Moin,

leider scheint mein System in irgend einer Form infiziert oder defekt zu sein.

In letzter Zeit war häufiger plötzlich der Bildschirm schwarz und das System fuhr auch manchmal von allein runter; ab und zu auch nicht...vvlt auch "nur " eine Treiberproblematik aber das Neueste ist installiert...

Der Lüfter läuft fast ständig, obwohl nix an Programmen läuft...

Vor 2 Tagen erkannte Norton 360 etwas viel Internetverkehr aber die Meldung finde ich nicht mehr... ein Komplettscan hat nichts ergeben. Dann funktionierte Norton auch nicht mehr einwandfrei und ich musste remove&reinstall ausführen...

Vertrauen ist da jetzt nicht mehr so groß...

mbam fand auch nix...

Vielleicht kann mir da jemand Licht ins Dunkel bringen...?

FRST

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
durchgeführt von USER (Administrator) auf USER-HP (27-12-2016 23:11:55)
Gestartet von C:\Users\USER\Desktop
Geladene Profile: USER &  (Verfügbare Profile: USER & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Sony) C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Sony) C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8849152 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3936936 2015-12-21] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Memeo Instant Backup] => C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [Amazon Music] => C:\Users\USER\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-12-15] ()
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2094976 2016-09-16] (Sony)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Amazon Music] => C:\Users\USER\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-12-15] ()
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2094976 2016-09-16] (Sony)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2010-07-20] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [01Mediencenter_InSync] -> {77BC4082-DB5F-439A-8DC8-F9E24A63B0DE} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [02Mediencenter_ToSync] -> {528EE335-5034-4EFC-834E-63E5F02D2BC2} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [03Mediencenter_Failed] -> {6066ADF0-9EB0-43E5-ADB6-990F5A3B979C} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1491a579-74bf-46d2-a369-35fdd43a436c}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {D73A43AE-4635-44F1-826A-90D835547843} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {F0CDD231-0703-4978-AC1D-37B3315BC4ED} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {51D8F101-A2FE-4F9C-9550-4F67650AF170} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {62E05E07-B0D5-4721-9A89-EE3A1E4DD450} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {51D8F101-A2FE-4F9C-9550-4F67650AF170} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {62E05E07-B0D5-4721-9A89-EE3A1E4DD450} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2010-04-15] (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
DPF: HKLM {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1262.cab

