MALWAREBYTES schaltet den Webschutz selbst aus - lässt sich nicht mehr starten --> Ist das ein Zeichen für eine Virusbefall?

Beim Versuch, den Webschutz manuell zu aktivieren, geht der Schalter dafür auf "grün", aber der Dienst kann nicht eingeschaltet werden, sondern bleibt auf "starten...."


Seitdem dieses Problem besteht, sehe ich auch laufend die Task "PresentationFontCache.exe" als Spitzenreiter bei "CPU-Usage"; evtl. besteht hier ein Zusammenhang...?!?

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Datum des Schutzereignisses: 19.05.17
Uhrzeit des Schutzereignisses: 12:22
Protokolldatei: EXPLOIT.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.6.1469
Komponentenversion: 1.0.103
Version des Aktualisierungspakets: 1.0.1973
Lizenz: Premium

-Systemdaten-
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: System

-Einzelheiten zu Exploits-
Datei: 0
(keine bösartigen Elemente erkannt)

Exploit: 1
Malware.Exploit.Agent.Generic, , Blockiert, [0], [-1],0.0.0

-Exploit-Daten-
Betroffene Anwendung: Microsoft Office Excel
Schutzebene: Malicious Memory Protection
Schutzverfahren: Exploit code executing from Heap memory blocked
Dateiname: 
URL: 



(end)
FRST Logfile:

	
	
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-05-2017
durchgeführt von Martin (Administrator) auf MFZUB (19-05-2017 13:06:32)
Gestartet von C:\Users\Martin\Downloads
Geladene Profile: UpdatusUser & Martin (Verfügbare Profile: UpdatusUser & Martin)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOTM\VTSvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.15.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Sony Corporation) C:\Program Files\Sony\NFC Connection Utility\NFCConnectionUtility.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOTM\VTUsr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VAIO Clip.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Genie-soft) C:\Program Files (x86)\LaCie\Genie Backup Assistant\GBMAgent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Apple Inc.) C:\Program Files (x86)\AirPort\APAgent.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe
(PixelPlanet) C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 2015\Acrobat\acrotray.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\Plugins\WD Backup\App\WDBackupService.exe
(RedFox) C:\Program Files (x86)\RedFox\CloneCD\CloneCDTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe
() C:\Program Files (x86)\Dropbox\Client\QtWebEngineProcess.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.1051_none_7f2bf7ea21d201b2\TiWorker.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\excel.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353432 2013-10-28] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [401896 2016-11-02] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3928264 2015-05-27] (Synaptics Incorporated)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-03-22] (Apple Inc.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-25] (Microsoft Corporation)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [AirPort Base Station Agent] => C:\Program Files (x86)\AirPort\APAgent.exe [771360 2009-11-11] (Apple Inc.)
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-10-15] (Hewlett-Packard Company)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5571944 2016-04-19] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [GBMLite8AgentLaCie] => C:\Program Files (x86)\LaCie\Genie Backup Assistant\GBMAgent.exe [189056 2008-09-18] (Genie-soft)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [28734456 2017-05-16] (Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [1953688 2016-08-05] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21384 2016-08-04] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1767816 2016-08-05] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files (x86)\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe [6222496 2016-08-08] (PixelPlanet)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 2015\Acrobat\Acrotray.exe [1867856 2017-03-29] (Adobe Systems Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CloneCDTray] => C:\Program Files (x86)\RedFox\CloneCD\CloneCDTray.exe [57344 2016-03-29] (RedFox)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-3065016876-1486030196-4288673878-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-03-16] (Apple Inc.)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [B52A5181A7C9864150FA0E91BDDFC2F1CE6C6671._service_run] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640 2017-05-09] (Google Inc.)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [GBMLite8AgentLaCie] => C:\Program Files (x86)\LaCie\Genie Backup Assistant\GBMAgent.exe [189056 2008-09-18] (Genie-soft)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2016-01-28] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-03-16] (Apple Inc.)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9532120 2017-04-11] (Piriform Ltd)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [CAHeadless] => c:\Program Files (x86)\Adobe\Elements 12 Organizer\CAHeadless\ElementsAutoAnalyzer.exe [1401040 2015-06-20] (Adobe Systems Incorporated)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat 2015\Acrobat\AdobeCollabSync.exe [883792 2017-03-29] (Adobe Systems Incorporated)
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\...\MountPoints2: {20a6bb2d-7de6-11e3-824f-806e6f6e6963} - "D:\S3\Autorun.exe" 
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] ()
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Martin\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll [2014-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Martin\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll [2014-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Martin\AppData\Local\Microsoft\SkyDrive\16.4.6012.0828\amd64\SkyDriveShell64.dll [2014-10-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-05-16] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother BPFSP.lnk [2014-10-19]
