Addition
Code:
Alles auswählen Aufklappen ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:16-08-2015
durchgeführt von G.S (2015-08-16 20:05:19)
Gestartet von C:\Users\G.S\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1041671278-1757929836-1891683304-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1041671278-1757929836-1891683304-503 - Limited - Disabled)
G.S (S-1-5-21-1041671278-1757929836-1891683304-1000 - Administrator - Enabled) => C:\Users\G.S
Gast (S-1-5-21-1041671278-1757929836-1891683304-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1041671278-1757929836-1891683304-1002 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Norton 360 (Disabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Norton 360 (Disabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton 360 (Disabled) {6BFC5632-188D-B806-D13E-C607121B42A0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Ace of Spades (HKLM\...\Steam App 224540) (Version: - Jagex Limited)
Act of War - Direct Action (HKLM\...\{F9B915DF-B79C-4747-9BA3-9705A57DC717}) (Version: 1.00.000 - )
Act of War - High Treason (HKLM\...\{C08EBBFD-C565-472F-9354-5593B9873705}) (Version: 1.00.000 - )
Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Photoshop Elements 7.0 (HKLM\...\Adobe Photoshop Elements 7) (Version: 7.0 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM\...\Advanced SystemCare 8_is1) (Version: 8.1.0 - IObit)
AMD Catalyst Control Center (HKLM\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{0BD03BF6-3A66-EC7F-5155-28A8D6C69409}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Arma 2: Operation Arrowhead (HKLM\...\Steam App 33930) (Version: - Bohemia Interactive)
Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive)
Auslogics DiskDefrag (HKLM\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 5.4.0.0 - Auslogics Labs Pty Ltd)
Ballerburg (HKLM\...\Ballerburg_is1) (Version: - )
Battle vs. Chess Demo (HKLM\...\Battle vs. Chess Demo_is1) (Version: 1.0 - Zuxxez Entertainment)
Battlefront Extreme 2.2 (HKLM\...\{AFD834CA-4579-49DF-9CF0-EA58822A7C2E}_is1) (Version: - )
BattlEye for OA Uninstall (HKLM\...\BattlEye for OA) (Version: - )
CameraHelperMsi (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.4954 - CDBurnerXP)
Command & Conquer(TM) Generäle (HKLM\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer(TM) Generäle (Version: 0.50.0000 - Electronic Arts) Hidden
Command and Conquer(TM) Generäle Die Stunde Null (HKLM\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and Conquer(TM) Generäle Die Stunde Null (Version: 1.00.0000 - Electronic Arts) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Die Stunde Null UncutPatch 1.1 (HKLM\...\Die Stunde Null UncutPatch_is1) (Version: Die Stunde Null UncutPatch 1.1 - UC-Games)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
Free Desktop Clock 3.0 (HKLM\...\Free Desktop Clock_is1) (Version: - Drive Software Company)
Free M4a to MP3 Converter 8.3 (HKLM\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
GameSpy Arcade (HKLM\...\GameSpy Arcade) (Version: - )
Google Chrome (HKLM\...\Google Chrome) (Version: 44.0.2403.155 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.28.1 - Google Inc.) Hidden
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation)
ISO Workshop 5.9 (HKLM\...\ISO Workshop_is1) (Version: - Glorylogic)
Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (HKLM\...\{76DAEC83-AF7B-333C-8A53-83D7C7D39199}) (Version: 9.0.30729 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKLM\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
NetConnect deinstallieren (HKLM\...\NetConnect) (Version: - )
