| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: PC hat immer noch die Malware drauf...Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.02.2016, 16:29
| #16 |
| /// TB-Ausbilder   |  PC hat immer noch die Malware drauf... Servus, Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
Task: {047ECA7C-F5D1-4CAF-B946-8F7ABF57A57A} - System32\Tasks\{064F8727-426B-4B89-ACA5-8FBD4A6862A6} => Firefox.exe
Task: {0BCFB5E7-E8FC-436D-958D-183BE0CA75EF} - System32\Tasks\{42752F6F-D9D7-4F7F-A99E-08D30F06E32A} => pcalua.exe -a "C:\Users\010nici010\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X0IX1CZ2\ica32t[1].exe" -d C:\Users\010nici010\Desktop
Task: {39F05B2B-C81D-4E1C-B8EE-0F06C90E1603} - System32\Tasks\{52BF7657-38C4-4792-B966-625C83C9A42F} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(6).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {42D52FAE-BD73-4317-8202-D4E0ED5A2B4C} - System32\Tasks\{68A6E52D-0F3C-4FAC-BACB-737928A6AF22} => Firefox.exe
Task: {4813142F-6963-4450-B879-6B1D89ABEC2A} - System32\Tasks\{ED77E1DD-85A0-4653-A31E-479D729A3EA4} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de.exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {4E715132-0DCE-4A3C-88D5-1CA6F1D62928} - \Dealply -> Keine Datei <==== ACHTUNG
Task: {56C6C2C5-D7F0-4B6C-87C2-AFCDC0DE64DC} - System32\Tasks\{8E88138A-C3F7-4327-ACF4-FF28FB94A8EC} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(2).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {5FC19267-FC1F-4709-A442-5BA47299A0D6} - System32\Tasks\{C23B8D39-27DC-46BA-9759-6ABC12863D11} => pcalua.exe -a C:\Users\010nici010\Downloads\avira_free_antivirus_de.exe -d C:\Windows\SysWOW64
Task: {79229694-6950-49F1-BC6B-FAC78B2D9777} - System32\Tasks\{17B3E6F6-7C01-4422-A056-6081252CB3E7} => pcalua.exe -a C:\Users\010nici010\Downloads\WEB.DE_MFF6_Setup(2).exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {9D79D999-DC67-4B70-8B32-26E45FDCC168} - System32\Tasks\{987B9338-DCB3-424A-A014-3E3DF8A75FBA} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(5).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {B9CCB640-1EE7-4275-A1D9-945591752D24} - System32\Tasks\{B933A25A-0DA9-4DDD-AAEA-68B6D0941A02} => pcalua.exe -a C:\Users\010nici010\Downloads\Shockwave_Installer_153_Full.exe -d C:\Users\010nici010\Downloads
Task: {BC1F0CB8-4753-4580-AFF9-70A26A5A5B45} - System32\Tasks\{2D99F081-7FC0-414B-AC54-1F6FE14B5D4C} => Firefox.exe
Task: {BD5737AC-B2D2-4140-A709-BF2D3F7BF85F} - System32\Tasks\{D241F040-52F7-45A8-9C02-AF3CE0A41FF5} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(1).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {E8566DD6-1AC0-4E7D-B602-33B7E59BD759} - System32\Tasks\{A3D24455-A7DD-4607-9950-B818C2C914D2} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(1).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {F208481A-1ED1-4D02-AEBA-C8AA3CF5719D} - System32\Tasks\{45591FFE-35C4-4453-8D86-C79AD55714F4} => pcalua.exe -a C:\Users\010nici010\Downloads\WEB.DE_Firefox_Setup.exe -d "C:\Program Files (x86)\Mozilla Firefox"
FirewallRules: [{0D3D6A7A-2405-4BFB-B34D-7930CF75BA7C}] => (Allow) C:\Users\010nici010\AppData\Local\Temp\nsw764.tmpMoboInstall\mobogenieP2sp.exe
FirewallRules: [{074F1F92-4C45-44D4-9647-95D0E532C12B}] => (Allow) C:\Users\010nici010\AppData\Local\Temp\nsw764.tmpMoboInstall\mobogenieP2sp.exe
HKU\S-1-5-21-1273784247-385934570-3056030413-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
Toolbar: HKLM - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
Toolbar: HKLM-x32 - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
StartMenuInternet: Google Chrome.EE22P6AOJ5GV4ZS5DGJH4N3GB4 - C:\Users\010nici010\AppData\Local\Google\Chrome\Application\chrome.exe
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2
Schritt 3 Starte SystemLook noch einmal, dieses Mal mit diesem Code: Code:
ATTFilter :reg
HKLM\software\microsoft\windows\currentversion\explorer\controlpanel\namespace /s
HKLM\software\microsoft\windows\currentversion\control panel\cpls /s
Bitte poste mit deiner nächsten Antwort
Geändert von M-K-D-B (02.02.2016 um 17:14 Uhr) |
|
02.02.2016, 18:36
| #17 |
 | PC hat immer noch die Malware drauf...Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von 010nici010 (2016-02-02 18:11:12) Run:2
Gestartet von C:\Users\010nici010\Desktop
Geladene Profile: 010nici010 & (Verfügbare Profile: 010nici010)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
Task: {047ECA7C-F5D1-4CAF-B946-8F7ABF57A57A} - System32\Tasks\{064F8727-426B-4B89-ACA5-8FBD4A6862A6} => Firefox.exe
Task: {0BCFB5E7-E8FC-436D-958D-183BE0CA75EF} - System32\Tasks\{42752F6F-D9D7-4F7F-A99E-08D30F06E32A} => pcalua.exe -a "C:\Users\010nici010\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X0IX1CZ2\ica32t[1].exe" -d C:\Users\010nici010\Desktop
Task: {39F05B2B-C81D-4E1C-B8EE-0F06C90E1603} - System32\Tasks\{52BF7657-38C4-4792-B966-625C83C9A42F} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(6).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {42D52FAE-BD73-4317-8202-D4E0ED5A2B4C} - System32\Tasks\{68A6E52D-0F3C-4FAC-BACB-737928A6AF22} => Firefox.exe
Task: {4813142F-6963-4450-B879-6B1D89ABEC2A} - System32\Tasks\{ED77E1DD-85A0-4653-A31E-479D729A3EA4} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de.exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {4E715132-0DCE-4A3C-88D5-1CA6F1D62928} - \Dealply -> Keine Datei <==== ACHTUNG
Task: {56C6C2C5-D7F0-4B6C-87C2-AFCDC0DE64DC} - System32\Tasks\{8E88138A-C3F7-4327-ACF4-FF28FB94A8EC} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(2).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {5FC19267-FC1F-4709-A442-5BA47299A0D6} - System32\Tasks\{C23B8D39-27DC-46BA-9759-6ABC12863D11} => pcalua.exe -a C:\Users\010nici010\Downloads\avira_free_antivirus_de.exe -d C:\Windows\SysWOW64
Task: {79229694-6950-49F1-BC6B-FAC78B2D9777} - System32\Tasks\{17B3E6F6-7C01-4422-A056-6081252CB3E7} => pcalua.exe -a C:\Users\010nici010\Downloads\WEB.DE_MFF6_Setup(2).exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {9D79D999-DC67-4B70-8B32-26E45FDCC168} - System32\Tasks\{987B9338-DCB3-424A-A014-3E3DF8A75FBA} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(5).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {B9CCB640-1EE7-4275-A1D9-945591752D24} - System32\Tasks\{B933A25A-0DA9-4DDD-AAEA-68B6D0941A02} => pcalua.exe -a C:\Users\010nici010\Downloads\Shockwave_Installer_153_Full.exe -d C:\Users\010nici010\Downloads
Task: {BC1F0CB8-4753-4580-AFF9-70A26A5A5B45} - System32\Tasks\{2D99F081-7FC0-414B-AC54-1F6FE14B5D4C} => Firefox.exe
Task: {BD5737AC-B2D2-4140-A709-BF2D3F7BF85F} - System32\Tasks\{D241F040-52F7-45A8-9C02-AF3CE0A41FF5} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(1).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {E8566DD6-1AC0-4E7D-B602-33B7E59BD759} - System32\Tasks\{A3D24455-A7DD-4607-9950-B818C2C914D2} => pcalua.exe -a "C:\Users\010nici010\Downloads\Firefox Setup 8.0_foxload-de(1).exe" -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {F208481A-1ED1-4D02-AEBA-C8AA3CF5719D} - System32\Tasks\{45591FFE-35C4-4453-8D86-C79AD55714F4} => pcalua.exe -a C:\Users\010nici010\Downloads\WEB.DE_Firefox_Setup.exe -d "C:\Program Files (x86)\Mozilla Firefox"
FirewallRules: [{0D3D6A7A-2405-4BFB-B34D-7930CF75BA7C}] => (Allow) C:\Users\010nici010\AppData\Local\Temp\nsw764.tmpMoboInstall\mobogenieP2sp.exe
FirewallRules: [{074F1F92-4C45-44D4-9647-95D0E532C12B}] => (Allow) C:\Users\010nici010\AppData\Local\Temp\nsw764.tmpMoboInstall\mobogenieP2sp.exe
HKU\S-1-5-21-1273784247-385934570-3056030413-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
Toolbar: HKLM - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
Toolbar: HKLM-x32 - Kein Name - {C424171E-592A-415a-9EB1-DFD6D95D3530} - Keine Datei
StartMenuInternet: Google Chrome.EE22P6AOJ5GV4ZS5DGJH4N3GB4 - C:\Users\010nici010\AppData\Local\Google\Chrome\Application\chrome.exe
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{047ECA7C-F5D1-4CAF-B946-8F7ABF57A57A}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{047ECA7C-F5D1-4CAF-B946-8F7ABF57A57A}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{064F8727-426B-4B89-ACA5-8FBD4A6862A6} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{064F8727-426B-4B89-ACA5-8FBD4A6862A6}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0BCFB5E7-E8FC-436D-958D-183BE0CA75EF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BCFB5E7-E8FC-436D-958D-183BE0CA75EF}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{42752F6F-D9D7-4F7F-A99E-08D30F06E32A} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{42752F6F-D9D7-4F7F-A99E-08D30F06E32A}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{39F05B2B-C81D-4E1C-B8EE-0F06C90E1603}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{39F05B2B-C81D-4E1C-B8EE-0F06C90E1603}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{52BF7657-38C4-4792-B966-625C83C9A42F} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{52BF7657-38C4-4792-B966-625C83C9A42F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{42D52FAE-BD73-4317-8202-D4E0ED5A2B4C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{42D52FAE-BD73-4317-8202-D4E0ED5A2B4C}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{68A6E52D-0F3C-4FAC-BACB-737928A6AF22} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{68A6E52D-0F3C-4FAC-BACB-737928A6AF22}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4813142F-6963-4450-B879-6B1D89ABEC2A}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4813142F-6963-4450-B879-6B1D89ABEC2A}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{ED77E1DD-85A0-4653-A31E-479D729A3EA4} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{ED77E1DD-85A0-4653-A31E-479D729A3EA4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4E715132-0DCE-4A3C-88D5-1CA6F1D62928}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E715132-0DCE-4A3C-88D5-1CA6F1D62928}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dealply => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{56C6C2C5-D7F0-4B6C-87C2-AFCDC0DE64DC}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{56C6C2C5-D7F0-4B6C-87C2-AFCDC0DE64DC}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{8E88138A-C3F7-4327-ACF4-FF28FB94A8EC} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8E88138A-C3F7-4327-ACF4-FF28FB94A8EC}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5FC19267-FC1F-4709-A442-5BA47299A0D6}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5FC19267-FC1F-4709-A442-5BA47299A0D6}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{C23B8D39-27DC-46BA-9759-6ABC12863D11} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C23B8D39-27DC-46BA-9759-6ABC12863D11}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{79229694-6950-49F1-BC6B-FAC78B2D9777}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{79229694-6950-49F1-BC6B-FAC78B2D9777}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{17B3E6F6-7C01-4422-A056-6081252CB3E7} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{17B3E6F6-7C01-4422-A056-6081252CB3E7}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9D79D999-DC67-4B70-8B32-26E45FDCC168}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9D79D999-DC67-4B70-8B32-26E45FDCC168}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{987B9338-DCB3-424A-A014-3E3DF8A75FBA} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{987B9338-DCB3-424A-A014-3E3DF8A75FBA}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B9CCB640-1EE7-4275-A1D9-945591752D24}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9CCB640-1EE7-4275-A1D9-945591752D24}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{B933A25A-0DA9-4DDD-AAEA-68B6D0941A02} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B933A25A-0DA9-4DDD-AAEA-68B6D0941A02}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BC1F0CB8-4753-4580-AFF9-70A26A5A5B45}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BC1F0CB8-4753-4580-AFF9-70A26A5A5B45}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{2D99F081-7FC0-414B-AC54-1F6FE14B5D4C} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2D99F081-7FC0-414B-AC54-1F6FE14B5D4C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BD5737AC-B2D2-4140-A709-BF2D3F7BF85F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BD5737AC-B2D2-4140-A709-BF2D3F7BF85F}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{D241F040-52F7-45A8-9C02-AF3CE0A41FF5} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D241F040-52F7-45A8-9C02-AF3CE0A41FF5}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E8566DD6-1AC0-4E7D-B602-33B7E59BD759}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E8566DD6-1AC0-4E7D-B602-33B7E59BD759}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{A3D24455-A7DD-4607-9950-B818C2C914D2} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A3D24455-A7DD-4607-9950-B818C2C914D2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F208481A-1ED1-4D02-AEBA-C8AA3CF5719D}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F208481A-1ED1-4D02-AEBA-C8AA3CF5719D}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{45591FFE-35C4-4453-8D86-C79AD55714F4} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{45591FFE-35C4-4453-8D86-C79AD55714F4}" => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D3D6A7A-2405-4BFB-B34D-7930CF75BA7C} => Wert erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{074F1F92-4C45-44D4-9647-95D0E532C12B} => Wert erfolgreich entfernt
"HKU\S-1-5-21-1273784247-385934570-3056030413-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich wiederhergestellt
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{C424171E-592A-415a-9EB1-DFD6D95D3530} => Wert erfolgreich entfernt
