Unerwünschte Umleitungen beim Klicken auf Links in Firefox, Google Chrome: smartnewtab.com

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016
durchgeführt von Stefan (Administrator) auf STEFAN-PC (27-01-2016 23:50:44)
Gestartet von C:\Users\Stefan\Desktop
Geladene Profile: Stefan (Verfügbare Profile: Stefan & DefaultAppPool)
Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\avmike.exe
() C:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\certsrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Synology\CloudStation\bin\vss-service-x64.exe
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe
(AVM Berlin) C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 10\ouservice\StarMoneyOnlineUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe
(TomTom) D:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(VMLite, Inc.) C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synology Inc.) C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-ui.exe
(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ES Status Monitor\ptnmwnd.exe
(Synology Inc.) C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-connect.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ES Status Monitor\esnetmon.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
(Synology Inc.) C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-daemon.exe
(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1637496 2011-08-04] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-24] (CANON INC.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [570880 2013-12-27] (Nikon Corporation)
HKLM-x32\...\Run: [PTNMWND] => C:\Program Files (x86)\Brother\ES Status Monitor\ptnmwnd.exe [1003520 2012-04-05] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation)
HKU\S-1-5-21-2043235430-3670825711-4218813697-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-2043235430-3670825711-4218813697-1001\...\Run: [TomTomHOME.exe] => D:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248176 2015-07-13] (TomTom)
HKU\S-1-5-21-2043235430-3670825711-4218813697-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [103696 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-2043235430-3670825711-4218813697-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [349968 2015-10-21] (Apple Inc.)
ShellIconOverlayIdentifiers: [   01UnsuppModule] -> {AEB16659-2125-4ADA-A4AB-45EE21E86469} => C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\icon-overlay\15\x64\iconOverlay.dll [2016-01-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [   02SyncingModule] -> {48AB5ADA-36B1-4137-99C9-2BD97F8788AB} => C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\icon-overlay\15\x64\iconOverlay.dll [2016-01-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [   03SyncedModule] -> {472CE1AD-5D53-4BCF-A1FB-3982A5F55138} => C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\icon-overlay\15\x64\iconOverlay.dll [2016-01-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [   04ReadOnlyModule] -> {A433C3E0-8B24-40EB-93C3-4B10D9959F58} => C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\icon-overlay\15\x64\iconOverlay.dll [2016-01-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [   05NoPermModule] -> {C701AD67-3DF0-47C9-89CB-DFA6207BE229} => C:\Users\Stefan\AppData\Local\CloudStation\CloudStation.app\icon-overlay\15\x64\iconOverlay.dll [2016-01-23] (TODO: <Company name>)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-19] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Stefan\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-19] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk [2014-01-25]
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> D:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe ()
Startup: C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Synology Cloud Station Drive.lnk [2016-01-27]
ShortcutTarget: Synology Cloud Station Drive.lnk -> C:\Program Files (x86)\Synology\CloudStation\bin\launcher.exe (Synology Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: 127.0.0.1	localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{ba94d6e0-978b-486a-82a4-e304ecace2f1}: [NameServer] 192.168.1.1
Tcpip\..\Interfaces\{d2adf4d4-1c52-4046-8eb5-b151367aa24f}: [NameServer] 4.4.4.4,8.8.8.8
Tcpip\..\Interfaces\{d2adf4d4-1c52-4046-8eb5-b151367aa24f}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=130950027599413243&GUID=E2CD772D-240A-4DFE-B631-C6E1F92C61F9
HKU\S-1-5-21-2043235430-3670825711-4218813697-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-2043235430-3670825711-4218813697-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.msn.com/spbasic.htm
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-01-07] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-07] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-01-07] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-23] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-01-07] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-23] (Oracle Corporation)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14] (CANON INC.)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {960DC750-7447-4CDE-BF1C-FB33F9129654} hxxp://192.168.1.245:5000/webman/3rdparty/SurveillanceStation/object/SSObject3.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-01-07] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-01-07] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-01-07] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-01-07] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Stefan\AppData\Roaming\Mozilla\Firefox\Profiles\dwkdr5vo.default-1453636026764
FF Homepage: hxxps://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-24] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-24] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-09-22] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-23] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-01-07] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-01-07] (Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2043235430-3670825711-4218813697-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Stefan\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-18] (Google Inc.)