FireFox:
========
FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default [2016-12-20]
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\2i4mdlek.default -> SuchMaschine
FF Homepage: Mozilla\Firefox\Profiles\2i4mdlek.default -> chrome://unitedtb/content/newtab/startpage.xhtml
FF Extension: (GMX MailCheck) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\browser-mailcheck@gmx.net [2016-03-01]
FF Extension: (Mailvelope) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-03-01]
FF SearchPlugin: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\searchplugins\norton-safe-search.xml [2016-03-01]
FF SearchPlugin: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\searchplugins\yahoo-avast.xml [2014-06-27]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-10] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-21] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon [2016-12-27]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-20] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1221171.dll [2015-10-19] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll [2010-09-01] (Oberon-Media )
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2011-02-21] (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll [2012-08-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-06-28] ()
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll [2012-08-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-06-28] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-10-24] (Apple Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11908
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?q={searchTerms}&li=ff
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default [2016-12-27]
CHR Extension: (Google Präsentationen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-07]
CHR Extension: (Google Docs) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-07]
CHR Extension: (Google Drive) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-17]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-17]
CHR Extension: (Norton Security Toolbar) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-11-20]
CHR Extension: (Google-Suche) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-19]
CHR Extension: (Google Tabellen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-07]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfoabcdjalmeenbjjngidappmppchblc [2016-11-04]
CHR Extension: (Google Docs Offline) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-17]
CHR Extension: (Norton Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmobhkkblcgdifigjglcjneplefbkmh [2016-11-04]
CHR Extension: (Norton Identity Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-11-20]
CHR Extension: (HP Network Check Launcher) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo [2016-11-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-17]
CHR Extension: (Google Mail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-19]
CHR Extension: (Chrome Media Router) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-04]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Foxtrick (Beta)) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\gpfggkkkmpaalfemiafhfobkfnadeegj [2016-11-08]
OPR Extension: (Deaktivierungs-Add-on von Google Analytics) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\hmffjpdmbgflojiohllanjaggdenggdo [2015-10-15]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2016-10-17]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
R3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
S3 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-05-19] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe [289080 2016-11-12] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-11-24] (Electronic Arts)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [310016 2016-04-12] (Realtek Semiconductor)
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S3 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2015-12-21] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7183632 2016-07-18] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2085760 2016-09-16] (Sony)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976 2015-06-04] (Advanced Micro Devices, Inc.)
S3 andnetadb; C:\WINDOWS\System32\Drivers\lgandnetadb.sys [31744 2012-07-03] (Google Inc)
S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [111120 2016-05-17] (Advanced Micro Devices)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\BASHDefs\20161220.001\BHDrvx64.sys [1874136 2016-12-20] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
R2 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
R1 ccSet_N360; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\ccSetx64.sys [174328 2016-11-12] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [497368 2016-09-22] (Symantec Corporation)
R0 gfibto; C:\WINDOWS\System32\drivers\gfibto.sys [14456 2012-12-03] (GFI Software)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-01] (REALiX(tm))
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\IPSDefs\20161226.001\IDSvia64.sys [1038032 2016-12-26] (Symantec Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-12-27] (Malwarebytes)
R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-23] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [936192 2016-05-17] (Realtek                                            )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [413912 2016-04-12] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-12-21] (Synaptics Incorporated)
R3 SRTSP; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSP64.SYS [784624 2016-11-12] (Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSPX64.SYS [49400 2016-11-12] (Symantec Corporation)
R0 SymEFASI; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SYMEFASI64.SYS [1628888 2016-11-12] (Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SymELAM.sys [24192 2016-11-12] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [100592 2016-12-27] (Symantec Corporation)
R1 SymIRON; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\Ironx64.SYS [289520 2016-11-12] (Symantec Corporation)
R1 SymNetS; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SYMNETS.SYS [567512 2016-11-12] (Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\EX64.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-27 23:11 - 2016-12-27 23:13 - 00033322 _____ C:\Users\USER\Desktop\FRST.txt
2016-12-27 23:02 - 2016-12-27 23:03 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-27 23:02 - 2016-12-27 23:02 - 00001171 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-12-27 23:02 - 2016-12-27 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-12-27 23:02 - 2016-12-27 23:02 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-12-27 23:02 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-12-27 23:02 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-12-27 23:02 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-12-27 23:01 - 2016-12-27 23:07 - 02420736 _____ (Farbar) C:\Users\USER\Desktop\FRST64.exe
2016-12-27 23:00 - 2016-12-27 23:01 - 22851472 _____ (Malwarebytes ) C:\Users\USER\Desktop\mbam-setup-2.2.1.1043.exe
2016-12-27 21:15 - 2016-12-27 21:43 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton 360
2016-12-27 21:12 - 2016-12-27 21:12 - 00100592 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2016-12-27 21:12 - 2016-12-27 21:12 - 00008319 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2016-12-27 21:12 - 2016-12-27 21:12 - 00002386 _____ C:\Users\Public\Desktop\Norton 360.lnk
2016-12-27 21:11 - 2016-12-27 21:12 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2016-12-27 21:11 - 2016-12-27 21:11 - 00000000 ____D C:\Program Files (x86)\Norton 360
2016-12-27 21:10 - 2016-12-27 21:10 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-12-27 20:23 - 2016-12-27 21:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Remove and Reinstall
2016-12-27 20:20 - 2016-12-27 20:20 - 00000000 ____D C:\ProgramData\PCSettings
2016-12-27 20:18 - 2016-12-27 20:18 - 15359160 _____ (Symantec Corporation) C:\Users\USER\Desktop\NRnR.exe
2016-12-27 18:13 - 2016-12-27 18:13 - 00002088 _____ C:\Users\USER\Desktop\message-rfc822-attachment
2016-12-22 22:22 - 2016-12-22 22:22 - 04590795 _____ C:\Users\USER\Documents\Christmas letter 2016 .pages.pdf
2016-12-20 00:29 - 2016-12-20 00:29 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\7C003C78.sys