HKCR\CLSID\{C424171E-592A-415a-9EB1-DFD6D95D3530} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{C424171E-592A-415a-9EB1-DFD6D95D3530} => Wert erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{C424171E-592A-415a-9EB1-DFD6D95D3530} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome.EE22P6AOJ5GV4ZS5DGJH4N3GB4\shell\open\command\\Default => Wert erfolgreich wiederhergestellt
EmptyTemp: => 2 GB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 18:13:33 ====
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-01-2016 durchgeführt von 010nici010 (Administrator) auf BEATE (02-02-2016 18:30:46) Gestartet von C:\Users\010nici010\Desktop Geladene Profile: 010nici010 (Verfügbare Profile: 010nici010) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe () C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (1und1 Mail und Media GmbH) C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe (TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe (Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe () C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\LxWebAccess\LxWebAccess.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10060320 2010-02-09] (Realtek Semiconductor) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [208384 2009-11-04] (Alps Electric Co., Ltd.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [538472 2009-06-17] (Symantec Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [597792 2010-01-21] (Sony Corporation) HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard) HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [831192 2014-07-03] (BlueStack Systems, Inc.) HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2014-10-30] (RealNetworks, Inc.) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-12-08] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [MailCheck IE Broker] => C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe [2209856 2015-12-17] (1und1 Mail und Media GmbH) HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-07-27] (Samsung Electronics Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-12-22] (Oracle Corporation) Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X] HKU\S-1-5-21-1273784247-385934570-3056030413-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [1958248 2015-11-20] (TomTom) HKU\S-1-5-21-1273784247-385934570-3056030413-1000\...\MountPoints2: {249196d8-2a91-11e3-aed0-0024bec140cd} - G:\PMCsetup.exe Startup: C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-01-27] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk [2016-01-27] ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG) Startup: C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2016-01-27] ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2016-01-27] ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-01-27] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-01-27] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.266\SSScheduler.exe (McAfee, Inc.) ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{86846AEC-1A33-450F-8D41-D4827DE6B122}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{BB8C9484-BDD0-485F-9085-847F9BF303D0}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Tcpip\..\Interfaces\{F0DFC90F-AC83-4311-9061-F3A1D9841532}: [DhcpNameServer] 192.168.2.1 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKU\S-1-5-21-1273784247-385934570-3056030413-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.web.de/br/ie9_startpage HKU\S-1-5-21-1273784247-385934570-3056030413-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie HKU\S-1-5-21-1273784247-385934570-3056030413-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://suche.web.de/webhp?src=br_startpage_ie SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> DefaultScope {80946623-1ED0-4155-B54A-8F1FFDAB289C} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C010DE649D20151205&p={searchTerms} SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms} SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {2B897C50-2B2B-4A07-A169-7EB1E31CE812} URL = hxxp://suche.web.de/search/web/?su={searchTerms}&origin=searchplugin SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {2B9B710F-9AB8-419D-992C-C4F93DF88946} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {50B18BC8-CB9E-440C-A29E-A7DCECA009C6} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SVEC SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {58A8162A-7397-4A3F-8A30-20CBAD973EE9} URL = hxxp://de.shopping.com/?linkin_id=8056363 SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {5909F697-81A8-4348-BE0D-03E53B4605D8} URL = hxxp://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {6347D5BE-1827-4EA5-879D-AD9C4ABCFE74} URL = hxxp://www.bing.com/search?FORM=BDKTDF&PC=BDT3&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {80946623-1ED0-4155-B54A-8F1FFDAB289C} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C010DE649D20151205&p={searchTerms} SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {81CE708B-5104-4C62-B333-94B417473B29} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8 SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {B23437E6-0DCA-4CD5-81D9-EC17257C0A00} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-0/4?satitle={searchTerms} SearchScopes: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> {D73D9D66-2394-47D0-B52F-A8E3940943E9} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_71\bin\ssv.dll [2016-01-25] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2009-12-18] (Google Inc.) BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2009-12-18] (Google Inc.) BHO: WEB.DE MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll [2015-12-17] (1und1 Mail und Media GmbH) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-25] (Oracle Corporation) BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2010-05-28] (Hewlett-Packard Co.) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealDownloader) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\ssv.dll [2016-01-25] (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-18] (Google Inc.) BHO-x32: WEB.DE MailCheck BHO -> {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} -> C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll [2015-12-17] (1und1 Mail und Media GmbH) BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-12-18] (Google Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-25] (Oracle Corporation) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2010-05-28] (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2009-12-18] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-18] (Google Inc.) Toolbar: HKU\S-1-5-21-1273784247-385934570-3056030413-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2009-12-18] (Google Inc.) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-12-29] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-12-29] (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-12-29] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-12-29] (McAfee, Inc.) Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll [2015-12-17] (1und1 Mail und Media GmbH) Handler-x32: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll [2015-12-17] (1und1 Mail und Media GmbH) FireFox: ======== FF ProfilePath: C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default FF DefaultSearchUrl: hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p= FF SearchEngineOrder.1: Sichere Suche FF SelectedSearchEngine: Sichere Suche FF Homepage: hxxp://www.startxxl.com/ FF Keyword.URL: hxxps://de.search.yahoo.com/search?fr=mcafee&type=B110DE649D20091218&p= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] () FF Plugin: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-25] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-25] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-25] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files (x86)\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-25] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-07-02] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-07-02] (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2014-10-30] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2014-10-30] (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2014-10-30] (RealNetworks, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2014-10-30] (RealPlayer) FF SearchPlugin: C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\searchplugins\McSiteAdvisor.xml [2015-09-23] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2015-01-21] FF Extension: WEB.DE MailCheck - C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\extensions\browser-mailcheck@web.de [2015-08-31] FF Extension: StartXXL - C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\extensions\support@startxxl.com.xpi [2015-08-31] FF Extension: Kein Name - C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [nicht gefunden] FF Extension: Kein Name - C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [nicht gefunden] FF Extension: COMPUTERBILD-Abzockschutz - C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi [2015-01-21] [ist nicht signiert] FF Extension: McAfee WebAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-12-29] FF Extension: Avira Browser Safety - C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\Extensions\abs@avira.com [2016-01-27] FF Extension: Adblock Plus - C:\Users\010nici010\AppData\Roaming\Mozilla\Firefox\Profiles\yg0f1m5r.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-27] FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-12-28] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-10-30] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF HKU\S-1-5-21-1273784247-385934570-3056030413-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR StartupUrls: Default -> "hxxps://www.google.de/?gws_rd=ssl" CHR Profile: C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-26] CHR Extension: (Google Docs) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04] CHR Extension: (Google Drive) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-01-08] CHR Extension: (Google-Suche) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Google Tabellen) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-26] CHR Extension: (SiteAdvisor) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-07-06] CHR Extension: (MIDI Player) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggdnfelcdiebaofocemalnfclifhbfij [2015-01-09] CHR Extension: (Google Docs Offline) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18] CHR Extension: (RealDownloader) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-12-12] CHR Extension: (WEB.DE MailCheck) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2015-11-19] CHR Extension: (Auto Replay for YouTube™) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb [2014-11-27] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-25] CHR Extension: (Google Mail) - C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-01-28] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-01-28] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14] ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-03-13] (Adobe Systems) [Datei ist nicht signiert] S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1212048 2015-08-26] (Avira Operations GmbH & Co. KG) S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [251160 2015-12-08] (Avira Operations GmbH & Co. KG) S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [405208 2014-07-03] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-07-03] (BlueStack Systems, Inc.) R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [773848 2014-07-03] (BlueStack Systems, Inc.) R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] () R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [158952 2015-12-29] (McAfee, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.266\McCHSvc.exe [289256 2015-12-02] (McAfee, Inc.) R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [Datei ist nicht signiert] R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [Datei ist nicht signiert] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation) R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [Datei ist nicht signiert] R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions) S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions) S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] () S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [74496 2010-09-27] (Sony Corporation) S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [845312 2010-08-11] (Sony Corporation) [Datei ist nicht signiert] R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1653272 2015-07-31] (Sony Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\Dr.Fone for Android\DriverInstall.exe" [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162072 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140448 2015-12-01] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [75472 2015-12-01] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-07-03] (BlueStack Systems) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [498512 2015-11-18] (Symantec Corporation) S3 GEARAspiWDM; C:\Windows\SysWOW64\Drivers\GEARAspiWDM.sys [15664 2012-04-04] (GEAR Software Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-02-02] (Malwarebytes) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37448 2015-12-29] (McAfee, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) R2 regi; C:\Windows\SysWOW64\drivers\regi.sys [11032 2007-04-17] (InterVideo) R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [29352 2015-10-13] () R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) S3 TVICHW64; C:\Windows\system32\DRIVERS\TVICHW64.SYS [21200 2011-04-27] (EnTech Taiwan) S3 DFUBTUSB; System32\Drivers\frmupgr.