Windows 10: Chrome-Browser öffnet eigenständig Seite von Watch4.de

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:48 on 25/09/2015 (benja)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:23-09-2015
durchgeführt von benja (Administrator) auf BENJAMIN (25-09-2015 15:49:27)
Gestartet von C:\Users\benja\Desktop
Geladene Profile: benja (Verfügbare Profile: benja)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIILE.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.99\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.99\nacl64.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Movie Studio Platinum 13.0\MovieStudioPlatinum130.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Movie Studio Platinum 13.0\ErrorReportLauncher.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Movie Studio Platinum 13.0\x86\FileIOSurrogate.exe
(Sony Creative Software Inc.) C:\Program Files\Sony\Movie Studio Platinum 13.0\x86\sfvstserver.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamresearch.exe
(Telegram Messenger LLP) C:\Users\benja\AppData\Roaming\Telegram Desktop\Telegram.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14054104 2015-07-30] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-23] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3111880 2015-07-23] (Logitech, Inc.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1178400 2015-07-06] (Intel Corporation)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1855608 2015-02-20] (G DATA Software AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software)
HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53737488 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8461224 2015-09-16] (Piriform Ltd)
HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIILE.EXE [283232 2012-02-29] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\MountPoints2: {df878f75-5c8f-11e5-9bff-74d43596495e} - "I:\LG_PC_Programs.exe" 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2015-07-30]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{c6e8cdfb-f4e6-4847-b43d-aee573696d43}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{ca4ab86c-408c-4da0-9b40-27730c03dcc4}: [DhcpNameServer] 7.254.254.254

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2015-09-22] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-26] (Oracle Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-07-23] (Logitech, Inc.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2015-09-22] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-26] (Oracle Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-07-23] (Logitech, Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-22] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-22] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-22] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2015-09-22] (Microsoft Corporation)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-26] (Oracle Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-07-11] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2015-09-22] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-07-30]

Chrome: 
=======
CHR Profile: C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2015-07-30]
CHR Extension: (Google Präsentationen) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-30]
CHR Extension: (Google Docs) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-30]
CHR Extension: (Google Drive) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-30]
CHR Extension: (YouTube) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-30]
CHR Extension: (Google-Suche) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-30]
CHR Extension: (Google Play Musik) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2015-07-30]
CHR Extension: (Google Tabellen) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-30]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (AdBlock) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-30]
CHR Extension: (Google Play Music) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\icppfcnhkcmnfdhfhphakoifcfokfdhg [2015-07-30]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-30]
CHR Extension: (SmoothScroll) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbokbjkabcmbfdlbddjidfmibcpneigj [2015-07-30]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
CHR Extension: (Google Mail) - C:\Users\benja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-30]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2528888 2015-04-16] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [965240 2015-02-20] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3672560 2015-04-07] (G Data Software AG)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2836056 2015-09-09] (Microsoft Corporation)
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [23504 2014-12-25] (Micro-Star Int'l Co., Ltd.)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3193080 2015-02-20] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789112 2015-03-04] (G Data Software AG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-23] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-07-06] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [796624 2015-07-14] (Tunngle.net GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [150016 2015-08-04] (G Data Software AG)
S0 GDElam; C:\Windows\System32\DRIVERS\GDElam.sys [117904 2015-01-08] (G Data Software AG)