FF Plugin HKU\S-1-5-21-2043235430-3670825711-4218813697-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Stefan\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-18] (Google Inc.)
FF Plugin HKU\S-1-5-21-2043235430-3670825711-4218813697-1001: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Stefan\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll [Keine Datei]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-03] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1048488 2016-01-12] (AVG Technologies CZ, s.r.o.)
R2 avmike; C:\Program Files\FRITZ!Fernzugang\avmike.exe [336248 2012-02-02] (AVM Berlin)
R2 BRA_Scheduler; C:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe [99328 2014-11-25] () [Datei ist nicht signiert]
R2 certsrv; C:\Program Files\FRITZ!Fernzugang\certsrv.exe [143736 2011-10-31] (AVM Berlin)
R2 cjpcsc; C:\WINDOWS\SysWOW64\cjpcsc.exe [569344 2015-07-31] (REINER SCT)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2762936 2016-01-07] (Microsoft Corporation)
R2 Cloud Station Drive VSS Service x64; C:\Program Files (x86)\Synology\CloudStation\bin\vss-service-x64.exe [287200 2016-01-12] ()
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3736520 2015-01-29] (devolo AG)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2012-10-11] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 nwtsrv; C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe [189304 2011-10-31] (AVM Berlin)
R2 StarMoney 10 OnlineUpdate; C:\Program Files (x86)\StarMoney 10\ouservice\StarMoneyOnlineUpdate.exe [698176 2015-11-27] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 9.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 9.0\ouservice\StarMoneyOnlineUpdate.exe [697488 2014-07-04] (Star Finanz-Software Entwicklung und Vertriebs GmbH)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
R2 TomTomHOMEService; D:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [93040 2015-07-13] (TomTom)
R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [426600 2010-08-21] (VMLite, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138400 2012-08-26] (SlySoft, Inc.)
S3 applebmt; C:\Windows\system32\DRIVERS\applebmt.sys [52736 2011-06-02] (Apple Inc.) [Datei ist nicht signiert]
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R3 Cap7146_DVB; C:\Windows\system32\DRIVERS\TTCinCap.sys [87104 2009-11-23] (TerraTec Electronic GmbH)
S3 cjusb; C:\Windows\system32\DRIVERS\cjusb.sys [36112 2015-03-23] (REINER SCT)
S3 fwlanusbn; C:\Windows\system32\DRIVERS\fwlanusbn.sys [714368 2010-10-22] (AVM GmbH) [Datei ist nicht signiert]
S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [41080 2016-01-23] ()
U5 LVRS64; C:\Windows\System32\Drivers\LVRS64.sys [327704 2009-10-07] (Logitech Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-03-04] (CACE Technologies)
S3 PcaSp50; C:\Windows\System32\Drivers\PcaSp50.sys [45624 2009-08-24] (Printing Communications Assoc., Inc. (PCAUSA))
R3 PTDVB; C:\Windows\system32\DRIVERS\TTCinTun.sys [166976 2009-11-23] (TerraTec Electronic GmbH)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] ()
R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)
S3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [47320 2013-07-29] (Realtek Microelectronics)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert]
R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [204328 2010-08-11] (VMLite, Inc.)
S3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [146216 2010-08-11] (VMLite, Inc.)
S3 VBoxNetFlt; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [165800 2010-08-11] (VMLite, Inc.)
R0 vidsflt53; C:\Windows\System32\DRIVERS\vsflt53.sys [141920 2012-10-13] (Acronis)
R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [14952 2010-08-03] (VMLite, Inc.)
R3 vmlitestor; C:\Windows\System32\drivers\vmlitestor.sys [177768 2010-08-11] (VMLite, Inc.)
S3 VMLiteUSB; C:\Windows\System32\Drivers\VMLiteUSB.sys [150120 2010-08-11] (VMLite, Inc.)
