Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

FRST hat sich selbsttätig geupdated und einen Ordner "FRST-OlderVersion" auf meinem Desktop angelegt.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 26-06-2016 02
durchgeführt von Admin (Administrator) auf JSPC (26-06-2016 21:18:28)
Gestartet von C:\Users\sparsam\Desktop
Geladene Profile: Admin & sparsam (Verfügbare Profile: Admin & sparsam)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Qualcomm Atheros) C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
() C:\Windows\System32\GManager.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
() C:\Windows\System32\mlpatch.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe
(Sophos Limited) C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos System Protection\ssp.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe
(Sophos Limited) C:\Program Files (x86)\Common Files\Sophos\Web Intelligence\swi_fc.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Magic Control Technology Corporation) C:\Program Files (x86)\Mct Corp\UVTP100\Driver\TUCCDUTIL\TUCCD.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Oracle Corporation) C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\jre\launch4j-tmp\LRZ_Sync_Share.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Sophos Limited) C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2350880 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [TUCCDUtil] => C:\Program Files (x86)\Mct Corp\UVTP100\Driver\TUCCDUTIL\TUCCD.exe [1892560 2015-11-24] (Magic Control Technology Corporation)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-12-19] (Acer Incorporated)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [708496 2015-09-23] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [Sophos AutoUpdate Monitor] => C:\Program Files (x86)\Sophos\AutoUpdate\almon.exe [1531872 2016-04-22] (Sophos Limited)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKLM\...\RunOnce: [MSPCLOCK] => rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\RunOnce: [MSPQM] => rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\RunOnce: [MSKSSRV] => rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\RunOnce: [MSTEE.CxTransform] => rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interf (Der Dateneintrag hat 11 mehr Zeichen).
HKLM\...\RunOnce: [MSTEE.Splitter] => rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interf (Der Dateneintrag hat 11 mehr Zeichen).
HKLM\...\RunOnce: [WDM_DRMKAUD] => rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD. (Der Dateneintrag hat 17 mehr Zeichen).
HKLM\...\RunOnce: [*EmptyTemp] => cmd /c rd /q/s C:\FRST\Temp
HKLM-x32\...\runonceex: [Flags] => 8
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-04-29] (Atheros Communications)
HKU\S-1-5-21-355752145-468444358-1287253853-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53130368 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-355752145-468444358-1287253853-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-355752145-468444358-1287253853-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23496872 2016-05-17] (Google)
HKU\S-1-5-21-355752145-468444358-1287253853-1001\...\RunOnce: [Report] => \AdwCleaner\AdwCleaner[C1].txt
HKU\S-1-5-21-355752145-468444358-1287253853-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23496872 2016-05-17] (Google)
HKU\S-1-5-21-355752145-468444358-1287253853-1002\...\Run: [Dropbox Update] => C:\Users\sparsam\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-25] (Dropbox, Inc.)
HKU\S-1-5-21-355752145-468444358-1287253853-1002\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [479744 2014-10-29] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured_x64.dll [231936 2016-04-22] (Sophos Limited)
AppInit_DLLs-x32: C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL => C:\Program Files (x86)\Sophos\Sophos Anti-Virus\sophos_detoured.dll [289040 2016-04-22] (Sophos Limited)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [  PowerFolderIgnored] -> {0800cf35-8302-4030-8add-40ac1e3f8834} => C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\IgnoredOverlay_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [  PowerFolderLocked] -> {0800cf35-8302-4030-8add-40ac1e3f8835} => C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\LockedOverlay_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [  PowerFolderOK] -> {0800cf35-8302-4030-8add-40ac1e3f8831} => C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\OKOverlay_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [  PowerFolderSyncing] -> {0800cf35-8302-4030-8add-40ac1e3f8832} => C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\SyncingOverlay_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [  PowerFolderWarning] -> {0800cf35-8302-4030-8add-40ac1e3f8833} => C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\WarningOverlay_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LRZ Sync+Share.lnk [2016-05-31]
ShortcutTarget: LRZ Sync+Share.lnk -> C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\LRZ_Sync_Share.exe (Leibniz-Rechenzentrum)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{67986DCC-A772-49F9-B6F9-40920C7CFA43}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{ACE34CA5-3CD3-4BC6-B916-E49525B1F343}: [DhcpNameServer] 10.156.33.53 129.187.5.1