R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-08-04] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230400 2015-08-04] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [91648 2015-08-04] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68608 2015-08-04] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-08-12] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65024 2015-07-30] (G Data Software AG)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184096 2015-06-29] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-23] (Realtek                                            )
R3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-09-08] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [146072 2015-09-08] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U4 dmwappushsvc; kein ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-25 15:49 - 2015-09-25 15:50 - 00021727 _____ C:\Users\benja\Desktop\FRST.txt
2015-09-25 15:49 - 2015-09-25 15:49 - 00000000 ____D C:\FRST
2015-09-25 15:48 - 2015-09-25 15:49 - 02192384 _____ (Farbar) C:\Users\benja\Desktop\FRST64.exe
2015-09-25 15:48 - 2015-09-25 15:48 - 00050477 _____ C:\Users\benja\Desktop\Defogger.exe
2015-09-25 15:48 - 2015-09-25 15:48 - 00000472 _____ C:\Users\benja\Desktop\defogger_disable.log
2015-09-25 15:48 - 2015-09-25 15:48 - 00000000 _____ C:\Users\benja\defogger_reenable
2015-09-25 15:44 - 2015-09-25 15:44 - 00000000 ____D C:\Users\benja\AppData\Local\OfficeBSCache-MyComputer
2015-09-25 15:39 - 2015-09-25 15:39 - 00112647 _____ C:\Users\benja\AppData\Local\recently-used.xbel
2015-09-25 15:17 - 2015-09-25 15:17 - 00016148 _____ C:\Windows\system32\BENJAMIN_benja_HistoryPrediction.bin
2015-09-25 14:54 - 2015-09-25 15:42 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-09-25 14:54 - 2015-09-25 14:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-24 19:32 - 2015-09-24 19:32 - 06521184 _____ (Tim Kosse) C:\Users\benja\Downloads\FileZilla_3.14.0_win64-setup.exe
2015-09-24 17:33 - 2015-09-24 17:33 - 00001219 _____ C:\Users\Public\Desktop\LibreOffice 5.0.lnk
2015-09-24 17:33 - 2015-09-24 17:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0
2015-09-24 17:32 - 2015-09-24 17:33 - 00000000 ____D C:\Program Files (x86)\LibreOffice 5
2015-09-24 16:08 - 2015-09-24 16:08 - 00000000 ____D C:\Program Files (x86)\Lame For Audacity
2015-09-22 17:36 - 2015-09-22 17:36 - 00001589 _____ C:\Users\benja\Desktop\PowerPoint 2016.lnk
2015-09-22 17:36 - 2015-09-22 17:36 - 00001553 _____ C:\Users\benja\Desktop\Word 2016.lnk
2015-09-22 17:35 - 2015-09-22 17:35 - 00001545 _____ C:\Users\benja\Desktop\Excel 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2015-09-22 17:34 - 2015-09-22 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-Tools
2015-09-22 17:33 - 2015-09-22 17:33 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-09-22 17:33 - 2015-09-22 16:54 - 00247348 _____ C:\WindowsMSUIGHUB.tt2
2015-09-22 16:17 - 2015-09-22 17:45 - 00000000 ____D C:\Users\benja\AppData\Local\Microsoft Help
2015-09-22 15:32 - 2015-09-22 15:32 - 00000000 ____D C:\Users\Public\Documents\sun
2015-09-21 16:30 - 2007-09-07 17:33 - 00135168 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBAPI.dll
2015-09-21 16:30 - 2007-03-28 18:26 - 00065536 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBUtil.dll
2015-09-21 16:30 - 2006-12-19 18:31 - 00110592 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBDSCVR.dll
2015-09-21 16:30 - 2006-12-19 18:20 - 00077824 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EBAPI.dll
2015-09-21 16:30 - 2003-12-17 01:01 - 00055808 _____ (SEIKO EPSON CORPORATION) C:\Windows\SysWOW64\EEBSDKIF.dll
2015-09-21 16:28 - 2015-09-25 15:27 - 00000275 _____ C:\Windows\WindowsUpdate.log
2015-09-21 16:25 - 2015-09-21 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2015-09-21 16:25 - 2015-09-21 16:25 - 00001003 _____ C:\Users\Public\Desktop\EPSON Scan.lnk
2015-09-21 16:25 - 2015-09-21 16:25 - 00000000 ____D C:\Program Files\EpsonNet
2015-09-21 16:25 - 2015-09-21 16:25 - 00000000 ____D C:\Program Files (x86)\epson
2015-09-21 16:25 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll
2015-09-21 16:25 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll
2015-09-21 16:25 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll
2015-09-21 16:25 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll
2015-09-21 16:25 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll
2015-09-21 16:25 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll
2015-09-21 16:25 - 2012-07-24 00:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll
2015-09-21 16:25 - 2011-12-12 00:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe
2015-09-21 16:25 - 2011-03-15 03:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_ID4BILE.DLL
2015-09-21 16:25 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL
2015-09-19 13:39 - 2015-09-19 13:39 - 00001411 _____ C:\Users\benja\Desktop\Ubuntu VirtualBox.lnk
2015-09-19 13:11 - 2015-09-20 16:44 - 00000000 ____D C:\Users\benja\.VirtualBox
2015-09-19 13:11 - 2015-09-19 13:11 - 00000000 ____D C:\Users\benja\VirtualBox VMs
2015-09-19 13:11 - 2015-09-19 13:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2015-09-19 13:11 - 2015-09-19 13:11 - 00000000 ____D C:\Program Files\Oracle
2015-09-19 13:11 - 2015-09-08 11:48 - 00964392 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2015-09-19 13:11 - 2015-09-08 11:47 - 00138904 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2015-09-10 15:22 - 2015-09-10 15:22 - 00000000 ____D C:\Users\benja\AppData\Roaming\Mozilla
2015-09-10 01:50 - 2015-09-10 01:50 - 00627288 _____ (Microsoft Corporation) C:\Windows\system32\msvcp140.dll
2015-09-10 01:50 - 2015-09-10 01:50 - 00382560 _____ (Microsoft Corporation) C:\Windows\system32\vccorlib140.dll
2015-09-10 01:50 - 2015-09-10 01:50 - 00325232 _____ (Microsoft Corporation) C:\Windows\system32\concrt140.dll