R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [135272 2010-08-18] (VMLite, Inc.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 GEARAspiWDM; \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys [X]
U3 idsvc; kein ImagePath
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X]
S3 VMnetAdapter; \SystemRoot\system32\DRIVERS\vmnetadapter.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-27 23:50 - 2016-01-27 23:50 - 00000000 ___HD C:\OneDriveTemp
2016-01-27 23:35 - 2016-01-27 23:50 - 00022890 _____ C:\Users\Stefan\Desktop\FRST.txt
2016-01-27 23:18 - 2016-01-27 23:19 - 00242452 _____ C:\WINDOWS\Minidump\012716-14125-01.dmp
2016-01-27 23:17 - 2016-01-27 23:18 - 413012104 _____ C:\WINDOWS\MEMORY.DMP
2016-01-27 23:17 - 2016-01-27 23:17 - 00000000 _____ C:\WINDOWS\Minidump\012716-13296-01.dmp
2016-01-27 20:23 - 2016-01-27 23:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-24 22:58 - 2016-01-24 22:59 - 01060427 _____ C:\Users\Stefan\Downloads\meta.txt
2016-01-24 22:26 - 2016-01-24 22:29 - 00000000 ____D C:\Users\Stefan\Downloads\TomTom_Sicherung
2016-01-24 21:27 - 2016-01-24 22:10 - 02870984 _____ (ESET) C:\Users\Stefan\Desktop\esetsmartinstaller_deu.exe
2016-01-24 21:26 - 2016-01-24 21:26 - 00001178 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-24 21:26 - 2016-01-24 21:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-01-24 21:26 - 2016-01-24 21:26 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-01-24 21:26 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-24 21:26 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-24 21:25 - 2016-01-24 21:26 - 22908888 _____ (Malwarebytes ) C:\Users\Stefan\Desktop\mbam-setup-2.2.0.1024.exe
2016-01-24 16:29 - 2016-01-24 16:29 - 00010150 _____ C:\Users\Stefan\AppData\Local\recently-used.xbel
2016-01-24 16:06 - 2016-01-27 23:00 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-24 16:06 - 2016-01-24 16:06 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-01-24 15:09 - 2016-01-24 15:09 - 02056776 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-24 15:00 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-24 15:00 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-24 15:00 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-24 15:00 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-24 15:00 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-24 15:00 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-24 15:00 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-24 15:00 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-24 15:00 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-24 15:00 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-24 15:00 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-24 15:00 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-24 15:00 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-24 15:00 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-24 15:00 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-24 15:00 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-24 15:00 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-24 15:00 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-24 15:00 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-24 15:00 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-24 15:00 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-24 15:00 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-24 15:00 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-24 15:00 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-24 15:00 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-24 15:00 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-24 15:00 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-24 15:00 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-24 15:00 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-24 15:00 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-24 15:00 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-24 15:00 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-24 15:00 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-24 15:00 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-24 