Internet Explorer:
==================
HKU\S-1-5-21-355752145-468444358-1287253853-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-355752145-468444358-1287253853-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE09&ocid=UE09DHP
HKU\S-1-5-21-355752145-468444358-1287253853-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?pc=UE09&ocid=UE09DHP
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-355752145-468444358-1287253853-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-355752145-468444358-1287253853-1002 -> {FA706342-7331-493F-A9FC-D7C886A11140} URL = 
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-04-26] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-26] (Oracle Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_192.dll [2016-06-17] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-17] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-355752145-468444358-1287253853-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll [Keine Datei]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2016-01-15]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer\Bluetooth Suite\adminservice.exe [305664 2014-08-22] (Qualcomm Atheros) [Datei ist nicht signiert]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2713856 2014-12-19] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 GManager; C:\Windows\system32\GManager.exe [313432 2012-08-28] ()
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-16] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 MlPatch; C:\Windows\system32\MlPatch.exe [2244912 2014-08-22] ()
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2014-04-28] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2014-04-28] (Hewlett-Packard) [Datei ist nicht signiert]
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-10-17] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-10-17] (Acer Incorporate)
R2 SAVAdminService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe [311544 2016-04-22] (Sophos Limited)
R2 SAVService; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe [285136 2016-04-22] (Sophos Limited)
R2 SntpService; C:\Program Files\Sophos\Sophos Network Threat Protection\bin\SntpService.exe [901248 2016-04-22] (Sophos Limited)
R2 Sophos AutoUpdate Service; C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe [604000 2016-04-22] (Sophos Limited)
R2 Sophos Web Control Service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Control\swc_service.exe [341800 2016-04-22] (Sophos Limited)
R2 sophossps; C:\Program Files (x86)\Sophos\Sophos System Protection\ssp.exe [2455816 2016-04-22] (Sophos Limited)
R2 swi_filter; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_filter.exe [471520 2016-04-22] (Sophos Limited)
R2 swi_service; C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3339736 2016-04-22] (Sophos Limited)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3893248 2014-04-02] (Qualcomm Atheros Communications, Inc.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-04-29] (Qualcomm Atheros)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [146856 2013-06-04] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [21928 2013-06-04] (Windows (R) Win 7 DDK provider)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 HPEWSFXBULK; C:\Windows\system32\drivers\hpfx64bulk.sys [20504 2009-02-25] (Hewlett Packard)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-08-08] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 mctkmd; C:\Windows\system32\drivers\mctkmd64.sys [166608 2015-11-20] (Magic Control Technology Corporation)
R0 mctkmdldr; C:\Windows\System32\drivers\mctkmdldr64.sys [19584 2011-04-08] (Magic Control Technology Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [161024 2016-04-22] (Sophos Limited)
S3 sdcfilter; C:\Windows\system32\DRIVERS\sdcfilter.sys [38144 2016-04-22] (Sophos Limited)
R2 sntp; C:\Windows\system32\DRIVERS\sntp.sys [116144 2016-04-22] (Sophos Limited)
S4 SophosBootDriver; C:\Windows\system32\DRIVERS\SophosBootDriver.sys [27904 2016-04-22] (Sophos Limited)
R1 swi_callout; C:\Windows\system32\DRIVERS\swi_callout.sys [32512 2016-04-22] (Sophos Limited)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42736 2014-07-10] (Synaptics Incorporated)
S3 t1pusb64; C:\Windows\system32\drivers\t1pusb64.sys [198568 2015-11-30] (Magic Control Technology Corp.)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [52592 2015-09-23] (Cisco Systems, Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-26 21:18 - 2016-06-26 21:18 - 00000000 ____D C:\Users\sparsam\Desktop\FRST-OlderVersion
2016-06-26 20:48 - 2016-06-26 20:48 - 00000903 _____ C:\Users\sparsam\Desktop\JRT.txt
2016-06-26 20:47 - 2016-06-26 20:47 - 00000903 _____ C:\Users\Admin\Desktop\JRT.txt
2016-06-26 20:41 - 2016-06-26 20:44 - 00000000 ____D C:\AdwCleaner
2016-06-26 20:36 - 2016-06-26 20:36 - 01610816 _____ (Malwarebytes) C:\Users\sparsam\Desktop\JRT.exe
2016-06-26 20:35 - 2016-06-26 20:36 - 03703360 _____ C:\Users\sparsam\Desktop\AdwCleaner_5.200.exe
2016-06-26 17:05 - 2016-06-26 17:05 - 00002106 _____ C:\Users\sparsam\Desktop\mbar-log-2016-06-26 (16-45-55).txt
2016-06-26 16:39 - 2016-06-26 17:34 - 00000000 ____D C:\Users\Admin\Desktop\mbar
2016-06-26 16:37 - 2016-06-26 16:37 - 16563352 _____ (Malwarebytes Corp.) C:\Users\sparsam\Desktop\mbar-1.09.3.1001.exe
2016-06-26 16:22 - 2016-06-26 16:23 - 00055699 _____ C:\Users\sparsam\Desktop\Addition.txt
2016-06-26 16:20 - 2016-06-26 21:18 - 00026510 _____ C:\Users\sparsam\Desktop\FRST1.txt
2016-06-26 16:20 - 2016-06-26 21:18 - 00000000 ____D C:\FRST
2016-06-26 16:18 - 2016-06-26 21:18 - 02389504 _____ (Farbar) C:\Users\sparsam\Desktop\FRST64.exe
2016-06-25 10:44 - 2016-06-25 10:44 - 00000000 ____D C:\Users\sparsam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-06-24 19:12 - 2016-06-24 19:12 - 00184789 _____ C:\Users\sparsam\Desktop\abolafia2013.pdf
2016-06-24 18:12 - 2016-06-24 18:55 - 01160219 _____ C:\Users\sparsam\Desktop\breuer1994.pdf
2016-06-24 18:00 - 2016-06-24 18:00 - 00093204 _____ C:\Users\sparsam\Desktop\jaspers_achsenzeit.pdf
2016-06-21 13:19 - 2016-06-21 13:19 - 00707058 _____ C:\Users\sparsam\Desktop\jep%2E11%2E2%2E97.pdf
2016-06-17 18:03 - 2016-06-17 18:03 - 00880214 _____ C:\Users\sparsam\Desktop\hetzel - central banks independence in historical perspective.pdf
2016-06-17 14:37 - 2016-06-17 18:48 - 00260480 _____ C:\Users\sparsam\Desktop\Wray - the fed and the new monetray consensus.pdf
2016-06-17 14:30 - 2016-06-17 14:30 - 01545420 _____ C:\Users\sparsam\Desktop\RosaReso.pdf
2016-06-15 13:04 - 2016-04-12 17:46 - 14467584 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-06-15 13:04 - 2016-04-12 17:30 - 12879872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-06-15 13:02 - 2016-06-03 19:11 - 00472576 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-06-15 13:02 - 2016-06-03 15:38 - 01413120 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-06-15 13:02 - 2016-06-02 19:51 - 00050352 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-06-15 13:02 - 2016-05-29 17:04 - 01204224 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-06-15 13:02 - 2016-05-29 17:04 - 00569856 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-06-15 13:02 - 2016-05-29 17:04 - 00544256 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-06-15 13:02 - 2016-05-29 17:04 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-06-15 13:02 - 2016-05-29 17:04 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-06-15 13:02 - 2016-05-29 17:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-06-15 13:02 - 2016-04-14 17:25 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-06-15 13:02 - 2016-04-14 17:11 - 02464768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-06-15 13:02 - 2016-01-31 21:17 - 00118624 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-06-15 13:02 - 2016-01-31 20:07 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-06-15 13:02 - 2016-01-31 19:42 - 03320832 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-06-15 13:02 - 2016-01-31 19:14 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-06-15 11:05 - 2016-05-21 19:28 - 25802752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-06-15 11:05 - 2016-05-21 18:57 - 20341248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-06-15 11:05 - 2016-05-21 00:09 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-06-15 11:05 - 2016-05-21 00:08 - 02895360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-06-15 11:05 - 2016-05-21 00:02 - 06051328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-06-15 11:05 - 2016-05-20 23:57 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-06-15 11:05 - 2016-05-20 23:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-06-15 11:05 - 2016-05-20 23:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-06-15 11:05 - 2016-05-20 23:50 - 02287104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-06-15 11:05 - 2016-05-20 23:44 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-06-15 11:05 - 2016-05-20 23:29 - 13815808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-06-15 11:05 - 2016-05-20 23:27 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-06-15 11:05 - 2016-05-20 23:25 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-06-15 11:05 - 2016-05-20 23:25 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-06-15 11:05 - 2016-05-20 23:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-06-15 11:05 - 2016-05-20 23:21 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-06-15 11:05 - 2016-05-20 23:19 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-06-15 11:05 - 2016-05-20 23:16 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-06-15 11:05 - 2016-05-20 23:14 - 04610048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-06-15 11:05 - 2016-05-20 23:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-06-15 11:05 - 2016-05-20 23:11 - 15420928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-06-15 11:05 - 2016-05-20 23:11 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-06-15 11:05 - 2016-05-20 23:09 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-06-15 11:05 - 2016-05-20 23:09 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-06-15 11:05 - 2016-05-20 23:08 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-06-15 11:05 - 2016-05-20 23:08 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-06-15 11:05 - 2016-05-20 23:06 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-06-15 11:05 - 2016-05-20 22:46 - 02597888 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-06-15 11:05 - 2016-05-20 22:42 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-06-15 11:05 - 2016-05-20 22:38 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-06-15 11:05 - 2016-05-20 22:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-06-15 11:05 - 2016-05-20 22:34 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-06-15 11:05 - 2016-05-20 22:23 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-06-15 11:05 - 2016-05-18 07:31 - 00372568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-06-15 11:05 - 2016-05-18 07:31 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-06-15 11:05 - 2016-05-16 23:13 - 00563016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-06-15 11:05 - 2016-05-16 23:13 - 00397224 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-06-15 11:05 - 2016-05-16 23:13 - 00340872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2016-06-15 11:05 - 2016-05-16 23:13 - 00178008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-06-15 11:05 - 2016-05-14 01:09 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-06-15 11:05 - 2016-05-14 01:07 - 00675328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-06-15 11:05 - 2016-05-14 01:07 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-06-15 11:05 - 2016-05-14 01:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-06-15 11:05 - 2016-05-14 01:04 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-06-15 11:05 - 2016-05-14 00:34 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-06-15 11:05 - 2016-05-14 00:19 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-06-15 11:05 - 2016-05-13 23:58 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-06-15 11:05 - 2016-05-12 20:38 - 00135336 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-06-15 11:05 - 2016-05-12 19:43 - 00115704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2016-06-15 11:05 - 2016-05-12 18:17 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-06-15 11:05 - 2016-05-12 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-06-15 11:05 - 2016-05-12 18:07 - 01360896 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-06-15 11:05 - 2016-05-12 17:59 - 00398848 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-06-15 11:05 - 2016-05-12 17:43 - 00291328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\polstore.dll
2016-06-15 11:05 - 2016-05-12 17:37 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FwRemoteSvr.dll
2016-06-15 11:05 - 2016-05-09 23:35 - 07075328 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-06-15 11:05 - 2016-05-09 22:56 - 05270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-06-15 11:05 - 2016-05-09 22:45 - 07793152 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-06-15 11:05 - 2016-05-09 22:23 - 05265920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-06-15 11:05 - 2016-05-06 17:45 - 00748544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-06-15 11:05 - 2016-05-06 17:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2016-06-15 11:04 - 2016-05-19 01:15 - 01379040 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-06-15 11:04 - 2016-05-18 22:35 - 01097216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-06-15 11:04 - 2016-05-14 22:01 - 00363104 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-06-15 11:04 - 2016-05-14 22:01 - 00320720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ws2_32.dll
2016-06-15 11:04 - 2016-05-14 01:07 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-06-15 11:04 - 2016-05-13 23:58 - 00339456 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-06-15 11:04 - 2016-05-13 23:45 - 00802816 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-06-15 11:04 - 2016-05-13 23:35 - 00286208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2016-06-15 11:04 - 2016-05-13 23:26 - 00631808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2016-06-14 14:35 - 2016-06-14 14:47 - 148861426 _____ (XMind Ltd. ) C:\Users\sparsam\Downloads\xmind-7-update1-windows.exe
2016-06-09 14:16 - 2016-04-22 22:32 - 00032512 _____ (Sophos Limited) C:\Windows\system32\Drivers\swi_callout.sys
2016-06-07 18:50 - 2016-06-08 10:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-06-07 11:53 - 2016-06-07 11:53 - 00468241 _____ C:\Users\sparsam\Desktop\Davidson - Reviving Keynes Revolution.pdf
2016-06-07 09:14 - 2016-06-17 14:51 - 00651042 _____ C:\Users\sparsam\Desktop\Saint-Paul - economic science and political influence.pdf
2016-06-06 17:24 - 2016-06-06 17:24 - 02128425 _____ C:\Users\sparsam\Downloads\Die Innenwelt der Ökonomie.zip
2016-06-02 09:04 - 2016-06-02 09:04 - 02397390 _____ C:\Users\sparsam\Desktop\Heisterhagen et al_Geld Krise Generation_SW2000.pdf
2016-05-31 10:54 - 2016-05-31 10:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LRZ Sync+Share
2016-05-31 10:49 - 2016-05-31 10:49 - 03331612 _____ C:\Users\sparsam\Downloads\Soziologische Revue 2-2016.pdf
2016-05-27 08:23 - 2016-05-27 08:23 - 00000000 ____D C:\Users\Public\Documents\Hewlett-Packard

