 - IObit)
Jasc Paint Shop Pro 9 (HKLM-x32\...\{F843C6A3-224D-4615-94F8-3C461BD9AEA0}) (Version: 9.00.0000 - Jasc Software Inc)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Junk Mail filter update (x32 Version: 14.0.8050.1202 - Microsoft Corporation) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version: - Squad)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.02 - Electronic Arts, Inc.)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Thunderbird 17.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 17.0 (x86 de)) (Version: 17.0 - Mozilla)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
Music Manager (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\MusicManager) (Version: - Google, Inc.)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.1.13.85 - Electronic Arts, Inc.)
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)
PDF Architect (HKLM-x32\...\{80A07844-CA64-4DE4-AB61-D37DDBE8074F}) (Version: 1.0.52.8917 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.0-r112326-release - Raptr, Inc)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
ROTR ECA Beta 1.8 (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\ROTR ECA Beta 1.8) (Version: - )
Scribus 1.4.6 (64bit) (HKLM\...\Scribus 1.4.6) (Version: 1.4.6 - The Scribus Team)
Skype™ 7.22 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.22.109 - Skype Technologies S.A.)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - )
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.5.43 - Safer-Networking Ltd.)
Star Trek Elite Force II (HKLM-x32\...\Star Trek Elite Force II) (Version: - )
Star Trek Online (HKLM-x32\...\Star Trek Online) (Version: - Cryptic Studios)
Star Wars The Old Republic (HKLM-x32\...\swtor_swtor) (Version: - Bioware/EA)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
StarDrive (HKLM-x32\...\Steam App 220660) (Version: - Zero Sum Games)
StarDrive 2 (HKLM-x32\...\Steam App 252450) (Version: - Zero Sum Games)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Subnautica (HKLM-x32\...\Steam App 264710) (Version: - Unknown Worlds Entertainment)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Uplay (HKLM-x32\...\Uplay) (Version: 19.0 - Ubisoft)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - )
Warcraft III: All Products (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Warcraft III) (Version: - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.30.1 - ASUS)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
Wireless Console 3 (HKLM-x32\...\{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}) (Version: 3.0.15 - ASUS)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.00.8137 - Buhl Data Service GmbH)
X3: Albion Prelude (HKLM-x32\...\Steam App 201310) (Version: - Egosoft)
X3: Terran Conflict (HKLM-x32\...\Steam App 2820) (Version: - Egosoft)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Starsoul\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll (Google Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {0F2EF7EB-63DC-438E-9610-68910766DED5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {2BB67414-9E81-4EFA-A8AD-DD285A54356F} - System32\Tasks\AMD Updater => D:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-03-21] (Advanced Micro Devices, Inc.)
Task: {32FDB560-251D-4C1D-8291-34675E0CE473} - System32\Tasks\CCleanerSkipUAC => D:\PROGRAM FILES (X86)\CCLEANER\CCLEANER.EXE [2016-03-11] (Piriform Ltd)
Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {4A5BEC49-5C03-46CE-A0C8-4E879C61AEDE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4AF36A77-B82F-4DA6-88B2-B2B1D4679334} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {4CAAE754-531A-4A65-ACCC-B02AE3C8AB9A} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-15] (AVAST Software)
Task: {5EDF1F6F-5489-4A9E-BF6D-A27B5209A883} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {69B7EC8F-50D1-4CBB-8081-445FAC01072C} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {8A10D9C5-CB1C-49FF-B03B-41726A1F46D3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {90BDB066-4A7B-4F89-986F-DE92C19D3D7D} - System32\Tasks\WC3 => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-01-05] ()
Task: {9261B246-ED3D-4D7A-BE19-C2D4E62965EB} - System32\Tasks\{6A83D684-A198-402B-95A1-B91891F852C7} => F:\Starcraft\StarCraft.exe
Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {B01DBD84-4187-41B5-9BB1-53784865A2ED} - System32\Tasks\ASUSControlDeck => C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe [2009-11-24] ()
Task: {B9B95EAA-9E7A-4980-80C0-735F76C51A4A} - System32\Tasks\Uninstaller_SkipUac_Starsoul => D:\Program Files (x86)\IObit Uninstaller\IObitUninstaler.exe [2016-05-26] (IObit)
Task: {BB54ECD6-71FC-42DE-9FA2-D375414F1CCE} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-01-06] (ATK)
Task: {BC92AD75-0040-41B8-ADF0-D36FB313F77A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-30] (Google Inc.)
Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {D37302FD-C7BC-4785-B8E1-B4AAED9E0250} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {D428A33A-41C4-4B8C-9842-0F5F24EB4CBB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D97BC6EE-0EC3-4D5E-94B5-2A2E3A14E771} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-30] (Google Inc.)
Task: {DBE195D1-8103-4852-AE2A-FDA0E7669507} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2015-06-16] (Safer-Networking Ltd.)
Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {E4703D0D-5DA1-4A32-BB0A-59C247A51901} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {E81D0CC5-19FD-4F8C-A577-56A003266493} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {EC4FF68E-81DF-46E3-89E4-944096A889AF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {F49265F7-82C4-433A-9379-750838D8B352} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {FB5FA95A-33A4-4F5E-A22A-BB9C4E5F7BC2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-03] (Adobe Systems Incorporated)
Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000Core.job => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2332507749-2589976836-3566542525-1000UA.job => C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Starsoul.job => D:\Program Files (x86)\IObit Uninstaller\IObitUninstaler.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Starsoul\Desktop\Spiele\Master of Orion 2.lnk -> F:\Moo2\orion-start.bat ()
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-19 10:31 - 2016-04-19 10:31 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2009-11-24 22:45 - 2009-11-24 22:45 - 00053888 _____ () C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
2009-12-23 22:12 - 2009-12-23 22:12 - 00017920 _____ () C:\Program Files\P4G\DevMng.dll
2009-12-19 04:11 - 2009-12-19 04:11 - 00033280 _____ () C:\Program Files\P4G\OvrClk.dll
2010-01-05 02:43 - 2010-01-05 02:43 - 01597440 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
2016-04-19 10:31 - 2016-04-19 10:31 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-02-13 19:02 - 2016-02-13 19:02 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-11 13:04 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-05-11 13:05 - 2016-04-23 06:02 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-05-11 13:05 - 2016-04-23 05:58 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-05-11 13:05 - 2016-04-23 05:58 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-05-11 13:05 - 2016-04-23 06:01 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-05-30 12:46 - 2016-05-25 01:24 - 02334360 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.63\libglesv2.dll
2016-05-30 12:46 - 2016-05-25 01:24 - 00105112 _____ () C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.63\libegl.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\kpcengine.2.3.dll
2015-09-11 21:18 - 2015-08-24 14:10 - 00622880 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2016-05-30 12:34 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2016-05-30 12:34 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2016-05-30 12:34 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2016-05-30 12:34 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2009-11-02 23:20 - 2009-11-02 23:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 23:23 - 2009-11-02 23:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 11:24 - 2016-04-19 11:24 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-06-03 12:32 - 2015-12-23 16:27 - 00355616 _____ () D:\Program Files (x86)\IObit Uninstaller\madExcept_.bpl
2016-06-03 12:32 - 2015-12-23 16:27 - 00190240 _____ () D:\Program Files (x86)\IObit Uninstaller\madBasic_.bpl
2016-06-03 12:32 - 2015-12-23 16:27 - 00057632 _____ () D:\Program Files (x86)\IObit Uninstaller\madDisAsm_.bpl
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Temp:AB689DEA [121]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7902 mehr Seiten.
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\...\123simsen.com -> www.123simsen.com
Da befinden sich 7902 mehr Seiten.
