Malwarebytes und ADWCleaner haben sehr viel gefunden, was kann ich noch tun?

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 16:21 on 23/06/2015 (Dietrich)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:21-06-2015 01
Ran by Dietrich (administrator) on TOSHIBA on 23-06-2015 16:22:39
Running from C:\Users\Dietrich\Downloads
Loaded Profiles: Dietrich (Available Profiles: Dietrich)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(Sage Software) C:\Program Files (x86)\Common Files\Sage KHK Shared\LiveUpdate\LiveUpdateInstaller.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SAGEHW\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Spotify Ltd) C:\Users\Dietrich\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvUseMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeBtMng.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosLeSrvProvider.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
(TeamViewer GmbH) C:\Users\Dietrich\AppData\Local\Temp\TeamViewer\Version7\TeamViewer.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(TeamViewer GmbH) C:\Users\Dietrich\AppData\Local\Temp\TeamViewer\Version7\tv_w32.exe
(TeamViewer GmbH) C:\Users\Dietrich\AppData\Local\Temp\TeamViewer\Version7\tv_x64.exe
(TeamViewer GmbH) C:\Users\Dietrich\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_Desktop.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [ITSecMng] => C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-01] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [208424 2013-10-17] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-02-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.)
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.)
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\Run: [Spotify Web Helper] => C:\Users\Dietrich\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1514040 2014-09-30] (Spotify Ltd)
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-10-20] (Apple Inc.)
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\Dietrich\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\MountPoints2: {267dc069-7da8-11e3-80e5-089e01e508fb} - E:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk [2014-01-05]
ShortcutTarget: Bluetooth Manager.lnk -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-841566895-1074304174-3414421321-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-841566895-1074304174-3414421321-1000 -> {AFB2AA56-024A-43DA-AD56-890AFB5A975C} URL = https://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: No Name -> {41564952-412D-5637-4300-7A786E7484D7} ->  No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-23] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dietrich\AppData\Roaming\Mozilla\Firefox\Profiles\mpsh6kjv.default-1420634274298
FF DefaultSearchEngine: Yahoo
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-06-10] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-06-10] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-23] (Oracle Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-09-05] (Adobe Systems Inc.)
FF Extension: Adblock Plus - C:\Users\Dietrich\AppData\Roaming\Mozilla\Firefox\Profiles\mpsh6kjv.default-1420634274298\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-09]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-20] (Apple Inc.)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [49664 2013-10-08] (Haufe-Lexware GmbH & Co. KG) [File not signed]
R2 LiveUpdateInstaller; C:\Program Files (x86)\Common Files\Sage KHK Shared\LiveUpdate\LiveUpdateInstaller.exe [659456 2006-04-19] (Sage Software) [File not signed]
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MSSQL$SAGEHW; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SAGEHW\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [File not signed]
S4 SQLAgent$SAGEHW; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SAGEHW\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 ApplicationCursorFunction.exe; C:\Users\Dietrich\AppData\Local\ApplicationCursorFunction\ApplicationCursorFunction.exe [X]
S2 ProgramRemoteScrolling.exe; C:\Users\Dietrich\AppData\Local\ProgramRemoteScrolling\ProgramRemoteScrolling.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 aswSP; No ImagePath
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
S3 s115bus; C:\Windows\System32\DRIVERS\s115bus.sys [108296 2007-04-23] (MCCI Corporation)
S3 s115mdfl; C:\Windows\System32\DRIVERS\s115mdfl.sys [19720 2007-04-23] (MCCI Corporation)
S3 s115mdm; C:\Windows\System32\DRIVERS\s115mdm.sys [144648 2007-04-23] (MCCI Corporation)
S3 s115mgmt; C:\Windows\System32\DRIVERS\s115mgmt.sys [126216 2007-04-23] (MCCI Corporation)
S3 s115obex; C:\Windows\System32\DRIVERS\s115obex.sys [123656 2007-04-23] (MCCI Corporation)
S3 cpuz134; \??\C:\Users\DIETRI~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 L1C; system32\DRIVERS\L1C62x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-23 16:22 - 2015-06-23 16:22 - 00014344 _____ C:\Users\Dietrich\Downloads\FRST.txt
2015-06-23 16:22 - 2015-06-23 16:22 - 00000000 ____D C:\FRST
2015-06-23 16:21 - 2015-06-23 16:21 - 00000498 _____ C:\Users\Dietrich\Downloads\defogger_disable.log
2015-06-23 16:21 - 2015-06-23 16:21 - 00000000 _____ C:\Users\Dietrich\defogger_reenable
2015-06-23 16:18 - 2015-06-23 16:18 - 02109952 _____ (Farbar) C:\Users\Dietrich\Downloads\FRST64.exe
2015-06-23 16:18 - 2015-06-23 16:18 - 00380416 _____ C:\Users\Dietrich\Downloads\Gmer-19357.exe
2015-06-23 16:17 - 2015-06-23 16:17 - 00050477 _____ C:\Users\Dietrich\Downloads\Defogger.exe
2015-06-23 16:07 - 2015-06-23 16:07 - 442213034 _____ C:\Windows\MEMORY.DMP
2015-06-23 16:07 - 2015-06-23 16:07 - 00281944 _____ C:\Windows\Minidump\062315-4383-01.dmp
2015-06-23 16:06 - 2015-06-23 16:06 - 00000000 ____D C:\ProgramData\RogueKiller
2015-06-23 16:02 - 2015-06-23 16:02 - 03144104 _____ (TeamViewer) C:\Users\Dietrich\Desktop\Fernwartung ikon.exe
2015-06-23 15:52 - 2015-06-23 15:52 - 00016925 _____ C:\Users\Dietrich\Desktop\bookmarks_23.06.15.html
2015-06-23 15:40 - 2015-06-23 16:10 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-23 15:40 - 2015-06-23 15:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-06-23 15:40 - 2015-06-23 15:40 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-06-23 15:40 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-06-23 15:40 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-06-23 15:40 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-06-23 15:36 - 2015-06-23 15:36 - 00000207 _____ C:\Windows\tweaking.com-regbackup-TOSHIBA-Windows-7-Professional-(64-bit).dat
2015-06-23 15:36 - 2015-06-23 15:36 - 00000000 ____D C:\RegBackup
2015-06-23 15:23 - 2015-06-23 16:10 - 00000336 _____ C:\Windows\setupact.log
2015-06-23 15:23 - 2015-06-23 15:23 - 00000000 _____ C:\Windows\setuperr.log
2015-06-23 15:22 - 2015-06-23 15:22 - 00000000 ____D C:\Windows\pss
2015-06-23 15:18 - 2015-06-23 15:18 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Dietrich\Downloads\mbam-setup-2.1.6.1022.exe
2015-06-23 15:17 - 2015-06-23 15:17 - 02951367 _____ (Malwarebytes Corporation) C:\Users\Dietrich\Downloads\JRT.exe
2015-06-23 15:17 - 2015-06-23 15:17 - 02244096 _____ C:\Users\Dietrich\Downloads\AdwCleaner_4.207.exe
2015-06-11 14:57 - 2015-06-11 14:58 - 00014340 _____ C:\Users\Dietrich\Documents\Stufenreparaturen Milanhorst 19-23, 14478 Potsdam.ods
2015-06-11 13:08 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-11 13:08 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-11 13:08 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-11 13:08 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-11 13:08 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-11 13:08 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-11 13:08 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-11 13:08 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-11 13:08 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-11 13:08 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-11 13:08 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-11 13:08 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-11 13:08 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-11 13:08 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-11 13:08 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-11 13:08 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-11 13:08 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-11 13:08 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-11 13:08 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-11 13:08 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-11 13:08 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-11 13:08 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-11 13:08 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-11 13:08 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-11 13:08 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-11 13:08 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-11 13:08 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-11 13:08 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-11 13:08 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-11 13:08 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-11 13:08 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-11 13:08 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-11 13:08 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-11 13:07 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-11 13:07 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-11 13:07 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-11 13:07 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-11 13:07 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-11 13:07 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-11 13:07 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-11 13:07 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-11 13:07 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-11 13:07 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-11 13:07 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-11 