Norton 360 (HKLM\...\N360) (Version: 22.5.2.15 - Symantec Corporation)
Notepad++ (HKLM\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA PhysX (HKLM\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
Opera Stable 30.0.1835.52 (HKLM\...\Opera 30.0.1835.52) (Version: 30.0.1835.52 - Opera Software)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.313.1 - Tracker Software Products Ltd)
PokerStars.eu (HKLM\...\PokerStars.eu) (Version: - PokerStars.eu)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
S.T.A.L.K.E.R. - Shadow of Chernobyl (HKLM\...\S.T.A.L.K.E.R. - Shadow of Chernobyl_is1) (Version: 1.0000 - THQ)
SigmaTel Audio (HKLM\...\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}) (Version: 5.10.5102.0 - SigmaTel)
SiSoftware Sandra Lite 2014.SP3 (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2496}_is1) (Version: 20.42.2014.8 - SiSoftware)
Skype™ 7.7 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Star Wars Battlefront II (HKLM\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Steam (HKLM\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Unturned (HKLM\...\Steam App 304930) (Version: - Nelson Sexton)
Winamp (HKLM\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.10 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WORLD IN CONFLICT (HKLM\...\{F11ADC64-C89E-47F4-A0B3-3665FF859397}) (Version: 1.0.0.0 - Massive Entertainment AB)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{5999E1EE-711E-48D2-9884-851A709F543D}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{A3CA1CF4-5F3E-4AC0-91B9-0D3716E1EAC3}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncShell.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\G.S\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\FileSyncApi.dll (Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
11-08-2015 19:44:14 11.8.2015 trojaner ist weg!!!!!!!
12-08-2015 16:50:09 Wiederherstellungsvorgang
13-08-2015 17:58:38 13.08 neues Java installiert.
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:04 - 2015-05-29 02:03 - 00000938 ____N C:\WINDOWS\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {004F0FCF-4703-4B78-AE43-8B199B2B382B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {06F3F1DF-FCBF-465D-8BE8-337EBC1C5B84} - \Microsoft\Windows\File Classification Infrastructure\Property Definition Sync -> Keine Datei <==== ACHTUNG
Task: {08C614E7-0E9E-4385-80A1-B57D741C85F0} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\WINDOWS\System32\LocationNotificationWindows.exe [2015-07-10] (Microsoft Corporation)
Task: {09FFCF78-1D67-4173-9761-77CA7E09A4EB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0B8B8675-BE25-4D7D-AAA3-50B1FA47252D} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\AikCertEnrollTask
Task: {0C72B578-D676-414D-9F9C-FF0B216A314F} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe generaltel.dll,RunTelemetry -maintenance
Task: {0EE4C56B-4790-406D-A2A2-F2BFA205ED3C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {102847C7-E6F5-4E23-9634-F81F2618EFBA} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1110E2D5-C87F-4EA3-B1EF-48B0EAC0C9BE} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {13550F2C-A475-475F-AE32-F8D7682F8C40} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {136B974B-7BF3-4F11-A533-D9B327ED6BDF} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {14023A78-8640-4F91-9C23-12712F9DED04} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1B125EB0-20B0-4A1F-9E9C-78CD1C9D2D06} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {1D129CD1-672D-4D21-B9F4-624595FC5C95} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1E59CAD0-D49B-4553-88DE-227F411F5D57} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\WINDOWS\system32\dmclient.exe [2015-07-10] (Microsoft Corporation)