2016-12-19 22:21 - 2016-12-19 22:22 - 03977168 _____ C:\Users\USER\Downloads\AdwCleaner_6.041.exe
2016-12-19 22:13 - 2016-12-19 22:13 - 00002688 _____ C:\Users\USER\Documents\cc_20161219_221351.reg
2016-12-19 22:06 - 2016-12-19 22:08 - 08803648 _____ (Piriform Ltd) C:\Users\USER\Downloads\ccsetup525.exe
2016-12-19 21:16 - 2016-12-19 21:16 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-18 09:08 - 2016-12-18 09:08 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-18 09:08 - 2016-12-18 09:08 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 20:39 - 2016-12-17 20:39 - 04701691 _____ C:\Users\USER\Desktop\pepparkakshus-liten-stuga.pdf
2016-12-17 00:23 - 2016-12-17 00:23 - 00100080 ____H C:\WINDOWS\SysWOW64\mlfcache.dat
2016-12-17 00:22 - 2016-12-17 00:22 - 07604435 _____ C:\Users\USER\Desktop\Fotobuchexpress24_4.0 (1).exe
2016-12-17 00:22 - 2016-12-17 00:22 - 00001042 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00001030 _____ C:\Users\Public\Desktop\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00000000 ____D C:\Program Files (x86)\Fotobuchexpress24
2016-12-17 00:20 - 2016-12-17 00:20 - 00000000 _____ C:\Users\USER\Desktop\Fotobuchexpress24_4.0.exe
2016-12-16 15:42 - 2016-12-21 15:43 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 42.lnk
2016-12-12 22:02 - 2016-12-12 22:02 - 00334939 _____ C:\Users\USER\Desktop\RE1_1212-20122016_fahrplan.pdf
2016-12-12 12:06 - 2016-12-12 12:06 - 00254432 _____ C:\Users\USER\Downloads\streetboccia.pdf
2016-12-11 23:33 - 2016-12-11 23:33 - 00076776 _____ C:\Users\USER\Documents\cc_20161211_233316.reg
2016-12-11 22:56 - 2016-12-11 22:56 - 02409674 _____ C:\Users\USER\Desktop\sony_xperia_m4_aqua.pdf
2016-12-11 22:06 - 2016-12-11 22:06 - 00012978 _____ C:\Users\USER\Downloads\NAS-SERVER_2016-12-10_0221.rom
2016-12-11 20:26 - 2016-12-11 20:26 - 00002234 _____ C:\Users\Public\Desktop\Xperia Companion.lnk
2016-12-11 20:26 - 2016-12-11 20:26 - 00000000 ____D C:\Users\USER\Documents\Sony
2016-12-11 20:26 - 2016-12-11 20:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-12-11 20:26 - 2016-12-11 20:26 - 00000000 ____D C:\Program Files\Sony
2016-12-11 20:26 - 2016-12-11 20:26 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-11 15:45 - 2016-12-11 15:46 - 47606656 _____ (Sony) C:\Users\USER\Downloads\XperiaCompanion.exe
2016-12-11 15:30 - 2016-12-11 15:30 - 02440207 _____ C:\Users\USER\Downloads\sony_xperia_m4_aqua.pdf
2016-12-10 20:47 - 2016-12-10 20:47 - 08576448 _____ (Piriform Ltd) C:\Users\USER\Desktop\ccsetup524.exe
2016-12-10 16:08 - 2016-12-10 16:08 - 01628760 _____ C:\Users\USER\Desktop\setup_OnlineFotoservice.exe
2016-12-10 15:34 - 2016-12-10 15:34 - 00000000 ____D C:\WINDOWS\Panther
2016-12-09 16:32 - 2016-12-09 16:33 - 51969976 _____ (Malwarebytes ) C:\Users\USER\Desktop\mb3-setup-consumer-3.0.4.1269.exe
2016-12-08 18:11 - 2016-12-08 18:11 - 00039010 _____ C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638.html
2016-12-08 18:11 - 2016-12-08 18:11 - 00000000 ____D C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638_files
2016-12-07 21:28 - 2016-12-07 21:28 - 03719935 _____ C:\Users\USER\Desktop\Meine_Rechte.pdf
2016-12-06 07:54 - 2016-12-10 20:45 - 00000000 ____D C:\Users\USER\Desktop\Verknüpfungen-Fotobuch
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\Users\USER\AppData\Local\Lidl_Fotos
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lidl-Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\ProgramData\Lidl_Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\Program Files (x86)\Lidl_Fotos
2016-11-30 11:06 - 2016-11-30 11:06 - 00000000 ____D C:\Users\USER\Desktop\WDR 5 Feature Serie - welt im kopf
2016-11-29 22:58 - 2016-11-29 22:58 - 00001052 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SaalDesignSoftware.lnk
2016-11-29 22:58 - 2016-11-29 22:58 - 00001040 _____ C:\Users\Public\Desktop\SaalDesignSoftware.lnk
2016-11-29 22:58 - 2016-11-29 22:58 - 00000000 ____D C:\Users\USER\AppData\Roaming\SaalDesignSoftware
2016-11-29 22:58 - 2016-11-29 22:58 - 00000000 ____D C:\Program Files (x86)\SaalDesignSoftware
2016-11-29 17:09 - 2016-12-10 20:29 - 00000000 ____D C:\Program Files\Pixum
2016-11-28 19:13 - 2016-11-28 19:13 - 00002025 _____ C:\Users\Public\Desktop\métier Scan2PDF Professional 18.lnk
2016-11-28 19:12 - 2016-11-28 19:12 - 09079856 _____ (métier 2000 GmbH) C:\Users\USER\Desktop\setup_pdfedit.exe
2016-11-28 19:11 - 2016-11-28 19:12 - 37150808 _____ (métier 2000 GmbH) C:\Users\USER\Desktop\setup_scan2PDF18pro.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-27 23:11 - 2014-08-31 22:02 - 00000000 ____D C:\FRST
2016-12-27 22:44 - 2011-04-15 16:52 - 00000000 ____D C:\Users\USER\AppData\Local\NPE
2016-12-27 22:26 - 2016-09-04 15:20 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-12-27 21:51 - 2016-09-05 13:49 - 00004186 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{72D328A8-4A53-40B0-B1CF-3A30C42B7B36}
2016-12-27 21:14 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-12-27 21:12 - 2016-11-24 19:54 - 00003376 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-12-27 21:12 - 2016-07-16 12:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-12-27 21:12 - 2015-08-06 00:55 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2016-12-27 21:11 - 2010-10-12 09:13 - 00000000 ____D C:\ProgramData\Norton
2016-12-27 20:38 - 2016-09-04 15:28 - 03255650 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-27 20:38 - 2016-07-16 23:51 - 01426334 _____ C:\WINDOWS\system32\perfh007.dat
2016-12-27 20:38 - 2016-07-16 23:51 - 00359130 _____ C:\WINDOWS\system32\perfc007.dat
2016-12-27 20:34 - 2016-11-20 08:45 - 00000396 _____ C:\WINDOWS\Tasks\HPCeeScheduleForUSER.job
2016-12-27 20:34 - 2016-09-04 15:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-27 20:33 - 2016-07-16 07:04 - 01048576 _____ C:\WINDOWS\system32\config\BBI
2016-12-27 20:32 - 2012-08-25 21:30 - 00000000 ____D C:\Users\USER\AppData\Roaming\TV-Browser
2016-12-27 20:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-27 16:01 - 2014-08-17 07:44 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-12-25 11:08 - 2016-11-20 20:57 - 00000000 ____D C:\Users\USER\Desktop\BIRTE
2016-12-25 10:50 - 2010-12-09 14:24 - 00000000 ____D C:\Users\USER\AppData\Local\CrashDumps
2016-12-25 08:36 - 2016-11-20 08:45 - 00003320 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForUSER
2016-12-21 21:50 - 2016-07-17 17:00 - 00000000 ____D C:\Users\USER\MEDION NAS TOOL
2016-12-21 21:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-21 15:43 - 2016-09-08 12:36 - 00003992 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1425561347
2016-12-21 15:43 - 2010-11-28 20:42 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-20 21:26 - 2012-12-03 17:52 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-20 13:25 - 2016-09-04 15:29 - 00000000 ____D C:\Users\USER
2016-12-20 13:25 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2016-12-20 13:24 - 2013-11-20 08:26 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-20 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-12-20 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-12-19 22:26 - 2015-06-28 10:31 - 00000000 ____D C:\AdwCleaner
2016-12-19 22:09 - 2016-03-28 18:25 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-18 20:40 - 2014-10-22 11:33 - 00000000 ____D C:\1a-Pitt
2016-12-16 20:49 - 2010-11-29 22:24 - 00000000 ____D C:\Users\USER\ho-hrf
2016-12-15 09:10 - 2015-07-19 21:04 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-11 20:27 - 2014-07-05 09:15 - 00000000 ____D C:\Users\USER\AppData\Roaming\Apple Computer
2016-12-11 20:26 - 2016-09-04 15:23 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-10 16:17 - 2016-01-12 22:54 - 00000000 ____D C:\Program Files\OnlineFotoservice
2016-12-10 15:56 - 2011-01-02 12:36 - 00000000 ____D C:\Users\USER\AppData\Local\ElevatedDiagnostics
2016-12-09 15:14 - 2011-04-25 10:59 - 00000356 _____ C:\WINDOWS\Tasks\HPCeeScheduleForUSER-HP$.job
2016-12-08 15:58 - 2011-04-16 17:20 - 00000000 ____D C:\Users\USER\AppData\Roaming\Skype
2016-12-07 12:37 - 2016-09-06 17:37 - 00003292 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForUSER-HP$
2016-11-28 19:26 - 2016-06-30 21:16 - 00000376 _____ C:\Users\USER\metierPDFScan18Pro.INI
2016-11-28 19:13 - 2016-06-30 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanToPDF 18
2016-11-28 19:13 - 2016-06-30 21:16 - 00000000 ____D C:\Program Files (x86)\ScanToPDF 18
2016-11-28 19:11 - 2015-10-22 16:27 - 00000776 _____ C:\Users\USER\metierPDFScan17Pro.INI