2015-09-10 01:50 - 2015-09-10 01:50 - 00080984 _____ (Microsoft Corporation) C:\Windows\system32\vcruntime140.dll
2015-09-09 23:55 - 2015-09-09 23:55 - 00431704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp140.dll
2015-09-09 23:55 - 2015-09-09 23:55 - 00259168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vccorlib140.dll
2015-09-09 23:55 - 2015-09-09 23:55 - 00235632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\concrt140.dll
2015-09-09 23:55 - 2015-09-09 23:55 - 00075960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vcruntime140.dll
2015-09-09 20:49 - 2015-09-09 20:49 - 00007600 _____ C:\Users\benja\AppData\Local\Resmon.ResmonCfg
2015-09-09 14:59 - 2015-09-02 03:20 - 00077400 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-09-09 14:59 - 2015-09-02 02:25 - 03586560 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2015-09-09 14:59 - 2015-09-02 02:25 - 01382912 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2015-09-09 14:59 - 2015-08-27 08:36 - 03620736 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-09 14:59 - 2015-08-27 08:32 - 00608936 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2015-09-09 14:59 - 2015-08-27 08:04 - 21874688 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2015-09-09 14:59 - 2015-08-27 07:59 - 02880032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-09 14:59 - 2015-08-27 07:55 - 24594944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-09 14:59 - 2015-08-27 07:54 - 00541248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2015-09-09 14:59 - 2015-08-27 07:54 - 00365568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 14:59 - 2015-08-27 07:51 - 02350592 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-09 14:59 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2015-09-09 14:59 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-09 14:59 - 2015-08-27 07:47 - 12503552 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-09 14:59 - 2015-08-27 07:43 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-09 14:59 - 2015-08-27 07:43 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-09 14:59 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2015-09-09 14:59 - 2015-08-27 07:42 - 00578560 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-09-09 14:59 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.PicturePassword.dll
2015-09-09 14:59 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2015-09-09 14:59 - 2015-08-27 07:39 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 14:59 - 2015-08-27 07:23 - 19324416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-09 14:59 - 2015-08-27 07:23 - 00303104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-09 14:59 - 2015-08-27 07:16 - 18806272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2015-09-09 14:59 - 2015-08-27 07:16 - 02153472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-09 14:59 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 14:59 - 2015-08-27 07:12 - 00650752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-09 14:59 - 2015-08-27 07:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-09 14:59 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2015-09-09 14:59 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shacct.dll
2015-09-09 14:59 - 2015-08-27 07:09 - 11262464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-09 14:59 - 2015-08-27 07:08 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-08 15:49 - 2015-09-08 15:49 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2015-09-08 11:47 - 2015-09-08 11:47 - 00146072 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2015-09-08 11:47 - 2015-09-08 11:47 - 00117768 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
2015-09-06 13:17 - 2015-09-24 20:30 - 00000000 ____D C:\Program Files\CCleaner
2015-09-06 13:17 - 2015-09-06 13:17 - 00002856 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-09-06 13:17 - 2015-09-06 13:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-09-01 14:12 - 2015-08-25 16:18 - 00574072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-09-01 14:10 - 2015-08-25 20:38 - 42840184 _____ C:\Windows\system32\nvcompiler.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 37819184 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 22559352 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 18569336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 16646624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 15630616 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 14945552 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 13667032 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 12192048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 02354808 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 02105976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 01898104 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435582.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 01558648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435582.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 01178576 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 01075320 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 01064752 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 01001440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00986232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00945272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00787200 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00785152 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00632848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00631312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00601240 _____ C:\Windows\system32\nvmcumd.