ShortcutTarget: Brother BPFSP.lnk -> C:\Windows\Installer\{8040527F-DD74-4B45-8A06-C4BF145B6C76}\BrSupSsp.exe_44686FC076524EF5975EF92EE48E2958.exe (Flexera Software LLC)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{af8c77ee-f9f9-4778-bcbf-a1966c4934c8}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f52149c1-dced-40d4-b0c9-756f6b572261}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f9e8d19a-8e54-416a-8246-3946bcb03698}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-3065016876-1486030196-4288673878-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3065016876-1486030196-4288673878-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3065016876-1486030196-4288673878-1002 -> {A00C74C6-038C-492A-B23F-70DF656EFA98} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-3065016876-1486030196-4288673878-1002 -> {A5A9593E-3E64-4F80-A604-4C96E5444C2F} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-&_nkw={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2017-04-11] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2015\x64\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
BHO: AusweisApp 1.12.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files (x86)\AusweisApp\siqeCardClientIE64.ols [2014-04-11] (OpenLimit SignCubes AG)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2017-03-14] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2015\x64\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\Sony\MSS\3.8.141\McAfeeMSS_IE.dll [2014-01-16] (McAfee, Inc.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-28] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2015\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
BHO-x32: AusweisApp 1.12.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files (x86)\AusweisApp\siqeCardClientIE32.ols [2014-04-11] (OpenLimit SignCubes AG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-28] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2015\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2015\x64\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2015\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3065016876-1486030196-4288673878-1002 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-3065016876-1486030196-4288673878-1002 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\2015\x64\AcroIEFavStub.dll [2016-12-24] (Adobe Systems Incorporated)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\DRS\Drooms\Profiles\qkfiff2u.default [2017-05-08]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 2015\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 2015\Acrobat\Browser\WCFirefoxExtn [2017-04-20]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-12-09] (Adobe Systems)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-18] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-05-22] (Microsoft Corporation)
FF Plugin-x32: @sony.com/ReaderDesktop -> C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll [2013-06-25] (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 2015\Acrobat\Air\nppdf32.dll [2017-03-29] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-12-09] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3065016876-1486030196-4288673878-1002: SkypePlugin -> C:\Users\Martin\AppData\Local\SkypePlugin\7.26.0.48\npGatewayNpapi.dll [2016-09-22] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-3065016876-1486030196-4288673878-1002: SkypePlugin64 -> C:\Users\Martin\AppData\Local\SkypePlugin\7.26.0.48\npGatewayNpapi-x64.dll [2016-09-22] (Skype Technologies S.A.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://faz.net/
CHR StartupUrls: Default -> "hxxp://faz.net/"
CHR DefaultSearchURL: Default -> hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://de.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default [2017-05-19]
CHR Extension: (Google Präsentationen) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (Skype-Anrufe) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2016-03-04]
CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google-Suche) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (Adobe Acrobat) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-04-19]
CHR Extension: (Yahoo Partner) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdbpcigaolookbahgdofnimidinicfid [2017-02-28]
CHR Extension: (Google Tabellen) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Google Docs Offline) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Ghostery) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-04-27]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Google Mail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]
CHR Extension: (Chrome Media Router) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-15]
CHR Profile: C:\Users\Martin\AppData\Local\Google\Chrome\User Data\System Profile [2017-05-16]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fdbpcigaolookbahgdofnimidinicfid] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeActiveFileMonitor12.0; c:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-25] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-02-27] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-03-17] (Apple Inc.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2015-03-27] (Broadcom Corporation.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3042544 2017-03-14] (Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-23] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-23] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-05-16] (Dropbox, Inc.)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342240 2015-11-05] (Futuremark)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [803856 2016-01-28] (Garmin Ltd. or its subsidiaries)
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-10-15] (HP) [Datei ist nicht signiert]
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373744 2016-11-02] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-18] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
S3 McComponentHostServiceSony; C:\Program Files\Sony\MSS\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [629336 2013-09-27] (Sony Corporation)
S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [Datei ist nicht signiert]
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
S3 VCFw; c:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [972000 2013-01-06] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1656600 2016-03-31] (Sony Corporation)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1049464 2016-04-19] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [315768 2016-08-05] (Western Digital Technologies, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S3 WD Backup Drive Helper; C:\WINDOWS\SysWoW64\dllhost.exe /Processid:{4AB831D3-8315-414C-8A7A-303105288D0B}
S3 WD Backup Snapshot; C:\WINDOWS\SysWoW64\dllhost.exe /Processid:{302480DF-3AC5-4400-BE7B-DD77AF93B6DD}