13:07 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-11 13:07 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-11 13:07 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-11 13:07 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-11 13:07 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-11 13:07 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-11 13:07 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-11 13:07 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-11 13:07 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-11 13:07 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-11 13:07 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-11 13:07 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-11 13:07 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-11 13:07 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-11 13:07 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-11 13:07 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-11 13:07 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-11 13:07 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-11 13:07 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-11 13:07 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-11 13:07 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-11 13:07 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-11 13:07 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-11 13:07 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-11 13:07 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-11 13:07 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-11 13:07 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-11 13:07 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-11 13:07 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-11 13:07 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-11 13:07 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-11 13:07 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-11 13:07 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-11 13:07 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-11 13:07 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-11 13:07 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-11 13:07 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-11 13:07 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-11 13:07 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-11 13:07 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-11 13:07 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-11 13:07 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-11 13:07 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-11 13:07 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-11 13:07 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-11 13:07 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-11 13:07 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-11 13:07 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-11 13:07 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-11 13:07 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-11 13:07 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-11 13:07 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-11 13:07 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-11 13:07 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-11 13:07 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-11 13:07 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-11 13:07 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-11 13:07 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-11 13:07 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-11 13:07 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-11 13:07 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-11 13:07 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-11 13:07 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-11 13:07 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 13:01 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 13:01 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-05 07:19 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-05 07:19 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-05 07:19 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-05 07:19 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-05 07:19 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-05 07:19 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-05 07:19 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-05 07:19 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-03 14:06 - 2015-06-03 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-03 11:51 - 2015-06-03 11:51 - 00002930 _____ C:\Windows\System32\Tasks\{C28A7239-80FD-4D32-A403-0ED2C814FED8}
2015-06-02 08:33 - 2015-06-02 11:56 - 00000000 ____D C:\ProgramData\Norton
2015-06-02 08:33 - 2015-06-02 11:23 - 00000000 ____D C:\Users\Dietrich\AppData\Local\NPE
2015-06-02 07:41 - 2015-06-02 07:41 - 00000000 ____D C:\Users\Dietrich\AppData\Local\GWX
2015-06-01 12:08 - 2015-06-01 12:08 - 00052320 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\69175277.sys
2015-06-01 12:01 - 2015-06-01 12:04 - 00000000 ____D C:\KVRT_Data
2015-05-27 07:28 - 2015-06-05 08:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-23 16:21 - 2014-01-05 13:00 - 00000000 ____D C:\Users\Dietrich
2015-06-23 16:18 - 2009-07-14 06:45 - 00031872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-23 16:18 - 2009-07-14 06:45 - 00031872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-23 16:17 - 2011-04-12 09:43 - 00765606 _____ C:\Windows\system32\perfh007.dat
2015-06-23 16:17 - 2011-04-12 09:43 - 00174484 _____ C:\Windows\system32\perfc007.dat
2015-06-23 16:17 - 2009-07-14 07:13 - 01805750 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-23 16:13 - 2014-01-05 13:00 - 01050486 _____ C:\Windows\WindowsUpdate.log
2015-06-23 16:11 - 2015-05-20 14:36 - 00000000 ____D C:\AdwCleaner
2015-06-23 16:10 - 2014-10-06 12:39 - 00000000 ___RD C:\Users\Dietrich\iCloudDrive
2015-06-23 16:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-23 16:07 - 2014-01-16 09:47 - 00000000 ____D C:\Windows\Minidump
2015-06-23 16:07 - 2010-11-21 05:47 - 00855350 _____ C:\Windows\PFRO.log
2015-06-23 16:02 - 2014-10-13 15:19 - 00000000 ____D C:\Users\Dietrich\AppData\Roaming\TeamViewer
2015-06-23 16:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SchCache
2015-06-23 15:53 - 2014-01-05 14:58 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-23 15:52 - 2014-01-05 15:00 - 00000000 ____D C:\Program Files (x86)\Google
2015-06-23 15:48 - 2014-11-06 11:56 - 00003978 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C189CFE2-E827-486D-835D-62F113C19DF7}
2015-06-23 15:37 - 2015-01-17 12:45 - 00000000 ____D C:\Users\Dietrich\AppData\Roaming\Lavasoft
2015-06-23 15:37 - 2015-01-17 12:45 - 00000000 ____D C:\ProgramData\Lavasoft
2015-06-23 15:37 - 2015-01-17 12:45 - 00000000 ____D C:\Program Files (x86)\Lavasoft
2015-06-23 15:30 - 2014-09-01 14:26 - 00001082 _____ C:\Users\Dietrich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2015-06-23 15:29 - 2015-02-05 08:46 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-23 15:23 - 2014-01-05 16:34 - 00000000 ____D C:\ProgramData\Avira
2015-06-23 15:23 - 2014-01-05 16:34 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-23 15:14 - 2014-01-16 16:52 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-23 15:12 - 2014-02-13 08:42 - 00000000 ____D C:\ProgramData\Oracle
2015-06-23 15:12 - 2014-02-13 08:41 - 00000000 ____D C:\Program Files (x86)\Java
2015-06-23 15:11 - 2014-07-08 07:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-06-23 15:11 - 2014-02-13 08:42 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-06-19 10:20 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-18 13:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-06-18 13:14 - 2014-11-27 08:15 - 00000000 __SHD C:\Users\Dietrich\AppData\Local\EmieBrowserModeList
2015-06-18 13:14 - 2014-06-02 11:28 - 00000000 __SHD C:\Users\Dietrich\AppData\Local\EmieUserList
2015-06-18 13:14 - 2014-06-02 11:28 - 00000000 __SHD C:\Users\Dietrich\AppData\Local\EmieSiteList
2015-06-17 09:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-17 07:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-17 07:24 - 2014-01-13 10:32 - 00000000 ____D C:\Windows\system32\MRT
2015-06-17 07:23 - 2014-01-13 10:32 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-11 13:20 - 2015-05-05 07:32 - 00017920 _____ C:\Windows\SysWOW64\rpcnetp.exe
2015-06-11 13:20 - 2015-05-05 07:32 - 00017920 _____ C:\Windows\SysWOW64\rpcnetp.dll
2015-06-11 13:20 - 2015-05-05 07:32 - 00017920 _____ C:\Windows\system32\rpcnetp.exe
2015-06-11 13:20 - 2009-07-14 06:45 - 00306984 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 13:00 - 2015-04-07 14:36 - 00000000 ___SD C:\Windows\system32\GWX
2015-06-11 13:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2015-06-11 13:00 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-06-10 13:29 - 2015-02-05 08:46 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-10 13:29 - 2014-07-22 12:23 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-10 13:29 - 2014-07-22 12:23 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-09 08:31 - 2014-12-12 08:41 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-09 08:31 - 2014-07-07 07:21 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-03 13:07 - 2014-01-16 11:38 - 00000000 ____D C:\Users\Dietrich\AppData\Roaming\U3
2015-06-03 08:10 - 2014-01-06 20:24 - 00011953 _____ C:\Users\Dietrich\Documents\HWP 2008 Fehler.txt
2015-06-03 08:09 - 2014-01-16 11:52 - 00000000 ____D C:\Users\Dietrich\Documents\SQL Server Management Studio
2015-06-03 07:52 - 2014-01-06 18:07 - 00000000 ____D C:\Sicherungen
2015-06-02 14:01 - 2014-01-05 16:21 - 00000000 ____D C:\Program Files (x86)\Sage
2015-05-27 07:08 - 2015-04-07 14:36 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-27 07:08 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2015-05-27 07:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers

==================== Files in the root of some directories =======

2014-01-07 13:36 - 2014-01-08 08:19 - 0033193 _____ () C:\Users\Dietrich\AppData\Roaming\UserTile.png
2014-08-25 07:26 - 2014-08-28 08:26 - 0000084 _____ () C:\Users\Dietrich\AppData\Roaming\WB.CFG
2014-07-21 12:53 - 2014-08-01 14:04 - 0007611 _____ () C:\Users\Dietrich\AppData\Local\resmon.resmoncfg

Some files in TEMP:
====================
C:\Users\Dietrich\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Dietrich\AppData\Local\Temp\mnhhw92q.dll
C:\Users\Dietrich\AppData\Local\Temp\nsd4E73.tmp.exe
C:\Users\Dietrich\AppData\Local\Temp\ytb.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-23 08:29

==================== End of log ============================
         

Additional scan result of Farbar Recovery Scan Tool (x64) Version:21-06-2015 01
Ran by Dietrich at 2015-06-23 16:22:58
Running from C:\Users\Dietrich\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-841566895-1074304174-3414421321-500 - Administrator - Disabled)
Dietrich (S-1-5-21-841566895-1074304174-3414421321-1000 - Administrator - Enabled) => C:\Users\Dietrich
Gast (S-1-5-21-841566895-1074304174-3414421321-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 15.2.1 - Hewlett-Packard) Hidden
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.04) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.04 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Bluetooth Filter Driver Package (HKLM\...\{65486209-5C54-439C-8383-8AC9BBE25932}) (Version: 2.0.0.9 - Qualcomm Atheros)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Atheros)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v9.10.11(T) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{8343C2D8-09DF-38B3-9D1A-A26148918E45}.KB947789) (Version: 1 - Microsoft Corporation)
iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.18.10.3165 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.63463 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Lexware buchhalter 2014 (x32 Version: 19.50.00.0231 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware buchhalter plus 2014 (HKLM-x32\...\{035827af-0859-42a8-b34d-35a06c2773d2}) (Version: 19.0.0.91 - Haufe-Lexware GmbH & Co.KG)
Lexware Elster (x32 Version: 13.14.00.0008 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Info Service (x32 Version: 4.01.00.0077 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 3.01.00.0011 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (x32 Version: 20.00.00.0059 - Haufe-Lexware GmbH Co.KG) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version:  - Microsoft Corporation)
Microsoft Report Viewer Redistributable 2008 SP1 Language Pack - DEU (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 SP1 Language Pack - DEU) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 R2 (64-Bit) (HKLM\...\Microsoft SQL Server 2008 R2) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{8798322F-74EC-479B-BC02-33EB50519F1C}) (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2-Richtlinien (HKLM-x32\...\{78033A38-50E2-4A65-823F-C1B34DF9FE41}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server 2008 R2-Setup (Deutsch) (HKLM\...\{857B51DF-ECF0-44D1-B51E-66DCF3FF59C7}) (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server Browser (HKLM-x32\...\{8DD113A8-811A-404E-A4D7-443D014946AC}) (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 Query Tools DEU (HKLM-x32\...\{3888A22E-1A9E-4DBE-A93B-42385141F37D}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{7C39E0D1-E138-42B1-B083-213EC2CF7692}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{FBBA9369-3A6B-4EE3-9C53-DA0D29C2FC95}) (Version: 10.51.2500.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}) (Version: 9.0.35191 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM-x32\...\{8343C2D8-09DF-38B3-9D1A-A26148918E45}) (Version: 9.0.35191 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
Nero BackItUp 12 Essentials (HKLM-x32\...\{0E3368AC-FB29-4C5E-938E-FA11C12D035E}) (Version: 12.0.01200 - Nero AG)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
PDF-XChange 3 (HKLM\...\PDF-XChange 3_is1) (Version:  - Tracker Software)
PDF-XChange 4 (HKLM\...\{EA08048C-3823-4DC8-B169-1D5D11FFC19F}_is1) (Version: 4.0.160.0 - Tracker Software Products Ltd)
Prerequisite installer (x32 Version: 12.0.0002 - Nero AG) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Sage HWP 2008 (HKLM-x32\...\{D0CD5FEE-3B7D-47D5-8A7A-24F3439FC448}) (Version: 4.4 - Sage Software GmbH & Co. KG)
Sage HWP Setup-Requirements (HKLM-x32\...\{6020E187-FF3D-41A3-999B-412CF16EB9A9}) (Version: 1.00.0000 - Sage GmbH & Co KG)
Service Pack 1 für SQL Server 2008 R2 (KB2528583) (64-bit) (HKLM\...\KB2528583) (Version: 10.51.2500.0 - Microsoft Corporation)
Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista (HKLM-x32\...\{1F6DE8F6-7E9A-4B5B-B13C-14297F653BAA}) (Version: 5.40.24 - Silicon Laboratories, Inc.)
Silicon Laboratories CP210x VCP Drivers for Windows 7 (HKLM-x32\...\{AF6F7442-64A5-4AB1-AFA5-BFC4807CF91D}) (Version: 5.40.24 - Silicon Laboratories, Inc.)
Spotify (HKU\S-1-5-21-841566895-1074304174-3414421321-1000\...\Spotify) (Version: 0.9.14.11.g7e298e37 - Spotify AB)
SQL Server 2008 R2 Management Studio (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP1 Common Files (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP1 Database Engine Services (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
SQL Server 2008 R2 SP1 Database Engine Shared (Version: 10.51.2500.0 - Microsoft Corporation) Hidden
Sql Server Customer Experience Improvement Program (Version: 10.50.1600.1 - Microsoft Corporation) Hidden
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.340 - TuneUp Software) Hidden
Unterstützungsdateien für Microsoft SQL Server 2008-Setup  (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-841566895-1074304174-3414421321-1000_Classes\CLSID\{45C6AFA5-2C13-402f-BC5D-45CC8172EF6B}\InprocServer32 -> C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\sys\x64\TosBtExt.dll (TOSHIBA)