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-01 15:29 - 2016-02-01 15:32 - 00060609 _____ C:\Users\010nici010\Desktop\Addition.txt 2016-02-01 14:58 - 2016-02-02 18:30 - 00038125 _____ C:\Users\010nici010\Desktop\FRST.txt 2016-02-01 14:49 - 2016-02-02 18:16 - 00003344 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1273784247-385934570-3056030413-1000 2016-02-01 14:49 - 2016-02-02 18:16 - 00003220 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1273784247-385934570-3056030413-1000 2016-02-01 14:38 - 2016-02-02 18:13 - 00013571 _____ C:\Users\010nici010\Desktop\Fixlog.txt 2016-02-01 14:32 - 2016-02-01 14:33 - 02370560 _____ (Farbar) C:\Users\010nici010\Desktop\FRST64.exe 2016-01-31 15:24 - 2016-01-31 15:42 - 00000000 ____D C:\ProgramData\HitmanPro 2016-01-31 15:23 - 2016-01-31 15:23 - 11323704 _____ (SurfRight B.V.) C:\Users\010nici010\Desktop\HitmanPro_x64.exe 2016-01-31 15:22 - 2016-01-31 15:23 - 11323704 _____ (SurfRight B.V.) C:\Users\010nici010\Downloads\HitmanPro_x64.exe 2016-01-31 15:20 - 2016-01-31 15:20 - 00093278 _____ C:\Users\010nici010\Desktop\SystemLook.txt 2016-01-31 15:09 - 2016-01-31 15:10 - 00165376 _____ C:\Users\010nici010\Downloads\SystemLook_x64 (3).exe 2016-01-30 13:39 - 2016-01-30 13:39 - 00165376 _____ C:\Users\010nici010\Downloads\SystemLook_x64 (2).exe 2016-01-30 13:20 - 2016-01-31 15:17 - 00093276 _____ C:\Users\010nici010\Downloads\SystemLook.txt 2016-01-30 13:19 - 2016-01-30 13:19 - 00165376 _____ C:\Users\010nici010\Downloads\SystemLook_x64 (1).exe 2016-01-30 13:18 - 2016-01-30 13:18 - 00165376 _____ C:\Users\010nici010\Downloads\SystemLook_x64.exe 2016-01-29 02:01 - 2016-01-29 02:01 - 00149041 _____ C:\Users\010nici010\Downloads\2016_01_Rechnung_1970223398.pdf 2016-01-29 02:01 - 2016-01-29 02:01 - 00149041 _____ C:\Users\010nici010\Downloads\2016_01_Rechnung_1970223398 (1).pdf 2016-01-28 22:54 - 2016-01-28 22:54 - 00085361 _____ C:\Users\010nici010\Downloads\Kontoauszug_404129005__Nr.0122015_vom_31.12.2015_20160128105429.pdf 2016-01-28 22:52 - 2016-01-28 22:52 - 00086182 _____ C:\Users\010nici010\Downloads\Zwangsauszug_404129005__Nr.0102015_vom_30.10.2015_20160128105216.pdf 2016-01-28 22:52 - 2016-01-28 22:52 - 00079426 _____ C:\Users\010nici010\Downloads\Zwangsauszug_404129005__Nr.0112015_vom_30.11.2015_20160128105221.pdf 2016-01-28 18:27 - 2016-01-28 20:54 - 00239144 _____ C:\TDSSKiller.3.1.0.9_28.01.2016_18.27.31_log.txt 2016-01-28 18:27 - 2016-01-28 18:26 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\010nici010\Desktop\tdsskiller.exe 2016-01-28 18:26 - 2016-01-28 18:26 - 04727984 _____ (Kaspersky Lab ZAO) C:\Users\010nici010\Downloads\tdsskiller.exe 2016-01-28 18:09 - 2016-01-28 18:09 - 02370560 _____ (Farbar) C:\Users\010nici010\Downloads\FRST64 (1).exe 2016-01-28 18:05 - 2016-01-28 18:05 - 00000406 _____ C:\Users\010nici010\Downloads\Addition.txt 2016-01-28 18:04 - 2016-01-28 18:12 - 00100667 _____ C:\Users\010nici010\Downloads\FRST.txt 2016-01-28 18:02 - 2016-02-02 18:30 - 00000000 ____D C:\FRST 2016-01-28 18:00 - 2016-01-28 18:00 - 02370560 _____ (Farbar) C:\Users\010nici010\Downloads\FRST64.exe 2016-01-28 17:44 - 2016-01-28 17:44 - 00001225 _____ C:\Users\010nici010\Desktop\mbam.txt-28.01.2016-17.43.txt 2016-01-28 14:49 - 2016-01-28 14:49 - 00001214 _____ C:\mbam-28.01.2016.txt 2016-01-28 14:09 - 2016-01-28 11:02 - 22908888 _____ (Malwarebytes ) C:\Users\010nici010\Desktop\mbam-setup-2.2.0.1024 (1).exe 2016-01-28 13:54 - 2016-01-28 13:54 - 00001210 _____ C:\Users\010nici010\Desktop\mbam-setup.txt 2016-01-28 13:07 - 2016-01-28 13:07 - 00259584 _____ (OldTimer Tools) C:\Users\010nici010\Downloads\OTH (2).scr 2016-01-28 13:07 - 2016-01-28 13:07 - 00259584 _____ (OldTimer Tools) C:\Users\010nici010\Desktop\OTH (2).scr 2016-01-28 12:53 - 2016-01-28 12:53 - 00259584 _____ (OldTimer Tools) C:\Users\010nici010\Downloads\OTH (1).scr 2016-01-28 12:35 - 2016-01-28 12:35 - 22908888 _____ (Malwarebytes ) C:\Users\010nici010\Downloads\mbam-setup-2.2.0.1024 (2).exe 2016-01-28 12:32 - 2016-02-02 18:28 - 00000000 ____D C:\Users\010nici010\AppData\LocalLow\HPAppData 2016-01-28 12:30 - 2016-01-28 12:30 - 00259584 _____ (OldTimer Tools) C:\Users\010nici010\Downloads\OTH.scr 2016-01-28 11:46 - 2016-01-28 11:46 - 01507840 _____ C:\Users\010nici010\Downloads\AdwCleaner_5.031 (2).exe 2016-01-28 11:04 - 2016-01-28 14:14 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-01-28 11:01 - 2016-01-28 11:02 - 22908888 _____ (Malwarebytes ) C:\Users\010nici010\Downloads\mbam-setup-2.2.0.1024 (1).exe 2016-01-28 00:23 - 2016-01-28 00:23 - 00000000 ____D C:\Program Files (x86)\ESET 2016-01-28 00:21 - 2016-01-28 00:22 - 02870984 _____ (ESET) C:\Users\010nici010\Downloads\esetsmartinstaller_deu.exe 2016-01-28 00:19 - 2016-01-28 00:19 - 00001904 _____ C:\Users\010nici010\Desktop\sc-cleaner.txt 2016-01-28 00:18 - 2016-01-28 00:18 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\010nici010\Downloads\sc-cleaner.exe 2016-01-28 00:16 - 2016-01-28 00:16 - 00004108 _____ C:\Users\010nici010\Desktop\JRT.txt 2016-01-28 00:10 - 2016-01-28 00:11 - 01609032 _____ (Malwarebytes) C:\Users\010nici010\Downloads\JRT (2).exe 2016-01-28 00:10 - 2016-01-28 00:10 - 01609032 _____ (Malwarebytes) C:\Users\010nici010\Downloads\JRT (1).exe 2016-01-28 00:08 - 2016-01-28 00:08 - 01609032 _____ (Malwarebytes) C:\Users\010nici010\Downloads\JRT.exe 2016-01-27 22:44 - 2016-01-28 11:50 - 00000000 ____D C:\AdwCleaner 2016-01-27 22:40 - 2016-01-27 22:40 - 01507840 _____ C:\Users\010nici010\Downloads\AdwCleaner_5.031 (1).exe 2016-01-27 22:36 - 2016-01-27 22:36 - 01507840 _____ C:\Users\010nici010\Downloads\AdwCleaner_5.031.exe 2016-01-27 21:25 - 2016-01-27 21:25 - 00001205 _____ C:\Users\010nici010\Desktop\mbam1.txt 2016-01-27 20:46 - 2016-01-27 20:46 - 00001204 _____ C:\Users\010nici010\Desktop\mbam.txt 2016-01-27 19:41 - 2016-02-02 18:19 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-01-27 19:40 - 2016-01-28 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-01-27 19:40 - 2016-01-28 14:14 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-01-27 19:40 - 2016-01-27 19:40 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-01-27 19:40 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-01-27 19:40 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-01-27 19:40 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-01-27 19:38 - 2016-01-27 19:38 - 22908888 _____ (Malwarebytes ) C:\Users\010nici010\Downloads\mbam-setup-2.2.0.1024.exe 2016-01-27 11:22 - 2016-01-27 11:22 - 00000000 ____D C:\Users\010nici010\Documents\Whatsappverhalten 2016-01-25 14:08 - 2016-01-25 14:08 - 00000000 ____D C:\Users\010nici010\AppData\Roaming\Sun 2016-01-25 14:07 - 2016-01-25 14:09 - 00000000 ____D C:\Users\010nici010\.oracle_jre_usage 2016-01-25 14:07 - 2016-01-25 14:07 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2016-01-21 11:42 - 2016-01-21 11:42 - 00028881 _____ C:\Users\010nici010\Downloads\samsung-galaxy-s5-kontakte-importieren-exportieren-3710-nvfwmw.pdf 2016-01-20 14:29 - 2016-01-20 14:29 - 03970048 _____ C:\Users\010nici010\Downloads\iston-data-recovery-for-android (1).exe 2016-01-20 13:00 - 2016-01-20 13:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf 2016-01-20 12:32 - 2016-01-20 12:32 - 00000000 ____D C:\Users\010nici010\AppData\Roaming\HMYGSetting 2016-01-20 12:31 - 2016-01-22 15:54 - 00000000 ___HD C:\Program Files (x86)\DrFoneAndroid_Temp 2016-01-20 12:31 - 2016-01-22 15:53 - 00000000 ____D C:\Program Files (x86)\Wondershare 2016-01-20 12:31 - 2016-01-20 13:03 - 00000000 ____D C:\ProgramData\Wondershare 2016-01-20 12:31 - 2016-01-20 12:31 - 00000000 ____D C:\Users\010nici010\AppData\Roaming\Wondershare 2016-01-20 12:31 - 2016-01-20 12:31 - 00000000 ____D C:\Users\010nici010\AppData\Local\Wondershare 2016-01-20 12:30 - 2016-01-20 12:30 - 00000000 ____D C:\Users\Public\Documents\Wondershare 2016-01-20 12:10 - 2016-01-22 16:19 - 00000000 ____D C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iStonsoft 2016-01-20 12:10 - 2016-01-22 16:19 - 00000000 ____D C:\Program Files (x86)\iStonsoft 2016-01-20 12:10 - 2016-01-20 12:10 - 00000000 ____D C:\Users\010nici010\.android 2016-01-20 12:08 - 2016-01-20 12:09 - 03970048 _____ C:\Users\010nici010\Downloads\iston-data-recovery-for-android.exe 2016-01-13 20:30 - 2016-01-13 20:30 - 00294952 _____ C:\Windows\Minidump\011316-37159-01.dmp 2016-01-13 13:30 - 2015-12-11 19:57 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-01-13 13:30 - 2015-12-08 22:54 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2016-01-13 13:30 - 2015-12-08 22:54 - 01568768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVENCOD.DLL 2016-01-13 13:30 - 2015-12-08 22:54 - 00902144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL 2016-01-13 13:30 - 2015-12-08 22:54 - 00815616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOE.DLL 2016-01-13 13:30 - 2015-12-08 22:54 - 00740352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpmde.dll 2016-01-13 13:30 - 2015-12-08 22:54 - 00739328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOD.DLL 2016-01-13 13:30 - 2015-12-08 22:54 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVXENCD.DLL 2016-01-13 13:30 - 2015-12-08 22:54 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSDECD.DLL 2016-01-13 13:30 - 2015-12-08 22:53 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2016-01-13 13:30 - 2015-12-08 22:53 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll 2016-01-13 13:30 - 2015-12-08 22:53 - 00970240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll 2016-01-13 13:30 - 2015-12-08 22:53 - 00829952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL 2016-01-13 13:30 - 2015-12-08 22:53 - 00509952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2016-01-13 13:30 - 2015-12-08 22:53 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll 2016-01-13 13:30 - 2015-12-08 22:53 - 00153600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COLORCNV.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2016-01-13 13:30 - 2015-12-08 20:07 - 01955328 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 01575424 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOE.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 01573888 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll 2016-01-13 13:30 - 2015-12-08 20:07 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2adec.dll 2016-01-13 13:30 - 2015-12-08 20:07 - 01232896 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 01153024 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOE.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 01026048 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll 2016-01-13 13:30 - 2015-12-08 20:07 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll 2016-01-13 13:30 - 2015-12-08 20:07 - 00978944 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 00666112 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 00642048 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL 2016-01-13 13:30 - 2015-12-08 20:07 - 00632320 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll 2016-01-13 13:30 - 2015-12-08 20:07 - 00624640 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2016-01-13 13:30 - 2015-12-08 20:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\COLORCNV.DLL 2016-01-13 13:30 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapistub.dll 2016-01-13 13:30 - 2015-11-14 00:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\mapi32.dll 2016-01-13 13:30 - 2015-11-14 00:08 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\fixmapi.exe 2016-01-13 13:30 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapistub.dll 2016-01-13 13:30 - 2015-11-13 23:50 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mapi32.dll 2016-01-13 13:30 - 2015-11-13 23:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fixmapi.exe 2016-01-13 13:29 - 2015-12-24 00:13 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-01-13 13:29 - 2015-12-23 23:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-01-13 13:29 - 2015-12-12 19:54 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-01-13 13:29 - 2015-12-12 19:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-01-13 13:29 - 2015-12-12 19:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-01-13 13:29 - 2015-12-12 19:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-01-13 13:29 - 2015-12-12 19:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-01-13 13:29 - 2015-12-12 19:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-01-13 13:29 - 2015-12-12 19:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-01-13 13:29 - 2015-12-12 19:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-01-13 13:29 - 2015-12-12 19:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-01-13 13:29 - 2015-12-12 19:07 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-01-13 13:29 - 2015-12-12 19:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-01-13 13:29 - 2015-12-12 19:07 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-01-13 13:29 - 2015-12-12 19:03 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-01-13 13:29 - 2015-12-12 19:02 - 20367360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-01-13 13:29 - 2015-12-12 19:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-01-13 13:29 - 2015-12-12 19:02 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-01-13 13:29 - 2015-12-12 19:02 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-01-13 13:29 - 2015-12-12 19:02 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-01-13 13:29 - 2015-12-12 18:55 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-01-13 13:29 - 2015-12-12 18:51 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-01-13 