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [173312 2015-03-27] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7488176 2014-01-15] (Broadcom Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40872 2014-02-10] (SlySoft, Inc.)
S3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40872 2014-02-10] (SlySoft, Inc.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-04-14] ()
S3 HP1210FAX; C:\Windows\System32\Drivers\HPM1210FAX.sys [16896 2012-11-08] () [Datei ist nicht signiert]
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2015-11-20] (REALiX(tm))
S3 libusb0; C:\Windows\system32\DRIVERS\libusb0.sys [52320 2014-08-15] (hxxp://libusb-win32.sourceforge.net)
S3 Logi_Headset_DFU; C:\Windows\System32\Drivers\lhusbdfuamd64.sys [44136 2014-12-08] (CSR plc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [186304 2017-05-03] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [111544 2017-05-19] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-05-19] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-05-19] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [92096 2017-05-19] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-12-20] (Intel Corporation)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [461528 2013-12-20] (Realsil Semiconductor Corporation)
S3 SCL01164; C:\Windows\system32\DRIVERS\SCL01164.sys [72320 2010-05-07] (SCM Microsystems Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-05-27] (Synaptics Incorporated)
R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [108856 2017-04-11] (Paragon Software GmbH)
R1 Uim_DEVIM; C:\Windows\System32\drivers\uimdevim.sys [44848 2017-04-11] (Paragon Software GmbH)
S1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [484528 2016-10-06] ()
S3 vna_ap; C:\Windows\system32\DRIVERS\vnaap.sys [161256 2009-02-15] (Check Point Software Technologies)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 semav6msr64; \??\C:\Windows\system32\drivers\semav6msr64.sys [X]
S3 semav6thermal64ro; \??\C:\Windows\system32\drivers\semav6thermal64ro.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-19 13:06 - 2017-05-19 13:06 - 02429952 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2017-05-19 12:15 - 2017-05-19 12:15 - 00000000 ____D C:\Program Files (x86)\think-cell
2017-05-19 12:14 - 2017-05-19 12:15 - 63295712 _____ (think-cell Software GmbH) C:\Users\Martin\Downloads\setup_think-cell_25133.exe
2017-05-19 12:09 - 2017-05-19 12:10 - 02984912 _____ C:\Users\Martin\Downloads\SecurityTaskManager_Setup.exe
2017-05-19 11:56 - 2017-05-19 12:03 - 00143446 _____ C:\Users\Martin\Downloads\BHT Group - Business Plan detailed (1).xlsx
2017-05-19 11:04 - 2017-05-19 11:04 - 00142138 _____ C:\Users\Martin\Downloads\BHT Group - Business Plan detailed.xlsx
2017-05-18 12:21 - 2017-05-18 12:21 - 00127128 _____ C:\Users\Martin\Downloads\Project Aspen Updated Business Plan 2016 - 2017.xlsx
2017-05-18 12:20 - 2017-05-18 12:20 - 00252146 _____ C:\Users\Martin\Downloads\Project Aspen Business Plan Updated - 2016 and 2017 - May 2017.xlsx
2017-05-18 12:20 - 2017-05-18 12:20 - 00252146 _____ C:\Users\Martin\Downloads\Project Aspen Business Plan Updated - 2016 and 2017 - May 2017 (1).xlsx
2017-05-18 12:13 - 2017-05-18 12:13 - 01298747 _____ C:\Users\Martin\Downloads\BWA 2016_Details.xlsx
2017-05-17 22:05 - 2017-05-17 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-05-17 07:37 - 2017-05-17 07:37 - 00057033 _____ C:\Users\Martin\Downloads\Umsatzdetails_Konto475218400_EUR_17-05-2017_0737.pdf
2017-05-17 06:22 - 2017-05-17 06:43 - 00004914 _____ C:\Windows\System32\Tasks\Paragon Auftrag (Laufwerks- oder Dateisicherung) - {cc8263c0-fd46-4fe5-5c12-51cbd5ea50c9}
2017-05-16 23:01 - 2017-05-16 23:01 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-05-16 16:17 - 2017-05-16 16:17 - 00064211 _____ C:\Users\Martin\Downloads\Ueberleitung_ext_int_Reporting.xlsx
2017-05-16 14:13 - 2017-05-16 14:13 - 00001394 _____ C:\Users\Public\Desktop\Paragon Backup & Recovery™ 16.lnk
2017-05-16 14:13 - 2017-05-16 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Backup & Recovery™ 16
2017-05-16 12:08 - 2017-05-16 14:07 - 78604816 _____ (Paragon Software GmbH) C:\Users\Martin\Downloads\Paragon-700-PEG_WinInstallSNx64_10.2.0_000.exe
2017-05-16 11:20 - 2017-05-16 11:20 - 00044209 _____ C:\Users\Martin\Downloads\SCOPY_IM_Business Plan (6).xlsx
2017-05-15 16:51 - 2017-05-15 16:51 - 00176222 _____ C:\Users\Martin\Downloads\160129_Budget 2016_English.xlsx
2017-05-15 16:38 - 2017-05-15 16:38 - 00021291 _____ C:\Users\Martin\Downloads\Invoices - Forecast Dec 22 2016.xlsx