==================== Restore Points =========================

08-06-2015 08:16:28 Windows Update
09-06-2015 07:19:40 Windows Update
11-06-2015 08:26:07 Windows Update
11-06-2015 12:59:57 Wiederherstellungsvorgang
11-06-2015 13:04:39 Windows Update
17-06-2015 07:22:36 Windows Update
23-06-2015 15:27:49 Removed Media Go
23-06-2015 15:28:03 Removed Media Go Network Downloader
23-06-2015 15:28:11 Removed Media Go Video Playback Engine 2.4.130.12060

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00C6414F-FA33-4AB5-8207-FA2F8D3BCF2C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {024CA638-B962-498A-BA86-E3EC40513959} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1125920E-EDCF-41FC-ABED-3C3F1E9412C8} - System32\Tasks\{5493DE99-0043-4FAA-ABD5-15712DB24AF5} => pcalua.exe -a D:\Setup.exe -d D:\
Task: {1221E1A1-E413-428A-B3FB-3F853BD00275} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {18C40AD2-2FBB-4A15-A43A-DD10E3CC06C6} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {1C32AFAD-2EF1-4E60-898F-2F6C710772C2} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {2D218DC0-892D-4643-A7E8-6EC494452389} - System32\Tasks\{ADD380F4-E183-47B4-9D8E-639FC134D436} => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
Task: {5F71A37D-56A1-48CC-8A02-1E9E14CF6FC4} - System32\Tasks\{C28A7239-80FD-4D32-A403-0ED2C814FED8} => D:\INSTMSI\Setup.exe
Task: {6539A9CD-7ACF-49CF-9531-E016678180B6} - System32\Tasks\{35D12189-CEDD-4040-B3A5-E6A23C6D1709} => D:\Autorun.exe
Task: {6C819D5B-0A18-40B4-A254-823311E84737} - System32\Tasks\{872CA536-3209-4FD7-B9CE-09D07D9912C3} => D:\Autorun.exe
Task: {6CCD29BB-4E74-43E9-9E20-38B1AFEA6BB9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {6E796069-B544-445D-B1ED-1952F556F66D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-10] (Adobe Systems Incorporated)
Task: {789F3049-2FCB-47BD-8120-3A5B365847D8} - System32\Tasks\{CED692C3-6B5C-424C-9038-0AF53326A9A2} => pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\POIbase\POIbase.exe"
Task: {7F302BFC-10BB-4EB9-BE63-5D77E18263FC} - System32\Tasks\{FB01FD95-0A6F-4115-8737-9D517CF1952A} => C:\Program Files (x86)\Sage\Handwerk\Handwerk.exe [2007-08-17] (Sage Software GmbH&Co.KG)
Task: {8A37CECE-3B9D-45F7-8EC8-A78B350B814F} - System32\Tasks\{98C8B7AE-0450-43BB-9776-61F776116130} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{6BC91B47-6749-4C12-83AD-3BB4A285648A}\setup.exe" -c -runfromtemp -l0x0009 -removeonly
Task: {8ACD0049-806E-47B4-ABE4-DD133B73F05B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {9D6B95A7-B4D4-46EE-983C-138F1BDF8F21} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {9D985DFC-F92C-4D1A-8901-A9F180DDEE22} - System32\Tasks\{2EAC0D72-A2B5-4AE5-B073-20D06C2263E6} => C:\Users\Dietrich\Desktop\Sony_EricssonPC_Suite_2_1046.exe
Task: {A0E967BA-5065-4632-A62B-891FD5CBBFCF} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-07] (Microsoft Corporation)
Task: {A41A99A8-B59F-4988-8A52-D256EDB60EA0} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-07] (Microsoft Corporation)
Task: {B1EBFEFF-02D0-4D4A-99EE-F18672327A38} - System32\Tasks\{A88A8A01-BFB3-4514-A71A-F36315339ED2} => pcalua.exe -a "C:\Users\Dietrich\AppData\Roaming\omiga-plus\UninstallManager.exe" -c -ptid=adks -simple=0 <==== ATTENTION
Task: {BA080198-5D47-47D8-9760-D80FD073A7B7} - System32\Tasks\Opera scheduled Autoupdate 1405935926 => C:\Program Files (x86)\Opera\launcher.exe [2014-08-14] (Opera Software)
Task: {BA28495B-8B64-4275-A1B0-0D745DF82019} - System32\Tasks\{A8E84968-6622-42BD-8115-ECB2EF8A566A} => D:\Autorun.exe
Task: {C210749A-6289-4988-A6E1-85C14C6CB629} - System32\Tasks\{BC52BB53-0679-4F26-B9D3-61CDBFB0C77D} => D:\Autorun.exe
Task: {C2E071B5-4213-426E-879F-CDD41C9889D3} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {C321DB4F-1ED2-4723-82E1-C52760C2BACE} - System32\Tasks\{A5CCB8AD-B365-4CC6-892F-CFA1D965B7B7} => C:\Program Files (x86)\Sage\Handwerk\Handwerk.exe [2007-08-17] (Sage Software GmbH&Co.KG)
Task: {C45A5502-F732-4587-8892-965149834F21} - System32\Tasks\{DE302D11-0FE6-41E6-AEEB-2FDCE0F99114} => C:\Program Files (x86)\POIbase\POIbase.exe
Task: {D54E9021-053B-4833-B339-BBDEE9D7E18E} - System32\Tasks\{6F7E7C31-E52E-439F-819A-314F81232D03} => pcalua.exe -a "C:\Users\Dietrich\Desktop\SIERRA\SETUP32.EXE" -d "C:\Users\Dietrich\Desktop\SIERRA"
Task: {D71AED25-2970-4057-9A46-1F2E15D08989} - System32\Tasks\{F51AB30C-C476-4B31-B14D-7937039D96FD} => C:\Program Files (x86)\POIbase\POIbase.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2015-02-13 05:20 - 2015-02-13 05:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-02-13 05:20 - 2015-02-13 05:20 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-02-13 05:20 - 2015-02-13 05:20 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-05-07 12:55 - 2012-05-07 12:55 - 00178104 _____ () C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosGatt.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\56280130.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\56280130.sys => ""="Driver"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-841566895-1074304174-3414421321-1000\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Dietrich^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^BoostUpdater.lnk => C:\Windows\pss\BoostUpdater.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Driver Whiz => C:\Program Files (x86)\Driver Whiz\Driver Whiz\DriverWhiz.exe /applicationMode:systemTray /showWelcome:false
MSCONFIG\startupreg: Homepage setter => C:\Users\Public\Documents\Homepage Installer.exe
MSCONFIG\startupreg: smoother => C:\Users\Dietrich\AppData\Roaming\SmootherWeb\SmootherWeb-Installer.exe
MSCONFIG\startupreg: winengine => C:\Users\Dietrich\AppData\Local\winengine\rkr0.exe
MSCONFIG\startupreg: winengine2 => C:\Users\Dietrich\AppData\Local\winengine\rkr1.exe