13:29 - 2015-12-12 18:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-01-13 13:29 - 2015-12-12 18:44 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-01-13 13:29 - 2015-12-12 18:40 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-01-13 13:29 - 2015-12-12 18:39 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-01-13 13:29 - 2015-12-12 18:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-01-13 13:29 - 2015-12-12 18:37 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-01-13 13:29 - 2015-12-12 18:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-01-13 13:29 - 2015-12-12 18:37 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-01-13 13:29 - 2015-12-12 18:36 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-01-13 13:29 - 2015-12-12 18:36 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-01-13 13:29 - 2015-12-12 18:35 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-01-13 13:29 - 2015-12-12 18:33 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-01-13 13:29 - 2015-12-12 18:31 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-01-13 13:29 - 2015-12-12 18:30 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-01-13 13:29 - 2015-12-12 18:28 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-01-13 13:29 - 2015-12-12 18:27 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-01-13 13:29 - 2015-12-12 18:27 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-01-13 13:29 - 2015-12-12 18:27 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-01-13 13:29 - 2015-12-12 18:25 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-01-13 13:29 - 2015-12-12 18:23 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-01-13 13:29 - 2015-12-12 18:22 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-01-13 13:29 - 2015-12-12 18:21 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-01-13 13:29 - 2015-12-12 18:20 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-01-13 13:29 - 2015-12-12 18:19 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-01-13 13:29 - 2015-12-12 18:18 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-01-13 13:29 - 2015-12-12 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-01-13 13:29 - 2015-12-12 18:12 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-01-13 13:29 - 2015-12-12 18:10 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-01-13 13:29 - 2015-12-12 18:10 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-01-13 13:29 - 2015-12-12 18:09 - 04610560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-01-13 13:29 - 2015-12-12 18:08 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-01-13 13:29 - 2015-12-12 18:06 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-01-13 13:29 - 2015-12-12 18:02 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-01-13 13:29 - 2015-12-12 18:00 - 12856320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-01-13 13:29 - 2015-12-12 18:00 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-01-13 13:29 - 2015-12-12 18:00 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-01-13 13:29 - 2015-12-12 18:00 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-01-13 13:29 - 2015-12-12 17:54 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-01-13 13:29 - 2015-12-12 17:42 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-01-13 13:29 - 2015-12-12 17:41 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-01-13 13:29 - 2015-12-12 17:38 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-01-13 13:29 - 2015-12-12 17:36 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-01-13 13:29 - 2015-12-08 22:54 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2016-01-13 13:29 - 2015-12-08 22:54 - 01325056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMSPDMOE.DLL 2016-01-13 13:29 - 2015-12-08 22:54 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVSENCD.DLL 2016-01-13 13:29 - 2015-12-08 22:54 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VIDRESZR.DLL 2016-01-13 13:29 - 2015-12-08 22:53 - 00609280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFWMAAEC.DLL 2016-01-13 13:29 - 2015-12-08 22:53 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2016-01-13 13:29 - 2015-12-08 22:53 - 00415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP4SDECD.DLL 2016-01-13 13:29 - 2015-12-08 22:53 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll 2016-01-13 13:29 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPG4DECD.DLL 2016-01-13 13:29 - 2015-12-08 22:53 - 00241152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP43DECD.DLL 2016-01-13 13:29 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RESAMPLEDMO.DLL 2016-01-13 13:29 - 2015-12-08 22:53 - 00206848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll 2016-01-13 13:29 - 2015-12-08 22:53 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2016-01-13 13:29 - 2015-12-08 22:53 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2016-01-13 13:29 - 2015-12-08 22:53 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MP3DMOD.DLL 2016-01-13 13:29 - 2015-12-08 22:53 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll 2016-01-13 13:29 - 2015-12-08 22:53 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfvdsp.dll 2016-01-13 13:29 - 2015-12-08 22:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2016-01-13 13:29 - 2015-12-08 22:53 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2016-01-13 13:29 - 2015-12-08 22:53 - 00004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksuser.dll 2016-01-13 13:29 - 2015-12-08 22:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\MFWMAAEC.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\WMVSENCD.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00292352 _____ (Microsoft Corporation) C:\Windows\system32\VIDRESZR.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\RESAMPLEDMO.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00224768 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DECD.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\MP43DECD.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\MP3DMOD.DLL 2016-01-13 13:29 - 2015-12-08 20:07 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\devenum.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\mfvdsp.dll 2016-01-13 13:29 - 2015-12-08 20:07 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2016-01-13 13:29 - 2015-12-08 20:07 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\ksuser.dll 2016-01-13 13:29 - 2015-12-08 20:06 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2016-01-13 13:29 - 2015-12-08 20:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2016-01-13 13:29 - 2015-12-08 20:04 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2016-01-13 13:29 - 2015-12-08 19:54 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2016-01-13 13:29 - 2015-12-08 19:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2016-01-13 13:29 - 2015-12-08 19:11 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmkaud.sys 2016-01-13 13:29 - 2015-12-08 18:58 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-01-13 13:27 - 2016-01-27 22:16 - 00001952 _____ C:\Users\010nici010\Desktop\Los Lobos Hambrientos.lnk 2016-01-13 13:26 - 2015-12-30 20:08 - 05572544 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-01-13 13:26 - 2015-12-30 20:08 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-01-13 13:26 - 2015-12-30 20:08 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-01-13 13:26 - 2015-12-30 20:05 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-01-13 13:26 - 2015-12-30 20:02 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-01-13 13:26 - 2015-12-30 20:02 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-01-13 13:26 - 2015-12-30 20:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-01-13 13:26 - 2015-12-30 20:02 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-01-13 13:26 - 2015-12-30 20:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-01-13 13:26 - 2015-12-30 20:02 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-01-13 13:26 - 2015-12-30 20:01 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-01-13 13:26 - 2015-12-30 20:01 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-01-13 13:26 - 2015-12-30 20:01 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-01-13 13:26 - 2015-12-30 20:01 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-01-13 13:26 - 2015-12-30 20:01 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-01-13 13:26 - 2015-12-30 20:01 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-01-13 13:26 - 2015-12-30 20:01 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-01-13 13:26 - 2015-12-30 20:00 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-01-13 13:26 - 2015-12-30 19:59 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-01-13 13:26 - 2015-12-30 19:59 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-01-13 13:26 - 2015-12-30 19:59 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-01-13 13:26 - 2015-12-30 19:58 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-01-13 13:26 - 2015-12-30 19:58 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-01-13 13:26 - 2015-12-30 19:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-01-13 13:26 - 2015-12-30 19:57 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-01-13 13:26 - 2015-12-30 19:57 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-01-13 13:26 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-01-13 13:26 - 2015-12-30 19:55 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-01-13 13:26 - 2015-12-30 19:55 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:47 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-01-13 13:26 - 2015-12-30 19:47 - 03938240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-01-13 13:26 - 2015-12-30 19:44 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-01-13 13:26 - 2015-12-30 19:41 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-01-13 13:26 - 2015-12-30 19:40 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-01-13 13:26 - 2015-12-30 19:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-01-13 13:26 - 2015-12-30 19:39 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-01-13 13:26 - 2015-12-30 19:39 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-01-13 13:26 - 2015-12-30 19:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-01-13 13:26 - 2015-12-30 19:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-01-13 13:26 - 2015-12-30 19:38 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-01-13 13:26 - 2015-12-30 19:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 19:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 18:57 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-01-13 13:26 - 2015-12-30 18:50 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-01-13 13:26 - 2015-12-30 18:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-01-13 13:26 - 2015-12-30 18:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-01-13 13:26 - 2015-12-30 18:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-01-13 13:26 - 2015-12-30 18:42 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-01-13 13:26 - 2015-12-30 18:42 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-01-13 13:26 - 2015-12-30 18:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-01-13 13:26 - 2015-12-30 18:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-01-13 13:26 - 2015-12-30 18:32 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-01-13 13:26 - 2015-12-30 18:32 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-01-13 13:26 - 2015-12-30 18:32 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-01-13 13:26 - 2015-12-30 18:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-01-13 13:26 - 2015-12-30 18:30 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-01-13 13:26 - 2015-12-30 18:30 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 18:30 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 18:30 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-01-13 13:26 - 2015-12-30 18:30 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-01-13 13:26 - 2015-12-08 22:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-01-13 13:26 - 2015-12-08 22:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-01-13 13:26 - 2015-12-08 20:07 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-01-13 13:26 - 2015-12-08 20:07 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-01-13 13:26 - 2015-11-17 02:11 - 00025024 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2016-01-13 13:26 - 2015-11-17 02:08 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2016-01-13 13:26 - 2015-11-17 02:08 - 00792064 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2016-01-13 13:26 - 2015-11-17 02:08 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2016-01-13 13:26 - 2015-11-17 02:08 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2016-01-13 13:26 - 2015-11-17 02:08 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2016-01-13 13:26 - 2015-11-16 21:17 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2016-01-13 13:09 - 2016-01-13 13:11 - 167583000 _____ (Apple Inc.) C:\Users\010nici010\Downloads\iTunes6464Setup.exe 2016-01-12 23:12 - 2016-01-12 23:12 - 00294896 _____ C:\Windows\Minidump\011216-27518-01.dmp 2016-01-07 16:23 - 2016-01-07 16:23 - 00149731 _____ C:\Users\010nici010\Downloads\2015_12_Rechnung_1970223398.pdf 2016-01-07 16:23 - 2016-01-07 16:23 - 00105675 _____ C:\Users\010nici010\Downloads\2015_12_EVN_1970223398.pdf 2016-01-07 16:23 - 2016-01-07 16:23 - 00105675 _____ C:\Users\010nici010\Downloads\2015_12_EVN_1970223398 (1).pdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-02-02 18:20 - 