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2016-06-05 07:39 - 00000980 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2332507749-2589976836-3566542525-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Starsoul\Desktop\DLs\WANDERERS_ringshine_03.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: a2AntiMalware => 2
MSCONFIG\Services: Adobe LM Service => 3
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdvancedSystemCareService9 => 2
MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: BRSptStub => 3
MSCONFIG\Services: BRSptSvc => 3
MSCONFIG\Services: ehRecvr => 3
MSCONFIG\Services: ehSched => 3
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: lfsvc => 3
MSCONFIG\Services: MapsBroker => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: WinDefend => 2
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxNetApiSvc => 3
MSCONFIG\startupfolder: C:^Users^Starsoul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Starsoul^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe
MSCONFIG\startupreg: BDRegion => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
MSCONFIG\startupreg: CanonSolutionMenu => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: EADM => "F:\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: Google Update => "C:\Users\Starsoul\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: ImpulseFastStart => "C:\Program Files (x86)\Stardock\Impulse\Impulse.exe" /fastload
MSCONFIG\startupreg: PinnacleDriverCheck => C:\Windows\SysWOW64\PSDrvCheck.exe
MSCONFIG\startupreg: ProductUpdater =>
MSCONFIG\startupreg: Raptr =>
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: RunDLLEntry =>
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UpdateLBPShortCut => "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
HKLM\...\StartupApproved\Run32: => "ProductUpdater"
HKLM\...\StartupApproved\Run32: => "Raptr"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{47D4726C-D9E5-4F3F-B252-1E19D93256C3}] => (Allow) F:\SteamLibrary\SteamApps\common\Celestial Command\CelestialCommand.exe
FirewallRules: [{867E04CD-0046-40D2-9EC4-7FFF26C01084}] => (Allow) F:\SteamLibrary\SteamApps\common\Celestial Command\CelestialCommand.exe
FirewallRules: [{E6A4F911-1691-481D-BF77-D6BED2A97C70}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3AP.exe
FirewallRules: [{C904027F-1BAD-4818-A2EE-14377A5D2B97}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3AP.exe
FirewallRules: [{D9EE36B3-3EE9-4CC1-8380-9C40D1EC56FC}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3TC.exe
FirewallRules: [{3EC00EE2-91F3-4B1E-B594-F1A3F5FF592A}] => (Allow) D:\SteamPowered\SteamApps\common\X3 Terran Conflict\X3TC.exe
FirewallRules: [{4DE514B3-CEEF-4A9E-AC80-48243B9CA4EC}] => (Allow) D:\SteamPowered\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{D695EC96-1A77-4F0A-879C-4A54E2D4EC5D}] => (Allow) D:\SteamPowered\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{97B93E17-A40E-4B5C-B57C-3F169332AB4A}] => (Allow) D:\SteamPowered\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{869E3BAC-3770-4655-B87A-C6631BE1F01D}] => (Allow) D:\SteamPowered\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AF18A5B2-D038-40B4-8672-2BD0A2017461}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{8D724A51-2DED-40FE-9494-0B90E29A89D0}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\Empyrion.exe
FirewallRules: [{C64D194C-F6EC-45CD-BFA2-DCE783E4E57E}] => (Allow) F:\SteamLibrary\SteamApps\common\StarDrive\StarDrive.exe
FirewallRules: [{2EBC6A63-0E24-4EF8-89FD-4EB4124E73C0}] => (Allow) F:\SteamLibrary\SteamApps\common\StarDrive\StarDrive.exe
FirewallRules: [{F051BBDC-8498-4D0F-AD96-5E8059F840D6}] => (Allow) F:\SteamLibrary\SteamApps\common\Subnautica\Subnautica.exe
FirewallRules: [{2E2CB7F9-B4F3-4447-886C-4A0DBA7350DB}] => (Allow) F:\SteamLibrary\SteamApps\common\Subnautica\Subnautica.exe