Task: {201CF893-BC56-46DA-8598-6F75905C9028} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Uninstallation
Task: {210B29B6-A68A-4580-AC06-855728389B03} - System32\Tasks\Microsoft\Windows\CertificateServicesClient\KeyPreGenTask
Task: {287DB640-D9B1-4A23-9F3D-F85432030A1C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {28D5AA69-FCC3-458D-829D-04EBDC73BA4F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)
Task: {2AD3362D-3D6D-4C3A-A2AA-5474C374EB0C} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2DC32A4D-BEAB-4026-9A76-2A1EC442ACB7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {2E55AA51-E9B8-40B5-9EA6-0A24D15DDE63} - System32\Tasks\Microsoft\Windows\AppID\EDP Policy Manager
Task: {3A66299E-482E-4A1B-8AAD-1964357840EE} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation)
Task: {3C480DB5-9C57-4D02-A3C4-6737DD9DD027} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\WINDOWS\system32\dstokenclean.exe [2015-07-10] (Microsoft Corporation)
Task: {3F628C45-4379-43B1-82E3-3D0AC5EF7C33} - System32\Tasks\Microsoft\Windows\Maps\MapsUpdateTask
Task: {489A34B7-9791-432B-A762-FEE4D0E9562E} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {49C6F58F-98A3-4416-98C4-24BD457AC122} - System32\Tasks\Microsoft\Windows\Maps\MapsToastTask
Task: {4ADF1494-F5E2-4A89-BD99-D4198C75C5FA} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {4AFA28DA-731C-4C36-B73C-E2DD42BECF1E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {4BF1C744-3F5F-435D-87E1-F34F895EE962} - System32\Tasks\{321AFE30-0A47-4B7E-98EA-52A8F0F7F055} => pcalua.exe -a C:\Windows\Corel\uninst32.exe
Task: {4C61D4C0-ADF1-48A4-91D6-C64A8CE35E79} - System32\Tasks\Microsoft\Windows\WCM\WiFiTask => C:\WINDOWS\System32\WiFiTask.exe [2015-07-10] (Microsoft Corporation)
Task: {4C7B56E3-0356-4A04-B96E-6F65F43BEE41} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Automatic App Update
Task: {50B4CB51-43CB-4EDE-BBAD-B20D3A1F1A3F} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {51EF1EC4-6A17-43FA-968E-18A4F967D234} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {56D4CE5B-F875-43E8-B6F4-00CF0FB79D11} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-08-05] (Google Inc.)
Task: {5CE5009F-1260-496A-AE13-40BEF27A8EFB} - System32\Tasks\Microsoft\Windows\TPM\Tpm-HASCertRetr
Task: {5CFC6547-F84F-4299-A6D9-75E2E9304389} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => C:\windows\system32\MusNotification.exe [2015-08-06] (Microsoft Corporation)
Task: {5D1A585A-6FC6-4EB2-BD3E-53726FC2D7AA} - System32\Tasks\ASC8_SkipUac_G.S => C:\Program Files\IObit\Advanced SystemCare 8\ASC.exe [2015-01-27] (IObit)
Task: {6451D5E9-DC34-446B-AD5B-9D75EFC36B38} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\WINDOWS\System32\WindowsActionDialog.exe [2015-07-10] (Microsoft Corporation)
Task: {6CC2569D-EFD0-42A4-A0C0-FE506F7AF0ED} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\WINDOWS\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {7135AB65-C102-40AF-8A95-750F84E26CA4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => C:\windows\system32\MusNotification.exe [2015-08-06] (Microsoft Corporation)
Task: {774A65FA-58F3-4431-8C46-7078368F6A3E} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\WINDOWS\System32\dsregcmd.exe [2015-07-10] (Microsoft Corporation)
Task: {784017A0-41E3-423C-B4F3-CF8F69DF8C64} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\Installation
Task: {7846E873-72BC-474A-8C5A-856F0752DC4A} - System32\Tasks\Opera scheduled Autoupdate 1432837796 => C:\Program Files\Opera\launcher.exe [2015-05-18] (Opera Software)