2012-10-12 12:46 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-02-02 18:18 - 2014-07-22 12:13 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-02-02 18:15 - 2015-02-23 08:54 - 00065536 _____ C:\Windows\system32\Ikeext.etl 2016-02-02 18:15 - 2009-11-23 22:29 - 00000000 ____D C:\ProgramData\NVIDIA 2016-02-02 18:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-02-02 05:10 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-02-02 05:10 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-02-02 03:13 - 2014-07-22 12:13 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-02 03:13 - 2014-07-22 12:13 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-02 03:13 - 2014-07-22 12:13 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-01 14:54 - 2015-09-29 02:47 - 00001141 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2016-01-31 15:08 - 2014-10-30 02:18 - 00000462 ____H C:\Windows\Tasks\Norton Security Scan for 010nici010.job 2016-01-28 23:21 - 2014-07-22 13:19 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-01-27 23:57 - 2013-03-07 11:16 - 00000000 ____D C:\Users\010nici010\AppData\Roaming\Common 2016-01-27 22:21 - 2015-04-27 22:47 - 00003117 _____ C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\www.drwindows.de.lnk 2016-01-27 22:21 - 2015-04-27 22:47 - 00003087 _____ C:\Users\010nici010\Desktop\www.drwindows.de.lnk 2016-01-27 22:21 - 2014-10-30 02:08 - 00002340 _____ C:\Users\010nici010\Desktop\Chrome App Launcher.lnk 2016-01-27 22:16 - 2015-12-24 02:36 - 00001992 _____ C:\Users\Public\Desktop\Samsung Kies.lnk 2016-01-27 22:16 - 2015-12-24 02:36 - 00001990 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2016-01-27 22:16 - 2015-12-24 02:32 - 00001969 _____ C:\Users\Public\Desktop\Samsung Kies 3.lnk 2016-01-27 22:16 - 2015-12-14 11:57 - 00001968 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2016-01-27 22:16 - 2015-12-13 00:28 - 00001305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2016-01-27 22:16 - 2015-12-13 00:01 - 00001374 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2016-01-27 22:16 - 2015-12-13 00:00 - 00002534 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2016-01-27 22:16 - 2015-12-13 00:00 - 00001490 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2016-01-27 22:16 - 2015-11-16 19:38 - 00000950 _____ C:\Users\Public\Desktop\TomTom MyDrive Connect.lnk 2016-01-27 22:16 - 2015-11-05 09:49 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-01-27 22:16 - 2015-11-05 09:49 - 00002047 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk 2016-01-27 22:16 - 2015-10-28 19:05 - 00001095 _____ C:\Users\010nici010\Desktop\mp3DirectCut.lnk 2016-01-27 22:16 - 2015-10-13 11:00 - 00002071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Care.lnk 2016-01-27 22:16 - 2015-09-30 04:21 - 00001308 _____ C:\Users\010nici010\Desktop\Norton Installation Files.lnk 2016-01-27 22:16 - 2015-09-18 17:40 - 00001155 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk 2016-01-27 22:16 - 2015-09-18 17:40 - 00001105 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk 2016-01-27 22:16 - 2015-09-05 22:12 - 00001453 _____ C:\Users\Public\Desktop\Norton Security Scan.LNK 2016-01-27 22:16 - 2015-07-24 00:02 - 00001152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk 2016-01-27 22:16 - 2015-07-24 00:02 - 00001140 _____ C:\Users\Public\Desktop\WavePad Audio-Editor.lnk 2016-01-27 22:16 - 2015-07-06 17:19 - 00000866 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-01-27 22:16 - 2015-07-04 08:24 - 00000915 _____ C:\Users\Public\Desktop\VLC media player.lnk 2016-01-27 22:16 - 2015-05-20 11:52 - 00002489 _____ C:\Users\Public\Desktop\inSSIDer Home.lnk 2016-01-27 22:16 - 2015-03-09 00:14 - 00001320 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk 2016-01-27 22:16 - 2015-03-08 23:53 - 00001556 _____ C:\Users\Public\Desktop\Free Video to Android Converter.lnk 2016-01-27 22:16 - 2015-02-04 21:00 - 00001436 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk 2016-01-27 22:16 - 2015-02-04 21:00 - 00001241 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2016-01-27 22:16 - 2014-10-30 02:21 - 00002056 _____ C:\Users\010nici010\Desktop\FL Studio 11 (64bit).lnk 2016-01-27 22:16 - 2014-10-30 02:21 - 00002040 _____ C:\Users\010nici010\Desktop\FL Studio 11.lnk 2016-01-27 22:16 - 2014-10-30 00:37 - 00001322 _____ C:\Users\Public\Desktop\RealPlayer.lnk 2016-01-27 22:16 - 2014-08-10 22:36 - 00001780 _____ C:\Users\Public\Desktop\Apps.lnk 2016-01-27 22:16 - 2014-08-10 22:35 - 00001807 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2016-01-27 22:16 - 2014-07-22 13:19 - 00002210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-01-27 22:16 - 2014-07-22 11:55 - 00001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Netzmanager.lnk 2016-01-27 22:16 - 2014-07-22 11:55 - 00001003 _____ C:\Users\Public\Desktop\Netzmanager.lnk 2016-01-27 22:16 - 2014-06-24 11:48 - 00001077 _____ C:\Users\010nici010\Desktop\Amazon Music.lnk 2016-01-27 22:16 - 2013-10-07 10:17 - 00001225 _____ C:\Users\Public\Desktop\Philips Songbird.lnk 2016-01-27 22:16 - 2013-10-07 10:00 - 00001711 _____ C:\Users\Public\Desktop\Philips Media Converter for ViBE4.lnk 2016-01-27 22:16 - 2013-09-24 18:12 - 00001532 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk 2016-01-27 22:16 - 2013-03-13 16:17 - 00002085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk 2016-01-27 22:16 - 2013-03-13 16:16 - 00002067 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk 2016-01-27 22:16 - 2013-03-13 16:15 - 00002045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk 2016-01-27 22:16 - 2013-03-13 16:15 - 00002042 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk 2016-01-27 22:16 - 2013-02-26 14:31 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2016-01-27 22:16 - 2012-12-28 08:38 - 00001357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk 2016-01-27 22:16 - 2012-12-28 08:38 - 00001351 _____ C:\Users\Public\Desktop\HP Solution Center.lnk 2016-01-27 22:16 - 2012-12-28 08:38 - 00001060 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk 2016-01-27 22:16 - 2012-10-12 14:03 - 00001069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk 2016-01-27 22:16 - 2012-10-03 15:20 - 00001954 _____ C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WEB.DE.lnk 2016-01-27 22:16 - 2012-04-27 16:54 - 00002771 _____ C:\Users\Public\Desktop\Lexware buchhalter.lnk 2016-01-27 22:16 - 2012-03-27 17:23 - 00002039 _____ C:\Users\Public\Desktop\WISO Sparbuch 2010.lnk 2016-01-27 22:16 - 2012-03-17 17:32 - 00002066 _____ C:\Users\010nici010\Desktop\Avira AntiVir Control Center.lnk 2016-01-27 22:16 - 2011-07-27 07:55 - 00001303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Gallery.lnk 2016-01-27 22:16 - 2011-06-16 08:05 - 00001189 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remote Keyboard.lnk 2016-01-27 22:16 - 2011-05-30 13:50 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-01-27 22:16 - 2010-10-12 14:12 - 00002729 _____ C:\Users\Public\Desktop\Lexware QuickBooks.lnk 2016-01-27 22:16 - 2010-06-30 20:15 - 00002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO-Support für Übertragungen.lnk 2016-01-27 22:16 - 2010-06-17 11:50 - 00002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Control Center.lnk 2016-01-27 22:16 - 2010-05-27 13:04 - 00001106 _____ C:\Users\Public\Desktop\Picasa 3.lnk 2016-01-27 22:16 - 2010-05-26 08:23 - 00001153 _____ C:\Users\010nici010\Desktop\Dokumente - Verknüpfung.lnk 2016-01-27 22:16 - 2010-04-21 13:10 - 00001421 _____ C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-01-27 22:16 - 2009-12-18 15:20 - 00002072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Gate.lnk 2016-01-27 22:16 - 2009-12-18 15:18 - 00002028 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Media plus.lnk 2016-01-27 22:16 - 2009-12-18 15:17 - 00001826 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Documentation.lnk 2016-01-27 22:16 - 2009-12-18 15:17 - 00001066 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Premium Partners.lnk 2016-01-27 22:16 - 2009-12-18 15:17 - 00000988 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Data Restore Tool.lnk 2016-01-27 22:16 - 2009-12-18 15:02 - 00001025 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMB.lnk 2016-01-27 22:16 - 2009-12-18 15:02 - 00000923 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MusicStation.lnk 2016-01-27 22:16 - 2009-12-18 15:01 - 00002569 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk 2016-01-27 22:16 - 2009-12-18 15:01 - 00001189 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works-Start.lnk 2016-01-27 22:16 - 2009-12-18 14:47 - 00001069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO-Wiederherstellungscenter.lnk 2016-01-27 22:16 - 2009-11-23 21:04 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2016-01-27 22:16 - 2009-11-23 21:04 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2016-01-27 22:16 - 2009-07-14 06:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk 2016-01-27 22:16 - 2009-07-14 05:57 - 00001523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2016-01-27 22:16 - 2009-07-14 05:57 - 00001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk 2016-01-27 22:16 - 2009-07-14 05:57 - 00001304 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk 2016-01-27 22:16 - 2009-07-14 05:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk 2016-01-27 22:16 - 2009-07-14 05:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk 2016-01-27 22:16 - 2009-07-14 05:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk 2016-01-27 22:11 - 2009-11-23 21:11 - 00000000 ____D C:\Windows\InstDrvs 2016-01-27 20:00 - 2010-04-21 13:07 - 00000000 ____D C:\Users\010nici010 2016-01-25 15:33 - 2013-10-30 12:59 - 00000000 ____D C:\ProgramData\Oracle 2016-01-25 14:10 - 2014-10-29 14:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-01-25 14:10 - 2014-10-29 14:30 - 00000000 ____D C:\Program Files\Java 2016-01-25 14:10 - 2013-06-23 16:47 - 00000000 ____D C:\Program Files (x86)\Java 2016-01-25 14:08 - 2014-10-29 14:34 - 00110176 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2016-01-21 10:43 - 2015-12-12 23:49 - 00000000 ____D C:\Users\010nici010\AppData\Local\Windows Live 2016-01-20 20:20 - 2012-10-12 12:46 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-01-20 20:20 - 2012-10-12 12:46 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-01-20 20:20 - 2012-10-12 12:46 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-01-20 12:55 - 2009-12-18 23:36 - 00704520 _____ C:\Windows\system32\perfh007.dat 2016-01-20 12:55 - 2009-12-18 23:36 - 00152326 _____ C:\Windows\system32\perfc007.dat 2016-01-20 12:55 - 2009-07-14 06:13 - 01634360 _____ C:\Windows\system32\PerfStringBackup.INI 2016-01-20 12:55 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2016-01-15 09:35 - 2009-07-14 05:45 - 00373320 _____ C:\Windows\system32\FNTCACHE.DAT 2016-01-15 01:08 - 2012-05-18 02:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-01-15 01:07 - 2012-05-18 02:01 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-01-15 01:07 - 2012-05-18 02:01 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-01-15 01:06 - 2013-08-08 02:00 - 00000000 ____D C:\Windows\system32\MRT 2016-01-15 00:56 - 2010-08-27 07:12 - 143671360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-01-14 16:14 - 2014-12-29 10:02 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2016-01-14 11:25 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2016-01-14 08:36 - 2014-12-12 03:41 - 00000000 ____D C:\Windows\system32\appraiser 2016-01-14 08:36 - 2014-04-24 02:01 - 00000000 ___SD C:\Windows\system32\CompatTel 2016-01-13 23:47 - 2014-08-05 10:00 - 00000000 ____D C:\ProgramData\Package Cache 2016-01-13 20:30 - 2015-10-16 10:40 - 389425384 _____ C:\Windows\MEMORY.DMP 2016-01-13 20:30 - 2010-08-13 08:12 - 00000000 ____D C:\Windows\Minidump 2016-01-13 12:16 - 2010-06-07 13:07 - 00000000 ____D C:\Users\010nici010\AppData\Local\ElevatedDiagnostics 2016-01-13 09:56 - 2013-03-11 17:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2016-01-07 04:51 - 2009-07-14 03:34 - 00000470 _____ C:\Windows\win.ini ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2010-04-21 13:28 - 2010-05-21 17:07 - 0000128 _____ () C:\Users\010nici010\AppData\Roaming\wklnhst.dat 2014-11-05 19:03 - 2014-11-05 19:03 - 0007605 _____ () C:\Users\010nici010\AppData\Local\Resmon.ResmonCfg 2012-12-28 08:34 - 2012-12-28 08:42 - 0000875 _____ () C:\ProgramData\hpzinstall.log 2012-01-28 19:56 - 2012-01-28 19:56 - 0000003 _____ () C:\ProgramData\MusicStation.log 2012-01-28 19:55 - 2012-01-28 19:55 - 0000221 _____ () C:\ProgramData\MusicStation.xml Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Users\010nici010\RealPlayerCloud_de.exe Einige Dateien in TEMP: ==================== C:\Users\010nici010\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-01-31 12:15 ==================== Ende von FRST.txt ============================ |
|
02.02.2016, 18:41
| #18 |
| | PC hat immer noch die Malware drauf...Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von 010nici010 (2016-02-02 18:32:42)
Gestartet von C:\Users\010nici010\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2010-04-21 12:07:08)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
010nici010 (S-1-5-21-1273784247-385934570-3056030413-1000 - Administrator - Enabled) => C:\Users\010nici010
Administrator (S-1-5-21-1273784247-385934570-3056030413-500 - Administrator - Disabled)
Gast (S-1-5-21-1273784247-385934570-3056030413-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1273784247-385934570-3056030413-1002 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4660_4680_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.)