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{3474CEC4-E9E7-4A30-8F44-4E89EAA92220}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtUser.exe
FirewallRules: [{0BAE2F34-7E10-47AD-A1C3-AB11C7FEA365}] => (Allow) C:\Program Files (x86)\Movies Toolbar\Datamngr\SRTOOL~1\IE\dtUser.exe
FirewallRules: [{986A86E8-281C-472A-8408-B56A6C475739}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{21B77C28-48F2-4B4D-BC05-22998CF0BCC5}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{AF9F9F35-3313-43A3-A228-FB1BBC105FCF}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{66F1F097-3234-4070-8AC0-CE2216342426}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{78D0189A-F095-46BA-B135-98FD8B3E11FC}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{0FE5D302-8E88-4256-926F-581E4A54443E}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{F40A69DC-05F8-4B76-BB5A-E0E4846786DE}] => (Allow) C:\Program Files (x86)\Bench\Proxy\proc.exe
FirewallRules: [{21174C20-596D-43A6-A258-7292E5B22834}] => (Allow) C:\Program Files (x86)\Bench\Proxy\pwdg.exe
FirewallRules: [{A640D443-B525-45D9-B99A-CA803151DEDC}] => (Allow) C:\Users\Dietrich\Downloads\california_dreamin_mamas_the_papas_downloader.exe
FirewallRules: [{389FD2F7-4408-49E4-BB92-7F0B5E1DD21D}] => (Allow) C:\Users\Dietrich\Downloads\california_dreamin_mamas_the_papas_downloader.exe
FirewallRules: [TCP Query User{8E3472BE-C279-406B-81D5-94F2B4F66239}C:\program files (x86)\sony\media go\mediago.exe] => (Block) C:\program files (x86)\sony\media go\mediago.exe
FirewallRules: [UDP Query User{DAB19000-A70A-42A9-8904-B986445EF262}C:\program files (x86)\sony\media go\mediago.exe] => (Block) C:\program files (x86)\sony\media go\mediago.exe
FirewallRules: [{2366EDFB-0706-4566-8B69-FDF3F441C074}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4398C650-798D-4C8A-8E60-13FC19187004}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{76C55F4E-86F4-43E9-949D-665E0FEBB206}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{061C6FBE-8597-4133-B741-C7F3A0248BAC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A7B0C371-C82F-4C1A-8D35-ECA685AB6435}] => (Allow) C:\Users\Dietrich\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{74A7008E-8E21-41F9-8D1D-FB8C3A1EBEFB}] => (Allow) C:\Users\Dietrich\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{34A5F758-3EF6-4A88-A7B0-26E8B4E18498}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1B3F9C4A-5124-44AC-B86F-CF7B9F3F8DE4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BE0B4E78-1546-4608-AAC5-45E254E747A4}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{618D4FC2-0EA2-48DB-A144-219DE79E1A86}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{241E4F91-2FF1-4E25-871F-066452464F02}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{4ABB4CFA-6694-47EC-8592-41E390D9A9FE}C:\users\Dietrich\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\Dietrich\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{9017B7DC-3D5F-4C6A-8824-C1E94388F433}C:\users\Dietrich\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\Dietrich\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{507E2605-B038-4D8F-A8A3-C2E885667DC2}C:\users\Dietrich\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\Dietrich\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{5C5CF051-7E00-41FC-AF26-9DCABDBCE31D}C:\users\Dietrich\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\Dietrich\appdata\local\akamai\netsession_win.exe
FirewallRules: [{93D764FA-FAB1-4277-8EE1-502C4F419320}] => (Allow) LPort=49185
FirewallRules: [{E85E6186-D580-4252-ADB6-73735B09617B}] => (Allow) LPort=5000

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/23/2015 04:11:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 04:07:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 04:01:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 03:53:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: setup.exe_Sony PC Companion, Version: 17.0.0.717, Zeitstempel: 0x4cab8cfa
Name des fehlerhaften Moduls: shdocvw.dll, Version: 6.1.7601.18222, Zeitstempel: 0x51f1d730
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00014759
ID des fehlerhaften Prozesses: 0xf7c
Startzeit der fehlerhaften Anwendung: 0xsetup.exe_Sony PC Companion0
Pfad der fehlerhaften Anwendung: setup.exe_Sony PC Companion1
Pfad des fehlerhaften Moduls: setup.exe_Sony PC Companion2
Berichtskennung: setup.exe_Sony PC Companion3

Error: (06/23/2015 03:35:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 03:31:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 03:25:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 07:04:18 AM) (Source: Driver Detective) (EventID: 100) (User: )
Description: Zeitstempel: 23.06.2015 05:04:18
Meldung: Es ist eine Exception aufgetreten, die erkannt wurde: FileNotFoundException
---------Exception-Informationen----------
Ortszeit: 23.06.2015 07:04:18
Type: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Meldung: Die Datei oder Assembly "file:///C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.Default.dll" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.
Quelle: mscorlib
Zielstandort: System.Reflection.Assembly _nLoad(System.Reflection.AssemblyName, System.String, System.Security.Policy.Evidence, System.Reflection.Assembly, System.Threading.StackCrawlMark ByRef, Boolean, Boolean)
Stacktrace:    bei System.Reflection.Assembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.LoadFrom(String assemblyFile)
	
   bei DriversHQ.DriverDetective.Client.c.a(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.b(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.a()
--------------------------------------
Zusätzliche Informationen
Suchmaschinenname: TOSHIBA
Assembly: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Anwendungsdomäne: DriverWhiz.exe
Thread-Identität: Toshiba\Dietrich
Thread-Name: 
Windows-Identität: Toshiba\Dietrich
Prozessname:

Error: (06/23/2015 07:04:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 10:53:52 AM) (Source: Driver Detective) (EventID: 100) (User: )
Description: Zeitstempel: 22.06.2015 08:53:52
Meldung: Es ist eine Exception aufgetreten, die erkannt wurde: FileNotFoundException
---------Exception-Informationen----------
Ortszeit: 22.06.2015 10:53:52
Type: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Meldung: Die Datei oder Assembly "file:///C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.Default.dll" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.
Quelle: mscorlib
Zielstandort: System.Reflection.Assembly _nLoad(System.Reflection.AssemblyName, System.String, System.Security.Policy.Evidence, System.Reflection.Assembly, System.Threading.StackCrawlMark ByRef, Boolean, Boolean)
Stacktrace:    bei System.Reflection.Assembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.LoadFrom(String assemblyFile)
	
   bei DriversHQ.DriverDetective.Client.c.a(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.b(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.a()
--------------------------------------
Zusätzliche Informationen
Suchmaschinenname: TOSHIBA
Assembly: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Anwendungsdomäne: DriverWhiz.exe
Thread-Identität: Toshiba\Dietrich
Thread-Name: 
Windows-Identität: Toshiba\Dietrich
Prozessname:


System errors:
=============
Error: (06/23/2015 04:10:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ProgramRemoteScrolling.exe" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/23/2015 04:10:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "ApplicationCursorFunction.exe" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "TOSHIBA Bluetooth Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "SQL Server VSS Writer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/23/2015 04:10:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "SQL Server (SAGEHW)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================
Error: (06/23/2015 04:11:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 04:07:48 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 04:01:07 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 03:53:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: setup.exe_Sony PC Companion17.0.0.7174cab8cfashdocvw.dll6.1.7601.1822251f1d730c000000500014759f7c01d0adbbf60b7425C:\Users\DIETRI~1\AppData\Local\Temp\{08E0E587-0262-4F5C-A6D7-A3A30252B51D}\setup.exeC:\Windows\System32\shdocvw.dll44c0d7fc-19af-11e5-975a-b1482db673ab

Error: (06/23/2015 03:35:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 03:31:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 03:25:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/23/2015 07:04:18 AM) (Source: Driver Detective) (EventID: 100) (User: )
Description: Zeitstempel: 23.06.2015 05:04:18
Meldung: Es ist eine Exception aufgetreten, die erkannt wurde: FileNotFoundException
---------Exception-Informationen----------
Ortszeit: 23.06.2015 07:04:18
Type: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Meldung: Die Datei oder Assembly "file:///C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.Default.dll" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.
Quelle: mscorlib
Zielstandort: System.Reflection.Assembly _nLoad(System.Reflection.AssemblyName, System.String, System.Security.Policy.Evidence, System.Reflection.Assembly, System.Threading.StackCrawlMark ByRef, Boolean, Boolean)
Stacktrace:    bei System.Reflection.Assembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.LoadFrom(String assemblyFile)
	
   bei DriversHQ.DriverDetective.Client.c.a(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.b(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.a()
--------------------------------------
Zusätzliche Informationen
Suchmaschinenname: TOSHIBA
Assembly: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Anwendungsdomäne: DriverWhiz.exe
Thread-Identität: Toshiba\Dietrich
Thread-Name: 
Windows-Identität: Toshiba\Dietrich
Prozessname:

Error: (06/23/2015 07:04:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/22/2015 10:53:52 AM) (Source: Driver Detective) (EventID: 100) (User: )
Description: Zeitstempel: 22.06.2015 08:53:52
Meldung: Es ist eine Exception aufgetreten, die erkannt wurde: FileNotFoundException
---------Exception-Informationen----------
Ortszeit: 22.06.2015 10:53:52
Type: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Meldung: Die Datei oder Assembly "file:///C:\Program Files (x86)\Driver Whiz\Driver Whiz\ThemePack.Default.dll" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.
Quelle: mscorlib
Zielstandort: System.Reflection.Assembly _nLoad(System.Reflection.AssemblyName, System.String, System.Security.Policy.Evidence, System.Reflection.Assembly, System.Threading.StackCrawlMark ByRef, Boolean, Boolean)
Stacktrace:    bei System.Reflection.Assembly._nLoad(AssemblyName fileName, String codeBase, Evidence assemblySecurity, Assembly locationHint, StackCrawlMark& stackMark, Boolean throwOnFileNotFound, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.InternalLoad(AssemblyName assemblyRef, Evidence assemblySecurity, StackCrawlMark& stackMark, Boolean forIntrospection)
	
   bei System.Reflection.Assembly.LoadFrom(String assemblyFile)
	
   bei DriversHQ.DriverDetective.Client.c.a(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.b(DDConfig A_0)
	
   bei DriversHQ.DriverDetective.Client.c.a()
--------------------------------------
Zusätzliche Informationen
Suchmaschinenname: TOSHIBA
Assembly: ExceptionLogging, Version=3.0.0.93, Culture=neutral, PublicKeyToken=null
Anwendungsdomäne: DriverWhiz.exe
Thread-Identität: Toshiba\Dietrich
Thread-Name: 
Windows-Identität: Toshiba\Dietrich
Prozessname:


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4200M CPU @ 2.50GHz
Percentage of memory in use: 32%
Total physical RAM: 4024.36 MB
Available physical RAM: 2733.13 MB
Total Pagefile: 8046.93 MB
Available Pagefile: 6653 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (SSD) (Fixed) (Total:232.79 GB) (Free:88.25 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B909D4B3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.8 GB) - (Type=07 NTFS)

==================== End of log ============================
         

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-06-23 16:26:25
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 Samsung_SSD_840_EVO_250GB rev.EXT0BB0Q 232,89GB
Running: Gmer-19357.exe; Driver: C:\Users\DIETRI~1\AppData\Local\Temp\pwddipow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17      0000000077041401 2 bytes JMP 7544b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17        0000000077041419 2 bytes JMP 7544b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17      0000000077041431 2 bytes JMP 754c8f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42      000000007704144a 2 bytes CALL 7542489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                                  * 9
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17         00000000770414dd 2 bytes JMP 754c8822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17  00000000770414f5 2 bytes JMP 754c89f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17         000000007704150d 2 bytes JMP 754c8718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17  0000000077041525 2 bytes JMP 754c8ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17        000000007704153d 2 bytes JMP 7543fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17             0000000077041555 2 bytes JMP 754468ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17      000000007704156d 2 bytes JMP 754c8fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17        0000000077041585 2 bytes JMP 754c8b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17           000000007704159d 2 bytes JMP 754c86dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17        00000000770415b5 2 bytes JMP 7543fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17      00000000770415cd 2 bytes JMP 7544b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20  00000000770416b2 2 bytes JMP 754c8ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[3180] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31  00000000770416bd 2 bytes JMP 754c8671 C:\Windows\syswow64\kernel32.dll