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-26 21:19 - 2015-06-25 11:09 - 00001242 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-355752145-468444358-1287253853-1002UA.job
2016-06-26 20:59 - 2014-09-27 08:12 - 00765582 _____ C:\Windows\system32\perfh007.dat
2016-06-26 20:59 - 2014-09-27 08:12 - 00159366 _____ C:\Windows\system32\perfc007.dat
2016-06-26 20:59 - 2014-03-18 12:03 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2016-06-26 20:59 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-06-26 20:56 - 2015-01-08 02:58 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-26 20:53 - 2015-01-08 03:03 - 00000000 ___RD C:\Users\sparsam\Google Drive
2016-06-26 20:51 - 2015-12-11 12:12 - 00002808 _____ C:\Windows\system32\GManager.ini
2016-06-26 20:51 - 2015-01-08 02:58 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-26 20:51 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-26 20:31 - 2015-01-08 19:51 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-26 17:05 - 2015-12-02 17:29 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-06-26 16:45 - 2015-01-09 18:22 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-26 16:45 - 2015-01-08 02:46 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-06-26 16:23 - 2015-01-08 04:43 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{129CE97E-606C-4C32-BA3E-612814273D22}
2016-06-26 16:18 - 2015-01-09 13:16 - 00000000 ____D C:\Users\sparsam\AppData\Roaming\Skype
2016-06-26 15:19 - 2015-06-25 11:09 - 00001190 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-355752145-468444358-1287253853-1002Core.job
2016-06-25 16:22 - 2015-01-08 04:31 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-355752145-468444358-1287253853-1002
2016-06-25 12:39 - 2015-01-08 05:33 - 00000000 ____D C:\Users\sparsam\AppData\Local\CrashDumps
2016-06-25 12:20 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2016-06-25 10:44 - 2015-04-05 12:00 - 00000000 ____D C:\Users\sparsam\AppData\Roaming\Dropbox
2016-06-25 10:42 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-25 10:42 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-06-24 16:32 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-06-24 14:06 - 2015-06-12 23:04 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-06-24 14:06 - 2015-06-12 23:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-06-24 14:04 - 2015-06-14 11:09 - 00000000 ____D C:\Program Files (x86)\Steam
2016-06-24 12:30 - 2015-01-08 03:20 - 00000000 ____D C:\Users\sparsam\Documents\!LL
2016-06-24 10:53 - 2015-01-08 03:24 - 00000000 ____D C:\Users\sparsam\Documents\ZORGA
2016-06-23 12:28 - 2015-06-12 23:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-06-19 14:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-06-18 21:58 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-06-17 09:31 - 2015-01-08 19:51 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-06-15 16:50 - 2013-08-22 16:44 - 00545784 _____ C:\Windows\system32\FNTCACHE.DAT
2016-06-15 16:48 - 2015-01-08 01:12 - 00000000 ____D C:\Windows\system32\appraiser
2016-06-15 16:47 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2016-06-15 16:34 - 2015-07-10 14:45 - 00000000 ____D C:\Users\sparsam\Documents\LMU
2016-06-15 13:18 - 2015-01-08 06:45 - 00000000 ____D C:\Windows\system32\MRT
2016-06-15 13:13 - 2015-01-08 06:45 - 142482544 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-06-14 19:13 - 2014-07-14 19:54 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-06-14 19:13 - 2014-07-14 19:54 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-13 20:37 - 2015-01-08 03:33 - 00000000 ___RD C:\Users\sparsam\Texte
2016-06-13 11:57 - 2015-01-08 03:23 - 00000000 ____D C:\Users\sparsam\Documents\Projekte
2016-06-08 10:36 - 2015-01-08 02:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-07 17:14 - 2015-01-08 04:26 - 00000000 ____D C:\Users\sparsam
2016-06-04 13:33 - 2015-05-09 12:26 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-06-04 10:57 - 2016-02-07 15:35 - 00000000 ____D C:\Users\sparsam\AppData\Roaming\vlc
2016-06-04 00:57 - 2015-01-08 03:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-05-31 11:00 - 2015-01-09 13:16 - 00000000 ____D C:\ProgramData\Skype
2016-05-28 23:49 - 2015-04-04 17:18 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-28 23:49 - 2015-04-04 17:18 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-28 01:36 - 2016-05-18 23:18 - 00000000 ____D C:\Users\sparsam\AppData\Roaming\Bioshock