Amazon Music (HKU\S-1-5-21-1273784247-385934570-3056030413-1000\...\Amazon Amazon Music) (Version: 3.8.1.754 - Amazon Services LLC)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.85 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.193 - ArcSoft)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.11 Beta2 - Michael Tippach)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{eac7da46-2097-4dd4-80a6-8b67cbb2b23f}) (Version: 1.1.53.13962 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.53.13962 - Avira Operations GmbH & Co. KG) Hidden
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.12.3119 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{1AFACC2A-9A60-43EF-ABDB-2CEECA5EA77F}) (Version: 0.8.12.3119 - BlueStack Systems, Inc.)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.07 - Piriform)
Citrix Presentation Server Client (HKLM-x32\...\{2624B680-02BC-4CBC-839C-DA20DF6EF6EC}) (Version: 10.200.2650 - Citrix Systems, Inc.)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.804 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
DocMgr (x32 Version: 140.0.65.000 - Ihr Firmenname) Hidden
DocProc (x32 Version: 140.0.100.000 - Hewlett-Packard) Hidden
Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{06C05B90-2127-4933-8ABA-61833BDE13FA}) (Version: 2.6.0.11050 - Sony Corporation)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.0.545 - Evernote Corp.)
Fax (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version: - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version: - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.97 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPBaseService2 (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP OfficeJet J4600 All-In-One Series (HKLM\...\{4945F319-A24D-454C-A411-F3689987315D}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPProductAssistant (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{CCAFF072-4DDB-4846-963D-15F02A8E9472}) (Version: 13.00.0000 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.00.1030 - Intel Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - Intel Corporation)
J4680 (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
Java 8 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Lexware Abschreibungsrechner (HKLM-x32\...\{229A9797-2EE6-4B96-9CEC-3E4710F611E0}) (Version: 10.50.04.0001 - Haufe-Lexware GmbH & Co.KG)
Lexware buchhalter 2012 (HKLM-x32\...\{0197D136-598D-4968-BEEA-91C1B764F05D}) (Version: 17.02.00.0185 - Haufe-Lexware GmbH & Co.KG)
Lexware Elster (HKLM-x32\...\{906CA2E5-5933-4DFE-AC9F-C45C0811F4E7}) (Version: 12.04.00.0206 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (HKLM-x32\...\{F3C2ECAA-1B4D-4B75-9105-106B0D03EF02}) (Version: 2.80.00.0007 - Haufe-Lexware GmbH & Co.KG)
Lexware online banking (HKLM-x32\...\{CB21905F-BE58-4DC9-8FC1-6EE2EA210423}) (Version: 16.00.00.0001 - Haufe-Lexware GmbH & Co.KG)
Lexware QuickBooks 2011 (HKLM-x32\...\{43034BED-DF67-4CC8-8D13-D18B0298F402}) (Version: 23.20.04.0049 - Haufe-Lexware GmbH & Co. KG)
Lexware Zeiterfassung (HKLM-x32\...\{4119E30C-82DE-44AD-9382-631A031E1E1B}) (Version: 23.00.04.0005 - Haufe-Lexware GmbH & Co. KG)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.266.3 - McAfee, Inc.)
McAfee SiteAdvisor (HKLM\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 3.3.1.129 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.141 - McAfee, Inc.)
Media Gallery (Version: 1.4.0.16250 - Your Company Name) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MusicStation (HKLM-x32\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone)
MyDriveConnect 4.0.7.2442 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.7.2442 - TomTom)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.081 - Deutsche Telekom AG)
Netzmanager (Version: 1.081 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
Norton Security Scan (HKLM-x32\...\NSS) (Version: 4.3.0.43 - Symantec Corporation)
NVIDIA 3D Vision Treiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Philips Media Converter (HKLM-x32\...\{D615D099-5C0F-41E0-B69E-B7D1CDC51B61}) (Version: 1.03 - Philips)
Philips Media Converter (x32 Version: 1.03 - Philips) Hidden
Philips Songbird (HKLM-x32\...\Philips Songbird) (Version: 6.1.2265 (2265) - Koninklijke Philips Electronics N.V.)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.1.00.13280 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.5.00.03020 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden
PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150 - Sony Corporation) Hidden
ProductContext (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6045 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Remote Keyboard (x32 Version: 1.1.1.03020 - Sony Corporation) Hidden
Remote Play with PlayStation 3 (x32 Version: 1.1.0.12240 - Sony Corporation) Hidden
RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH)
Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.15075.2 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.15075.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15072.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.55.0 - Samsung Electronics Co., Ltd.)
Scan (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
Secunia PSI (3.0.0.4001) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.4001 - Secunia)
Servicepack Datumsaktualisierung (x32 Version: 1.00.00.0005 - Haufe-Lexware) Hidden
Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
Setup_msm_VCMS_x64 (Version: 2.6.0.06040 - Sony Corporation) Hidden
Setup_msm_VOFS_x64 (Version: 2.3.0.09270 - Sony Corporation) Hidden
Setup_VEP_x64_Contain_SSDB (Version: 3.9.0.09270 - Sony Corporation) Hidden
SHIELD Streaming (Version: 3.1.100 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SmartWebPrinting (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
SOHLib Merge Module (x32 Version: 2.2.0.11240 - Sony Corporation) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Sony Home Network Library (HKLM-x32\...\{A6B90666-2A1F-49E8-A40E-27EAAD11C096}) (Version: 2.2.0.11240 - Sony Corporation)
Sony Home Network Library (x32 Version: 2.0.1.10160 - Sony Corporation) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VAIO - Media Gallery (HKLM-x32\...\{C7EE26A6-FBDC-4A9B-83FD-DD9B26D44DFE}) (Version: 1.4.3.16250 - Sony Corporation)
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.03020 - Sony Corporation)
VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{22008CF9-2B54-4022-AFD8-3B7D42C89E6B}) (Version: 1.6.10.11160 - Sony Corporation)
VAIO - Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.1.0.12240 - Sony Corporation)
VAIO - Remote-Tastatur (HKLM-x32\...\{7396FB15-9AB4-4B78-BDD8-24A9C15D2C65}) (Version: 1.0.1.03020 - Sony Corporation)
VAIO Care (HKLM\...\{6EEC3E9C-3479-42EB-B93C-E7DF7927DD82}) (Version: 8.4.4.09181 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{F8B40DB4-FD07-4368-AA57-34F2B0839683}) (Version: 3.9.20.08110 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.7.0.14191 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM\...\{725D5BA4-E9FA-452B-8CF5-D7E5F8055C71}) (Version: 3.9.20.08110 - Sony Corporation)
VAIO Content Metadata Manager Settings (HKLM\...\{8FE3CF66-4484-4D39-B47D-DEBBA173619D}) (Version: 3.9.20.08110 - Sony Corporation)
VAIO Content Metadata XML Interface Library (HKLM\...\{97C58294-36D8-4594-8A49-7AB4AE096504}) (Version: 3.9.20.08110 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.1.03100 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.4.00.05300 - Sony Corporation)
VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.11300 - Sony Corporation)
VAIO Entertainment Platform (HKLM-x32\...\{0489D044-6386-4BDF-9F98-577D60CF79DD}) (Version: 3.9.0.11160 - Sony Corporation)
VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.1.09230 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden
VAIO Marketing Tools (HKLM-x32\...\MarketingTools) (Version: - Sony Corporation)
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.5.00.05300 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.0.00.09240 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM-x32\...\{04EAE65A-CDCF-480F-B754-5C3A9364239C}) (Version: 2.3.0.11240 - Sony Corporation)
VAIO Personalization Manager (HKLM\...\{BAD9A7B0-FA18-4247-A6F5-BDCF64B40C4C}) (Version: 3.0.2.05260 - Sony Corporation)
VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe)
VAIO screensaver (HKLM-x32\...\VAIO screensaver) (Version: 1.0.0.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.1.08110 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.1.0.08060 - Sony Corporation)
VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.0.0.06010 - Sony Corporation)
VAIO Window Organizer (HKLM-x32\...\{6D320CE8-79EB-4D45-8C6D-DEF74D84B49A}) (Version: 2.0.0.08280 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.2.06030 - Sony Corporation)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.12 - NCH Software)
WEB.DE Desktop Icons (HKLM-x32\...\1&1 Mail & Media GmbH 1und1DesktopIconsInstaller) (Version: 3.0.5.0 - 1&1 Mail & Media GmbH)
WEB.DE MailCheck (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar IE8) (Version: 2.6.6.1 - 1&1 Mail & Media GmbH)
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 2.1.4.1420 - 1&1 Mail & Media GmbH)
WEB.DE Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 4.0.1.0 - 1&1 Mail & Media GmbH)
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/11/2009 2.0.0010.00002) (HKLM\...\B81055EA372C9E3EA5000B4BD9585D992D51F1DE) (Version: 08/11/2009 2.0.0010.00002 - Google, Inc.)