---- EOF - GMER 2.1 ----
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 23.06.2015
Suchlauf-Zeit: 15:43:55
Logdatei: mbam_1.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.06.23.04
Rootkit Datenbank: v2015.06.22.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Dietrich

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 380581
Verstrichene Zeit: 10 Min, 50 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 32
PUP.Optional.InboxToolBar.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, In Quarantäne, [ef312a94aedc9c9a682d1065ac57c43c], 
PUP.Optional.InboxToolBar.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, In Quarantäne, [31ef7b430f7b91a5dab8109fb84b1ee2], 
PUP.Optional.Salus.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\mwiynzm4ndy1yjz, In Quarantäne, [e53b29954a401125a767c049a26232ce], 
PUP.Optional.MediaPlayerVideo.A, HKLM\SOFTWARE\Media+PlayerVidEd2.5-nv, In Quarantäne, [c25ec8f695f574c2a8d8e825b450718f], 
PUP.Optional.FastPlayer.C, HKLM\SOFTWARE\CLASSES\APPLICATIONS\FastPlayer.exe, In Quarantäne, [110f279778127bbbd3500af3e023bd43], 
PUP.Optional.FastPlayer.C, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPLICATIONS\FastPlayer.exe, In Quarantäne, [8f918d314644de5839eae61712f1e719], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [40e0dbe387039e98013feea6fd087d83], 
PUP.Optional.MediaPlayerVideo.A, HKLM\SOFTWARE\WOW6432NODE\Media+PlayerVidEd2.5-nv, In Quarantäne, [ab752c921971f046b8c81bf25fa5768a], 
PUP.Optional.SafetySearch.A, HKLM\SOFTWARE\WOW6432NODE\SafetySearch, In Quarantäne, [ae72ffbfc3c754e2eee9b36f5aaa4eb2], 
PUP.Optional.FastPlayer.C, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPLICATIONS\FastPlayer.exe, In Quarantäne, [e63af0ce296174c2e83bb34a7e85b14f], 
PUP.Optional.InboxToolBar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\apgjagobplilmcdfelodhgefiidomnfl, In Quarantäne, [120ef1cd1d6d989e59f60f142adaa65a], 
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, In Quarantäne, [a47c833b5a3065d1d26e3c5857ae40c0], 
PUP.Optional.FastPlayer.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\FastPlayerUpdaterService, In Quarantäne, [4dd3e5d96822b77f974b56b653b136ca], 
PUP.Optional.MediaPlayerVideo.A, HKU\S-1-5-18\SOFTWARE\Media+PlayerVidEd2.5-nv, In Quarantäne, [7ca43886eaa01026631e000db0540ef2], 
PUP.Optional.SmartSaver.A, HKU\S-1-5-18\SOFTWARE\Sm23mS-nv, In Quarantäne, [da4606b8c8c24beb9fe54ee025df47b9], 
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\HQPro-Video 1.6V08.01, In Quarantäne, [2ff1ae108dfd74c2b5b78d85966ecc34], 
PUP.Optional.MediaPlayerVideo.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Media+PlayerVidEd2.5, In Quarantäne, [25fb3787cfbbeb4b483a5bb2a36104fc], 
PUP.Optional.SmartSaver.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Sm23mS, In Quarantäne, [1d03c8f67218c76fc7be5cd2a55f3bc5], 
PUP.Optional.MoviesToolBar.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\ilividmoviestoolbarha, In Quarantäne, [60c002bc09812f07e43ce95f867efc04], 
PUP.Optional.MediaPlayerVideo.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\Media+PlayerVidEd2.5-nv, In Quarantäne, [b66ae8d6d1b98fa7bbc637d6877d9868], 
PUP.Optional.SmootherWeb.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\FFHELPER\SmootherWeb, In Quarantäne, [cc54ab1365259d999e6b9d73976de719], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2AF7E5D2-98D7-40F5-A3B1-4877A3668BCC}, In Quarantäne, [ce521ca25d2d0a2cc87ba9e82cd952ae], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3AAE2FEE-6188-4E1B-813C-5057DBB49141}, In Quarantäne, [6bb5714d1872979f9fa4e2af6d98ec14], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F582250-27FF-4D2D-B5C5-5953CBD084F9}, In Quarantäne, [61bfedd1e5a5171f281a8c05b0553ec2], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CF930EE-B837-4454-93F1-EB62314EC478}, In Quarantäne, [8e929f1f4a40c27446fdfd9442c341bf], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{69FEC545-0927-4CC9-B584-4193A970C98B}, In Quarantäne, [54cc7b431d6d3006bd840b86d530f709], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8BEC45B0-6034-4BFF-AFCE-35B776C00C16}, In Quarantäne, [a7792c92e4a6082e4300415023e2eb15], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{932D1C6F-9EE0-4A3A-9F3A-D44731AFDD63}, In Quarantäne, [e838f5c97b0f0036a899cfc229dc32ce], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9DAAF2C9-737C-4402-8C5C-EE1F54412FA2}, In Quarantäne, [76aaead49af039fd0141a2efbe476e92], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A2A88C47-24B1-4618-B228-339545D97712}, In Quarantäne, [4dd32797890131054df5741d18ed21df], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E752EBD0-EA7C-44DB-B8D2-777E496A6C10}, In Quarantäne, [8d937747800a9e9896ada9e8af568b75], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EF00AD4B-0082-43A3-A077-92316FEB2A53}, In Quarantäne, [1d034876692187af93b0335e3ec73fc1], 