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00408368 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00387536 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00376440 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00364152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00339576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00316120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00155976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-09-01 14:10 - 2015-08-25 20:38 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-09-01 13:55 - 2015-08-11 06:52 - 00069416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-08-29 14:39 - 2015-08-29 14:39 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-29 14:39 - 2015-08-29 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-29 11:50 - 2015-08-20 08:07 - 08019296 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-08-29 11:50 - 2015-08-20 08:06 - 00609592 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-08-29 11:50 - 2015-08-20 08:02 - 22324656 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-08-29 11:50 - 2015-08-20 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2015-08-29 11:50 - 2015-08-20 07:21 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-29 11:50 - 2015-08-20 07:16 - 20857848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-08-29 11:50 - 2015-08-20 07:13 - 02235904 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-08-29 11:50 - 2015-08-18 09:56 - 02498808 _____ C:\Windows\system32\CoreUIComponents.dll
2015-08-29 11:50 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2015-08-29 11:50 - 2015-08-18 09:54 - 01396064 _____ (Microsoft Corporation) C:\Windows\system32\LicenseManager.dll
2015-08-29 11:50 - 2015-08-18 09:27 - 01771592 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2015-08-29 11:50 - 2015-08-18 09:24 - 00963920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2015-08-29 11:50 - 2015-08-18 09:13 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\WlanMediaManager.dll
2015-08-29 11:50 - 2015-08-18 09:13 - 00387584 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2015-08-29 11:50 - 2015-08-18 09:12 - 02225664 _____ (Microsoft Corporation) C:\Windows\system32\NetworkMobileSettings.dll
2015-08-29 11:50 - 2015-08-18 09:07 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2015-08-29 11:50 - 2015-08-18 09:04 - 01234944 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-08-29 11:50 - 2015-08-18 09:04 - 00859136 _____ (Microsoft Corporation) C:\Windows\system32\modernexecserver.dll
2015-08-29 11:50 - 2015-08-18 08:59 - 01294336 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2015-08-29 11:50 - 2015-08-18 08:59 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\WcnApi.dll
2015-08-29 11:50 - 2015-08-18 08:58 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2015-08-29 11:50 - 2015-08-18 08:58 - 00117760 _____ (Microsoft Corporation) C:\Windows\system32\dafWCN.dll
2015-08-29 11:50 - 2015-08-18 08:58 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2015-08-29 11:50 - 2015-08-18 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll
2015-08-29 11:50 - 2015-08-18 08:57 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll
2015-08-29 11:50 - 2015-08-18 08:56 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\BthRadioMedia.dll
2015-08-29 11:50 - 2015-08-18 08:55 - 02178560 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2015-08-29 11:50 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2015-08-29 11:50 - 2015-08-18 08:54 - 00247296 _____ C:\Windows\system32\facecredentialprovider.dll
2015-08-29 11:50 - 2015-08-18 08:52 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-08-29 11:50 - 2015-08-18 08:50 - 01795072 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2015-08-29 11:50 - 2015-08-18 08:49 - 01061888 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2015-08-29 11:50 - 2015-08-18 08:49 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2015-08-29 11:50 - 2015-08-18 08:49 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\PackageStateRoaming.dll
2015-08-29 11:50 - 2015-08-18 08:36 - 01226752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcnwiz.dll
2015-08-29 11:50 - 2015-08-18 08:35 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WcnApi.dll
2015-08-29 11:50 - 2015-08-18 08:35 - 00095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWCN.dll
2015-08-29 11:50 - 2015-08-18 08:34 - 00037376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll
2015-08-29 11:50 - 2015-08-18 08:29 - 01593344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-08-29 11:50 - 2015-08-18 08:26 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PackageStateRoaming.dll
2015-08-29 11:50 - 2015-08-18 06:44 - 00008847 _____ C:\Windows\system32\ResPriHMImageList
2015-08-26 20:27 - 2015-08-26 20:27 - 00000000 ____D C:\Users\benja\AppData\Roaming\Sun
2015-08-26 20:27 - 2015-08-26 20:27 - 00000000 ____D C:\Users\benja\.oracle_jre_usage

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-25 15:48 - 2015-07-30 14:42 - 00000000 ____D C:\Users\benja
2015-09-25 15:42 - 2015-07-30 20:30 - 00000600 _____ C:\Users\benja\AppData\Local\PUTTY.RND
2015-09-25 15:39 - 2015-07-31 18:01 - 00000000 ____D C:\Users\benja\.gimp-2.8
2015-09-25 15:36 - 2015-07-30 16:08 - 00000000 ____D C:\Users\benja\AppData\Local\PasswordSafe
2015-09-25 15:28 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\sru
2015-09-25 15:27 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\AppReadiness
2015-09-25 15:25 - 2015-07-30 17:05 - 00000000 ____D C:\Users\benja\AppData\Roaming\Skype