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-01-08 02:50 - 2015-01-08 02:50 - 0118724 _____ () C:\Users\Admin\AppData\Local\30FDB2F6_stp.CIS
2015-01-08 02:50 - 2015-01-08 02:50 - 0000318 _____ () C:\Users\Admin\AppData\Local\30FDB2F6_stp.CIS.part
2014-09-26 23:09 - 2014-09-26 23:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\libeay32.dll
C:\Users\Admin\AppData\Local\Temp\msvcr120.dll
C:\Users\Admin\AppData\Local\Temp\sqlite3.dll
C:\Users\sparsam\AppData\Local\Temp\desktoputils.dll
C:\Users\sparsam\AppData\Local\Temp\jnotify.dll
C:\Users\sparsam\AppData\Local\Temp\LiferayNativityWindowsUtil.dll
C:\Users\sparsam\AppData\Local\Temp\udt.dll
C:\Users\sparsam\AppData\Local\Temp\udt4j.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-06-21 11:54

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 26-06-2016 02
durchgeführt von Admin (2016-06-26 21:19:28)
Gestartet von C:\Users\sparsam\Desktop
Windows 8.1 (Update) (X64) (2015-01-08 02:02:02)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Admin (S-1-5-21-355752145-468444358-1287253853-1001 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-355752145-468444358-1287253853-500 - Administrator - Disabled)
Gast (S-1-5-21-355752145-468444358-1287253853-501 - Limited - Disabled)
SophosSAUJSPC0 (S-1-5-21-355752145-468444358-1287253853-1004 - Limited - Enabled)
SophosSAUJSPC1 (S-1-5-21-355752145-468444358-1287253853-1009 - Limited - Enabled)
sparsam (S-1-5-21-355752145-468444358-1287253853-1002 - Limited - Enabled) => C:\Users\sparsam