2017-05-15 16:35 - 2017-05-15 16:35 - 00284721 _____ C:\Users\Martin\Downloads\Customer_Database_2007-2015 (1).xlsx
2017-05-15 16:20 - 2017-05-15 16:20 - 00284721 _____ C:\Users\Martin\Downloads\Customer_Database_2007-2015.xlsx
2017-05-15 16:19 - 2017-05-15 16:19 - 01612691 _____ C:\Users\Martin\Downloads\VirtaMed Pricelist 2016 (1).pdf
2017-05-15 16:18 - 2017-05-15 16:18 - 01612676 _____ C:\Users\Martin\Downloads\VirtaMed Pricelist 2016.pdf
2017-05-15 16:14 - 2017-05-15 16:14 - 00567808 _____ C:\Users\Martin\Downloads\DocumentListExport (2).xls
2017-05-15 15:55 - 2017-05-15 15:55 - 00022016 _____ C:\Users\Martin\Downloads\threadListExport (2).xls
2017-05-15 15:55 - 2017-05-15 15:55 - 00022016 _____ C:\Users\Martin\Downloads\threadListExport (1).xls
2017-05-15 15:55 - 2017-05-15 15:55 - 00018944 _____ C:\Users\Martin\Downloads\threadListExport.xls
2017-05-15 09:29 - 2017-05-15 09:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Google
2017-05-14 12:17 - 2017-05-14 12:17 - 00025404 _____ C:\Users\Martin\Downloads\2017-05-09_78227573_Abrechnung.pdf
2017-05-11 11:00 - 2017-05-11 11:00 - 02229764 _____ C:\Users\Martin\Downloads\Analyse International per 31.12.16_20170116 (2) (3).xlsx
2017-05-11 07:22 - 2017-05-11 07:22 - 00065376 _____ C:\Users\Martin\Downloads\0002206381_WKN_CD73VE_Limitbestätigung_983987695383030000.pdf
2017-05-10 21:34 - 2017-05-10 21:34 - 00044209 _____ C:\Users\Martin\Downloads\SCOPY_IM_Business Plan (5).xlsx
2017-05-10 21:27 - 2017-05-10 21:27 - 00033862 _____ C:\Users\Martin\Downloads\BHT Hard- und Software.xlsx
2017-05-10 20:02 - 2017-05-10 20:02 - 00044519 _____ C:\Users\Martin\Downloads\Personal Masterfile (2) (1).xlsx
2017-05-10 19:30 - 2017-05-10 19:30 - 00047168 _____ C:\Users\Martin\Downloads\Anlagenübersicht14-16.xlsx
2017-05-10 19:19 - 2017-05-10 19:19 - 02229764 _____ C:\Users\Martin\Downloads\Analyse International per 31.12.16_20170116 (2) (2).xlsx
2017-05-10 19:14 - 2017-05-10 19:14 - 00014012 _____ C:\Users\Martin\Downloads\Rahmenbestellungs-Statistik M+S.xlsx
2017-05-10 19:06 - 2017-05-10 19:06 - 00099296 _____ C:\Users\Martin\Downloads\Bilanz+GuV Dezember 2016 BHT Hygienetechnik GmbH (1).xlsx
2017-05-10 19:05 - 2017-05-10 19:05 - 00044209 _____ C:\Users\Martin\Downloads\SCOPY_IM_Business Plan (4).xlsx
2017-05-10 19:05 - 2017-05-10 19:05 - 00044209 _____ C:\Users\Martin\Downloads\SCOPY_IM_Business Plan (3).xlsx
2017-05-10 19:03 - 2017-05-10 19:03 - 02229764 _____ C:\Users\Martin\Downloads\Analyse International per 31.12.16_20170116 (2) (1).xlsx
2017-05-10 18:59 - 2017-05-10 19:00 - 02229764 _____ C:\Users\Martin\Downloads\Analyse International per 31.12.16_20170116 (2).xlsx
2017-05-10 18:57 - 2017-05-10 18:57 - 00044519 _____ C:\Users\Martin\Downloads\Personal Masterfile (2).xlsx
2017-05-10 18:49 - 2017-05-10 18:49 - 02252056 _____ C:\Users\Martin\Downloads\Lager 2016-12Final.xlsx
2017-05-10 18:46 - 2017-05-10 18:46 - 00015474 _____ C:\Users\Martin\Downloads\Gemeinkosten16.xlsx
2017-05-10 18:44 - 2017-05-10 18:44 - 00099296 _____ C:\Users\Martin\Downloads\Bilanz+GuV Dezember 2016 BHT Hygienetechnik GmbH.xlsx
2017-05-10 17:33 - 2017-05-10 17:33 - 00350208 _____ C:\Users\Martin\Downloads\DocumentListExport (1).xls
2017-05-10 15:46 - 2017-05-10 15:46 - 00044209 _____ C:\Users\Martin\Downloads\SCOPY_IM_Business Plan (2).xlsx
2017-05-10 15:46 - 2017-05-10 15:46 - 00044209 _____ C:\Users\Martin\Downloads\SCOPY_IM_Business Plan (1).xlsx
2017-05-10 15:38 - 2017-05-10 15:38 - 02460093 _____ C:\Users\Martin\Downloads\SCOPY_MP_GREEN (2).pdf
2017-05-09 20:39 - 2017-05-09 20:39 - 00044209 _____ C:\Users\Martin\Downloads\SCOPY_IM_Business Plan.xlsx
2017-05-09 20:27 - 2017-05-09 20:27 - 02460075 _____ C:\Users\Martin\Downloads\SCOPY_MP_GREEN (1).pdf
2017-05-09 20:26 - 2017-05-09 20:26 - 02459546 _____ C:\Users\Martin\Downloads\SCOPY_MP_GREEN.pdf
2017-05-08 16:20 - 2017-05-08 16:20 - 00467456 _____ C:\Users\Martin\Downloads\index (2).xls
2017-05-08 16:13 - 2017-05-08 16:13 - 00467456 _____ C:\Users\Martin\Downloads\index (1).xls
2017-05-07 17:07 - 2017-05-07 17:07 - 00057160 _____ C:\Users\Martin\Downloads\Umsatzdetails_Konto470533100_EUR_07-05-2017_1707.pdf
2017-05-07 17:06 - 2017-05-07 17:06 - 00057163 _____ C:\Users\Martin\Downloads\Umsatzdetails_Konto475232500_EUR_07-05-2017_1707.pdf
2017-05-07 09:51 - 2017-05-07 09:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-05-07 09:49 - 2017-05-07 09:50 - 136346936 _____ (Apple Inc.) C:\Users\Martin\Downloads\iCloudSetup.exe