2015-09-25 15:05 - 2015-07-30 15:50 - 00001136 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-25 14:36 - 2015-07-10 11:05 - 00032768 ___SH C:\Windows\system32\config\ELAM
2015-09-25 14:34 - 2015-07-30 19:40 - 00000000 ____D C:\Users\benja\Documents\Movie Studio Platinum 13.0 Projekte
2015-09-25 14:28 - 2015-07-30 19:43 - 00004154 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{49EDACEF-6715-49EC-9AFF-E7655F6E5E4C}
2015-09-25 14:25 - 2015-07-30 15:50 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-24 21:24 - 2015-07-30 20:59 - 00000000 ____D C:\Users\benja\AppData\Roaming\TS3Client
2015-09-24 20:53 - 2015-07-30 15:48 - 00000000 ___RD C:\Users\benja\Desktop\Programme
2015-09-24 20:31 - 2015-07-30 20:33 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-24 20:29 - 2015-07-30 19:27 - 00000000 ____D C:\Users\benja\AppData\Roaming\Audacity
2015-09-24 20:28 - 2015-07-30 19:55 - 00000000 ____D C:\Users\benja\AppData\Roaming\vlc
2015-09-24 19:58 - 2015-07-30 18:12 - 00000000 ____D C:\Users\benja\AppData\Roaming\FileZilla
2015-09-24 19:32 - 2015-07-30 18:12 - 00000000 ____D C:\Users\benja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-09-24 19:32 - 2015-07-30 18:12 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2015-09-24 17:29 - 2015-07-30 14:46 - 01812606 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-24 17:29 - 2015-07-10 18:34 - 00786512 _____ C:\Windows\system32\perfh007.dat
2015-09-24 17:29 - 2015-07-10 18:34 - 00158850 _____ C:\Windows\system32\perfc007.dat
2015-09-24 15:47 - 2015-07-31 18:02 - 00000000 ____D C:\Users\benja\AppData\Local\gtk-2.0
2015-09-24 15:39 - 2015-07-30 20:59 - 00000000 ____D C:\Users\benja\AppData\Local\TeamSpeak 3 Client
2015-09-23 19:36 - 2015-07-10 12:55 - 00000000 ____D C:\Windows\CbsTemp
2015-09-23 18:49 - 2015-07-30 16:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-09-22 17:53 - 2015-07-30 21:37 - 00000000 ____D C:\Users\benja\AppData\Roaming\OBS
2015-09-22 17:02 - 2015-07-30 18:14 - 00000000 ____D C:\Users\benja\AppData\Roaming\Notepad++
2015-09-22 16:23 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-09-22 15:34 - 2015-07-30 14:43 - 00000000 ____D C:\Users\benja\AppData\Local\Packages
2015-09-21 16:25 - 2015-07-30 16:03 - 00000000 ____D C:\ProgramData\EPSON
2015-09-21 16:25 - 2015-07-30 15:29 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-21 16:24 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-09-21 16:18 - 2015-08-18 17:21 - 00000000 ____D C:\Users\benja\Documents\Euro Truck Simulator 2
2015-09-20 14:40 - 2015-07-30 15:33 - 00851638 _____ C:\Windows\SysWOW64\Gms.log
2015-09-20 14:38 - 2015-07-30 15:42 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-20 14:38 - 2015-07-10 14:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-20 14:37 - 2015-07-10 11:05 - 00131072 ___SH C:\Windows\system32\config\BBI
2015-09-17 16:00 - 2015-07-30 15:50 - 00004194 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-17 16:00 - 2015-07-30 15:50 - 00003962 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-16 21:09 - 2015-07-31 16:43 - 00000000 ____D C:\Users\benja\AppData\Roaming\.minecraft
2015-09-16 20:24 - 2015-07-30 21:36 - 00000000 ____D C:\Program Files (x86)\OBS
2015-09-15 18:12 - 2015-07-10 13:06 - 00812008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-09-15 18:12 - 2015-07-10 13:06 - 00178152 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-15 15:29 - 2015-07-30 19:40 - 00001265 _____ C:\Users\Public\Desktop\Movie Studio Platinum 13.0 (64-bit).lnk
2015-09-15 15:28 - 2015-07-30 19:30 - 00000000 ____D C:\Users\benja\AppData\Roaming\Sony
2015-09-15 15:26 - 2015-07-10 18:46 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-15 15:26 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\appraiser
2015-09-12 16:24 - 2015-08-14 11:46 - 00000000 ____D C:\Windows\system32\MRT
2015-09-11 14:35 - 2015-07-30 15:50 - 00000000 ____D C:\Users\benja\AppData\Local\Google
2015-09-10 16:52 - 2015-07-31 21:41 - 00000000 ____D C:\Users\benja\AppData\Roaming\.ftb
2015-09-10 16:52 - 2015-07-31 21:40 - 00000000 ____D C:\Users\benja\AppData\Local\ftblauncher
2015-09-08 15:48 - 2015-07-30 20:19 - 00001190 _____ C:\Users\benja\Desktop\Dxtory.lnk
2015-09-08 15:48 - 2015-07-30 20:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dxtory2.0
2015-09-06 19:29 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\LiveKernelReports
2015-09-05 12:58 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\rescache
2015-09-03 15:22 - 2015-07-10 13:04 - 00000000 ____D C:\Windows\system32\oobe
2015-09-01 16:34 - 2015-07-30 22:15 - 00000000 ____D C:\Users\benja\AppData\Roaming\Anvsoft
2015-09-01 14:12 - 2015-07-30 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-09-01 14:12 - 2015-07-30 14:45 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-08-31 00:47 - 2015-07-30 14:44 - 11188880 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-08-29 14:39 - 2015-07-30 17:05 - 00000000 ____D C:\ProgramData\Skype
2015-08-27 02:37 - 2015-07-30 15:43 - 01423120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-08-27 02:37 - 2015-07-30 15:43 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-08-27 02:36 - 2015-07-30 15:43 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-08-27 02:36 - 2015-07-30 15:43 - 01710568 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-08-26 20:28 - 2015-07-30 20:13 - 00000000 ____D C:\ProgramData\Oracle
2015-08-26 20:27 - 2015-07-30 20:14 - 00110688 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-08-26 20:27 - 2015-07-30 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-26 20:27 - 2015-07-30 20:13 - 00000000 ____D C:\Program Files\Java