15:00 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-24 15:00 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-24 15:00 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-24 15:00 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-24 15:00 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-24 15:00 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-24 15:00 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-24 15:00 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-24 15:00 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-24 15:00 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-24 15:00 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-24 15:00 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-24 15:00 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-24 15:00 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-24 15:00 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-24 15:00 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-24 15:00 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-24 15:00 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-24 15:00 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-24 15:00 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-24 15:00 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-24 15:00 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-24 15:00 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-24 15:00 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-24 15:00 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-24 15:00 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-24 15:00 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-24 15:00 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-24 15:00 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-24 15:00 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-24 15:00 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-24 15:00 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-24 15:00 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-24 15:00 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-24 15:00 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-24 15:00 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-24 15:00 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-24 15:00 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-24 15:00 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-24 15:00 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-24 15:00 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-24 15:00 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-24 15:00 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-24 15:00 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-24 15:00 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-24 15:00 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-24 15:00 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-24 15:00 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-24 15:00 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-24 15:00 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-24 15:00 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-24 15:00 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-24 15:00 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-24 14:45 - 2016-01-24 14:45 - 00000000 ____D C:\Users\Stefan\AppData\Local\ElevatedDiagnostics
2016-01-24 11:14 - 2016-01-24 11:14 - 00894960 _____ C:\Users\Stefan\Downloads\Norton_Removal_Tool225017.exe
2016-01-24 11:04 - 2016-01-24 11:04 - 05436744 _____ (Apple Inc.) C:\Users\Stefan\Downloads\BonjourPSSetup.exe
2016-01-24 11:04 - 2016-01-24 11:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bonjour-Druckdienste
2016-01-24 11:04 - 2016-01-24 11:04 - 00000000 ____D C:\Program Files\Bonjour Print Services
2016-01-24 11:04 - 2016-01-24 11:04 - 00000000 ____D C:\Program Files\Bonjour
2016-01-23 23:23 - 2016-01-23 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synology
2016-01-23 23:22 - 2016-01-23 23:22 - 68608000 _____ C:\Users\Stefan\Downloads\Synology Cloud Station Drive-4.0-4120.msi