2017-05-05 11:19 - 2017-05-14 11:52 - 00000000 ____D C:\Users\Martin\AppData\Roaming\FileZilla
2017-05-05 11:19 - 2017-05-05 11:20 - 00000000 ____D C:\Users\Martin\AppData\Local\FileZilla
2017-05-05 11:19 - 2017-05-05 11:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2017-05-05 11:19 - 2017-05-05 11:19 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2017-05-05 11:17 - 2017-05-05 11:18 - 13766111 _____ C:\Users\Martin\Downloads\FileZilla_3.25.2.zip
2017-05-05 07:43 - 2017-05-05 07:43 - 00070686 _____ C:\Users\Martin\Downloads\2075024810_Kontoauszug_Nr_00001_vom_31-03-2017_983847009409718000.pdf
2017-05-05 07:43 - 2017-05-05 07:43 - 00061479 _____ C:\Users\Martin\Downloads\3446417860_Zins-_und_Dividendenbescheinigung_WKN_A0DP5W_31-12-2016_983940801971946000.pdf
2017-05-05 07:43 - 2017-05-05 07:43 - 00061479 _____ C:\Users\Martin\Downloads\3446417860_Zins-_und_Dividendenbescheinigung_WKN_A0DP5W_31-12-2016_983940801971946000 (1).pdf
2017-05-03 09:50 - 2017-05-17 06:20 - 00004936 _____ C:\Windows\System32\Tasks\Paragon Auftrag (Laufwerks- oder Dateisicherung) - {f235164d-9c5b-4921-cc9e-9ef47a9b97bd}
2017-05-03 08:29 - 2017-05-03 08:30 - 04191440 _____ C:\Users\Martin\Desktop\PROJEKTGLIEDERUNG.pptx
2017-05-01 08:40 - 2017-05-01 08:40 - 00430735 _____ C:\Users\Martin\Downloads\AZG13139300_004_20170428.pdf
2017-05-01 07:51 - 2017-05-01 07:52 - 00057159 _____ C:\Users\Martin\Downloads\Umsatzdetails_Konto470533100_EUR_01-05-2017_0752.pdf
2017-05-01 07:28 - 2017-05-01 07:28 - 00024847 _____ C:\Users\Martin\Downloads\rechnung_AR20170411A0027210 (2).pdf
2017-05-01 07:28 - 2017-05-01 07:28 - 00024847 _____ C:\Users\Martin\Downloads\rechnung_AR20170411A0027210 (1).pdf
2017-05-01 07:27 - 2017-05-01 07:27 - 00024847 _____ C:\Users\Martin\Downloads\rechnung_AR20170411A0027210.pdf
2017-04-29 12:28 - 2017-04-30 08:32 - 00000000 ____D C:\ProgramData\CDRWIN 10
2017-04-29 12:28 - 2017-04-29 12:28 - 00001013 _____ C:\Users\Public\Desktop\CDRWIN 10.lnk
2017-04-29 12:28 - 2017-04-29 12:28 - 00000000 ____D C:\Users\Martin\Documents\CDRWIN 10
2017-04-29 12:28 - 2017-04-29 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDRWIN 10
2017-04-29 12:28 - 2017-04-29 12:28 - 00000000 ____D C:\Program Files (x86)\CDRWIN 10
2017-04-29 12:27 - 2017-04-29 12:27 - 01496584 _____ C:\Users\Martin\Downloads\CDRWin - CHIP-Installer.exe
2017-04-29 12:22 - 2017-04-29 12:22 - 00000041 ___SH C:\ProgramData\.zreglib
2017-04-29 12:21 - 2017-04-29 12:21 - 02906544 _____ C:\Users\Martin\Downloads\SetupCloneCD5340.exe
2017-04-29 11:46 - 2017-04-29 12:21 - 00001183 _____ C:\Users\Public\Desktop\CloneCD.lnk
2017-04-29 11:46 - 2017-04-29 11:46 - 00000000 ____D C:\ProgramData\SlySoft
2017-04-29 11:46 - 2017-04-29 11:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RedFox
2017-04-29 11:46 - 2017-04-29 11:46 - 00000000 ____D C:\Program Files (x86)\RedFox
2017-04-29 11:45 - 2017-04-29 11:46 - 02906544 _____ C:\Users\Martin\Downloads\clonecd-5-3-4-0.exe
2017-04-29 03:42 - 2017-04-29 03:42 - 00000000 ____D C:\Users\Martin\AppData\Local\Paragon
2017-04-29 03:33 - 2017-04-29 03:33 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2017-04-28 20:44 - 2017-04-28 20:44 - 04413418 _____ C:\Users\Martin\Downloads\s3old160.exe
2017-04-28 12:05 - 2017-04-28 12:05 - 00586434 _____ C:\Users\Martin\Downloads\flippingbook.swf
2017-04-28 11:33 - 2017-04-28 11:33 - 00556950 _____ C:\Users\Martin\Downloads\commerzbankResearch_RohstoffeKompakt_2017-04-25.pdf
2017-04-26 18:12 - 2017-04-26 18:12 - 00038078 _____ C:\Users\Martin\Downloads\PRM117040048911.pdf
2017-04-26 10:34 - 2017-05-17 06:27 - 00000000 ____D C:\Users\Martin\Desktop\PARAGON ANALYSE
2017-04-26 08:20 - 2017-04-26 08:20 - 09390672 _____ (Piriform Ltd) C:\Users\Martin\Downloads\ccsetup529.exe
2017-04-25 16:44 - 2017-04-25 16:44 - 00000000 ____D C:\Users\Martin\AppData\Roaming\PIE
2017-04-25 16:44 - 2017-04-25 16:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberViewX_MS
2017-04-25 16:44 - 2002-11-18 17:05 - 00155648 _____ C:\Windows\SysWOW64\daspi32u.dll
2017-04-25 16:44 - 2001-10-12 15:50 - 00106496 _____ (SQ Tech) C:\Windows\SysWOW64\SQ_SCAN.DLL
2017-04-25 16:44 - 2001-05-29 02:42 - 00102400 _____ C:\Windows\SysWOW64\FVC.DLL
2017-04-25 16:44 - 2001-05-29 02:41 - 00106496 _____ () C:\Windows\SysWOW64\IO_PORT.DLL
2017-04-25 16:44 - 2001-05-29 02:40 - 00032768 _____ C:\Windows\SysWOW64\SQ1394.DLL
2017-04-25 16:44 - 2000-12-06 00:31 - 00165376 _____ (Eastman Kodak Company) C:\Windows\KPCP32.DLL