WISO Sparbuch 2010 (HKLM-x32\...\{46B70DEB-97B3-4E38-B746-EC16905E6A8F}) (Version: 17.00.6531 - Buhl Data Service GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1273784247-385934570-3056030413-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\010nici010\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1273784247-385934570-3056030413-1000_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\010nici010\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1273784247-385934570-3056030413-1000_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\010nici010\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0021DD17-B2BC-4997-9CC0-35D5C33F9D09} - System32\Tasks\{25780A81-B680-4383-B14D-322058F8414E} => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
Task: {0EF030C3-10ED-4D3C-B68B-2A8E997DAAF0} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {0FFAC133-BBF9-403A-9B86-5E36D8A79A70} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2015-07-31] (Sony Corporation)
Task: {104B3720-81DF-460C-B937-50B6C2D4B1B9} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {12F3FF57-88B0-4318-B4B1-894AE6D6B9ED} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {14349885-253D-43A4-981B-0BA992A23769} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {21D08E0F-1789-4121-8E93-C54D340B7B9D} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {2A2C9170-DE39-446B-B77F-980051D243AD} - System32\Tasks\SONY\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {2BCC4E00-92C1-481F-8A01-5AC7365AB1A1} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {2D72C096-05F9-427D-9807-C998A160D999} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {2E2F5FEF-00A6-44E4-82D7-8626423A525F} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {30968902-5B0F-442F-8886-33B760459DB9} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)
Task: {446C7DA7-DD38-489E-9773-99A03F4A74B9} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1273784247-385934570-3056030413-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {44C023ED-6255-40AB-A44A-DB98DDF6E9D2} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {581A90EF-5AA2-4CE2-BDE4-E896010C2E7D} - System32\Tasks\{01825289-DAAF-4D6B-9583-EAAC47D6BD94} => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
Task: {58EFF622-D859-4B16-9DA3-313F05932A21} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {5A40E926-9E86-4B89-9CFD-B12311724371} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {623147D1-1223-49E5-A1FC-21C6BEE07D4D} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)
Task: {78897759-BE88-4561-BA63-2C1F5EE5EE22} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {7EAF1821-05DA-4C30-B48B-3D8EFF507968} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {84A77F9C-AC24-46E6-963E-E29F13DC83D8} - System32\Tasks\Lexware-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2011-07-31] (Haufe-Lexware GmbH & Co. KG)
Task: {851F2D29-3895-4B53-BCE0-EFB63CB3A64E} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2015-02-04] (Sony Corporation)
Task: {86A95F43-5C30-425E-8128-E2ACC8D95380} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1273784247-385934570-3056030413-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {88158C14-E1A1-4432-B9F5-2347F00A9CDC} - System32\Tasks\1und1 Konfiguration =>
Task: {8A4F53C5-005A-45B0-ABB3-E3D2313B330B} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2015-10-08] (1&1 Mail & Media GmbH)
Task: {8D81232A-83C2-4037-B961-3ECC4A2A7170} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2009-11-20] (Sony Corporation)
Task: {8EC2253B-249C-4601-A781-A3808F9F72CB} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {901ED292-D959-403E-9097-46ACE8B1A28D} - System32\Tasks\Norton Security Scan for 010nici010 => C:\Program Files (x86)\Norton Security Scan\Engine\4.3.0.43\Nss.exe [2015-07-07] (Symantec Corporation)
Task: {931B6EE4-72D7-4FCF-8A23-5579F6622D19} - System32\Tasks\RealCreateProcessScheduledTask8016860S-1-5-21-1273784247-385934570-3056030413-1000 => C:\Program Files (x86)\Real\RealPlayer\realplay.exe [2014-10-30] (RealNetworks, Inc.)
Task: {980ABCE0-4F8B-4E55-AB09-EA02535CA71F} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-12-22] (Oracle Corporation)
Task: {9B8E1C10-8D69-4CEC-9A23-7A3D39FF0E8C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-06-01] (Piriform Ltd)
Task: {A4338521-D5B6-4CEA-99F1-57DF4D135D9A} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1273784247-385934570-3056030413-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {A453E243-E37F-4288-A855-6D8EF1BBFC3D} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2015-07-23] (Sony Corporation)
Task: {AFCFA35F-AFF4-4BA7-8287-EEB16B8860DE} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-19] (Sony Corporation)
Task: {BD9CB833-6291-4517-97C9-96EDAA56FF06} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
Task: {C3070852-FA70-4A46-8B2C-23DACBAE392E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1273784247-385934570-3056030413-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {C42F49F9-64F3-4B53-A453-80B907F7B913} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2015-08-06] (Sony Corporation)
Task: {C554EADB-7A6D-4156-B5B8-40E849027CA7} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {D006A8A6-F9A2-4FE7-BE5E-B9F9A532FDC1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {D8D3545D-E60D-43E7-8BBB-4CF430333EBD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {DCAA0083-AC1E-48B5-9E20-C938A6C2F1B0} - System32\Tasks\Sun Microsystems-Online-Aktualisierungsprogramm => C:\Program Files\Java\jre6\bin\jusched.exe
Task: {DD12ACBC-E180-4C7C-8AFC-B2F6772A85CD} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)
Task: {DD9F510C-95F4-499A-90C8-BAC5BC372FF4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask => start sppsvc
Task: {E3F239AC-749A-4173-B357-39E21FBAFAC3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {E9DD2E35-EB55-40CD-967E-4F8736A3D580} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {EA665B5B-727E-4559-8721-C8EC8C201F85} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {F08F6ED0-7404-415E-9C52-4E621BF7378E} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {F70279C1-DD17-4DE3-ACDA-D823E4763281} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Norton Security Scan for 010nici010.job => C:\PROGRA~2\NORTON~2\Engine\430~1.43\Nss.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\010nici010\AppData\Local\Google\Chrome\User Data\Default\Web Applications\www.drwindows.de\http_80\www.drwindows.de.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://www.drwindows.de/programme-und-tools/70621-kein-lesezeichen-stern-symbol-in-der-adressleiste.html
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-08-10 23:19 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2009-09-21 15:04 - 2009-09-21 15:04 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2010-10-19 08:31 - 2010-10-19 08:31 - 00205312 _____ () C:\Program Files\Netzmanager\NMInfraIS2\driver64\SoftplugLib.DLL
2013-08-14 15:19 - 2013-08-14 15:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00458904 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00709272 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_modeler.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00185496 _____ () C:\Program Files\Sony\VAIO Care\ESRV\foreground_window_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00413336 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00130712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_process_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00025752 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_system_power_state_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00059544 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_quality_and_reliability_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00194712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\acpi_battery_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00159896 _____ () C:\Program Files\Sony\VAIO Care\ESRV\sema_thermal_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00158360 _____ () C:\Program Files\Sony\VAIO Care\ESRV\wifi_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00050840 _____ () C:\Program Files\Sony\VAIO Care\ESRV\devices_use_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00032920 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_disktrace_input.dll
2015-09-18 08:53 - 2015-09-18 08:53 - 00245912 _____ () C:\Program Files\Sony\VAIO Care\analyzer.dll
2009-12-18 15:17 - 2009-11-30 19:20 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2009-12-18 15:17 - 2009-11-30 19:20 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2014-09-11 16:06 - 2014-09-11 16:06 - 00878592 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\platforms\qwindows.dll
2014-09-11 16:14 - 2014-09-11 16:14 - 00032256 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qdds.dll
2014-09-11 16:05 - 2014-09-11 16:05 - 00021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qgif.dll
2014-09-11 16:14 - 2014-09-11 16:14 - 00027648 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qicns.dll
2014-09-11 16:05 - 2014-09-11 16:05 - 00021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qico.dll
2014-09-11 16:14 - 2014-09-11 16:14 - 00381952 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjp2.dll
2014-09-11 16:05 - 2014-09-11 16:05 - 00204800 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjpeg.dll
2014-09-11 16:14 - 2014-09-11 16:14 - 00218112 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qmng.dll
2014-09-11 16:08 - 2014-09-11 16:08 - 00015872 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qsvg.dll
2014-09-11 16:14 - 2014-09-11 16:14 - 00015360 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtga.dll
2014-09-11 16:15 - 2014-09-11 16:15 - 00307712 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtiff.dll
2014-09-11 16:15 - 2014-09-11 16:15 - 00014848 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwbmp.dll
2014-09-11 16:15 - 2014-09-11 16:15 - 00252928 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwebp.dll
2014-09-11 16:05 - 2014-09-11 16:05 - 00036352 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qgenericbearer.dll
2014-09-11 16:06 - 2014-09-11 16:06 - 00038912 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qnativerwifibearer.dll
2016-01-28 23:21 - 2016-01-27 18:39 - 01632584 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.97\libglesv2.dll
2016-01-28 23:21 - 2016-01-27 18:39 - 00087880 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.97\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1273784247-385934570-3056030413-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\010nici010\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WISO Mein Sparbuch heute.lnk => C:\Windows\pss\WISO Mein Sparbuch heute.lnk.CommonStartup
MSCONFIG\startupreg: Amazon Music => "C:\Users\010nici010\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Philips Device Listener => "C:\Program Files (x86)\Philips\Philips Songbird Resources\Autolauncher\PhilipsDeviceListener.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{FE02513E-B1FE-4CD7-AF52-19F4EDB1E1E3}] => (Allow) svchost.exe
FirewallRules: [{D340C21A-9E8F-4D86-8294-D8E17C8D97FE}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{7DF7B3AF-44AD-4171-93A4-F0A220BCB3CE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{2FA970C7-6352-4805-B57F-036DBD21DBE9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{CF4B455E-DAA5-4EEA-AF95-2EEBAC64F0FA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{5ABE7E63-1061-48AC-A66E-D12B967E187D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{1321D3C7-5163-44D8-8933-8A6C0C9C11BE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{778CDEFB-36A5-487B-BF8B-43171D61987B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{7BFCDAD8-F4B8-41B7-9999-3FF019B3BA89}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{05B29164-3542-4357-AF8B-1F7575624738}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{A9838CC2-DF20-4B61-8AB8-DAE94A8E852E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{E95496C3-0469-4C41-A8F3-898A3F188CCE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{E6C78C5E-0C73-4DC0-A711-428C1C28B8D7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{CC2CBAD6-AC40-4D08-9FB5-4A143D318B9A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{64910E0D-8D16-4390-BD51-3A57ADB2A0DE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{D757D15D-9B3F-4B98-9A8B-57203A9F5276}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{07507C91-1B73-4ACA-9A1C-B41D1B35E810}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{78892F0C-5181-4816-A7DD-CD99D1647E4D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{A6DD1494-5455-492A-B822-423FA562E263}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{ACFDA1CC-882A-43B2-8A20-648AB55A7854}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{36035D2A-3DAB-46B2-BD50-1D6B33AC1A4D}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{24AFD4B4-5802-45D1-BE9C-F8D287D1F3DA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CFAED0A6-BDB1-4078-8495-45A0E3087F20}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{7F81E5D7-B653-4E81-8434-584DA89A8C9D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{769D3B71-E876-4414-99BB-EF90B8721728}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3BECBF3A-F167-4C8E-88CB-C8FB53C04700}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E2BEE96F-BE1F-42C4-AE3F-2863F3861A5D}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{C00E46D8-23F3-4A01-97AB-B87ED71189B8}] => (Allow) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{8A429905-013C-43E3-84C6-1B54550416FA}] => (Allow) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{98EA1723-09F0-4DEB-8194-AC4F0751472F}] => (Allow) C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [{74959F04-F0FB-4F98-8551-40B71C50C46C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{2D020026-66BE-4C1C-B157-28BD35785A10}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A25028E8-6651-4DDB-AB95-43CF105AFAAB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8E8E6275-E427-4801-B67C-95CFA560C406}] => (Allow) LPort=2869
FirewallRules: [{83BDAEC6-5936-4F5C-8D29-38DF88057619}] => (Allow) LPort=1900
FirewallRules: [{ADDED9C6-1E8D-4F12-AD46-4F6587AE2D36}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{053CA8EA-8353-44B0-A0D1-1C7CF3770B2C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
24-01-2016 19:00:21 Windows-Sicherung
27-01-2016 01:19:35 Windows Update
28-01-2016 00:09:46 JRT Pre-Junkware Removal
28-01-2016 00:11:47 JRT Pre-Junkware Removal
31-01-2016 19:00:14 Windows-Sicherung
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (02/02/2016 06:18:28 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/01/2016 02:58:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 3.3.14.2, Zeitstempel: 0x56a926af
Name des fehlerhaften Moduls: WININET.dll, Version: 11.0.9600.18163, Zeitstempel: 0x566c53df
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000177fe4
ID des fehlerhaften Prozesses: 0x1754
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3
Error: (02/01/2016 02:51:04 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/31/2016 09:50:57 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/30/2016 01:39:42 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (01/30/2016 11:14:57 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/29/2016 10:06:24 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/28/2016 06:05:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 3.3.14.2, Zeitstempel: 0x56a926af
Name des fehlerhaften Moduls: FRST64.exe, Version: 3.3.14.2, Zeitstempel: 0x56a926af
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000026750
ID des fehlerhaften Prozesses: 0x690
Startzeit der fehlerhaften Anwendung: 0xFRST64.exe0
Pfad der fehlerhaften Anwendung: FRST64.exe1
Pfad des fehlerhaften Moduls: FRST64.exe2
Berichtskennung: FRST64.exe3
Error: (01/28/2016 03:10:00 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (01/28/2016 12:54:12 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Systemfehler:
=============
Error: (02/02/2016 06:18:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (02/02/2016 06:17:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Service Host erreicht.