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2011-02-27 21:26 - 2011-06-27 17:59 - 0001854 _____ () C:\Users\USER\AppData\Roaming\GhostObjGAFix.xml
2011-01-09 19:51 - 2011-01-09 20:10 - 0003584 _____ () C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-05-01 17:20 - 2013-05-01 17:30 - 0000600 _____ () C:\Users\USER\AppData\Local\PUTTY.RND
2014-08-08 21:43 - 2014-08-08 21:43 - 0000218 _____ () C:\Users\USER\AppData\Local\recently-used.xbel
2011-10-21 13:15 - 2014-10-18 11:48 - 0007595 _____ () C:\Users\USER\AppData\Local\resmon.resmoncfg
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
2010-07-20 15:11 - 2010-07-20 15:11 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
2010-07-20 15:06 - 2010-07-20 15:07 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-10-12 09:09 - 2010-10-12 09:09 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
2010-07-20 15:06 - 2010-07-20 15:06 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2010-07-20 15:07 - 2010-07-20 15:10 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\USER\AdwCleaner_5.037.exe
C:\Users\USER\GMX_Firefox_Setup.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-25 08:43

==================== Ende von FRST.txt ============================
         

ADDITION

FRST Additions Logfile:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21-12-2016
durchgeführt von User (27-12-2016 23:13:58)
Gestartet von C:\Users\User\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-04 15:05:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1773077131-3649358975-729568603-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1773077131-3649358975-729568603-503 - Limited - Disabled)
Gast (S-1-5-21-1773077131-3649358975-729568603-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1773077131-3649358975-729568603-1002 - Limited - Enabled)
User (S-1-5-21-1773077131-3649358975-729568603-1000 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton 360 Premier (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Premier (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton 360 Premier (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.1.171 - Adobe Systems, Inc.)
Alien Swarm - SDK (HKLM-x32\...\Steam App 640) (Version:  - Valve)
Alien Swarm (HKLM-x32\...\Steam App 630) (Version:  - Valve)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Amazon Amazon Music) (Version: 4.0.0.1205 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Amazon Amazon Music) (Version: 4.0.0.1205 - Amazon Services LLC)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Ashampoo Burning Studio 2015 v.1.15.0 (HKLM-x32\...\{91B33C97-21E3-DF34-9630-2EE80DDE1648}_is1) (Version: 1.15.0 - Ashampoo GmbH & Co. KG)
Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version:  - )
Audacity Recovery Utility (HKLM-x32\...\AURC_is1) (Version:  - Markus Meyer)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.1.5122 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: 1.0.8.16603 - Blizzard Entertainment)
D-i-v-X AVI Codec Pack Pro 2.4.0 (HKLM-x32\...\D-i-v-X - AVI Codec Pack Pro) (Version:  - D-i-v-X AVI Codec Pack Pro)
dotoo (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\dotoo) (Version:  - tamster)
dotoo (HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\dotoo) (Version:  - tamster)
Drakensang (HKLM-x32\...\Steam App 12640) (Version:  - Radon Labs)
Dream Aquarium (HKLM-x32\...\DreamAqua) (Version:  - )
ElsterFormular (HKLM-x32\...\ElsterFormular für Privatanwender 12.3.2.6814p) (Version: 17.4.37.20160609 - )
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.4.19695 - Landesfinanzdirektion Thüringen)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.3 - Electronic Arts)
Fotobuchexpress24 Bestellsoftware (HKLM-x32\...\Fotobuchexpress24) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Fotobuchexpress24 Bestellsoftware (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version:  - Valve)
Hattrick Organizer (remove only) (HKLM-x32\...\Hattrick Organizer) (Version:  - )
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard)
HP Documentation (HKLM-x32\...\{B360E24A-BF25-4353-AA79-1B54F509024A}) (Version: 1.0.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (HKLM\...\{939D91BD-7C35-492A-A8B4-DE99939BD44F}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710a-f Hilfe (HKLM-x32\...\{958B08B0-C784-4A77-8D2B-C0A58F1E14B5}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12992 - HP)
HP Quick Launch (HKLM-x32\...\{00A42832-B21A-4296-B5F4-D296D0BC4A3E}) (Version: 2.6.3 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{AF6EB833-D48A-49AC-9394-4C57489FDFF2}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.3.50.9 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.203 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{E342EC6B-5F25-47FE-B92C-DE616149B430}) (Version: 4.0.9.0 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4 - HP)
Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.7 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{561b5fb5-1d4d-40e8-b3e4-ad52858b217c}) (Version: 2.4.0.7 - Intel)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
JiveX DICOM Viewer Light 4.7.1 (HKLM-x32\...\JiveX DICOM Viewer Light 4.7.1) (Version:  - VISUS Technology Transfer GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Codec Pack 5.2.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 5.2.0 - )
korAccount 3 (HKLM-x32\...\{944B9BCC-0499-47E0-A1D7-941DC2732612}) (Version: 3.3.21 - Kornelius)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2907 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.2907 - CyberLink Corp.) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Left 4 Dead (HKLM-x32\...\Steam App 500) (Version:  - Valve)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.8.1 - LG Electronics)
Lidl-Fotos (HKLM-x32\...\Lidl-Fotos_is1) (Version:  - )
LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe)
Lost Planet 2 (HKLM-x32\...\Steam App 45750) (Version:  - )
LOST PLANET 2 (x32 Version: 1.0.0002.133 - CAPCOM CO., LTD.) Hidden
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version:  - EasyBits Software AS)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Marketsplash Schnellzugriffe (HKLM-x32\...\{FB0C267C-8B4F-4867-8161-A6A3B66D42C1}) (Version: 1.0.0.9 - Hewlett-Packard)
Mediencenter 3.8.9799.6 (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Mediencenter) (Version: 3.8.9799.6 - Deutsche Telekom AG)
Mediencenter 3.8.9799.6 (HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Mediencenter) (Version: 3.8.9799.6 - Deutsche Telekom AG)
MEDION NAS TOOL (HKLM-x32\...\MEDION NAS TOOL) (Version:  - MEDION)
Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7939 - Memeo Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 44.0 (x86 de)) (Version: 44.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NAVIGON Fresh 3.4.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.4.1 - NAVIGON)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Norton 360 Premier (HKLM-x32\...\N360) (Version: 22.8.1.14 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Olympus ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.3.2207 - OLYMPUS IMAGING CORP.)
Olympus ib (x32 Version: 1.3.2207 - OLYMPUS IMAGING CORP.) Hidden
OLYMPUS Viewer 2 (HKLM-x32\...\{7177EE4E-3D1D-4F45-85B5-B93DC758BA0B}) (Version: 1.1.1 - OLYMPUS IMAGING CORP.)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4204 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4204 - CyberLink Corp.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7746 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30117 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden
Resident Evil™: Operation Raccoon City (HKLM-x32\...\Steam App 209100) (Version:  - )
Rossmann Fotowelt Software 4.9 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.9 - ORWO Net)
RtVOsd (HKLM\...\{091A0130-A82F-4A6D-9C61-3BBBB3289030}) (Version: 1.0.6 - Realtek Semiconductor Corp.)
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Saal Design Software (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Scan2PDF 1.6 (HKLM-x32\...\Scan2PDF_is1) (Version:  - Koma-Code)
Scan2PDF Professional 17 (HKLM-x32\...\Scan2PDF Professional 17) (Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH)
Scan2PDF Professional 17 (x32 Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH) Hidden
ScanToPDF 18 (HKLM-x32\...\ScanToPDF 1818) (Version: 18 - metier 2000 GmbH)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
SequoiaView (HKLM-x32\...\SequoiaView) (Version:  - )
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version:  - )
Serious Sam Classic: The Second Encounter (HKLM-x32\...\Steam App 41060) (Version:  - )
Serious Sam HD: The First Encounter (HKLM-x32\...\Steam App 41000) (Version:  - Croteam)
Serious Sam HD: The Second Encounter (HKLM-x32\...\Steam App 41010) (Version:  - Croteam)
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Spotify (HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2014 (HKLM-x32\...\{2EE860C7-4551-479F-AF01-328B8AA46051}) (Version: 22.00.8811 - Buhl Data Service GmbH)
Steuer 2015 (HKLM-x32\...\{E262CD3B-8825-4D56-AEF1-5E127F2FBB05}) (Version: 23.00.1146 - Buhl Data Service GmbH)
Studie zur Verbesserung von HP Officejet 6500 E710a-f Produkten (HKLM\...\{A5C5CECF-648E-4263-B601-4D4CD3FCD11D}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.104 - Synaptics Incorporated)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.63017 - TeamViewer)
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - )
TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - )
TV-Browser 3.4 (HKLM-x32\...\tvbrowser) (Version: 3.4 - TV-Browser Team)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Video DVD Maker v3.30.0.75 (HKLM-x32\...\{1A3E23D7-7A1E-43EC-B35D-EB2A31BED943}) (Version:  - )
Vistaprint Fotobücher (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\{BA786D68-3AD8-42DC-8BE1-9E09B4737A27}_is1) (Version:  - Vistaprint)
Vistaprint Fotobücher (HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\{BA786D68-3AD8-42DC-8BE1-9E09B4737A27}_is1) (Version:  - Vistaprint)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WISO Haushaltsbuch 2011 (HKLM-x32\...\WISO Haushaltsbuch 2011) (Version:  - Buhl Data Service GmbH)