2017-04-25 16:44 - 2000-12-06 00:30 - 00284672 _____ (Eastman Kodak Company) C:\Windows\SPROF32.DLL
2017-04-25 16:44 - 2000-12-06 00:30 - 00039936 _____ (Eastman Kodak Company) C:\Windows\KPSYS32.DLL
2017-04-25 16:44 - 2000-06-05 09:00 - 00010768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SBP2SCAN.SYS
2017-04-25 16:44 - 2000-06-05 09:00 - 00010768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\SBP2SCAN.SYS
2017-04-25 16:44 - 1999-05-06 14:22 - 00008944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\USBSCAN.SYS
2017-04-25 16:44 - 1999-05-06 14:22 - 00008944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Drivers\USBSCAN.SYS
2017-04-25 16:44 - 1999-03-24 18:48 - 00010624 _____ C:\Windows\SysWOW64\GENEUSB.SYS
2017-04-25 16:44 - 1999-03-24 18:48 - 00010624 _____ C:\Windows\SysWOW64\Drivers\GENEUSB.SYS
2017-04-25 16:44 - 1999-02-02 18:13 - 00269312 _____ (Eastman Kodak Company) C:\Windows\KDSINPUT.DLL
2017-04-25 16:44 - 1998-04-22 01:53 - 01674752 _____ (Eastman Kodak Company) C:\Windows\KDSOUT.DLL
2017-04-25 16:44 - 1998-04-06 20:22 - 00022528 _____ (Eastman Kodak Company) C:\Windows\PFPICK.DLL
2017-04-25 16:44 - 1997-12-03 20:26 - 00018432 _____ (Eastman Kodak Company) C:\Windows\KCM2SP.DLL
2017-04-25 16:44 - 1996-12-10 18:31 - 00020992 _____ (Eastman Kodak Company) C:\Windows\ICCCODES.DLL
2017-04-25 16:44 - 1996-10-21 21:52 - 00087392 _____ (Twain Working Group) C:\Windows\TWAIN.DLL
2017-04-25 16:44 - 1993-07-16 00:00 - 00104448 _____ (Aldus Corporation\0) C:\Windows\TWAIN32.DLL
2017-04-25 16:34 - 2017-04-25 16:35 - 40477270 _____ C:\Users\Martin\Downloads\20170316173052_Super8_2.0.zip
2017-04-25 16:32 - 2017-04-25 16:32 - 01598722 _____ C:\Users\Martin\Downloads\Bedienungsanleitung-MF-5000-deutsch.pdf
2017-04-25 14:22 - 2017-04-25 14:22 - 02250896 _____ C:\Windows\system32\vimsdk.dll
2017-04-25 14:22 - 2017-04-25 14:22 - 02162320 _____ (Microsoft Corporation) C:\Windows\system32\WudfUpdate_01009.dll
2017-04-25 14:22 - 2017-04-25 14:22 - 01731728 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoinstaller01009.dll
2017-04-25 14:22 - 2017-04-25 14:22 - 00812176 _____ C:\Windows\system32\Vim.RWBlock.dll
2017-04-25 14:22 - 2017-04-25 14:22 - 00143504 _____ C:\Windows\system32\vimbase.dll
2017-04-25 10:14 - 2017-04-25 10:14 - 04879604 _____ C:\Users\Martin\Downloads\era_german_1.4J6_J20.jbz
2017-04-25 10:11 - 2017-04-25 10:11 - 04159008 _____ C:\Users\Martin\Downloads\era_catch_1.4J6_J20.jbz
2017-04-25 10:11 - 2017-04-25 10:11 - 04093484 _____ C:\Users\Martin\Downloads\era_mobster_1.4J6_J20.jbz
2017-04-25 10:11 - 2017-04-25 10:11 - 04018147 _____ C:\Users\Martin\Downloads\era_baseball_1.4J6_J20.jbz
2017-04-25 10:11 - 2017-04-25 10:11 - 03896374 _____ C:\Users\Martin\Downloads\era_bombshell_1.4J6_J20.jbz
2017-04-25 10:10 - 2017-04-25 10:10 - 04150598 _____ C:\Users\Martin\Downloads\era_hero_1.4J6_J20 (1).jbz
2017-04-25 10:09 - 2017-04-25 10:09 - 04444376 _____ (Jawbone) C:\Users\Martin\Downloads\Jawbone_Updater-2.2.5 (4).exe
2017-04-25 10:08 - 2017-04-25 10:09 - 04444376 _____ (Jawbone) C:\Users\Martin\Downloads\Jawbone_Updater-2.2.5 (3).exe
2017-04-25 10:06 - 2017-04-25 10:06 - 04444376 _____ (Jawbone) C:\Users\Martin\Downloads\Jawbone_Updater-2.2.5 (2).exe
2017-04-25 09:56 - 2017-04-25 09:56 - 04150598 _____ C:\Users\Martin\Downloads\era_hero_1.4J6_J20.jbz
2017-04-25 09:54 - 2017-04-25 09:55 - 04444376 _____ (Jawbone) C:\Users\Martin\Downloads\Jawbone_Updater-2.2.5 (1).exe
2017-04-25 09:52 - 2017-04-25 10:09 - 00000000 ____D C:\Program Files (x86)\Jawbone
2017-04-25 09:52 - 2017-04-25 09:53 - 00000000 ____D C:\Users\Martin\AppData\Roaming\JawboneUpdater
2017-04-25 09:52 - 2017-04-25 09:52 - 00001101 _____ C:\Users\Martin\Desktop\Jawbone Updater.lnk
2017-04-25 09:52 - 2017-04-25 09:52 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jawbone
2017-04-25 09:51 - 2017-04-25 09:51 - 04444376 _____ (Jawbone) C:\Users\Martin\Downloads\Jawbone_Updater-2.2.5.exe
2017-04-24 16:08 - 2017-04-24 18:59 - 03691196 _____ C:\Users\Martin\Downloads\My_Blueberry_Nights_2017-04-13_0225_116953.mp4.crdownload
2017-04-24 16:07 - 2017-04-24 18:59 - 27478483 _____ C:\Users\Martin\Downloads\KINO_Spezial_Mario_Adorf_2017-04-22_1935_116953.mp4.crdownload
2017-04-24 16:07 - 2017-04-24 18:59 - 26446649 _____ C:\Users\Martin\Downloads\Das_Krokodil_und_sein_Nilpferd_2017-04-17_1350_116953.mp4.crdownload
2017-04-24 16:07 - 2017-04-24 18:59 - 11543594 _____ C:\Users\Martin\Downloads\Fast_Furious_Neues_Modell_Originalt_2017-04-15_1815_116953.mp4.crdownload