FirewallRules: [{CC6DB91E-BC2E-421F-9642-1B248B7C06D2}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [{AC6C5577-B2E3-4D3E-9B55-F7D1DEF05594}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP.exe
FirewallRules: [UDP Query User{1C4F36ED-E13F-473D-96AC-54E0AEEC1695}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{29833A24-854A-4D50-B99E-AD87DC3DA2D4}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{59EF4EB9-6F04-4638-AD4E-EBE41D85EC74}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [TCP Query User{ECBCC841-75FE-45AE-940B-9CB1362A3C62}F:\world_of_warships\wowslauncher.exe] => (Allow) F:\world_of_warships\wowslauncher.exe
FirewallRules: [{A1CB59E0-837F-47C4-B6F1-36FB3616625D}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{DC6AE47E-41B3-469B-B75B-A94AAA54BF1D}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie.exe
FirewallRules: [{B6BC75EF-DBB9-40EA-835B-3DC8B6A2144C}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [{B5A1F873-E04A-45E1-BBDE-85024E51B3F9}] => (Allow) D:\SteamPowered\SteamApps\common\7 Days To Die\7DaysToDie_EAC.exe
FirewallRules: [UDP Query User{CCF9B47B-499E-43E0-9B68-8A51E33D7FA5}D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe] => (Allow) D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe
FirewallRules: [TCP Query User{0266E0CE-30A5-4654-8E21-71F1DEBBA3C3}D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe] => (Allow) D:\frontier\edlaunch\products\forc-fdev-d-1003\elitedangerous32.exe
FirewallRules: [{B7E2C63E-8B25-4205-97DF-C03991531F38}] => (Allow) D:\SteamPowered\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{FBA85BE3-1B52-461B-8BBC-7A36F9D8AA07}] => (Allow) D:\SteamPowered\SteamApps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{F8B68DB4-4328-41E3-971C-E5622BA8BDB0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C3F97965-7C2B-4196-8C8B-D26C869389FA}] => (Allow) D:\SteamPowered\bin\steamwebhelper.exe
FirewallRules: [{7B210E24-B26F-4296-BCA3-9FE9672AFA51}] => (Allow) D:\SteamPowered\bin\steamwebhelper.exe
FirewallRules: [UDP Query User{E86A01FE-7844-4EA1-970E-AADF47578127}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [TCP Query User{2919E551-6C00-4D74-8D01-46C2346A2AE6}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [UDP Query User{62C07B85-CC89-49EA-A069-255AAED83397}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [TCP Query User{4B3B94AA-1F9C-4E78-8EFC-D8262105C248}D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) D:\steampowered\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [{693B4E23-69C4-4527-85DC-C8A2FFED6D85}] => (Allow) G:\ANNO 2070\InitEngine.exe
FirewallRules: [{5D04F52D-B9AA-46E1-ABAC-732EDF28EDC9}] => (Allow) G:\ANNO 2070\InitEngine.exe
FirewallRules: [{58B33DC7-7B8C-4B13-BD62-B98EBDC0D62E}] => (Allow) G:\ANNO 2070\AutoPatcher.exe
FirewallRules: [{F121D42E-E939-40BB-AD09-5616B3924D03}] => (Allow) G:\ANNO 2070\AutoPatcher.exe
FirewallRules: [{119B12AF-A6C8-4706-B35B-09994BC9FF78}] => (Allow) G:\ANNO 2070\Anno5.exe
FirewallRules: [{5A5938D7-2DE6-4EA4-A4ED-AEF6B5DCCCD5}] => (Allow) G:\ANNO 2070\Anno5.exe
FirewallRules: [{C9F9A8C5-E69B-4EB7-80DF-1FCD95159FAD}] => (Allow) D:\SteamPowered\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{E0DAE25B-BF1C-4DCB-BF1F-26E23D97B66A}] => (Allow) D:\SteamPowered\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{F2C4D52E-7954-4030-B7FA-6C56910134CF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{343EDFDF-7194-42E1-AE17-0847007558F7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{14491256-AF45-40AB-8AA1-ADBB8B2990BE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{281CCC0E-415A-457A-B253-D8DADBFF60F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{0242554B-D206-4169-AA5B-3CDC975C8CFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