2016-01-23 22:52 - 2016-01-27 23:50 - 00000000 ____D C:\Users\Stefan\AppData\Local\CloudStation
2016-01-23 22:51 - 2016-01-23 22:51 - 00000000 ____D C:\Program Files (x86)\Synology
2016-01-23 22:07 - 2016-01-23 22:15 - 00278214 _____ C:\TDSSKiller.3.1.0.9_23.01.2016_22.07.54_log.txt
2016-01-23 22:00 - 2016-01-23 22:00 - 01505280 _____ C:\Users\Stefan\Desktop\AdwCleaner_5.030.exe
2016-01-23 21:50 - 2016-01-24 22:07 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-23 21:50 - 2016-01-23 22:02 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-01-23 21:49 - 2016-01-23 21:49 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Stefan\Downloads\mbar-1.09.3.1001.exe
2016-01-23 21:49 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-23 21:33 - 2016-01-23 21:38 - 00279264 _____ C:\TDSSKiller.3.1.0.9_23.01.2016_21.33.11_log.txt
2016-01-23 21:32 - 2016-01-23 21:33 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\Stefan\Downloads\tdsskiller.exe
2016-01-23 21:22 - 2016-01-23 21:23 - 00055130 _____ C:\Users\Stefan\Downloads\Addition.txt
2016-01-23 21:20 - 2016-01-27 23:50 - 00000000 ____D C:\FRST
2016-01-23 21:20 - 2016-01-24 13:00 - 02370560 _____ (Farbar) C:\Users\Stefan\Desktop\FRST64.exe
2016-01-23 21:20 - 2016-01-23 21:23 - 00046626 _____ C:\Users\Stefan\Downloads\FRST.txt
2016-01-23 21:07 - 2016-01-27 23:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-23 21:07 - 2016-01-23 21:07 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-01-23 21:07 - 2016-01-23 21:07 - 00001223 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-01-23 21:06 - 2016-01-23 21:06 - 00248736 _____ C:\Users\Stefan\Downloads\Firefox Setup Stub 43.0.4.exe
2016-01-23 20:55 - 2016-01-23 20:55 - 00004380 _____ C:\WINDOWS\system32\.crusader
2016-01-23 20:50 - 2016-01-23 20:56 - 00041080 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2016-01-23 20:49 - 2016-01-23 20:55 - 00000000 ____D C:\ProgramData\HitmanPro
2016-01-23 20:49 - 2016-01-23 20:49 - 11323704 _____ (SurfRight B.V.) C:\Users\Stefan\Downloads\HitmanPro_x64.exe
2016-01-23 12:37 - 2016-01-23 12:37 - 02946424 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Stefan\Downloads\AVG_Protection_Free_698.exe
2016-01-22 21:16 - 2016-01-22 21:16 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Oracle
2016-01-22 21:04 - 2016-01-23 13:07 - 00000000 ____D C:\ProgramData\MFAData
2016-01-22 21:04 - 2016-01-22 21:04 - 00000000 ____D C:\Users\Stefan\AppData\Local\MFAData
2016-01-22 21:02 - 2016-01-23 13:07 - 00000000 ____D C:\ProgramData\Avg
2016-01-22 21:02 - 2016-01-23 13:07 - 00000000 ____D C:\Program Files (x86)\AVG
2016-01-22 21:01 - 2016-01-23 13:01 - 00000000 ____D C:\Users\Stefan\AppData\Local\AvgSetupLog
2016-01-22 21:01 - 2016-01-22 21:01 - 00000000 ____D C:\Users\Stefan\AppData\Local\Avg
2016-01-19 22:50 - 2016-01-19 22:50 - 04265821 _____ C:\Users\Stefan\Downloads\ET_airfixI.pdf
2016-01-19 21:55 - 2016-01-19 21:55 - 31243480 _____ (Adlice Software ) C:\Users\Stefan\Downloads\setup.exe
2016-01-19 21:37 - 2016-01-19 21:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlySoft
2016-01-19 21:36 - 2016-01-19 21:37 - 09369096 _____ C:\Users\Stefan\Downloads\SetupAnyDVD7110.exe
2016-01-19 21:18 - 2016-01-19 21:18 - 12593584 _____ C:\Users\Stefan\Downloads\SetupAnyDVD7680.exe
2016-01-17 12:06 - 2016-01-23 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-01-17 12:06 - 2016-01-23 11:52 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-01-17 12:05 - 2016-01-17 12:05 - 00584288 _____ (Oracle Corporation) C:\Users\Stefan\Downloads\JavaSetup8u66.exe
2016-01-17 11:25 - 2016-01-23 13:02 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2016-01-17 11:09 - 2016-01-23 13:07 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-01-17 11:09 - 2016-01-17 11:09 - 08205800 _____ (McAfee, Inc.) C:\Users\Stefan\Downloads\Setup_serial_oIgToSAZ9-_dej8wbchgaA2_key.exe
2016-01-17 11:03 - 2016-01-23 13:09 - 00000000 ____D C:\ProgramData\McAfee
2016-01-17 11:02 - 2016-01-17 11:03 - 08593144 _____ (McAfee, Inc.) C:\Users\Stefan\Downloads\SecurityScan_Release.exe
2016-01-17 10:31 - 2016-01-17 10:31 - 00017459 _____ C:\WINDOWS\system32\Drivers\etc\services