2017-04-24 16:07 - 2017-04-24 18:59 - 07517332 _____ C:\Users\Martin\Downloads\Space_Night_The_Blue_Planet_2017-04-18_0535_116953.mp4.crdownload
2017-04-24 16:07 - 2017-04-24 16:22 - 1690683852 _____ C:\Users\Martin\Downloads\Electric_Boogaloo_The_Wild_Untold_Stor_2017-04-23_1809_116953.mp4
2017-04-24 08:25 - 2017-04-24 08:34 - 1121208819 _____ C:\Users\Martin\Downloads\windows10.0-kb4015217-x64_60bfcc7b365f9ab40608e2fb96bc2be8229bc319.msu
2017-04-22 17:58 - 2017-04-22 17:58 - 00000000 ____D C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2017-04-22 17:13 - 2017-04-22 17:13 - 00047149 _____ C:\Users\Martin\Downloads\147_118_20400_Bestätigung der Annahme UStVA 2017 - März_ElsterOnline98.pdf
2017-04-22 09:38 - 2017-04-22 09:38 - 00000000 __SHD C:\found.002
2017-04-20 17:48 - 2017-05-17 07:56 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2017-04-19 19:36 - 2017-04-19 19:36 - 00000000 ____D C:\Users\Martin\AppData\Local\CEF
2017-04-19 19:35 - 2017-05-06 07:34 - 00004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-04-19 19:35 - 2017-04-19 19:35 - 00000040 ____H C:\F25DCDB346D5
2017-04-19 19:34 - 2017-04-20 09:18 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2017-04-19 19:34 - 2017-04-20 09:18 - 00002124 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2017-04-19 19:34 - 2017-04-19 19:34 - 00002101 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2017-04-19 18:37 - 2017-04-19 18:37 - 00039594 _____ C:\Users\Martin\Downloads\Barbara Franz - verbeamtete Lehrerin .pdf
2017-04-19 18:36 - 2017-04-19 18:36 - 00136308 _____ C:\Users\Martin\Downloads\Bezügemitteilung Barbara Franz als verbeamtete Lehrerin FEB 2017.pdf
2017-04-19 18:20 - 2017-04-19 18:25 - 710235904 _____ C:\Users\Martin\Downloads\AcrobatPCSTDE (1).zip
2017-04-19 18:11 - 2017-04-19 18:15 - 710235904 _____ C:\Users\Martin\Downloads\AcrobatPCSTDE.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-05-19 13:07 - 2016-10-18 15:53 - 00039289 _____ C:\Users\Martin\Downloads\FRST.txt
2017-05-19 13:06 - 2014-12-26 18:57 - 00000000 ____D C:\FRST
2017-05-19 12:58 - 2016-07-16 13:36 - 00000000 ____D C:\Windows\CbsTemp
2017-05-19 12:52 - 2015-12-13 12:28 - 00000000 ___RD C:\Users\Martin\iCloudDrive
2017-05-19 12:52 - 2015-10-14 23:46 - 00008192 _____ C:\Windows\SysWOW64\WDPABKP.dat
2017-05-19 12:51 - 2016-09-25 11:01 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-05-19 12:51 - 2016-07-17 00:51 - 01096422 _____ C:\Windows\system32\perfh007.dat
2017-05-19 12:51 - 2016-07-17 00:51 - 00255510 _____ C:\Windows\system32\perfc007.dat
2017-05-19 12:51 - 2015-12-12 19:36 - 00000000 __SHD C:\Users\Martin\IntelGraphicsProfiles
2017-05-19 12:51 - 2015-12-12 18:38 - 02568438 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-19 12:47 - 2017-03-23 09:24 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-05-19 12:47 - 2017-03-23 09:24 - 00111544 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-05-19 12:47 - 2017-03-23 09:24 - 00092096 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-05-19 12:47 - 2017-03-23 09:24 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-05-19 12:47 - 2016-09-25 11:59 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-19 12:46 - 2016-07-16 08:04 - 01572864 _____ C:\Windows\system32\config\BBI
2017-05-19 12:38 - 2014-11-15 11:44 - 00000000 ____D C:\Users\Martin\Documents\Outlook-Dateien
2017-05-19 12:38 - 2014-10-26 09:51 - 00000000 ____D C:\Users\Martin\Documents\Outlook 2014-10-26
2017-05-19 12:15 - 2015-03-23 10:04 - 00000000 ____D C:\Users\Martin\AppData\Local\think-cell
2017-05-19 11:56 - 2014-10-17 19:55 - 00000000 ____D C:\Users\Martin\AppData\Local\Packages
2017-05-19 10:54 - 2016-09-25 10:56 - 00000000 ____D C:\Windows\system32\SleepStudy
2017-05-19 09:25 - 2014-10-18 19:51 - 00000000 ____D C:\Users\Martin\Documents\BUSINESS
2017-05-19 07:18 - 2014-10-17 19:57 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2017-05-19 07:16 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\AppReadiness
2017-05-18 22:29 - 2017-01-24 14:15 - 00029474 _____ C:\Users\Martin\Documents\prov wally -2.xlsx
2017-05-18 15:05 - 2016-09-24 22:51 - 00000000 ____D C:\Users\Martin\Desktop\DDr Wagner
2017-05-18 15:01 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-18 13:24 - 2016-09-25 11:10 - 00000000 ____D C:\Users\UpdatusUser
2017-05-18 11:03 - 2016-07-16 13:47 - 00000000 ____D C:\Windows\system32\NDF
2017-05-18 07:21 - 2016-09-25 11:09 - 00000000 ____D C:\Users\Martin
2017-05-18 07:00 - 2016-09-25 10:55 - 00505808 _____ C:\Windows\system32\FNTCACHE.DAT