Task: {797930BC-B506-4F11-9896-4C928674405C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {7C0654B5-C1CB-462A-B9F7-DCE562F692A8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {7FD1B896-2FB2-4417-9CD0-32F283941201} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {824D03B3-D860-41EA-B5F0-6DDD04B7A3A0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {83BA6D84-EFF6-495C-8AC1-5AA733E2CDD3} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360\Engine\22.5.2.15\WSCStub.exe [2015-07-16] (Symantec Corporation)
Task: {88742C4E-AF27-4EC0-AA61-61526B2F4601} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install => C:\WINDOWS\system32\usoclient.exe [2015-07-10] (Microsoft Corporation)
Task: {8AADE6A8-2137-462A-A3F6-621908C10AEC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {8BD8D26D-9B78-4CF6-9D46-9E9201ECED6B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe [2015-08-06] (Microsoft Corporation)
Task: {8D42C4CD-99CA-474D-B7B4-8918F6FD0BFD} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation)
Task: {97BE7E88-70D5-4449-85AC-A72E39F1B0D4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {AE4D9080-D835-4DF8-AA34-705E02987787} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {B5102678-76C0-44A6-AFDB-18A673D681E9} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BE145D02-1F5C-44BC-8680-99CB682AF70F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C29ABFB1-2868-49E1-8867-D58D9E76EBBB} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {C323C775-DD06-4D7E-A039-15D8340E7F8C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C7F8DC2D-9D31-4DFE-A34C-1A5E18943525} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\WINDOWS\system32\ClipUp.exe [2015-08-06] (Microsoft Corporation)
Task: {C87BCE1D-2B9F-4537-9A1C-4EC4DF42F2E0} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {C8E1732D-AED0-4067-AC0A-322CF4811D67} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CE610FE6-9B50-4922-965D-584131C622E8} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D40D5914-E992-4562-A38D-C8FAB34A9F22} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {D641129E-9E0A-4A8F-8456-F7508EB67942} - System32\Tasks\{3A5783A2-6FED-44A0-BA7A-A56FEBCE8FC9} => Chrome.exe hxxp://ui.skype.com/ui/0/7.1.0.105/de/abandoninstall?page=tsMain
Task: {D982E219-39C5-46C2-A31C-D4775A53CDD1} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {D9C31B2B-20BE-402C-8838-D89496CD324A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {DB84484D-C116-4831-9D7E-EBB701EE7957} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {DD1576BF-C204-4DF2-A716-01121284C0BC} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {DD87F70B-C8AE-4ECD-9AFC-288536510545} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics => C:\WINDOWS\system32\disksnapshot.exe [2015-07-10] (Microsoft Corporation)
Task: {E2CD6960-F0A4-4D74-8ED9-09ABBD1662E1} - System32\Tasks\Norton 360\Norton Autofix => C:\Program Files\Norton 360\Engine\22.5.2.15\SymErr.exe [2015-05-19] (Symantec Corporation)
Task: {E3FBBA84-1DB8-48C0-9156-90AB8123E65E} - System32\Tasks\Microsoft\Windows\Sysmain\ResPriStaticDbSync
Task: {E5315AA3-0FA6-44DE-BE63-5FA7739572B7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {ECC414BD-E640-4852-BFA5-A6C244BB0B9D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {F31D7EF8-31AF-4E29-B9A4-6152E173C5CA} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => Rundll32.exe generaltel.dll,RunTelemetryW
Task: {F4CFDB69-AB0C-4DAD-AFD8-6CC6F672E3F1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-08-05] (Google Inc.)