WISO Haushaltsbuch 2011 (x32 Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Xperia Companion (HKLM-x32\...\{f494d3ac-4796-4bbd-b7a0-1873600d110d}) (Version: 1.3.2.0 - Sony)
Xperia Companion (x32 Version: 1.3.2.0 - Sony) Hidden
Xperia Companion Service (Version: 1.3.2.0 - Sony) Hidden
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{268502F4-815D-4358-A8D6-B783FDB58EF0}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{528EE335-5034-4EFC-834E-63E5F02D2BC2}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{6066ADF0-9EB0-43E5-ADB6-990F5A3B979C}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0_Classes\CLSID\{77BC4082-DB5F-439A-8DC8-F9E24A63B0DE}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{268502F4-815D-4358-A8D6-B783FDB58EF0}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{528EE335-5034-4EFC-834E-63E5F02D2BC2}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{6066ADF0-9EB0-43E5-ADB6-990F5A3B979C}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{77BC4082-DB5F-439A-8DC8-F9E24A63B0DE}\InprocServer32 -> C:\Users\User\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0081B333-1014-4F60-9A96-03D012DE8F90} - System32\Tasks\Opera scheduled Autoupdate 1425561347 => C:\Program Files (x86)\Opera\launcher.exe [2016-12-19] (Opera Software)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {096ECB4C-7DD1-41E6-9655-245040D1FF76} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0DA289FD-AB20-42D3-A442-2BD37DA95B1A} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {10A750F7-52B0-4932-AE0A-4C61EEECC3AE} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater -> Keine Datei <==== ACHTUNG
Task: {10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {11A105F6-6681-4DA1-9047-6A575C035221} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {11D2B752-FF72-44B9-9D67-B20F6CCBCB36} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {13D0216E-2B35-4415-A449-7DD2C847185D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {15B831EC-47E3-4AAA-B20D-0E60C432CE00} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report -> Keine Datei <==== ACHTUNG
Task: {19BEACD4-BA4B-479D-B622-658C3E9679A2} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {1BC8758E-FC55-46EC-81E7-8186D0BD78E2} - \{4A6854D6-96F4-415F-9393-BE04B423803C} -> Keine Datei <==== ACHTUNG
Task: {1F4C282D-A54C-48CC-A141-CF202D4ECEA9} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2A82F7A0-C35E-4FED-8743-B84E095B89C3} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {317B4898-F7B9-4291-B09E-0D03F17936F1} - \Driver Booster SkipUAC (User) -> Keine Datei <==== ACHTUNG
Task: {32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {3862F23E-94D3-416A-BCC6-427D8866068E} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} - \Adobe Flash Player Updater -> Keine Datei <==== ACHTUNG
Task: {3D8C53A8-716C-48EC-8254-34AD4F0706B6} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {459EB60F-0D49-40D1-BA36-A762AD4B32C2} - \HP Photo Creations Communicator -> Keine Datei <==== ACHTUNG
Task: {4742AA9C-ECD6-4E48-998D-10C9515B60C2} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> Keine Datei <==== ACHTUNG
Task: {4F368C5A-11DC-49C6-9163-23FAEE3F4A7A} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {5010A17C-2F30-4227-8148-13AB9B2E2265} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {529FC627-C4BF-4B1F-9F06-B15F724EF0F0} - System32\Tasks\HPCeeScheduleForUSER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {52F5D290-B2CC-4648-9670-488DB33FD3F6} - \Hewlett-Packard\HP Support Assistant\PC Health Analysis -> Keine Datei <==== ACHTUNG
Task: {548DBE10-99B3-4626-AE20-D4BEE2ED2C92} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {5598B730-6513-420C-9F91-C49110C50375} - \RecoveryCDWin7 -> Keine Datei <==== ACHTUNG
Task: {57EB0E85-CD55-4B9A-8007-0A245C2FF57B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> Keine Datei <==== ACHTUNG
Task: {5CACCCBE-2196-482B-88D8-57AAC1275885} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Keine Datei <==== ACHTUNG
Task: {6B874DDF-CD73-4FE3-87B5-826087F7C01D} - System32\Tasks\Norton 360\Norton Autofix => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {6CD3E6C9-F872-4BE6-B074-3D870F8066DA} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {7785FF1D-78ED-4230-982E-BB815DFAEB95} - \{C404F7AD-46D6-4584-871A-531AEB1D27EE} -> Keine Datei <==== ACHTUNG
Task: {7B82FBC3-A3B0-4130-94D4-453C700FA920} - \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task -> Keine Datei <==== ACHTUNG
Task: {7F4F2968-7F88-4CBA-B3B6-FDD96B95AA03} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Keine Datei <==== ACHTUNG
Task: {88A25EBF-E761-44AE-9123-FD0CA810AEDD} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {97F77198-30F1-4C3B-B9C3-26DA54877724} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> Keine Datei <==== ACHTUNG
Task: {99559E80-AA87-4973-9998-FDDED6F3D03E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {9AF7DD86-B06C-435D-A4CE-1047879E3614} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {9F5AB1AB-2282-49B2-A70C-01C07170C8D9} - \Microsoft\Windows\Media Center\PvrScheduleTask -> Keine Datei <==== ACHTUNG
Task: {A0407F7E-D012-4725-8606-2979744AE773} - \Microsoft\Windows\SideShow\SessionAgent -> Keine Datei <==== ACHTUNG
Task: {A0C9AF1E-B8FE-47B2-9489-A4994B3E2E1D} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A364E297-00AD-490D-900E-22AC34598C71} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Keine Datei <==== ACHTUNG
Task: {A3AABA13-B603-418C-9BB2-9B057D6E28E0} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\WSCStub.exe [2016-11-12] (Symantec Corporation)
Task: {A8E1692F-D2F7-4A8A-98A6-C6ADC321980D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {ACA35D83-5119-4404-A232-ACD86B28B0C8} - \Microsoft\Windows\Media Center\StartRecording -> Keine Datei <==== ACHTUNG
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> Keine Datei <==== ACHTUNG
Task: {B683D382-50C7-4F8E-B0FE-A6059B9BF1C9} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {BD4440B5-E239-4590-A93B-2B6EA0FB36CB} - \Uninstaller_SkipUac_USER -> Keine Datei <==== ACHTUNG
Task: {BF05AB7D-FB19-435A-BB99-E96410238E97} - \Microsoft\Windows\Media Center\RegisterSearch -> Keine Datei <==== ACHTUNG
Task: {BFD508E7-B44D-4AE4-8971-67DD7F67AE03} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {C5154C5F-647C-4517-938D-25CC9246A8DD} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_23_0_0_205_pepper.exe [2016-10-28] (Adobe Systems Incorporated)
Task: {C6DC769C-38C4-4AE3-B025-387121D58014} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> Keine Datei <==== ACHTUNG
Task: {CCF009D2-936C-45F9-83FD-216DD46E1137} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {D273D400-8341-4720-8414-D0EF4FAA2067} - \Microsoft\Windows\Media Center\PBDADiscovery -> Keine Datei <==== ACHTUNG
Task: {D30CDE83-800C-466D-B43B-EFD5622B1C59} - \WPD\SqmUpload_S-1-5-21-1773077131-3649358975-729568603-1000 -> Keine Datei <==== ACHTUNG
Task: {D50E35A6-4804-44D9-B53E-ECA982B38334} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources -> Keine Datei <==== ACHTUNG
Task: {D6256F7C-0F43-49A7-A399-29881F396DAA} - \Microsoft\Windows\SideShow\GadgetManager -> Keine Datei <==== ACHTUNG
Task: {D807A277-25CB-4F16-B66E-7448CDFEB967} - \HPCustParticipation HP Officejet 6500 E710a-f -> Keine Datei <==== ACHTUNG
Task: {D821DC63-B2A8-4090-9C3B-786EA756C292} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {DDDFEE16-D182-48C7-A214-892E4A1D52DF} - \Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval -> Keine Datei <==== ACHTUNG
Task: {DED18EFE-380C-45D7-AA70-487B28ACB520} - \Microsoft\Windows\Media Center\mcupdate_scheduled -> Keine Datei <==== ACHTUNG
Task: {E0BA20C7-1C8E-405B-8605-7489D6CB51A4} - \Microsoft\Windows\Media Center\InstallPlayReady -> Keine Datei <==== ACHTUNG
Task: {E2258B6B-E21F-4F4A-ABC7-59C06881CFFE} - \Microsoft\Windows\SideShow\AutoWake -> Keine Datei <==== ACHTUNG
Task: {E524929C-9565-4B9E-ABCF-68B48BF20243} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> Keine Datei <==== ACHTUNG
Task: {E5D57917-62E6-46F4-8C1B-CEC09C7CCFCD} - \SidebarExecute -> Keine Datei <==== ACHTUNG
Task: {E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> Keine Datei <==== ACHTUNG
Task: {E6A8800C-3A44-45AD-A423-6D12B79447ED} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> Keine Datei <==== ACHTUNG
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Keine Datei <==== ACHTUNG
Task: {EAC61B4A-8F63-4127-AB57-569647CC147C} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Keine Datei <==== ACHTUNG
Task: {EB3147D2-4E97-4986-83D3-5DBC9E5D765D} - \Microsoft\Windows\WindowsBackup\AutomaticBackup -> Keine Datei <==== ACHTUNG
Task: {EFFD36A7-F88A-446C-8ECA-8712654F394F} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> Keine Datei <==== ACHTUNG
Task: {F0F06860-19E6-4F69-AA5A-1DDAD27C078F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {F86D9E76-5D59-46A2-92AB-5981F76A1FCE} - \Uninstaller_SkipUac_Administrator -> Keine Datei <==== ACHTUNG
Task: {FA2CF3BA-B827-49C2-9230-2EAA9966A5C1} - \Microsoft\Windows\WindowsBackup\Windows Backup Monitor -> Keine Datei <==== ACHTUNG
Task: {FD62C617-2A16-459A-9C32-195C31D1857C} - \{F3EFACD3-1DF7-4311-9CC3-285D8A6D7632} -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_23_0_0_205_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForUSER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_USER.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2010-06-18 15:26 - 2010-06-18 15:26 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2012-11-26 22:54 - 2012-11-26 22:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-04 17:47 - 2016-09-04 17:47 - 01864384 _____ () C:\Users\User\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 12:43 - 2016-07-16 12:43 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-07-16 12:43 - 2016-07-16 12:43 - 00693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01400320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01033728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [119]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1001movie.com -> 1001movie.com