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Sophos Anti-Virus (Enabled - Up to date) {6BABF8F7-3EB6-BD1D-9167-8C5ECA060A29}
AS: Sophos Anti-Virus (Enabled - Up to date) {D0CA1913-188C-B293-ABD7-B72CB1814094}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (Version: 17.2.1 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8105 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3018 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.04.2001.2 - Acer Incorporated)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.4852 - CDBurnerXP)
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.11004 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.11004 - Cisco Systems, Inc.) Hidden
Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.)
Citavi 4 (HKLM-x32\...\{CC0A85B2-734A-45B3-B678-05F6A6499AC7}) (Version: 4.4.0.28 - Swiss Academic Software)
Citavi 5 (HKLM-x32\...\{7EB278FB-0C3C-445E-8665-4A6CDD9B794E}) (Version: 5.2.0.8 - Swiss Academic Software)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
Digitale Bibliothek 4 (HKLM-x32\...\Digitale Bibliothek 4) (Version:  - )
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc)
Dropbox (HKU\S-1-5-21-355752145-468444358-1287253853-1002\...\Dropbox) (Version: 5.4.24 - Dropbox, Inc.)
Foxit PhantomPDF (HKLM-x32\...\{F74C595C-BEF2-4AF9-9C4E-68F3CD509C4D}) (Version: 6.0.122.807 - Foxit Corporation)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
FreeFileSync 6.12 (HKLM-x32\...\FreeFileSync_is1) (Version: 6.12 - www.FreeFileSync.org)
Google Drive (HKLM-x32\...\{709316AD-161C-4D5C-9AE7-0B3A822DA271}) (Version: 1.30.2170.0459 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.0 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
LibreOffice 4.2.8.2 (HKLM-x32\...\{2D3234B2-FC7B-41CD-9FC8-4F9C2C20C131}) (Version: 4.2.8.2 - The Document Foundation)
LRZ Sync+Share (HKLM-x32\...\LRZ_Sync_Share) (Version: 10.5.391.0 - Leibniz-Rechenzentrum)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MAXQDA 12 (HKLM-x32\...\{AE3C2F60-9BA8-4932-8BAD-82E55AE698CD}) (Version: 12.1.1 - VERBI Software. Consult. Sozialforschung)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
Mozilla Thunderbird 38.0.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
Mozilla Thunderbird 38.3.0 (x86 de) (HKU\S-1-5-21-355752145-468444358-1287253853-1002\...\Mozilla Thunderbird 38.3.0 (x86 de)) (Version: 38.3.0 - Mozilla)
NVIDIA Grafiktreiber 333.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.17 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Qualcomm Atheros 61x4 Wireless LAN&Bluetooth Installer (HKLM-x32\...\{3241744A-BA36-41F0-B4AA-EF3946D00632}) (Version: 11.0.0.619A - Qualcomm Atheros)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.322 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.33 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.39059 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7260 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skype™ 7.24 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
Sophos Anti-Virus (HKLM-x32\...\{09863DA9-7A9B-4430-9561-E04D178D7017}) (Version: 10.6.3.537 - Sophos Limited)
Sophos AutoUpdate (HKLM-x32\...\{BCF53039-A7FC-4C79-A3E3-437AE28FD918}) (Version: 5.2.0.276 - Sophos Limited)
Sophos Network Threat Protection (HKLM\...\{66967E5F-43E8-4402-87A4-04685EE5C2CB}) (Version: 1.2.2.50 - Sophos Limited)
Sophos System Protection (HKLM-x32\...\{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}) (Version: 1.3.0 - Sophos Limited)
Trigger External Graphics Family 15.05.1124.0179 (HKLM-x32\...\{81C5AD1D-C7C6-48AC-AC85-8F04293B1780}) (Version: 15.05.1124.0179 - MCT Corp)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-355752145-468444358-1287253853-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\sparsam\AppData\Roaming\Dropbox\bin\DropboxExt64.30.dll => Keine Datei