Error: (02/02/2016 06:16:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.
Error: (02/02/2016 06:15:32 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\GEARAspiWDM.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (02/02/2016 06:14:47 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (02/02/2016 06:14:47 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (02/02/2016 06:14:26 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\System32\IWMSSvc.dll
Error: (02/02/2016 06:14:17 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (02/02/2016 06:12:20 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
Error: (02/02/2016 06:12:18 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Media Player-Netzwerkfreigabedienst" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5 CPU M 520 @ 2.40GHz
Prozentuale Nutzung des RAM: 59%
Installierter physikalischer RAM: 4014.09 MB
Verfügbarer physikalischer RAM: 1607.55 MB
Summe virtueller Speicher: 8026.39 MB
Verfügbarer virtueller Speicher: 4691.59 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:455.66 GB) (Free:335.38 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 06CF34C5)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455.7 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 18:41 on 02/02/2016 by 010nici010
Administrator - Elevation successful
========== reg ==========
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace]
(No values found)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\DelegateFolders]
(No values found)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\DelegateFolders\{C2B136E2-D50E-405C-8784-363C582BF43E}]
@="Wireless Devices"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{0142e4d0-fb7a-11dc-ba4a-000ffe7ab428}]
@="Biometrics"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}]
@="Power Options"
"PreferredPlan"="381b4222-f694-41f0-9685-ff5bb260df2e"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}\HardwareOverride]
@="Power Options"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}]
@="Taskbar Notification Icons Control Panel"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{0bbca823-e77d-419e-9a44-5adec2c8eeb0}]
@="NVIDIA Control Panel"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{0DF44EAA-FF21-4412-828E-260A8728E7F1}]
@="Taskbar and Start Menu"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{1206F5F1-0569-412C-8FEC-3204630DFB70}]
@="Credential Manager"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{17cd9488-1228-4b2f-88ce-4298e93e0966}]
@="Set User Defaults"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{241D7C96-F8BF-4F85-B01F-E2B043341A4B}]
@="Workspaces Center"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{305CA226-D286-468e-B848-2B2E8E697B74}]
@="Avira Antivirus"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{36eef7db-88ad-4e81-ad49-0e313f0c35f8}]
@="Windows Update"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{37efd44d-ef8d-41b1-940d-96973a50e9e0}]
@="Windows Sidebar Properties"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{38A98528-6CBF-4CA9-8DC0-B1E1D10F7B1B}]
@="View Available Networks"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{4026492F-2F69-46B8-B9BF-5654FC07E423}]
@="Windows Firewall"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{40419485-C444-4567-851A-2DD7BFA1684D}]
@="Phone and Modem"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{4299124F-F2C3-41b4-9C73-9236B2AD0E8F}]
@="Java"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{58E3C745-D971-4081-9034-86E34B30836A}]
@="Speech Recognition"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{5ea4f148-308c-46d7-98a9-49041b1dd468}]
@="Mobility Center"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{60632754-c523-4b62-b45c-4172da012619}]
@="User Accounts"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{626F6A81-C03F-453A-8A34-7055904B5503}]
@="VAIO Content Monitoring Settings"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{62D8ED13-C9D0-4CE8-A914-47DD628FB1B0}]
@="Region and Language"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{67CA7650-96E6-4FDD-BB43-A8E774F73A57}]
@="HomeGroup Control Panel"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{6C8EEC18-8D75-41B2-A177-8831D59D2D50}]
@="Mouse"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}]
@="Folder Options"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{725BE8F7-668E-4C7B-8F90-46BDB0936430}]
@="Keyboard"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{74246bfc-4c96-11d0-abef-0020af6b0b7a}]
@="Device Manager"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{78CB147A-98EA-4AA6-B0DF-C8681F69341C}]
@="CardSpace"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{78F3955E-3B90-4184-BD14-5397C15F1EFC}]
@="Performance Information and Tools"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{7b81be6a-ce2b-4676-a29e-eb907a5126c5}]
@="Programs and Features"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{80F3F1D5-FECA-45F3-BC32-752C152E456E}]
@="Tablet PC Settings"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{87D66A43-7B11-4A28-9811-C86EE395ACF7}]
@="Indexing Options"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{8E908FC9-BECC-40f6-915B-F4CA0E70D03D}]
@="Network and Sharing Center"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{96AE8D84-A250-4520-95A5-A47A7E3C548B}]
@="Parental Controls"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{9753C912-AB34-4C5E-B110-DE41EBEFFDE0}]
@="VAIO Control Center"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{9C60DE1E-E5FC-40f4-A487-460851A8D915}]
@="AutoPlay"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{9C73F5E5-7AE7-4E32-A8E8-8D23B85255BF}]
@="Sync Center Folder"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{9FE63AFD-59CF-4419-9775-ABCC3849F861}]
@="Recovery"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{A0275511-0E86-4ECA-97C2-ECD8F1221D08}]
@="Infrared"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{A3DD4F92-658A-410F-84FD-6FBBBEF2FFFE}]
@="Internet Options"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{A8A91A66-3A7D-4424-8D24-04E180695C7A}]
@="Device Center"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{B2C761C6-29BC-4f19-9251-E6195265BAF1}]
@="Color Management"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}]
@="Backup And Restore"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{BB06C0E4-D293-4f75-8A90-CB05B6477EEE}]
@="System"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{BB64F8A7-BEE7-4E1A-AB8D-7D8273F7FDB6}]
@="Action Center CPL"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{BD84B380-8CA2-1069-AB1D-08000948F534}]
@="Font Folder"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{BE122A0E-4503-11DA-8BDE-F66BAD1E3F3A}]
@="Windows Anytime Upgrade"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{C555438B-3C23-4769-A71F-B6D3D9B6053A}]
@="Display"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}]
@="Troubleshooting"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{CB1B7F8C-C50A-4176-B604-9E24DEE8D4D1}]
@="Getting Started"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{D17D1D6D-CC3F-4815-8FE3-607E7D5D10B3}]
@="Text to Speech"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{D20EA4E1-3957-11d2-A40B-0C5020524153}]
@="Administrative Tools"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{D555645E-D4F8-4c29-A827-D93C859C4F2A}]
@="Ease of Access"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}]
@="Windows Defender"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{E2E7934B-DCE5-43C4-9576-7FE4F75E7480}]
@="Date and Time"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{E7DE9B1A-7533-4556-9484-B26FB486475E}]
@="Network Map"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{E95A4861-D57A-4be1-AD0F-35267E261739}]
@="Windows SideShow"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{E9950154-C418-419e-A90A-20C5287AE24B}]
@="Sensors"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}]
@="Personalization"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{EFF1E591-90CA-4eb7-96CE-E8B57237F4E3}]
@="VAIO Analysis Manager Settings"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{F2DDFC82-8F12-4CDD-B7DC-D4FE1425AA4D}]
@="Sound"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\controlpanel\namespace\{F82DF8F7-8B9F-442E-A48C-818EA735FF9B}]
@="Pen and Touch"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls]
"PROSet Tools"="C:\Program Files\Intel\WiFi\bin\iproset.cpl"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\desk.cpl]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\inetcpl.cpl]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\intl.cpl]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\joy.cpl]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\ncpa.cpl]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\powercfg.cpl]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\sysdm.cpl]
"RunLevel"= 0x0000000002 (2)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\systemcpl.dll]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\tabletpc.cpl]
"RunLevel"= 0x0000000000 (0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\control panel\cpls\timedate.cpl]
"RunLevel"= 0x0000000000 (0)
[]
Hive unrecognized.
-= EOF =-
|
|
03.02.2016, 16:36
| #19 |
| /// TB-Ausbilder | PC hat immer noch die Malware drauf... Servus, nichts zu sehen von Malware Protection Live, ich frag mal intern nach, ob noch jemand eine Idee hat.  |
|
03.02.2016, 17:05
| #20 |
| | PC hat immer noch die Malware drauf... |
|
04.02.2016, 16:06
| #21 |
| /// TB-Ausbilder | PC hat immer noch die Malware drauf... Servus, bitte berichte mir, ob du danach immer noch Malware Protection Live in der Systemsteuerung siehst: Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
DeleteKey: HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconSteams
DeleteKey: HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream
Reboot:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
|
|
04.02.2016, 17:36
| #22 |
| | PC hat immer noch die Malware drauf...Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:27-01-2016
durchgeführt von 010nici010 (2016-02-04 17:19:05) Run:3
Gestartet von C:\Users\010nici010\Desktop
Geladene Profile: 010nici010 (Verfügbare Profile: 010nici010)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
DeleteKey: HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconSteams
DeleteKey: HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream
Reboot:
end
*****************
Prozess erfolgreich geschlossen.
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconSteams => Schlüssel nicht gefunden.
HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream => Schlüssel nicht gefunden.
Das System musste neu gestartet werden.
==== Ende von Fixlog 17:19:20 ====
Systemsteuerung - Alle Systemsteuerungselemente - Infobereichsymbole nichts mehr von einer Malware auf.... Ist jetzt wirklich alles verschwunden oder taucht es nächste Woche wieder auf...?? Trau dem Frieden noch nicht ganz, weil er so hartnäckig war... aber ich würde es mir wünschen wenn er nicht mehr auftaucht...  |
|
05.02.2016, 07:01
| #23 | ||||||||||
| /// TB-Ausbilder | PC hat immer noch die Malware drauf... Servus, sofern du dich nicht neu infizierst, kommt da auch nichts mehr.  Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.  Cleanup: Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.  Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen:
Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
08.02.2016, 10:58
| #24 |
| /// TB-Ausbilder | PC hat immer noch die Malware drauf... Ich bin froh, dass wir helfen konnten  In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
|
| Themen zu PC hat immer noch die Malware drauf... |
| .exe, .html, ander, anwendungen, entfernung, malware, nicht, probiert, programme, programmen, punkt, super, systems, systemsteuerung, tagen, windows, windows 7 |