Da befinden sich 6067 mehr Seiten.

IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1001movie.com -> 1001movie.com

Da befinden sich 6067 mehr Seiten.


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2014-12-11 21:28 - 00000027 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{98c5018e-39e1-4440-88a9-2348368e3c8a}.JPG
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{98c5018e-39e1-4440-88a9-2348368e3c8a}.JPG
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amazon Music => "C:\Users\User\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: HPWirelessAssistant => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
MSCONFIG\startupreg: MDS_Menu => "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
MSCONFIG\startupreg: Olympus ib => "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Spotify => "C:\Users\User\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\User\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "Memeo Instant Backup"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Advanced SystemCare 9"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "BlueStacks Agent"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "Advanced SystemCare 9"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\StartupApproved\Run: => "BlueStacks Agent"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [{8E673705-01AD-4D38-85A1-6F163CE9B1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{13A19B5C-2266-4790-9AD4-A62C9D304751}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9AEBF3E5-5082-48B7-9930-ABBBBBD5C1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4E042324-1C0E-4252-AA59-53B4D6D1232E}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E407A208-AEDB-401D-80AA-604C425BC60A}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{8868062B-EA35-4A20-921F-27A414C21E67}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{FDDAE072-A898-44DA-B52D-889EBB97B36A}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E942A137-9566-4C84-B356-D6D3B81A2F07}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0F5B53DF-7C27-4124-A064-838D1BEE70F4}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{31F37177-7815-408F-8409-318F4598D580}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{30C28231-B4B5-4F45-B163-2FC6E3DE683D}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3FB135E8-2339-4458-91EF-3B3F02ED3291}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{F1AE4AB3-3D59-4F06-A9D4-C8A2ABDBF552}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C0891F06-BB9A-4793-9326-09146DAD2A48}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0CB946D-69B1-4409-BF44-E158494040A8}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{874D0741-F421-47C0-97C1-4AFEFE1275FE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{356474A1-932B-449D-8EDD-3F539A57F4F2}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{E763AF9E-7EFB-4E82-802F-9AD66975E178}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{5B4A8F87-8B8F-48B8-99EB-394D1FA69899}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{A7F394A0-E7F8-4D59-AF98-EB291E44F6FB}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{9B5A5AC2-3403-45DC-8C6F-3856C856547A}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{51F9F022-CF46-4E51-998A-55FEA5EF4B9F}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{63FC4A14-1B2C-43BB-8D6B-6C720416666F}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{CABEC949-8703-4788-B3D5-9F557F38DD57}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{40F4FD40-E093-40C3-8AFB-67D752AEFD10}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C4178D55-7200-4F02-94AE-E1356BD82B71}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A2D6469B-2CCB-4250-BE88-413E325B8A66}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0F7520B5-F22F-4601-B11D-A7E68EBE92AC}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4FC874CD-4833-45BF-B5DE-1241EE4F38E7}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{291A0EAA-4592-4882-9735-8B0C8CFC7B91}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{B27AB1EE-B334-40C8-B7DB-95EE6DE098BF}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{66E78BD3-5261-4B11-9A16-4C62B6B28CD0}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{B50431A0-B939-4DF7-92C6-F1FA0F5CE94E}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{D2902F6A-4F9B-4CC9-B683-23C2111146F7}] => C:\Users\User\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{61B1A450-899D-4A27-BB9A-EC71F0442647}] => C:\Users\User\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{AF8A86E7-57A8-4DF6-A164-477519A6FD29}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{70DE82FA-534C-45A6-9DC3-EDC5FE549930}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{03D24FD1-2C18-4464-A429-4A020B58C602}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{1A550A5B-D2F0-4CC3-947B-B8A09C0AB2B8}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{EEFD8A00-EB75-4B23-B8C3-BE0BDE9BD099}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{063C606F-67AB-46D1-85C8-B2F7F4DA57C3}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{01E85985-2672-4FF8-8855-92687C1EE44A}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{208C33A8-C683-4656-B293-6382E99813AA}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{D96C908F-A1AA-4C9B-94B1-C4DE6976EEFD}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{85404721-B741-4262-9564-1FA3F80042FB}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{C68BBCD4-EC8A-4852-819A-12D33ABD613B}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{D22E3925-6A3D-4A4A-B2F6-BAEB58216513}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{064BF8B4-7346-4EFA-AB2B-EC7EDF23CD61}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{55EE3B37-D1A3-4E2B-8BD8-B67E133C2F97}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{EF41ACED-E7EF-4E9F-A55C-98623094A35D}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{954F5189-DBC1-4F87-BE81-09A3C0306AEC}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{E54DE16B-C314-420D-A022-5066CF8C4300}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{ABE3AEE3-E8B0-4A74-BCF5-C9AF7391E13F}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C26A142F-DE3B-401C-AFD6-D03971353D71}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A60458C5-2BA1-4156-A106-1BBE590C375E}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C30283D4-B0EB-4D2D-8393-067CFC0F7A1C}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{7802C9AF-0D81-4F91-A5A7-2905F9C02439}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{6E9841AA-A551-429B-98FD-E5A1A17D3C8D}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{8C122C83-6BFA-49F2-971D-024D8253932A}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{A639776A-6546-4D5D-9EB2-27BE3E62A017}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{D96B78E8-9C57-4C75-B499-F8CFCF24CD33}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{AD615D88-6DCE-423A-B5D0-CD8643357ADA}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{F6DBC4DC-AA11-4B53-934A-3E707AD13002}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{A8C1A975-0625-40D5-9A34-5A5BAF2B9340}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{AE59F461-BBCA-4B4A-8EB5-7A3F5D006453}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7142AA43-3C27-4E61-A65E-075822D7DBEF}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6F08754B-0CEB-4B20-9890-FB34686FB13C}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{4BC24ADB-9A49-4A59-AF53-103A7320300B}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7635E990-AB5C-4B51-8CC3-61EEAEC0D388}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2DE2C132-9CD8-47CA-8E69-1B7F9E9EF4B0}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{91F9E95F-170F-441F-A02F-23CB74DA24CC}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{57F21F45-728A-48BB-A8B1-5041AF2EB35C}] => %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{1F47A498-2850-446C-ADBF-2C66298E2F3A}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{A8FF8FB6-FA45-4F86-A108-78F6753B0A9D}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{8E27E693-AD9E-4934-8835-76D8A4762952}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{45127CE1-A84B-4404-919C-B3F9F3F341A9}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{2D6FACDF-7F06-4729-9BB0-1E2FE986705E}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [{CA8A2016-77F1-4F3A-8C49-CD85C5C26186}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [UDP Query User{3E4E805B-1D69-43EE-8FD0-665D6F4AF1E4}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [TCP Query User{B87F9D58-A3A3-412F-BAA8-7C61B1AC6A22}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [UDP Query