{DB8BD9B4-0D7C-41E4-B5B4-9B3182E7697F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{80AF7911-87B1-4583-85E5-0DE507165B28}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{28BAB1A8-90B9-4961-ABDA-07F6D9BDC759}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{8AF73425-A390-4736-B3B8-3EA7A94F17E9}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{AC901B1C-5102-4C40-9D4A-D92891C9F71C}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{985F6EF3-A603-44CD-897F-4912562E7AE8}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{B5A61F72-7C91-4B4D-860B-CE1423F0DF45}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{12401D61-F6E2-4C6C-A8D4-E61691AA4E7E}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{BF083164-3604-4578-8141-AA83A163CD57}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{68360BB5-5B39-441F-8E08-E083EB436EDF}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{67CF4579-9D11-40CE-BA1E-CF720EF37EA9}] => (Allow) D:\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{7F08011F-0B0B-488C-9744-09F33DCF5D72}] => (Allow) D:\SteamPowered\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{A8B60513-3438-48B8-98A3-2EA03118BD20}] => (Allow) D:\SteamPowered\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{09FBFCE6-D5B7-451D-993B-3226B5DF96C1}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{31B19912-E4E6-4311-BDD2-DB81DD601840}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{0A694A37-1AAC-4B02-80BF-A00B0C781672}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{69A7F069-2D76-4CDE-A453-93960790E1FD}] => (Allow) D:\SteamPowered\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [UDP Query User{A5240A18-5649-4AD9-9E42-DBA846B41771}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [TCP Query User{87DE2F10-0F07-4D9C-B5C3-6B5958C133F1}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [UDP Query User{B13FBB14-1A53-44F7-AB72-A71525130985}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [TCP Query User{CCBD3468-FEB5-4CC6-91C4-8FE8954036C2}F:\world-of-tanks\worldoftanks.exe] => (Allow) F:\world-of-tanks\worldoftanks.exe
FirewallRules: [UDP Query User{38C90B3F-7C53-489A-814F-57D0827CEE2C}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [TCP Query User{A0B77672-ED30-4EB0-A675-57172217009C}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [UDP Query User{982F9C7D-3F5F-406B-9DD6-FE51F20B29D1}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [TCP Query User{3D26A8BB-69CB-40D6-9EC2-D54F9982B53F}F:\world-of-tanks\wotlauncher.exe] => (Allow) F:\world-of-tanks\wotlauncher.exe
FirewallRules: [UDP Query User{E07BF312-563A-44ED-A4BB-7CCA501C29A3}F:\tmnationsforever\tmforever.exe] => (Block) F:\tmnationsforever\tmforever.exe
FirewallRules: [TCP Query User{FBDB3365-8577-4B3C-9511-0655ACBD7306}F:\tmnationsforever\tmforever.exe] => (Block) F:\tmnationsforever\tmforever.exe
FirewallRules: [{0ACFCEB3-4337-417E-853D-3517F84E1A64}] => (Allow) G:\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{99D7FAF2-F25A-4503-BF7D-5F01E01BD024}] => (Allow) G:\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [UDP Query User{958CBA3A-8426-4A87-B46C-D7E0A78C9A09}G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe] => (Block) G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe
FirewallRules: [TCP Query User{D40985FD-E3A5-4FF3-A31D-F14972FF32E3}G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe] => (Block) G:\empire earth ultimate edition\empire earth i zde\ee-aoc.exe