2015-08-26 18:37 - 2015-08-14 11:45 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-07-30 16:45 - 2015-07-30 16:45 - 0000000 _____ () C:\Users\benja\AppData\Roaming\gdfw.log
2015-07-30 16:45 - 2015-08-04 16:12 - 0002149 _____ () C:\Users\benja\AppData\Roaming\gdscan.log
2015-07-30 20:30 - 2015-09-25 15:42 - 0000600 _____ () C:\Users\benja\AppData\Local\PUTTY.RND
2015-09-25 15:39 - 2015-09-25 15:39 - 0112647 _____ () C:\Users\benja\AppData\Local\recently-used.xbel
2015-09-09 20:49 - 2015-09-09 20:49 - 0007600 _____ () C:\Users\benja\AppData\Local\Resmon.ResmonCfg
2015-07-30 15:17 - 2015-07-30 15:17 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\benja\AppData\Local\Temp\npp.6.8.3.Installer.exe
C:\Users\benja\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-24 17:44

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:23-09-2015
durchgeführt von benja (2015-09-25 15:50:33)
Gestartet von C:\Users\benja\Desktop
Windows 10 Home (X64) (2015-07-30 12:41:27)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3289137352-2937545519-92289135-500 - Administrator - Disabled)
benja (S-1-5-21-3289137352-2937545519-92289135-1001 - Administrator - Enabled) => C:\Users\benja
DefaultAccount (S-1-5-21-3289137352-2937545519-92289135-503 - Limited - Disabled)
Gast (S-1-5-21-3289137352-2937545519-92289135-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: G*DATA INTERNET*SECURITY CBE (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: G*DATA INTERNET*SECURITY CBE (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Any Video Converter 5.8.2 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Audacity 2.1.1 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team)
Audiosurf (HKLM-x32\...\Steam App 12900) (Version:  - Dylan Fitterer)
Banished (HKLM-x32\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
BattleBlock Theater (HKLM-x32\...\Steam App 238460) (Version:  - The Behemoth)
Blender (HKLM\...\{EA3C8A99-1565-44FF-89FC-926CEEB623B5}) (Version: 2.75.1 - Blender Foundation)
CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
Dxtory version 2.0.133 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.133 - ExKode Co. Ltd.)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON XP-205 207 Series Printer Uninstall (HKLM\...\EPSON XP-205 207 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version:  - SCS Software)
FileZilla Client 3.14.0 (HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\FileZilla Client) (Version: 3.14.0 - Tim Kosse)
Free Pascal 2.6.4 (HKLM-x32\...\FreePascal_is1) (Version:  - Free Pascal Team)
G*DATA INTERNET*SECURITY CBE (HKLM-x32\...\{6E9D1CB6-A9BF-4F47-8BA2-F34ECBE49C86}) (Version: 25.1.0.4 - G DATA Software AG)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1156 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.8 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
LibreOffice 5.0.1.2 (HKLM-x32\...\{927AE35D-72BC-437D-BAC7-EE47D03DEE54}) (Version: 5.0.1.2 - The Document Foundation)
Logitech Gaming Software 8.70 (HKLM\...\Logitech Gaming Software) (Version: 8.70.315 - Logitech Inc.)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.82 - Logitech)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.4229.1024 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Studio Platinum 13.0 (64-bit) (HKLM\...\{2B593480-2BF0-11E5-9124-F04DA23A5C58}) (Version: 13.0.955 - Sony)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0 - Mozilla)
Mozilla Thunderbird 38.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.2.0 (x86 de)) (Version: 38.2.0 - Mozilla)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 4.0.0.08 - MSI)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.3 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.4229.1024 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.4229.1024 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.4229.1024 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Oracle VM VirtualBox 5.0.4 (HKLM\...\{FC191F32-1A67-4231-91D0-0059A57C99A8}) (Version: 5.0.4 - Oracle Corporation)
Password Safe (HKLM-x32\...\Password Safe) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.140.239 - Google, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.)
Secunia PSI (3.0.0.10004) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.10004 - Secunia)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
Sizer 3.34 (HKLM-x32\...\{DE43AA92-E8C0-4620-AFE2-FBD623C71643}) (Version: 3.3.4.0 - Brian Apps)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Telegram Desktop version 0.9.2 (HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.9.2 - Telegram Messenger LLP)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
The Long Dark (HKLM-x32\...\Steam App 305620) (Version:  - Hinterland Studio Inc.)
Tropico 5 (HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\Tropico5) (Version: 1.10 - Kalypso Media)
Tunngle (HKLM-x32\...\Tunngle_is1) (Version: 5.3 - Tunngle.net GmbH)
UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.2.0.6 - uvnc bvba)
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
Uplay (HKLM-x32\...\Uplay) (Version: 7.3 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-07-10 13:04 - 2015-07-10 13:02 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {168F7FA1-D200-4C0D-A1C9-6785A07A7D7E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-30] (Google Inc.)
Task: {28DEEDB9-1C9B-40DB-8F20-9A69695AFF61} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {391B07BA-CCED-46D6-9196-D9672EDDA00B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {682F987C-4A98-4D73-A2AD-679EC33C03F1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-30] (Google Inc.)