2016-01-16 16:13 - 2016-01-27 18:30 - 00000000 ____D C:\Users\Stefan\AppData\Local\CrashDumps
2016-01-16 09:59 - 2016-01-19 21:56 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2016-01-16 09:59 - 2016-01-16 10:49 - 00000000 ____D C:\ProgramData\RogueKiller
2016-01-16 01:38 - 2015-08-11 12:22 - 03067392 _____ C:\WINDOWS\system32\pwNative.exe
2016-01-16 01:38 - 2013-09-30 15:26 - 00019152 ____N C:\WINDOWS\system32\pwdrvio.sys
2016-01-16 01:38 - 2013-09-30 15:26 - 00012504 ____N C:\WINDOWS\system32\pwdspio.sys
2016-01-16 01:37 - 2016-01-16 01:37 - 32262960 _____ (MiniTool Solution Ltd. ) C:\Users\Stefan\Downloads\pwfree91.exe
2016-01-16 00:00 - 2016-01-16 00:00 - 00000000 ____D C:\Program Files (x86)\EaseUS
2016-01-10 16:34 - 2015-12-19 19:34 - 00002230 _____ C:\Users\Stefan\Desktop\StarMoney 10.lnk
2016-01-02 18:55 - 2016-01-02 18:55 - 00000000 ____D C:\Users\Stefan\Downloads\SARDU_3
2016-01-02 13:57 - 2016-01-02 14:15 - 00000000 ____D C:\Users\Stefan\Downloads\Anker
2016-01-02 13:45 - 2016-01-02 13:45 - 00105327 _____ C:\Users\Stefan\Documents\Wohnungsprotokoll.pdf
2016-01-01 19:02 - 2016-01-01 19:02 - 01599336 _____ (Malwarebytes) C:\Users\Stefan\Downloads\JRT.exe
2016-01-01 11:41 - 2016-01-01 11:41 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\No Company Name
2016-01-01 11:40 - 2016-01-01 11:40 - 00001622 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2015-12-29 13:00 - 2015-12-29 13:00 - 01709792 _____ (Disc Soft Ltd.) C:\Users\Stefan\Downloads\DTLiteInstaller.exe
2015-12-29 11:22 - 2015-12-29 11:22 - 00017804 _____ C:\Users\Stefan\Downloads\turbo_87284.zip
2015-12-29 08:11 - 2015-12-29 08:11 - 00002860 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-12-29 08:11 - 2015-12-29 08:11 - 00000866 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-12-29 08:11 - 2015-12-29 08:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-12-29 08:10 - 2015-12-29 08:11 - 00000000 ____D C:\Program Files\CCleaner
2015-12-29 08:09 - 2015-12-29 08:10 - 04532776 _____ (Piriform Ltd) C:\Users\Stefan\Downloads\dfsetup219.exe
2015-12-29 07:32 - 2015-12-29 07:32 - 00019322 _____ C:\Users\Stefan\Documents\964_3.bmp
2015-12-28 14:14 - 2015-12-19 11:40 - 00000514 _____ C:\WINDOWS\esidata.ini
2015-12-28 01:17 - 2015-12-28 01:18 - 00074012 _____ C:\Users\Stefan\Downloads\old-vw-brand.ai
2015-12-28 01:04 - 2015-12-28 01:04 - 00180550 _____ C:\Users\Stefan\Downloads\Volkswagen-vector-logo-BE03B0DBBB-seeklogo.com.zip
2015-12-28 00:47 - 2015-12-28 00:47 - 01225353 _____ C:\Users\Stefan\Downloads\vw-r-vector-logo-323B696A22-seeklogo.com.zip
2015-12-28 00:34 - 2015-12-28 00:34 - 00075214 _____ C:\Users\Stefan\Downloads\vw-bus.zip
2015-12-28 00:32 - 2015-12-28 00:32 - 01068854 _____ C:\Users\Stefan\Downloads\volkswagen_r.ai
2015-12-28 00:32 - 2015-12-28 00:32 - 00012475 _____ C:\Users\Stefan\Downloads\old-vw-brand-vector-logo-5746F35ED5-seeklogo.com.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-27 23:50 - 2014-12-14 16:06 - 00000000 ___RD C:\Users\Stefan\OneDrive
2016-01-27 23:44 - 2015-12-19 09:10 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-27 23:44 - 2015-10-30 19:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat
2016-01-27 23:44 - 2015-10-30 19:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat
2016-01-27 23:44 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-27 23:37 - 2015-12-19 09:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-27 23:36 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI
2016-01-27 23:20 - 2015-12-19 09:12 - 00000000 ____D C:\Users\Stefan
2016-01-27 23:19 - 2015-12-19 19:32 - 00000000 ____D C:\Program Files (x86)\StarMoney 10
2016-01-27 23:19 - 2014-01-05 15:11 - 00000000 ____D C:\Program Files (x86)\StarMoney 9.0
2016-01-27 23:19 - 2013-12-29 11:48 - 00000000 ____D C:\Program Files (x86)\StarMoney 8.0
2016-01-27 23:18 - 2015-12-20 12:40 - 00000000 ____D C:\WINDOWS\Minidump
2016-01-27 23:18 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-27 18:23 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-27 18:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-27 18:19 - 2013-10-23 18:35 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{30FAC3B2-1757-4F21-ABB0-6D6E4EC59BC2}