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1285DFBB-CD96-48A2-A968-E1E271B5FF9B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-17] (Adobe Systems Incorporated)
Task: {207A52FF-84B7-4C3C-99E4-585C6141435C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {233E8EED-5AE1-43B4-9EB0-07C0B901C7D5} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe [2014-04-07] (Dolby Laboratories Inc.)
Task: {435BBB7F-B07A-4CF2-BD6D-89411E465B0B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {4DE4E6B6-713E-4484-8D97-F4850F54A17B} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: {68786FA1-0D5E-4827-A16E-7334A20C8204} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-355752145-468444358-1287253853-1002UA => C:\Users\sparsam\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-25] (Dropbox, Inc.)
Task: {6D1B5167-3B6D-4C89-9ADD-A51B19D0F41A} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-355752145-468444358-1287253853-1002Core => C:\Users\sparsam\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-25] (Dropbox, Inc.)
Task: {6DCD208E-2B16-4AE0-B711-06C44EF0B0E2} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {83FBBAB1-1372-4052-B9B1-59E9A12371B6} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {8E815CB4-6AB8-4DB5-B192-C394A56EC765} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-06-15] (Microsoft Corporation)
Task: {BD1BC32D-BAEC-4F99-ACA7-FC252875796A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {BE423992-5B66-4EB0-921D-F8608C615FEA} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-06-12] (Acer Incorporated)
Task: {C097199C-3C03-426E-8477-F8C9DCC71696} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-10-17] (Acer Incorporate)
Task: {D29AD939-49DE-4EDD-8CD3-E61D8C90C08F} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-10-17] (Acer Incorporate)
Task: {EE178812-E350-4BF0-9CBF-F70D17AC1C1F} - System32\Tasks\{A4621658-4650-47F3-8636-17234DC09D16} => pcalua.exe -a "C:\Program Files (x86)\Steam\steamapps\common\Fallout 3 goty\Fallout3ng.exe" -d "C:\Program Files (x86)\Steam\steamapps\common\Fallout 3 goty"
Task: {F1B99960-AFA0-46BA-ABB1-A55A8A47E4A0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-355752145-468444358-1287253853-1002Core.job => C:\Users\sparsam\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-355752145-468444358-1287253853-1002UA.job => C:\Users\sparsam\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-09-26 23:04 - 2014-05-14 00:17 - 00118728 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-04-01 15:08 - 2016-04-01 15:08 - 00395264 _____ () C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\IgnoredOverlay_x64.dll
2016-04-01 15:08 - 2016-04-01 15:08 - 00172544 _____ () C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\LiferayNativityUtil_x64.dll
2016-04-01 15:08 - 2016-04-01 15:08 - 00395264 _____ () C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\LockedOverlay_x64.dll
2016-04-01 15:08 - 2016-04-01 15:08 - 00395264 _____ () C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\OKOverlay_x64.dll
2016-04-01 15:08 - 2016-04-01 15:08 - 00395264 _____ () C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\SyncingOverlay_x64.dll
2016-04-01 15:08 - 2016-04-01 15:08 - 00395264 _____ () C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\WarningOverlay_x64.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-04-01 15:08 - 2016-04-01 15:08 - 00042496 _____ () C:\Program Files (x86)\Leibniz-Rechenzentrum\LRZ_Sync_Share\LiferayNativityContextMenus_x64.dll
2015-12-11 12:12 - 2012-08-28 15:20 - 00313432 _____ () C:\Windows\system32\GManager.exe
2015-12-11 12:12 - 2014-08-22 18:10 - 02244912 _____ () C:\Windows\system32\MlPatch.exe
2014-09-26 23:20 - 2012-04-24 12:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-04-22 22:34 - 2016-04-22 22:34 - 00233608 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg
2016-04-22 22:33 - 2016-04-22 22:33 - 00140696 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg
2016-04-22 22:33 - 2016-04-22 22:33 - 00119344 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg
2016-04-22 22:33 - 2016-04-22 22:33 - 00076704 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\portmap.plg
2016-04-22 22:33 - 2016-04-22 22:33 - 00165000 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg
2016-04-22 22:33 - 2016-04-22 22:33 - 00148440 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg
2014-04-07 16:13 - 2014-04-07 16:13 - 00052096 _____ () C:\Program Files\Dolby Digital Plus\Dolby.DDP.Controls_Desktop.dll
2014-04-29 03:38 - 2014-04-29 03:38 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-04-29 03:35 - 2014-04-29 03:35 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2014-04-29 03:42 - 2014-04-29 03:42 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2015-09-23 19:43 - 2015-09-23 19:43 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2010-03-23 13:26 - 2010-03-23 13:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2015-01-09 15:04 - 2015-01-09 15:04 - 00015616 _____ () C:\Windows\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2014-12-19 22:16 - 2014-12-19 22:16 - 00013568 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2014-12-19 22:10 - 2014-12-19 22:10 - 00277096 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2016-05-31 22:13 - 2016-04-05 01:03 - 00949426 ____N () C:\Users\sparsam\AppData\Local\Temp\jnotify.dll
2016-05-31 22:13 - 2016-04-05 01:03 - 00009728 ____N () C:\Users\sparsam\AppData\Local\Temp\desktoputils.dll
2016-05-31 10:58 - 2016-04-05 01:03 - 00007680 ____N () C:\Users\sparsam\AppData\Local\Temp\LiferayNativityWindowsUtil.dll
2016-05-31 22:13 - 2016-04-05 01:03 - 00180224 ____N () C:\Users\sparsam\AppData\Local\Temp\udt.dll
2016-05-31 22:13 - 2016-04-05 01:03 - 00014336 ____N () C:\Users\sparsam\AppData\Local\Temp\udt4j.dll
2016-06-26 20:52 - 2016-06-26 20:52 - 00098816 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32api.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00110080 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\pywintypes27.dll
2016-06-26 20:52 - 2016-06-26 20:52 - 00364544 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\pythoncom27.dll
2016-06-26 20:52 - 2016-06-26 20:52 - 00320512 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32com.shell.shell.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00776704 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_hashlib.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 01176576 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._core_.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00806400 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._gdi_.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00816128 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._windows_.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 01067008 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._controls_.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00733184 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._misc_.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00682496 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\pysqlite2._sqlite.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00088064 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_ctypes.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00119808 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32file.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00108544 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32security.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00007168 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\hashobjs_ext.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00017920 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\thumbnails_ext.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00088064 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\usb_ext.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00012288 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\common.time34.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00018432 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32event.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00167936 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32gui.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00046080 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_socket.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 01208320 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_ssl.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00128512 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_elementtree.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00127488 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\pyexpat.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00038912 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32inet.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00036864 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_psutil_windows.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00525208 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\windows._lib_cacheinvalidation.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00011264 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32crypt.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00077312 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._html2.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00027136 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_multiprocessing.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00020480 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\_yappi.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00035840 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32process.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00686080 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\unicodedata.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00078848 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._animate.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00123392 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\wx._wizard.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00024064 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32pipe.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00010240 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\select.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00025600 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32pdh.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00017408 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32profile.pyd