Task: {9C059BE0-7CD8-4453-BCCA-6A2A2F6CAF39} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-09-09] (Microsoft Corporation)
Task: {A20779A1-E4E7-4EAC-9AD8-D963C660BA92} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd)
Task: {BB973665-E1F2-44DC-830C-3FE71B2241DC} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-09-22] (Microsoft Corporation)
Task: {DC625DB6-2BEB-4E9E-92B8-D5DDFEC13E36} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-09-09] (Microsoft Corporation)
Task: {F63321C2-8759-4BF5-9E84-41EF36C30B8D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-26] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ () C:\Windows\SYSTEM32\efsext.dll
2015-07-30 15:22 - 2015-07-15 04:04 - 00032768 _____ () C:\Windows\SYSTEM32\licensemanagerapi.dll
2015-02-20 05:42 - 2015-02-20 05:42 - 00382072 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2015-09-22 16:23 - 2015-09-09 22:33 - 00162880 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2015-07-30 15:42 - 2015-08-25 17:57 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-08-29 11:50 - 2015-08-18 09:56 - 02498808 _____ () C:\Windows\system32\CoreUIComponents.dll
2015-08-29 11:50 - 2015-08-18 09:56 - 02498808 _____ () C:\Windows\System32\CoreUIComponents.dll
2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-07-02 02:28 - 2015-07-02 02:28 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-07-02 02:28 - 2015-07-02 02:28 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-09-16 21:33 - 2015-09-16 21:33 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-08-27 11:40 - 2015-08-27 11:40 - 01699616 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OpenColorIO.dll
2015-08-27 11:39 - 2015-08-27 11:39 - 00058144 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\FileIOProxyStubx64.dll
2015-08-27 11:39 - 2015-08-27 11:39 - 12656416 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\Vfx1.ofx.bundle\Contents\Win64\Vfx1.ofx
2013-12-19 15:17 - 2013-12-19 15:17 - 00882808 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HitFilm.ofx
2013-12-19 15:17 - 2013-12-19 15:17 - 00328824 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HFPL\BleachBypass.hfpl
2013-12-19 15:17 - 2013-12-19 15:17 - 00328824 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HFPL\ColorTemperature.hfpl
2013-12-19 15:17 - 2013-12-19 15:17 - 00362616 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HFPL\DropShadow.hfpl
2013-12-19 15:17 - 2013-12-19 15:17 - 00386168 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HFPL\Gleam.hfpl
2013-12-19 15:17 - 2013-12-19 15:17 - 00384632 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HFPL\Glow.hfpl
2013-12-19 15:17 - 2013-12-19 15:17 - 00335992 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HFPL\LeaveColor.hfpl
2013-12-19 15:17 - 2013-12-19 15:17 - 00801400 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\HitFilm.ofx.bundle\Contents\Win64\HFPL\LightFlares.hfpl
2015-08-27 11:40 - 2015-08-27 11:40 - 00380192 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\TitlesAndText.ofx.bundle\Contents\Win64\TitlesAndText.ofx
2015-08-27 11:39 - 2015-08-27 11:39 - 07572768 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\Stabilize.ofx.bundle\Contents\Win64\Stabilize.ofx
2015-08-27 11:39 - 2015-08-27 11:39 - 08350496 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\OFX Video Plug-Ins\Filters.ofx.bundle\Contents\Win64\Filters.ofx
2015-08-12 15:39 - 2015-08-03 03:11 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-19 10:24 - 2015-08-11 10:58 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-12 15:39 - 2015-08-03 03:09 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-07-06 20:36 - 2015-07-06 20:36 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-07-30 15:43 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-08-16 15:56 - 2015-08-16 15:56 - 00153768 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-08-16 15:56 - 2015-08-16 15:56 - 00023208 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2015-09-16 14:12 - 2015-09-16 14:12 - 00039384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2015-09-22 20:06 - 2015-09-19 00:13 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.99\libglesv2.dll
2015-09-22 20:06 - 2015-09-19 00:13 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.99\libegl.dll
2015-08-27 11:39 - 2015-08-27 11:39 - 00046368 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\x86\FileIOProxyStubx86.dll
2013-10-24 19:05 - 2013-10-24 19:05 - 00749636 _____ () C:\Program Files\Sony\Movie Studio Platinum 13.0\FileIO Plug-Ins\rm9plug\tools\encsession.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3289137352-2937545519-92289135-1001\Control Panel\Desktop\\Wallpaper -> F:\Bilder und Videos\NfS Wallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKU\S-1-5-21-3289137352-2937545519-92289135-1001\...\StartupApproved\Run: => "Steam"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{2FA7D898-0F62-4C51-848A-EC7437BD2802}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8AE0ADB7-389C-45C4-88AD-A59ACC5278D4}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0B698904-AB92-4C28-A41F-98CFA5CB8E6F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{BACF45CE-2CE7-44EE-9D91-04F60561CB6A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5B71E15D-D8C1-4493-BA69-0A63CD80DD9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6242A1B6-2E27-4E6C-8E7A-0C9977562C06}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2FB9AAB0-30D9-4835-B4A8-D420549445E1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{B048D8AF-8C82-4FD4-A48E-0646B6B2E1B3}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{B12B42C6-20A1-40AD-B7FE-1E853B6E79FD}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{5E3A9F0A-28D9-404C-8ECB-C48A07806E20}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E3203705-0996-4D08-AE7E-E6AF9C478790}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{1BBE1C40-2674-418F-A31B-8D994F0EE88B}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{3167624B-2A49-4B88-B05E-A8498542903B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C0BB4F77-32D3-46ED-A94F-BAFB4F315058}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D33511F2-DDFF-4153-8832-555387FAF833}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{63227F49-76FE-4DC0-A644-A1C9EF844AC3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B3C3CFC5-FB88-42BB-AC23-FAFB91560DEA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Audiosurf\engine\QuestViewer.exe