User{5C478DCE-8519-40EC-A6A9-B33BB585DD80}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{E81B8F49-EBB1-4FCC-8E2F-2E960B153433}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [{F7CBA578-7BD7-4E9D-80B1-884974C8CF3B}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{996C8DE2-CF76-43D6-B33F-B2607630CC27}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{A3596081-F015-4063-B20D-52BCE3DDCC48}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{2E1E54D2-790E-4918-998C-E41C3F686B7A}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{B52D967B-1499-4DFD-BB78-E57AA78012CB}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{A7F12640-0647-4944-B82C-FEC01404A261}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{286AE560-31FB-4C76-8037-A5F593CA3EE7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{4EC6BC05-4EC8-4B51-9BCC-05352CA84A28}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{7D42A802-CE2C-474D-8047-0CFB0E70F172}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{32DF9563-49BB-4154-AD3D-36C48511F136}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{227A1731-3D27-4924-A41C-EEB2BCAA8C74}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{B78ABD7B-20E3-4E4A-8D45-F82C8DAD45C7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{044807F4-73EE-470D-8AC3-CCD80DA3A443}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{766CFF0B-FD3E-45B9-AB6B-AA9E62CEE219}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{D675F046-E9D8-4BE4-B288-801D2A549914}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{4AB576B6-A159-416B-9851-339CE9E24874}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{57A3E5A2-BA35-4F7B-93C6-6466872E7F58}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{27D6BF9C-6D2A-414B-B953-06FC49F57E16}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{460EE69F-7787-4271-9B4D-66DEC6CF4BFE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{48870B22-94A0-4D44-9C20-59C47B375A46}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{D955B1B7-7559-4AA4-B255-F31E3C5731D6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{7A11A34F-7B53-48C5-AB1D-870876AB806C}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{4B42EDB3-5480-4273-BC0D-FB8789207389}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{FFF8DD45-0A6C-4C55-A324-4480C8260D81}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{0092FC42-953C-4AED-A3BC-70F296CF8A9D}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{24CD30F7-8932-483E-A58C-19CFE73005C6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{1709CBB8-9BA4-4BD9-9160-8D6DCFC4F723}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7F55FD67-FFB9-4883-858C-19B47539D306}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ACBCF7BD-8E2B-4704-A9B9-25959C70BFCF}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{30C11C2B-24A9-4FAE-B74C-6F076948638D}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4B38B008-640F-4945-AB11-F8E74D00D58A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F91AA893-804A-4132-9BAD-F87EAC975D48}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D76014A0-C5AF-4CE5-A07D-0B4B483D1C22}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{14FCBF9D-0B9C-45BD-AF49-8E7197C03B8A}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{EC3BC8F2-D9B2-4991-B013-CAABD3AC9431}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{67EABBE0-D980-4E04-8B3A-E07FB8BBA317}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A8FCFFD4-3FEE-4ED9-A92C-D7EC912543B7}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{5B0C1529-E204-4488-ACD0-F3D316941167}] => LPort=1900
FirewallRules: [{DC5BDE06-429E-4843-BBB6-7122042FC955}] => LPort=2869
FirewallRules: [{C39DCC74-AFE9-429E-8C03-2250B70D4761}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{9DA76145-487E-464A-A848-2E18577A7733}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FE961DF6-87C6-4EB3-BF54-82F3632AA1B2}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{048FC1AF-4D52-4577-AA5D-DD99CF968049}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{C618DC49-62F3-49D8-A017-60E1E7FD0B81}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{3802A6F0-AC14-4C62-97BD-C52DA309C89A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8A88397E-E582-420F-A3A0-8CC452CE5EDC}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3318B191-229E-4D4F-90E3-CB035B389072}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0ADB167-9BF5-42A0-BB8F-CF93BB7958A7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{75C6B1D1-960D-4224-ABE4-5FBBE02A35A9}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{809885C9-732F-4AFE-8F51-9C1A4DE1890D}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{94287C6E-F107-457C-B628-6B190AB710DE}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{3623F4D7-FE84-4C68-8805-86379A370233}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{D9808767-F417-4B1C-848A-3992F5E4C58C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{C8BFDC59-9E6E-4BD4-9B57-92833B75451C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{004A5073-6314-4614-8A27-1B69DA833FEB}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{B36FA190-D0E7-467F-AD32-B21B6F86504C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A75C2943-C6DF-4FCD-9F4F-34BF0682B877}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{7C27A078-B910-44C6-8164-C72C30104A92}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{23F6C804-249E-4888-A947-8DBA9F4EC9AB}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{47D650E5-4537-4BE6-9E16-CEC558BDC02B}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{F50A3F31-1AFE-4AC2-9683-A9933D7D92B7}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{C58AEA26-09C2-4340-B882-481D0742107A}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{CD3A984D-11A4-4440-AD9F-2119525252B0}] => LPort=3724
FirewallRules: [{71F80CCC-857B-45AF-87B3-DBFCCC8D2A2B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F7765463-7C6F-44C0-8B37-EC3EF6F1FACA}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CFBA7366-2C82-4BE3-8272-33356E93847E}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{40EC9991-C978-4327-9043-4A8DDA45B461}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{346D96C5-74BF-41DD-9C4C-D085B49F2965}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{9EA2066F-E4A2-43C8-AD02-2E39901F24A1}] => svchost.exe
FirewallRules: [{984F5B7A-65EC-4739-8177-460EACD23F8D}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{CB2D5697-3B2A-458E-9E2E-0111C7978A7F}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{FEF02A7D-8360-4A97-B42B-47D960F93CE0}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{21501978-E708-44C9-8E84-4BBC0DD912BF}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{27348E6C-547E-457A-ACC3-98EA777AB73F}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{AE77D437-EBF6-429F-8A9E-236BEDE3E700}] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanion.exe
FirewallRules: [{8650EABB-65D9-418D-8480-58CF60CFDD38}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{7E9A1500-520A-4167-B665-9B20925810AD}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{4BBB084E-C450-4C8D-8612-E7D52CDC4278}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Eurowin\maxtax\SSONLINE.EXE] => Enabled:SSONLINE

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/27/2016 11:07:51 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest.

Error: (12/27/2016 09:16:47 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/27/2016 08:34:21 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (12/27/2016 07:53:16 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: USER-HP)
Description: Bei der Aktivierung der App „windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/27/2016 04:06:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: USER-HP)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023673. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/27/2016 04:01:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/27/2016 04:01:23 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.

Error: (12/27/2016 04:01:23 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (12/27/2016 04:01:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\WINDOWS\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/27/2016 04:01:23 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.


Systemfehler:
=============
         

--- --- ---
Error: (12/27/2016 11:16:09 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 88) (User: NT-AUTORITÄT)
Description: 9\_TZ.TSZ02016-12-27T22:16:09.381110900Z369

Error: (12/27/2016 09:09:56 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/27/2016 08:34:13 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (12/27/2016 08:23:13 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Norton 360" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (12/27/2016 08:21:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Norton 360" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/27/2016 08:20:30 PM) (Source: volsnap) (EventID: 14) (User: )
Description: The shadow copies of volume C: were aborted because of an IO failure on volume C:.