FirewallRules: [{A6E8D4EB-2BCA-4E72-8880-318C25244E90}] => (Allow) d:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{57741FE0-BCB5-4D13-9765-9B3A5436F1B4}] => (Allow) d:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{5AC273A0-4A1A-4666-A521-B5B83E96DB47}] => (Allow) D:\SteamPowered\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{B8F354ED-8D30-4CA2-889F-BE5DC9804E7E}] => (Allow) D:\SteamPowered\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{8E8BE884-A89C-46D6-847A-498034FEF660}] => (Allow) G:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{33A095A3-C39C-435E-9459-8193F9D8ACB6}] => (Allow) G:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [UDP Query User{1F16DCC4-ADB3-4220-8004-936AC8876DE7}F:\mass effect 2\binaries\masseffect2.exe] => (Allow) F:\mass effect 2\binaries\masseffect2.exe
FirewallRules: [TCP Query User{D94CABD7-849A-43BA-A8A0-AA660F156445}F:\mass effect 2\binaries\masseffect2.exe] => (Allow) F:\mass effect 2\binaries\masseffect2.exe
FirewallRules: [UDP Query User{25FE5F2D-466C-429C-B046-2301D690D886}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{71511B28-629B-45B7-B6DD-A7C3137B2F64}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{4D2C9DA6-AA66-4E41-8201-ED98430C70C2}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{CFCADA3B-B4FC-4A81-8930-7E93BFEBC003}] => (Allow) D:\SteamPowered\Steam.exe
FirewallRules: [{162EDF5B-10EC-43D5-926B-8D34AD461CC0}] => (Allow) F:\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{0F301E52-38B3-451F-9612-A11E7405E82D}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{48E4DE69-6C9B-4323-8D0C-5FCE7549E28B}] => (Allow) D:\SteamPowered\SteamApps\common\Kerbal Space Program\KSP_x64.exe
FirewallRules: [{B9A24157-12CD-42DB-98C5-51BB351520FE}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe
FirewallRules: [{397595FB-D831-4CCE-8459-9226074EBCDD}] => (Allow) F:\SteamLibrary\SteamApps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe
FirewallRules: [{77334BB3-68C8-4A8A-940E-66AF07EF863C}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{40FB3FDD-AEF7-4418-B0B6-1266055B3875}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{9C289B3C-FCA9-454A-AFCB-E9136B88E697}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{4B81D6EE-3E4E-4149-B58F-FE91C92EBFB5}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [TCP Query User{C440B47B-D0D4-4D96-9E11-8B207DCF33D8}G:\cryptic studios\star trek online\live\gameclient.exe] => (Allow) G:\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{B4197EFD-9076-471E-80C3-92AB1A5CFC33}G:\cryptic studios\star trek online\live\gameclient.exe] => (Allow) G:\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [TCP Query User{FBA18227-FB9E-4FBC-892F-DAC050CC5A4E}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{22B28788-7D9C-434E-8DAB-66A09F3A2124}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [TCP Query User{C8323F48-55CC-4D01-95A4-3C5432D0F430}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{023C471C-EFCC-45BB-BFE3-85C057A4513B}G:\anno 1404\tools\anno4web.exe] => (Allow) G:\anno 1404\tools\anno4web.exe
FirewallRules: [{77C45AD4-8E28-46F6-917B-4A85B4545106}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{49AE43A2-EB5C-4057-A5DD-C8DFE817808E}] => (Allow) F:\SteamLibrary\SteamApps\common\Distant Worlds Universe\autorun.exe
FirewallRules: [{A46B117F-99C4-4269-9ECB-196BCC2600F7}] => (Allow) F:\SteamLibrary\SteamApps\common\Distant Worlds Universe\autorun.exe
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [d:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Wiederherstellungspunkte =========================
03-06-2016 21:17:06 Windows Update
07-06-2016 10:19:01 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (06/07/2016 10:19:26 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (06/06/2016 01:47:01 PM) (Source: MsiInstaller) (EventID: 10005) (User: Starsoul-G73)
Description: Produkt: Windows Defender -- Die Installation dieser Software ist nicht notwendig, weil Windows Defender in Windows Vista enthalten ist. Über den Abschnitt "Sicherheit" in der Windows-Systemsteuerung greifen Sie auf Windows Defender zu.