2016-06-26 20:52 - 2016-06-26 20:52 - 00022528 ____R () C:\Users\sparsam\AppData\Local\Temp\_MEI46322\win32ts.pyd
2014-09-26 23:02 - 2013-12-10 01:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SntpService => ""="service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-355752145-468444358-1287253853-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\acer01.jpg
HKU\S-1-5-21-355752145-468444358-1287253853-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\sparsam\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-355752145-468444358-1287253853-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-355752145-468444358-1287253853-1002\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{2966FB4D-C583-476B-89B4-A4AFEAC95935}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{55D1DB7B-D233-4FE1-BC3A-F577037AA8D8}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{AFDBC8AA-5649-4338-BA4C-81017A3FA72F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{1F89B3B2-2C15-4D10-8C19-85DC3E0FC58F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E0B4B215-877E-48D8-B035-9A9AA2A0E34B}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{2372E55F-9535-4F6A-8ED5-46A96D75DA8B}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{05CF960F-334D-41CA-89DE-F4704B0ED96A}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{016FDB3E-1B95-4C85-8771-1F390AD1B325}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{32B009AC-ED15-432B-B676-BE76BA367D20}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{043107C1-BC54-43A1-BB27-9D1E5A4B9425}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Play.exe
FirewallRules: [{261BB77F-BE71-45DD-BD94-DE81A7448401}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{BCA891F2-AF7D-451E-937E-AD7768A1AF32}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{E8A627E0-C3B7-41C2-B440-A3C4EBB33A7C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{1851DD58-765C-4C32-B952-5206177F7D75}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{3EFC81E9-98BD-4EE5-9002-F9C0869BACFA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{531C1BF7-9063-4BFF-9B9C-B01474083BDE}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{AE5BA963-33CB-466E-BEDF-754AC411D499}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{DEFBA06D-CADA-4142-8D1F-820E92C71378}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{F3F0F295-DC02-41A0-89FA-8656785771D6}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{C2908D02-3360-4B86-88C9-6F4F2B7A7A6B}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{CBA61EA5-FC65-411F-A626-B2AF2F372BDC}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{410CA8D9-0E42-43A9-A2E4-6CB2788A6A43}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{762EAF2C-D51E-4014-86C8-4ACCCD59130E}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{6BDDC42B-8D34-457C-9BB7-6D74C8460D4A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{E6490234-6D59-48CB-AA29-8236AA026646}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{DEFE5E33-C091-43E5-9BBC-598FCA139FC4}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F8BA5151-9A38-47FC-852D-68BCD8AC2BEF}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F0F4E468-407D-4888-8502-A9C962D36971}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{ECAE8C69-5A08-42E1-8108-F233D4317E9F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{566EA6FE-91E0-46EB-85B1-32D5C66EA078}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{86C98630-27B7-48D3-9639-13996C147027}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{14297181-860C-4E5B-9701-68FB65200601}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{F4606D04-221D-4563-BFAD-056E9452A7B7}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{10A2ED88-9935-4DBC-BBF6-43E8E4EAEB71}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{3AA0A09A-2400-4729-8D82-3FECABBBE430}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{B5E83515-CA99-483F-B279-E01AD71BC4B4}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{F3FDC21A-FB0E-42E6-BF23-15A974685CC9}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{65C2E969-0351-4E8E-80A2-0FF72A0F178D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{829575DB-B14B-4D95-BEA5-75304FCC9836}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{474ED64F-66EB-4A8B-A2D9-814EE35D96DA}C:\windows\syswow64\msiexec.exe] => (Block) C:\windows\syswow64\msiexec.exe
FirewallRules: [UDP Query User{19FC97D4-3E42-449F-9DB7-35C4B224DA33}C:\windows\syswow64\msiexec.exe] => (Block) C:\windows\syswow64\msiexec.exe
FirewallRules: [{CAE7BD35-85AF-4ECC-B07A-E10BED9C2871}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C0FEDE56-932B-4CDE-9C1D-80047BF601B9}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{2343F25F-A0CE-4543-84F2-C80B8CD5A565}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{94481CBD-A94B-46C1-9BDC-ADC7676D0949}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{BB429707-2039-44A5-93B8-9F93138A01C3}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{07E9D2EB-F532-4E83-AEAD-345D41C81E2D}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{99BE8B9F-8DB5-477F-BE13-E33BDED065B3}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{94AA0B5D-9CF1-402F-91B9-297322C16BAF}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{71CBFD55-DDBE-4C26-97BA-3D0BFBBD4898}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{D940D2B8-74F4-49A4-A3CB-33C0D1E0FC7A}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{68871359-E609-42E2-8450-F51629D4E1EC}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{0E735C39-FCA8-46AC-939B-57818B1D9C70}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{32F7B697-16F0-47B5-B2B2-4CFE729CCB2A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1F170EB1-F1D7-4290-90F8-9B686DBBB5B2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{EF992CE8-FCC4-4C0A-9D76-1A6AFB154004}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{215DF831-0EEA-4FDC-BC0C-3D4B5CDA787A}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{91BC1DB6-8E8B-4EA5-9D45-411CEB31301B}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{D3B187EA-72C9-4C6B-8167-9C8FBF71FA22}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{A16778B9-625B-47E0-A672-2FF10D245195}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{307F7F30-B68D-41C0-93C0-B4E68C6DE65E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [TCP Query User{85BF7D59-F267-4406-9756-DC83E82B81A5}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{D66B6A07-6690-4BE3-8521-6097EFBEEE00}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{F791F567-8E0B-4EA8-9DDB-FC2D894A3044}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C8D08296-748C-4308-9F84-7D181AFDD3C5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{87330B92-8AF2-4E55-9E7F-661B8651A86A}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{A73B2AA5-053F-4AB5-90BE-97E7AE76D09A}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{4F0DB06D-039D-4F29-8222-185F1627BC8E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\POSTAL2Complete\System\Launcher.exe
FirewallRules: [{4F26F101-6615-4893-BA2D-A36E51A30EE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\POSTAL2Complete\System\Launcher.exe
FirewallRules: [{DE00FE02-B8D6-48BB-8F9C-90C4B625E693}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Forces\DosBox\dosbox.exe
FirewallRules: [{33D0D7DB-1A11-40CA-AF49-D3CB6B744199}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Forces\DosBox\dosbox.exe
FirewallRules: [TCP Query User{E9F184C1-FB70-4D94-8CDB-F62540BE0E46}C:\program files (x86)\jitsi\jitsi.exe] => (Allow) C:\program files (x86)\jitsi\jitsi.exe
FirewallRules: [UDP Query User{2755B0F2-A29F-45E6-BF76-0C6EA5EEFA63}C:\program files (x86)\jitsi\jitsi.exe] => (Allow) C:\program files (x86)\jitsi\jitsi.exe
FirewallRules: [{314AED8F-5D87-4A5C-BE82-03B957EE43A2}] => (Block) C:\program files (x86)\jitsi\jitsi.exe
FirewallRules: [{D2A7DB7A-B3DB-4667-B257-EF971FB02A66}] => (Block) C:\program files (x86)\jitsi\jitsi.exe
FirewallRules: [{0CD768AA-80EE-4ADE-923D-1D397CC27451}] => (Allow) C:\Users\sparsam\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{774075D7-0521-494C-A33C-8C4B789F1858}] => (Allow) C:\Users\sparsam\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{4C3AFBDF-C659-4275-BC7A-20DF207B71AE}C:\program files (x86)\leibniz-rechenzentrum\lrz_sync_share\jre\launch4j-tmp\lrz_sync_share.exe] => (Allow) C:\program files (x86)\leibniz-rechenzentrum\lrz_sync_share\jre\launch4j-tmp\lrz_sync_share.exe
FirewallRules: [UDP Query User{FFAA077D-D4ED-4B96-B9AB-EABE027C4C1D}C:\program files (x86)\leibniz-rechenzentrum\lrz_sync_share\jre\launch4j-tmp\lrz_sync_share.exe] => (Allow) C:\program files (x86)\leibniz-rechenzentrum\lrz_sync_share\jre\launch4j-tmp\lrz_sync_share.exe
FirewallRules: [{B22035A4-5138-4E4D-BF30-53B699EFC2AC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F790225D-0A3F-4FD8-BDC8-34DE7DAA5E73}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Wiederherstellungspunkte =========================