2016-01-24 16:35 - 2012-10-11 16:46 - 00000000 ____D C:\Users\Stefan\.gimp-2.8
2016-01-24 16:06 - 2012-10-11 16:39 - 00000000 ____D C:\Users\Stefan\AppData\Local\Adobe
2016-01-24 15:09 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-24 15:02 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-24 15:01 - 2013-08-11 14:00 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-24 15:01 - 2012-10-11 15:05 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-24 12:56 - 2012-10-14 09:51 - 00000000 ____D C:\Users\Stefan\Documents\Steuer-Sparbuch
2016-01-24 11:09 - 2012-10-13 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2016-01-24 11:09 - 2012-10-11 16:36 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-01-24 11:08 - 2012-10-14 15:28 - 00000000 ____D C:\ProgramData\LogiShrd
2016-01-24 11:08 - 2012-10-14 15:26 - 00000000 ____D C:\Program Files\Common Files\logishrd
2016-01-24 11:08 - 2012-10-11 16:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-01-24 11:04 - 2012-10-11 16:54 - 00000000 ____D C:\Program Files (x86)\Bonjour
2016-01-24 01:27 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\registration
2016-01-23 23:24 - 2013-01-05 17:37 - 00000000 ___RD C:\Users\Stefan\CloudStation
2016-01-23 22:56 - 2012-10-27 09:53 - 00000000 ____D C:\Users\Stefan\AppData\Local\Packages
2016-01-23 22:55 - 2014-01-04 17:39 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2016-01-23 22:49 - 2015-12-24 14:40 - 00001064 _____ C:\WINDOWS\SysWOW64\LORInstallLog.txt
2016-01-23 22:04 - 2015-12-20 13:21 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-01-23 22:04 - 2014-05-13 18:30 - 00000000 ____D C:\AdwCleaner
2016-01-23 22:04 - 2014-03-11 17:35 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2016-01-23 20:47 - 2015-11-22 18:20 - 00000000 ____D C:\Program Files (x86)\Google
2016-01-23 20:46 - 2012-10-11 18:13 - 00000000 ____D C:\ProgramData\Skype
2016-01-23 13:04 - 2012-11-13 22:48 - 00000000 ____D C:\ProgramData\FreePDF
2016-01-23 13:04 - 2012-10-12 06:32 - 00000000 ____D C:\Program Files (x86)\FreePDF_XP
2016-01-23 13:04 - 2012-10-12 06:31 - 00000000 ____D C:\Program Files\gs
2016-01-23 13:03 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-01-23 13:03 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2016-01-23 12:56 - 2012-10-27 08:49 - 00000000 ____D C:\Users\Stefan\AppData\Local\FreePDF_XP
2016-01-23 12:14 - 2013-11-02 11:43 - 00000000 ____D C:\ProgramData\Oracle
2016-01-23 11:54 - 2014-11-01 11:56 - 00000000 ____D C:\Program Files (x86)\Java
2016-01-23 11:53 - 2015-11-08 16:11 - 00000000 ____D C:\Users\Stefan\.oracle_jre_usage
2016-01-23 11:47 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-01-23 11:45 - 2015-12-19 09:12 - 00000000 ____D C:\Users\DefaultAppPool
2016-01-22 21:06 - 2013-11-17 13:41 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\TuneUp Software
2016-01-17 15:08 - 2015-12-19 09:09 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2016-01-17 14:59 - 2014-03-09 13:22 - 00000000 ____D C:\Users\Stefan\VMLites
2016-01-17 14:29 - 2013-07-18 12:30 - 00000000 ____D C:\Program Files (x86)\WinHex
2016-01-17 14:25 - 2014-07-27 08:02 - 00000000 ____D C:\Program Files\Tracker Software
2016-01-17 14:17 - 2012-10-11 16:39 - 00000000 ____D C:\Users\Stefan\AppData\LocalLow\Adobe
2016-01-17 14:16 - 2015-07-18 07:04 - 00000000 ____D C:\ProgramData\VMware
2016-01-17 14:14 - 2015-07-18 07:11 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\VMware
2016-01-17 14:14 - 2015-07-18 07:11 - 00000000 ____D C:\Users\Stefan\AppData\Local\VMware
2016-01-17 13:58 - 2015-12-19 10:32 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\com.aspexsoftware.Silhouette_Studio
2016-01-17 12:24 - 2015-12-19 10:32 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-01-17 10:35 - 2015-11-08 13:07 - 00000000 ___RD C:\Users\Stefan\iCloudDrive
2016-01-16 10:48 - 2014-03-09 13:34 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VMLite Workstation
2016-01-15 23:41 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-01-15 23:40 - 2013-05-26 23:58 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-01-12 22:38 - 2012-10-11 14:29 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\Adobe