Registrierungswerte: 16
PUP.Optional.SafetySearch.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\SHELLBROWSER\{7782DBE4-75A1-453D-B9FD-643F752E4532}, In Quarantäne, [ad7378465d2d8da9e6630d64c93a11ef], 
PUP.Optional.SafetySearch.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\SHELLBROWSER|{7782DBE4-75A1-453D-B9FD-643F752E4532}, äÃ?â??w¡u=E¹ýd?u.E2, In Quarantäne, [ad7378465d2d8da9e6630d64c93a11ef]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [40e0dbe387039e98013feea6fd087d83]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\WSE_Astromenda\\, In Quarantäne, [be62f6c842484de9ff8916e3669dc23e]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, In Quarantäne, [a47c833b5a3065d1d26e3c5857ae40c0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2AF7E5D2-98D7-40F5-A3B1-4877A3668BCC}|AppName, 31fb044c-7a28-413e-9216-53f96d59be75-2.exe-codedownloader.exe, In Quarantäne, [ce521ca25d2d0a2cc87ba9e82cd952ae]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3AAE2FEE-6188-4E1B-813C-5057DBB49141}|AppName, 7ddc5ea4-940b-4193-8b06-31ab6b2a7ed1-2.exe-codedownloader.exe, In Quarantäne, [6bb5714d1872979f9fa4e2af6d98ec14]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{4F582250-27FF-4D2D-B5C5-5953CBD084F9}|AppName, 4ee1cf51-65b5-4f7a-a8df-229d73cfbcc2-2.exe-buttonutil.exe, In Quarantäne, [61bfedd1e5a5171f281a8c05b0553ec2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5CF930EE-B837-4454-93F1-EB62314EC478}|AppName, 7ddc5ea4-940b-4193-8b06-31ab6b2a7ed1-2.exe-codedownloader.exe, In Quarantäne, [8e929f1f4a40c27446fdfd9442c341bf]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{69fec545-0927-4cc9-b584-4193a970c98b}|AppName, Media+PlayerVidEd2.5-bg.exe, In Quarantäne, [54cc7b431d6d3006bd840b86d530f709]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8bec45b0-6034-4bff-afce-35b776c00c16}|AppName, Media+PlayerVidEd2.5-codedownloader.exe, In Quarantäne, [a7792c92e4a6082e4300415023e2eb15]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{932d1c6f-9ee0-4a3a-9f3a-d44731afdd63}|AppName, HQPro-Video 1.6V08.01-bg.exe, In Quarantäne, [e838f5c97b0f0036a899cfc229dc32ce]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9DAAF2C9-737C-4402-8C5C-EE1F54412FA2}|AppName, 7ddc5ea4-940b-4193-8b06-31ab6b2a7ed1-2.exe-buttonutil.exe, In Quarantäne, [76aaead49af039fd0141a2efbe476e92]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A2A88C47-24B1-4618-B228-339545D97712}|AppName, 31fb044c-7a28-413e-9216-53f96d59be75-2.exe-buttonutil.exe, In Quarantäne, [4dd32797890131054df5741d18ed21df]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E752EBD0-EA7C-44DB-B8D2-777E496A6C10}|AppName, 31fb044c-7a28-413e-9216-53f96d59be75-2.exe-codedownloader.exe, In Quarantäne, [8d937747800a9e9896ada9e8af568b75]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-841566895-1074304174-3414421321-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ef00ad4b-0082-43a3-a077-92316feb2a53}|AppName, HQPro-Video 1.6V08.01-codedownloader.exe, In Quarantäne, [1d034876692187af93b0335e3ec73fc1]

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 6
PUP.Optional.MultiPlug, C:\ProgramData\mgohhlkkncickfkjchkojpppnpjfokkb, In Quarantäne, [db45b707fd8d2d0907e2a2eaff0642be], 
Rogue.Multiple, C:\ProgramData\374311380, In Quarantäne, [9d83a21cc2c8270f9c87e4d0a3606c94], 
PUP.Optional.SmootherWeb.A, C:\Users\Dietrich\AppData\Roaming\Mozilla\Firefox\Profiles\mpsh6kjv.default-1420634274298\jetpack\jid1-U7omKQ6kQfxMaQ@jetpack, In Quarantäne, [ed3396280b7f0234d098bb2bb64de11f], 
PUP.Optional.SmootherWeb.A, C:\Users\Dietrich\AppData\Roaming\Mozilla\Firefox\Profiles\mpsh6kjv.default-1420634274298\jetpack\jid1-U7omKQ6kQfxMaQ@jetpack\simple-storage, In Quarantäne, [ed3396280b7f0234d098bb2bb64de11f], 
PUP.Optional.ProPCCleaner.A, C:\Users\Dietrich\AppData\Local\Pro_PC_Cleaner, In Quarantäne, [a47c2599a6e4e353d245886de51ed32d], 
PUP.Optional.ProPCCleaner.A, C:\Users\Dietrich\AppData\Local\Pro_PC_Cleaner\ProPCCleaner.exe_Url_twd2ze3eaqaiwzlxig5riiby3fd4fyue, In Quarantäne, [a47c2599a6e4e353d245886de51ed32d], 

Dateien: 10
PUP.Optional.Salus.A, C:\Windows\System32\drivers\mwiynzm4ndy1yjz.sys, Löschen bei Neustart, [3df72d2b7c832af0306df383f6970444], 
PUP.Optional.Chinad, C:\Windows\Temp\3004.tmp, In Quarantäne, [e9370faf8802af87e712d24e36cc33cd], 
PUP.Optional.Bandoo.A, C:\Windows\Temp\1b075ea4\patch_ff.exe, In Quarantäne, [55cbf7c711796accfef7c7c18680ec14], 
PUP.Optional.Bandoo.A, C:\Windows\Temp\26b0c30\SetupDataMngr_iLivid.exe, In Quarantäne, [32eea915e2a89d993eb70a7e2cdafa06], 
PUP.Optional.SnapDo.A, C:\Windows\Installer\834be0.msi, In Quarantäne, [89978836246681b5c44802ba41c046ba], 
PUP.Optional.BrowserSupport.A, C:\Users\Dietrich\AppData\Roaming\Mozilla\Firefox\Profiles\mpsh6kjv.default-1420634274298\extensions\jid1-U7omKQ6kQfxMaQ@jetpack.xpi, In Quarantäne, [6fb1a01e23673cfaa43d19ec25dfb749], 
PUP.Optional.Proxy.A, C:\Users\Dietrich\AppData\Local\proxy.log, In Quarantäne, [b070fdc18802ca6c84c1a7796b9904fc], 
PUP.Optional.MultiPlug, C:\ProgramData\mgohhlkkncickfkjchkojpppnpjfokkb\lsdb.js, In Quarantäne, [db45b707fd8d2d0907e2a2eaff0642be], 
PUP.Optional.MultiPlug, C:\ProgramData\mgohhlkkncickfkjchkojpppnpjfokkb\content.js, In Quarantäne, [db45b707fd8d2d0907e2a2eaff0642be], 
PUP.Optional.MultiPlug, C:\ProgramData\mgohhlkkncickfkjchkojpppnpjfokkb\F.js, In Quarantäne, [db45b707fd8d2d0907e2a2eaff0642be], 

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)
         

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 23.06.2015
Suchlauf-Zeit: 16:12:57
Logdatei: mbam_2.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.06.23.04
Rootkit Datenbank: v2015.06.22.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Dietrich

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 380925
Verstrichene Zeit: 9 Min, 0 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 0
(Keine schädliche Elemente gefunden)

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 0
(Keine schädliche Elemente gefunden)

Dateien: 0
(Keine schädliche Elemente gefunden)

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)