Task: {F5E378FE-467A-4A80-958A-F8D44A4B6E9E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {F90A0069-0051-4FB4-B57E-0A69A789DF67} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FB6B539D-57C2-4E39-98FD-C9D2BF921B63} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\WINDOWS\System32\sihclient.exe [2015-07-10] (Microsoft Corporation)
Task: {FD4FA901-31B1-4E6A-B81D-5796CF033048} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare 8\Monitor.exe [2015-01-23] (IObit)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-08-06 20:16 - 2015-08-06 20:16 - 00025088 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-08-09 14:13 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files\IObit\Advanced SystemCare 8\sqlite3.dll
2014-08-06 21:50 - 2013-04-24 19:20 - 02007040 _____ () C:\Program Files\Free Desktop Clock\timeserv.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 00301056 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2015-08-09 14:14 - 2014-10-16 10:26 - 00622880 _____ () C:\Program Files\IObit\LiveUpdate\ProductStatistics.dll
2015-08-12 21:17 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-08-12 21:17 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-08-12 21:17 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2015-08-12 21:17 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2015-08-12 21:17 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-11-09 15:33 - 2014-11-09 15:48 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2015-08-06 20:16 - 2015-08-06 20:16 - 01769056 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-09 14:13 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madExcept_.bpl
2015-08-09 14:13 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madBasic_.bpl
2015-08-09 14:13 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files\IObit\Advanced SystemCare 8\madDisAsm_.bpl
2015-08-06 20:16 - 2015-08-06 20:16 - 01769056 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2014-08-06 21:50 - 2013-06-07 03:06 - 01147392 _____ () C:\Program Files\Free Desktop Clock\Clock.dll
2015-07-10 10:24 - 2015-07-10 10:24 - 00288768 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 04317696 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 10:25 - 2015-07-10 15:16 - 00377856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01181184 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-12 17:57 - 2015-08-12 17:57 - 01425920 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ahcache.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CoreMessagingRegistrar => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\StateRepository => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TileDataModelSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\UserManager => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\dell.com -> dell.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\sony.com -> sony.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\100sexlinks.com -> 100sexlinks.com
Da befinden sich 4787 mehr eingeschränkte Seiten.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^Users^G.S^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Produktregistrierung.lnk => C:\Windows\pss\Logitech . Produktregistrierung.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\G.S\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: CorelCorelDRAW10 Reminder => "C:\Program Files\Corel\Graphics10\Register\NAVBrowser.exe" /r /i "C:\Program Files\Corel\Graphics10\Register\NavLoad.ini"
MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: ManyCam => "C:\Program Files\ManyCam\ManyCam.exe" --silent
MSCONFIG\startupreg: SDTray => "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: SigmatelSysTrayApp => sttray.exe
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\steam.exe" -silent
MSCONFIG\startupreg: VirtualCloneDrive => "D:\VirtualCloneDrive\VCDDaemon.exe" /s
HKLM\...\StartupApproved\Run: => "SDTray"
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1041671278-1757929836-1891683304-1000\...\StartupApproved\Run: => "Advanced SystemCare 8"
==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-32bit] => (Allow) LPort=808
FirewallRules: [{B54876FE-380C-432F-B596-E04E14DB8FDE}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{CC43A823-777F-4877-A5EF-8C3E71225F3D}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{4BEF4E7A-B92E-4529-900A-4392F4F9A6E0}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{5403DAB2-0877-4243-9503-E4AC586C7DCC}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA.exe
FirewallRules: [{988F1D79-C7D0-4590-B975-B5315001F0D2}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{B33652AA-BEAD-44CE-B378-5E625F5E6534}] => (Allow) D:\SteamLibrary\SteamApps\common\steamapps\common\Arma 2 Operation Arrowhead\ArmA2OA_BE.exe
FirewallRules: [{D0FA0FBC-263B-4112-8908-24595254B0D0}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F71E4811-4AF7-435E-87B8-78ED1EEE2752}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [{8CD40489-4D13-4C45-8B0C-79E1F619FC25}] => (Allow) C:\Program Files\Steam\Steam.exe
FirewallRules: [{02CE46FC-57A6-40AE-9CEC-9986912456B2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{6DEDED7E-AB42-4FB7-954F-39484E99091F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{46E25B72-0E6C-474D-8EE7-0C73A047FC6F}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe
FirewallRules: [{8ABF9BA9-978B-4E63-B59F-9EC6F8A992FD}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe
FirewallRules: [{F8679997-DAFB-4579-8167-51E185D40C04}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe
FirewallRules: [{02EC91DE-D617-4242-9381-642C5DC87A2F}] => (Allow) D:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe
FirewallRules: [{B1B8F3DE-A7A4-4722-A7D7-4495932A9CC8}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{CE9501CC-6F28-4D52-A48C-A1F68065B8B6}] => (Allow) C:\Program Files\Winamp\winamp.exe
FirewallRules: [{96A8E4FB-7F0B-461C-A80E-A9DEAECD53FE}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_ds.exe
FirewallRules: [{814D9FCC-2E1A-4979-9CBE-50C51DEB4626}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_ds.exe
FirewallRules: [{EE92B57B-8DFF-424A-A7E4-0A53BB1C6CA8}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_online.exe
FirewallRules: [{FDE3978E-C836-45F3-9686-9F9CBEB8A0E9}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic_online.exe
FirewallRules: [{9FDEDD44-95A7-4F9A-B692-7B1B0A406898}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic.exe
FirewallRules: [{0892B450-FBDA-427D-A613-4AFE411CDBB2}] => (Allow) C:\Program Files\Sierra Entertainment\WORLD IN CONFLICT\wic.exe
FirewallRules: [{F7F130FE-D616-49D2-8548-F180E998D169}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{C4809315-ACFB-4F69-9931-8FFB7F35D0FE}] => (Allow) C:\Program Files\Adobe\Photoshop Elements 7.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{7CEF1A47-4134-44CB-8F5F-928CE1D88DFF}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{D37017FF-4BCD-4DED-8A28-3109F336DFF4}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{3BBBCD1B-6D83-4855-ADF4-6E1BBEFAD168}] => (Allow) C:\Windows\System32\PnkBstrB.exe
FirewallRules: [{6DCB50D5-F470-484C-AD01-F7E3BD05F1C0}] => (Allow) C:\Windows\System32\PnkBstrB.exe
FirewallRules: [{6DBBF976-6608-458A-A78C-C1620D7B4B44}] => (Allow) C:\Windows\System32\PnkBstrA.exe
FirewallRules: [{8489CF73-51E1-4637-AC1E-4EE8BFB9F551}] => (Allow) C:\Windows\System32\PnkBstrA.exe
FirewallRules: [{EF779361-E549-4994-94B4-1F0E0B85AC33}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP3\WNt500x86\RpcSandraSrv.exe
FirewallRules: [{72E584DF-7461-40B3-B0DF-F12C0D8D52C3}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.SP3\RpcAgentSrv.exe
FirewallRules: [{4D95ACF8-7457-4983-93EB-AA7BF4A5B3AE}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{2D0E068B-4CBF-42B3-9DC7-5FCC765FB856}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/16/2015 07:57:21 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (08/16/2015 07:57:21 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (08/16/2015 07:57:13 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (08/16/2015 06:50:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OHub.exe, Version: 16.0.6106.2350, Zeitstempel: 0x55c40ea5
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c599e6
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000e1267
ID des fehlerhaften Prozesses: 0xbc8
Startzeit der fehlerhaften Anwendung: 0xOHub.exe0
Pfad der fehlerhaften Anwendung: OHub.exe1
Pfad des fehlerhaften Moduls: OHub.exe2
Berichtskennung: OHub.exe3
Vollständiger Name des fehlerhaften Pakets: OHub.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OHub.exe5
Error: (08/16/2015 05:42:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (08/16/2015 03:10:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OHub.exe, Version: 16.0.6106.2350, Zeitstempel: 0x55c40ea5
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c599e6
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000e1267
ID des fehlerhaften Prozesses: 0x142c
Startzeit der fehlerhaften Anwendung: 0xOHub.exe0
Pfad der fehlerhaften Anwendung: OHub.exe1
Pfad des fehlerhaften Moduls: OHub.exe2
Berichtskennung: OHub.exe3
Vollständiger Name des fehlerhaften Pakets: OHub.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OHub.exe5
Error: (08/15/2015 07:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OHub.exe, Version: 16.0.6106.2350, Zeitstempel: 0x55c40ea5
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10240.16430, Zeitstempel: 0x55c599e6
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000e1267
ID des fehlerhaften Prozesses: 0x9c4
Startzeit der fehlerhaften Anwendung: 0xOHub.exe0
Pfad der fehlerhaften Anwendung: OHub.exe1
Pfad des fehlerhaften Moduls: OHub.exe2
Berichtskennung: OHub.exe3
Vollständiger Name des fehlerhaften Pakets: OHub.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: OHub.exe5
Error: (08/15/2015 07:11:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (08/15/2015 01:01:28 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (08/15/2015 01:01:28 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Bei der Aktivierung der App „Microsoft.WindowsStore_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Systemfehler:
=============
Error: (08/16/2015 07:59:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Net.Msmq-Listeneradapter" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/16/2015 07:59:20 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Net.Msmq-Listeneradapter erreicht.