Error: (06/05/2016 07:45:10 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xae4
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (06/05/2016 07:45:08 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2788) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Error: (06/05/2016 10:08:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FBAgent.exe, Version: 1.0.5.4, Zeitstempel: 0x4b1cb992
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.306, Zeitstempel: 0x571af2eb
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000ee6fc
ID des fehlerhaften Prozesses: 0x758
Startzeit der fehlerhaften Anwendung: 0xFBAgent.exe0
Pfad der fehlerhaften Anwendung: FBAgent.exe1
Pfad des fehlerhaften Moduls: FBAgent.exe2
Berichtskennung: FBAgent.exe3
Vollständiger Name des fehlerhaften Pakets: FBAgent.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: FBAgent.exe5
Error: (06/05/2016 08:05:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x146c
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/05/2016 08:05:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1ca8
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/05/2016 08:04:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fsbl1067.exe, Version: 2.2.1067.0, Zeitstempel: 0x47039cee
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1e68
Startzeit der fehlerhaften Anwendung: 0xfsbl1067.exe0
Pfad der fehlerhaften Anwendung: fsbl1067.exe1
Pfad des fehlerhaften Moduls: fsbl1067.exe2
Berichtskennung: fsbl1067.exe3
Vollständiger Name des fehlerhaften Pakets: fsbl1067.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: fsbl1067.exe5
Error: (06/03/2016 10:57:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7ba
Name des fehlerhaften Moduls: ESENT.dll, Version: 10.0.10586.212, Zeitstempel: 0x56fa1686
Ausnahmecode: 0xc0000602
Fehleroffset: 0x000000000022885f
ID des fehlerhaften Prozesses: 0xa88
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Vollständiger Name des fehlerhaften Pakets: svchost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: svchost.exe5
Error: (06/03/2016 10:57:34 PM) (Source: ESENT) (EventID: 908) (User: )
Description: svchost (2696) Der Prozess wird aufgrund eines nicht behebbaren Fehlers beendet: PV: 10.0.10586.0 SV: 10.0.10586.0 GLE: 0 ERR: -1603(fucb.cxx:359): dllentry.cxx(103) (ESENT[10.0.10586.0] RETAIL RTM MBCS)
Systemfehler:
=============
Error: (06/07/2016 11:15:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Intel(R) Management & Security Application User Notification Service" ist vom Dienst "Intel(R) Management and Security Application Local Management Service" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (06/07/2016 11:15:13 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (06/07/2016 11:15:13 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (06/07/2016 11:14:41 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (06/07/2016 11:14:35 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (06/07/2016 11:14:19 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (06/07/2016 11:13:08 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (06/07/2016 11:12:10 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Speicherdienst konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (06/07/2016 11:11:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_296ebd5" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/07/2016 09:49:05 PM) (Source: DCOM) (EventID: 10016) (User: Starsoul-G73)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}Starsoul-G73StarsoulS-1-5-21-2332507749-2589976836-3566542525-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.FeatureOnDemand.InsiderHub_10.0.10586.0_neutral_neutral_cw5n1h2txyewyS-1-15-2-4016783169-893401051-2237370320-274899566-412088533-2398988950-2155762795
CodeIntegrity:
===================================
Date: 2016-06-03 14:11:32.590
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements.
Date: 2016-06-03 14:09:04.328
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-16 22:00:03.629
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 22:05:24.265
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-05-12 21:56:18.956
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-26 20:10:40.321
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:22:35.869
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:15:16.710
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 10:01:34.166
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-04-19 09:59:44.295
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 8044.57 MB
Verfügbarer physikalischer RAM: 5968.61 MB
Summe virtueller Speicher: 9945.57 MB
Verfügbarer virtueller Speicher: 7743.35 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:74.08 GB) (Free:35.47 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (DATA) (Fixed) (Total:204.03 GB) (Free:30.81 GB) NTFS
Drive f: (SDATA1) (Fixed) (Total:149.04 GB) (Free:24.63 GB) NTFS
Drive g: (SDATA2) (Fixed) (Total:149.05 GB) (Free:33.75 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 76692CA8)
Partition 1: (Not Active) - (Size=19.5 GB) - (Type=1C)
Partition 2: (Active) - (Size=74.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=449 MB) - (Type=27)
Partition 4: (Not Active) - (Size=204 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 298.1 GB) (Disk ID: BBC58B91)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
08.06.2016, 12:40
| #15 |
| /// Malwareteam | Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log Hi, tritt das Problem noch auf? Hast du bei der Deinstallation von AdBlocker eine Fehlermeldung bekommen? |
|
| Themen zu Unerwünschte Browserweiterleitungen alle Browser WIN 10 GMER Log |
| antivir, asus, avast, avira, browser, dateien, diverse, firefox, harddisk, home, infizierte, kaspersky, log, neu, neue, problem, prüfen, registry, scan, seiten, suche, svchost.exe, system, temp, windows |
dann auf 
und dann auf 
. 
Linear-Darstellung