2016-01-12 22:24 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-01-10 18:52 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\catroot2.old
2016-01-03 21:32 - 2015-01-10 21:18 - 00000000 ____D C:\Users\Stefan\Documents\Eigene Etiketten
2016-01-03 02:40 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-02 16:05 - 2013-10-19 14:31 - 00000000 ___DO C:\Users\Stefan\SkyDrive
2016-01-02 16:03 - 2014-12-14 17:24 - 00000000 ____D C:\Users\Stefan\AppData\Local\Windows Live
2016-01-02 01:08 - 2015-08-01 14:41 - 00000000 ____D C:\Users\Stefan\Desktop\Desktop Win8
2016-01-01 11:44 - 2013-12-21 14:43 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-12-29 12:52 - 2015-12-26 23:54 - 00000000 ____D C:\Program Files (x86)\Avira
2015-12-29 10:30 - 2015-12-19 12:24 - 00000000 ____D C:\Users\Stefan\Documents\Silhouette
2015-12-29 09:30 - 2012-10-11 14:19 - 00000000 ____D C:\WINDOWS\SoftwareDistribution.old
2015-12-29 09:06 - 2015-12-19 09:07 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-29 09:06 - 2014-12-14 17:25 - 00000000 ____D C:\Users\Stefan\Tracing
2015-12-29 09:06 - 2014-03-11 17:35 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\TeamViewer
2015-12-29 09:06 - 2013-06-23 10:18 - 00000000 ____D C:\Users\Stefan\AppData\Roaming\DAEMON Tools Lite
2015-12-29 07:50 - 2015-01-04 14:03 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-28 18:50 - 2014-08-31 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2015-12-28 18:49 - 2012-10-12 09:20 - 00000000 ____D C:\Users\Stefan\AppData\Local\Downloaded Installations

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-08-05 20:48 - 2013-08-05 20:48 - 0000268 ___RH () C:\Users\Stefan\AppData\Roaming\Classical
2013-08-05 20:48 - 2013-08-05 20:48 - 0000268 ___RH () C:\Users\Stefan\AppData\Roaming\Clean Electric Guitar
2013-08-05 20:48 - 2013-08-05 20:48 - 0000268 ___RH () C:\Users\Stefan\AppData\Roaming\Clips
2013-08-05 20:47 - 2013-08-05 20:47 - 0000268 ___RH () C:\Users\Stefan\AppData\Roaming\Conditionals
2014-01-15 23:04 - 2014-01-26 00:05 - 0000042 _____ () C:\Users\Stefan\AppData\Roaming\WB.CFG
2015-02-08 23:14 - 2015-02-08 23:14 - 0001921 _____ () C:\Users\Stefan\AppData\Local\2F39F931887F4498A7EECC96275D714A.Layout2.lbx
2015-01-18 23:14 - 2015-01-18 23:14 - 0002078 _____ () C:\Users\Stefan\AppData\Local\4848FBE4CC4A46aa9B5A17E2E13D9540.Steuer 2014.lbx
2014-02-22 17:10 - 2014-02-22 17:10 - 0001456 _____ () C:\Users\Stefan\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2016-01-24 16:29 - 2016-01-24 16:29 - 0010150 _____ () C:\Users\Stefan\AppData\Local\recently-used.xbel
2013-07-14 14:03 - 2013-07-14 14:03 - 0007606 _____ () C:\Users\Stefan\AppData\Local\Resmon.ResmonCfg
2012-10-11 18:00 - 2012-10-11 18:00 - 0000040 ___SH () C:\ProgramData\.zreglib
2013-08-05 20:48 - 2013-08-05 20:48 - 0000268 ___RH () C:\ProgramData\Colors
2013-08-05 20:48 - 2013-08-05 20:48 - 0000268 ___RH () C:\ProgramData\ColorSync
2013-08-05 20:48 - 2013-08-05 20:48 - 0000268 ___RH () C:\ProgramData\ColorTable
2013-08-05 20:47 - 2013-08-05 20:47 - 0000268 ___RH () C:\ProgramData\Contextual Menu Items
2015-01-04 20:32 - 2015-01-04 20:32 - 0000138 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2013-05-26 19:51 - 2013-05-26 19:51 - 0000138 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
2013-08-05 20:47 - 2013-08-05 20:47 - 0000020 ____H () C:\ProgramData\PKP_DLeo.DAT
2013-08-05 20:48 - 2013-08-05 20:48 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2013-08-05 20:48 - 2014-03-14 20:34 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2013-08-05 20:48 - 2013-08-05 20:48 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT

Einige Dateien in TEMP:
====================
C:\Users\Stefan\AppData\Local\Temp\0021121453026244mcinst.exe
C:\Users\Stefan\AppData\Local\Temp\avguirn_081425564217.exe
C:\Users\Stefan\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Stefan\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\Stefan\AppData\Local\Temp\McCSPInstall.dll
C:\Users\Stefan\AppData\Local\Temp\mccspuninstall.exe
C:\Users\Stefan\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-01-23 15:39

==================== Ende von FRST.txt ============================