28-05-2016 23:48:53 Windows Update
08-06-2016 13:04:42 Geplanter Prüfpunkt
14-06-2016 12:30:01 Windows Update
18-06-2016 13:18:42 Windows Update
23-06-2016 12:26:04 Windows Update
26-06-2016 20:46:41 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (06/26/2016 08:13:19 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Error: (06/26/2016 10:24:12 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (06/25/2016 11:22:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: googledrivesync.exe, Version: 1.30.2170.459, Zeitstempel: 0x509418e4
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.3.9600.18233, Zeitstempel: 0x56bb4e1d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00041aee
ID des fehlerhaften Prozesses: 0xfc4
Startzeit der fehlerhaften Anwendung: 0xgoogledrivesync.exe0
Pfad der fehlerhaften Anwendung: googledrivesync.exe1
Pfad des fehlerhaften Moduls: googledrivesync.exe2
Berichtskennung: googledrivesync.exe3
Vollständiger Name des fehlerhaften Pakets: googledrivesync.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: googledrivesync.exe5

Error: (06/24/2016 10:17:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 47.0.0.5999, Zeitstempel: 0x5753660e
Name des fehlerhaften Moduls: mozglue.dll, Version: 47.0.0.5999, Zeitstempel: 0x57535438
Ausnahmecode: 0x80000003
Fehleroffset: 0x0000f3ad
ID des fehlerhaften Prozesses: 0xab14
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5

Error: (06/24/2016 08:39:49 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (06/21/2016 11:18:09 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (06/20/2016 10:19:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: TESV.exe, Version: 1.9.32.0, Zeitstempel: 0x51437ce5
Name des fehlerhaften Moduls: TESV.exe, Version: 1.9.32.0, Zeitstempel: 0x51437ce5
Ausnahmecode: 0x40000015
Fehleroffset: 0x00376ae2
ID des fehlerhaften Prozesses: 0x1e2c
Startzeit der fehlerhaften Anwendung: 0xTESV.exe0
Pfad der fehlerhaften Anwendung: TESV.exe1
Pfad des fehlerhaften Moduls: TESV.exe2
Berichtskennung: TESV.exe3
Vollständiger Name des fehlerhaften Pakets: TESV.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: TESV.exe5

Error: (06/20/2016 06:11:32 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (06/20/2016 06:11:28 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (06/20/2016 06:11:25 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.


Systemfehler:
=============
Error: (06/26/2016 08:52:43 PM) (Source: bowser) (EventID: 8016) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "JSPC" auf Transport "NetBT_Tcpip_{67986DCC-A772-49F9-B6F9-40920C7CFA43}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.

Error: (06/26/2016 08:51:51 PM) (Source: NetBT) (EventID: 4311) (User: )
Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte.
Verwenden Sie die Zeichenfolge "5E93A2ADFF99", um die Schnittstelle zu identifizieren, die nicht initialisiert werden
konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die 
GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung 
von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar 
waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar.

Error: (06/26/2016 08:51:51 PM) (Source: NetBT) (EventID: 4311) (User: )
Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte.
Verwenden Sie die Zeichenfolge "5E93A2ADFF99", um die Schnittstelle zu identifizieren, die nicht initialisiert werden
konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die 
GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung 
von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar 
waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar.

Error: (06/26/2016 08:47:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/26/2016 08:45:37 PM) (Source: bowser) (EventID: 8016) (User: )
Description: Der Suchdiensttreiber erhielt zu viele nicht erlaubte Datagramme vom Remotecomputer "EASYBOX" zum Namen "JSPC" auf Transport "NetBT_Tcpip_{67986DCC-A772-49F9-B6F9-40920C7CFA43}". Das Datagramm steht in den Daten.
Es werden keine weiteren Ereignisse erzeugt, solange die Rücksetzfrequenz nicht abgelaufen ist.

Error: (06/26/2016 08:44:43 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056 = Es wird bereits eine Instanz des Dienstes ausgeführt.


Error: (06/26/2016 08:44:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/26/2016 08:44:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Quick Access RadioMgr Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/26/2016 08:44:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ePower Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/26/2016 08:44:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Quick Access Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2015-04-25 12:46:41.601
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-04-25 12:03:33.604
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-04-06 20:32:51.320
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-02-27 11:39:28.260
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 8115.27 MB
Verfügbarer physikalischer RAM: 6058.98 MB
Summe virtueller Speicher: 9395.27 MB
Verfügbarer virtueller Speicher: 7201.5 MB

==================== Laufwerke ================================

Drive c: (Acer) (Fixed) (Total:914.62 GB) (Free:413.06 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 140B3E79)

Partition: GPT.

==================== Ende von Addition.txt ============================