Error: (08/16/2015 07:59:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Net.Pipe-Listeneradapter" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/16/2015 07:59:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Net.Pipe-Listeneradapter erreicht.
Error: (08/16/2015 07:58:43 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Net.Tcp-Listeneradapter" ist vom Dienst "Net.Tcp-Portfreigabedienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (08/16/2015 07:57:13 PM) (Source: DCOM) (EventID: 10010) (User: GS-PC)
Description: CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mca
Error: (08/16/2015 07:57:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/16/2015 07:57:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/16/2015 07:57:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/16/2015 07:57:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Microsoft Office:
=========================
Error: (08/16/2015 07:57:21 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (08/16/2015 07:57:21 PM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig
Error: (08/16/2015 07:57:13 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141
Error: (08/16/2015 06:50:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OHub.exe16.0.6106.235055c40ea5ntdll.dll10.0.10240.1643055c599e6c0000374000e1267bc801d0d843904109bdC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbwe\OHub.exeC:\WINDOWS\SYSTEM32\ntdll.dlle2bd1989-eebd-4e17-9bca-399eb40d61a1Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbweMicrosoft.MicrosoftOfficeHub
Error: (08/16/2015 05:42:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.Windows.Photos_8wekyb3d8bbwe!App-2147023170
Error: (08/16/2015 03:10:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OHub.exe16.0.6106.235055c40ea5ntdll.dll10.0.10240.1643055c599e6c0000374000e1267142c01d0d824f425324dC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbwe\OHub.exeC:\WINDOWS\SYSTEM32\ntdll.dll6efc30ea-c0b0-4d03-a772-ee12cd21bbfeMicrosoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbweMicrosoft.MicrosoftOfficeHub
Error: (08/15/2015 07:25:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: OHub.exe16.0.6106.235055c40ea5ntdll.dll10.0.10240.1643055c599e6c0000374000e12679c401d0d77f597c874cC:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbwe\OHub.exeC:\WINDOWS\SYSTEM32\ntdll.dllf4272dbe-b709-4ea2-86e2-b7d7284541ddMicrosoft.MicrosoftOfficeHub_17.6106.23501.0_x86__8wekyb3d8bbweMicrosoft.MicrosoftOfficeHub
Error: (08/15/2015 07:11:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI-2144927141
Error: (08/15/2015 01:01:28 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.WindowsStore_8wekyb3d8bbwe!App-2147023170
Error: (08/15/2015 01:01:28 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GS-PC)
Description: Microsoft.WindowsStore_8wekyb3d8bbwe!App-2147023170
CodeIntegrity:
===================================
Date: 2015-08-16 20:01:22.549
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.522
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.496
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.469
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.440
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.413
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.387
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.360
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.333
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
Date: 2015-08-16 20:01:22.306
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\wdmaud.drv because the set of per-page image hashes could not be found on the system.
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) D CPU 3.00GHz
Prozentuale Nutzung des RAM: 46%
Installierter physikalischer RAM: 2046.14 MB
Verfügbarer physikalischer RAM: 1097.55 MB
Summe virtueller Speicher: 4094.14 MB
Verfügbarer virtueller Speicher: 2957.27 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:145.96 GB) (Free:21.26 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:149.01 GB) (Free:101.59 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 23F12D67)
Partition 1: (Not Active) - (Size=47 MB) - (Type=DE)
Partition 2: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=3 GB) - (Type=DB)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 149 GB) (Disk ID: 00000081)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)
==================== Ende vom raportu ============================
16.08.2015, 19:18
Baum-Darstellung