2017-05-17 22:05 - 2016-02-23 11:33 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-05-17 12:34 - 2016-01-08 20:03 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2017-05-17 11:12 - 2016-02-23 11:41 - 00000000 ___RD C:\Users\Martin\Dropbox
2017-05-16 14:13 - 2015-04-27 20:00 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-16 14:13 - 2014-10-24 08:54 - 00000000 ____D C:\Program Files\Paragon Software
2017-05-16 14:03 - 2016-07-16 13:47 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-05-16 14:01 - 2014-12-27 15:56 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-05-16 11:13 - 2016-07-16 13:45 - 00000000 ____D C:\Windows\INF
2017-05-14 18:54 - 2015-01-10 00:41 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-14 18:54 - 2015-01-10 00:41 - 00002252 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-14 11:49 - 2016-10-02 16:18 - 00000000 ____D C:\Windows\Minidump
2017-05-11 11:49 - 2014-10-17 23:07 - 00000000 ____D C:\Windows\system32\MRT
2017-05-11 11:39 - 2014-10-17 23:07 - 156335152 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-05-07 15:54 - 2015-01-31 18:48 - 00000000 ____D C:\Users\Martin\AppData\Local\EED6980B-80A5-4BC5-89A3-20FD7A9FA91A.aplzod
2017-05-07 15:53 - 2014-10-18 09:25 - 00000000 ____D C:\Users\Martin\AppData\Local\Apple Computer
2017-05-03 08:38 - 2017-03-23 09:24 - 00186304 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-05-03 08:15 - 2017-03-29 17:12 - 00000000 ____D C:\ProgramData\Paragon Software
2017-04-30 10:16 - 2016-09-25 11:59 - 00003628 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-30 10:15 - 2016-09-25 11:59 - 00003504 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-29 03:42 - 2017-03-29 17:12 - 00000000 ____D C:\ProgramData\Paragon
2017-04-29 02:59 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-04-29 02:59 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-27 06:56 - 2014-10-18 19:51 - 00000000 ____D C:\Users\Martin\Documents\PRIVAT
2017-04-26 15:06 - 2017-03-29 17:16 - 00001010 _____ C:\Windows\Tasks\Paragon Auftrag (Backup partitions or disks to virtual containers) - {4f372445-a167-4112-491f-d5a1abcd97de}.job
2017-04-26 10:46 - 2016-08-09 21:04 - 00000000 ____D C:\Users\Martin\Documents\samsung
2017-04-26 10:46 - 2014-10-19 09:05 - 00000000 ____D C:\Brother
2017-04-26 08:21 - 2015-12-26 16:09 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-04-25 16:44 - 2014-01-15 15:36 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-04-23 08:12 - 2015-04-27 20:05 - 00000619 _____ C:\Windows\wiso.ini
2017-04-23 08:05 - 2017-04-06 11:56 - 00000000 ____D C:\Users\Martin\AppData\Roaming\PixelPlanet
2017-04-23 07:44 - 2014-10-17 19:56 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Adobe
2017-04-22 18:09 - 2017-03-30 16:27 - 00000990 _____ C:\Windows\Tasks\Paragon Auftrag (Backup partitions or disks to virtual containers) - {e5c5c76c-ddec-4575-2452-5a881fd6fb84}.job
2017-04-22 18:04 - 2017-03-30 16:27 - 00004062 _____ C:\Windows\System32\Tasks\Paragon Auftrag (Backup partitions or disks to virtual containers) - {e5c5c76c-ddec-4575-2452-5a881fd6fb84}
2017-04-22 17:57 - 2017-03-29 17:11 - 00000000 ____D C:\ProgramData\advlauncher
2017-04-21 21:25 - 2014-10-17 22:34 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-04-19 19:32 - 2014-01-15 16:21 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-04-19 19:32 - 2014-01-15 16:20 - 00000000 ____D C:\ProgramData\Adobe
2017-04-19 18:17 - 2017-04-17 10:54 - 00000000 ____D C:\Users\Martin\Desktop\Adobe Acrobat

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-07-15 08:23 - 2015-07-15 08:30 - 0000132 _____ () C:\Users\Martin\AppData\Roaming\Adobe CS5-Voreinstellungen für BMP-Format
2017-03-05 17:31 - 2017-03-05 17:33 - 318912029 _____ () C:\Users\Martin\AppData\Local\ACCCx3_9_5_353.zip
2014-12-27 15:36 - 2015-12-15 13:19 - 0007592 _____ () C:\Users\Martin\AppData\Local\resmon.resmoncfg
2017-04-29 12:22 - 2017-04-29 12:22 - 0000041 ___SH () C:\ProgramData\.zreglib
2016-09-25 11:03 - 2016-09-25 11:03 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-10-05 16:53 - 2016-10-05 16:53 - 0010246 _____ () C:\ProgramData\regid.1996-01.de.pixelplanet_313C7623-D965-456A-B3BC-DDAA46A63210.swidtag

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-05-16 13:42

==================== Ende von FRST.txt ============================
         
 
--- --- ---
         

1. jedes Logfile soll separat in seine eigenen CODE-Tags
2. addition.txt Logfile von FRST fehlt
3. v.a. sind Logs mit Virenfunden zu posten