FirewallRules: [{06D8EAAC-33EE-4E1D-B103-26797CCAB90B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Audiosurf\engine\QuestViewer.exe
FirewallRules: [{4EEE9CC9-7B6A-4EBB-84B5-E5DC39858592}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe
FirewallRules: [{2AB77C41-7D01-4A8D-8062-6841F73B327C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BattleBlock Theater\BattleBlockTheater.exe
FirewallRules: [{B3D636E2-3F86-4FA5-9906-3554B8EB991C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{42E57D15-B42F-4E13-84E4-FC47EFAEAEB5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\TheLongDark\tld.exe
FirewallRules: [{A88B0751-9A33-480A-A55A-4EDBEB430F5B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{2FAA5FB2-2500-4C66-80A6-8CB7019D0B9E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{EB7FE755-BC16-4122-9A6E-4607D4A3D222}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe
FirewallRules: [{80543076-051A-4D50-963F-3889FB7A5414}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe
FirewallRules: [{E1F9B5FF-5AFE-4643-8728-EFDAC5F51DF3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ivory Tower\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{75200934-9DFD-4C87-BC78-03F84C26681F}] => (Allow) C:\Program Files (x86)\Ubisoft\Ivory Tower\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{000A98FC-455B-4227-A292-6DE5E89D1D80}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{37C0982A-8F64-49D2-9D81-78205D6F87BC}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{76E7BF6C-1CF1-4060-819E-B56667F44996}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{74AF6892-F765-4D3B-A6DF-7D02D1A9C98C}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{213C194B-E314-44CC-B8A5-14F59910BAE2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{D57F35DF-4D22-4646-83FA-80FB011D4B57}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{76758DD9-B2AB-4D13-8B9A-90F9E4219EBF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{0DD18332-6120-4EB7-BD4E-D79A187F968B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{3338396A-3919-44AC-80D6-051DC20CF842}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{4B5B1E72-81F5-49CF-9AB7-6FD095246938}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{65F7FA3F-C824-4EF1-B0D9-5EFFC38DC858}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{E006EC68-C599-4AAF-9756-149DB9B317D0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{F19EC004-A721-42E2-8FFF-2DE352340719}] => (Allow) C:\Users\benja\AppData\Local\Temp\EPSON XP-205 207 Series_Home\Network\EpsonNetSetup\Data\ENEasyApp.exe
FirewallRules: [{3BBB125F-8F99-41B4-9F51-F5943286EB5A}] => (Allow) C:\Users\benja\AppData\Local\Temp\EPSON XP-205 207 Series_Home\Network\EpsonNetSetup\Data\ENEasyApp.exe
FirewallRules: [{F817BDDA-803B-4850-BBCB-389C222E98E4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{DAAEB6A9-E842-47E6-821C-3A5BD94C67AA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/24/2015 09:24:24 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BENJAMIN)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/24/2015 06:15:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BENJAMIN)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/24/2015 04:42:50 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220

Error: (09/23/2015 09:55:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BENJAMIN)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/23/2015 06:44:26 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220

Error: (09/22/2015 08:56:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BENJAMIN)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/21/2015 08:35:50 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BENJAMIN)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/21/2015 05:26:35 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BENJAMIN)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/21/2015 04:23:52 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Error: (09/20/2015 10:01:24 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BENJAMIN)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (09/24/2015 09:24:24 PM) (Source: DCOM) (EventID: 10010) (User: BENJAMIN)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca

Error: (09/24/2015 09:24:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/24/2015 09:24:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/24/2015 09:24:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_Session8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/24/2015 09:24:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session8" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/24/2015 06:15:05 PM) (Source: DCOM) (EventID: 10010) (User: BENJAMIN)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca

Error: (09/24/2015 06:15:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session7" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/24/2015 06:15:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session7" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/24/2015 06:15:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_Session7" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/24/2015 06:15:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session7" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 51%
Installierter physikalischer RAM: 8136.88 MB
Verfügbarer physikalischer RAM: 3954.5 MB
Summe virtueller Speicher: 9416.88 MB
Verfügbarer virtueller Speicher: 3916.05 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:116.89 GB) (Free:31.32 GB) NTFS
Drive e: (System) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive f: (Persönliche Dateien) (Fixed) (Total:488.28 GB) (Free:459.73 GB) NTFS
Drive g: (Backup) (Fixed) (Total:931.41 GB) (Free:365.51 GB) NTFS
Drive h: (YouTube) (Fixed) (Total:1374.73 GB) (Free:1027.98 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 117.4 GB) (Disk ID: 0978666D)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=116.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 3FA4A04D)
Partition 1: (Not Active) - (Size=488.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=1374.7 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 09786672)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================