Error: (12/27/2016 07:53:16 PM) (Source: DCOM) (EventID: 10010) (User: USER-HP)
Description: Der Server "microsoft.windows.immersivecontrolpanel" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/27/2016 03:41:06 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/25/2016 09:17:52 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (12/25/2016 08:32:52 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


CodeIntegrity:
===================================
Date: 2016-12-27 20:51:30.555
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:01:28.474
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:01:28.443
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:01:28.412
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:01:28.373
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:00:58.222
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:00:58.191
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:00:58.113
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 20:00:58.087
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2016-11-02 19:21:48.087
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Prozentuale Nutzung des RAM: 61%
Installierter physikalischer RAM: 3893.86 MB
Verfügbarer physikalischer RAM: 1507.48 MB
Summe virtueller Speicher: 7861.86 MB
Verfügbarer virtueller Speicher: 5142.08 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:281.98 GB) (Free:30.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (RECOVERY) (Fixed) (Total:15.82 GB) (Free:2.22 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.15 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32
Drive i: () (Removable) (Total:60.34 GB) (Free:51.46 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: CB9E9924)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=282 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

========================================================
Disk: 1 (Size: 60.4 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================
[/CODE]

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:

• Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
• Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
• Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
• Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
• Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
• Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!
• Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.

Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!




Ich vermute kein Problem mit Malware auf deinem PC, da die Logdateien von FRST diesbezüglich gut aussehen.


Du hast AdwCleaner auf dem PC:
C:\Users\USER\Downloads\AdwCleaner_6.041.exe

Hast du das Programm bereits ausgeführt und einen Suchlauf durchgeführt?

Danke für Deinen Antwort!

Hm, ich weis jetzt nicht, ob das so beruhigend ist, da ja das Laptop schon herummuckt...

Ja, den ADW-Cleaner hatte ich geladen aber nicht laufen lassen - das habe ich nun nachgeholt aber er hat nix gefunden.

# AdwCleaner v6.041 - Logfile created 01/01/2017 at 20:38:31
# Updated on 16/12/2016 by Malwarebytes
# Database : 2016-12-30.1 [Server]
# Operating System : Windows 10 Home  (X64)
# Username : USER - USER-HP
# Running from : C:\Users\USER\Downloads\AdwCleaner_6.041.exe
# Mode: Scan
# Support : https://www.malwarebytes.com/support



***** [ Services ] *****

No malicious services found.


***** [ Folders ] *****

No malicious folders found.


***** [ Files ] *****

No malicious files found.


***** [ DLL ] *****

No malicious DLLs found.


***** [ WMI ] *****

No malicious keys found.


***** [ Shortcuts ] *****

No infected shortcut found.


***** [ Scheduled Tasks ] *****

No malicious task found.


***** [ Registry ] *****

No malicious registry entries found.


***** [ Web browsers ] *****

No malicious Firefox based browser items found.
No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[C1neu].txt - [5043 Bytes] - [03/03/2016 00:34:30]
C:\AdwCleaner\AdwCleaner[C1].txt - [5040 Bytes] - [03/03/2016 00:22:30]
C:\AdwCleaner\AdwCleaner[C2].txt - [6184 Bytes] - [21/10/2015 10:22:56]
C:\AdwCleaner\AdwCleaner[C4].txt - [4871 Bytes] - [03/11/2016 21:57:29]
C:\AdwCleaner\AdwCleaner[R0].txt - [1919 Bytes] - [28/06/2015 10:31:37]
C:\AdwCleaner\AdwCleaner[S0].txt - [1621 Bytes] - [28/06/2015 10:33:51]
C:\AdwCleaner\AdwCleaner[S1].txt - [6438 Bytes] - [03/03/2016 00:20:12]
C:\AdwCleaner\AdwCleaner[S3].txt - [7836 Bytes] - [21/10/2015 10:15:50]
C:\AdwCleaner\AdwCleaner[S4].txt - [4783 Bytes] - [03/11/2016 21:14:12]
C:\AdwCleaner\AdwCleaner[S5].txt - [1675 Bytes] - [01/01/2017 20:38:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1748 Bytes] ##########
         

Also gehe ich mal davon aus, dass das Problem irgendwo anders liegt - gibt´s da eine Empfehlung, was ich da als nächstes tun kann?

LG
HotteX

Servus,


wir können noch ein paar Kontrollen durchführen, wenn du das möchtest.




Schritt 1

• Deinstalliere Malwarebytes' Anti-Malware 2 über die Systemsteuerung. (Bebilderte Anleitung)
• Starte den Rechner im Anschluss neu auf.
• Downloade dir den MBAM Uninstaller auf deinen Desktop.
• Schließe alle offenen Programme und führe den Uninstaller aus. Der Rechner muss zum Abschluss neu gestartet werden.

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad.
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM nach dem Neustart, klicke auf Berichte.
• Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
• Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

• Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
• FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

• die neue Logdatei von MBAM,
• die Logdatei von JRT,
• die beiden neuen Logdateien von FRST.

´n Abend,

leider ist meine Version von mbam heute abgelaufen... ich hatte über nach scannen lassen und heute morgen lief der Scan noch ...hm...
Jetzt ist die Version abgelaufen und die Berichte sind futsch

JRT
sagt:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 10 Home x64 
Ran by   USER (Administrator) on 02.01.2017 at 20:50:56,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 11 

Successfully deleted: C:\ProgramData\productdata (Folder) 
Successfully deleted: C:\Users\  USER\AppData\Local\{2CE497AA-F83E-4564-80AB-FDFEF66E3489} (Empty Folder)
Successfully deleted: C:\Users\  USER\AppData\Local\{6E45EED3-9FDB-4B66-B533-C3909914389C} (Empty Folder)
Successfully deleted: C:\Users\  USER\AppData\Local\{A07810F6-D515-41FE-9A71-256208B6AA30} (Empty Folder)
Successfully deleted: C:\Users\  USER\AppData\Local\{BB9705F6-8333-43EB-9E61-34AE08A16996} (Empty Folder)
Successfully deleted: C:\Users\  USER\AppData\Local\{EF3FC2E1-9881-442C-BF53-AFC8839A8533} (Empty Folder)
Successfully deleted: C:\Users\  USER\AppData\Roaming\goodgameempire (Folder) 
Successfully deleted: C:\Users\  USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\searchplugins\norton-safe-search.xml (File) 
Successfully deleted: C:\Users\  USER\AppData\Roaming\new version available (Folder) 
Successfully deleted: C:\Users\  USER\AppData\Roaming\productdata (Folder) 
Successfully deleted: C:\WINDOWS\Tasks\Uninstaller_SkipUac_ _USER.job (Task) 



Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.01.2017 at 20:59:52,67
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST sagt:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
durchgeführt von USER (Administrator) auf USER-HP (02-01-2017 21:49:05)
Gestartet von C:\Users\USER\Desktop
Geladene Profile: USER (Verfügbare Profile: USER & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Sony) C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8849152 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3936936 2015-12-21] (Synaptics Incorporated)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Memeo Instant Backup] => C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [Amazon Music] => C:\Users\USER\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-12-15] ()
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2088832 2016-12-22] (Sony)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2010-07-20] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [01Mediencenter_InSync] -> {77BC4082-DB5F-439A-8DC8-F9E24A63B0DE} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [02Mediencenter_ToSync] -> {528EE335-5034-4EFC-834E-63E5F02D2BC2} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [03Mediencenter_Failed] -> {6066ADF0-9EB0-43E5-ADB6-990F5A3B979C} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1491a579-74bf-46d2-a369-35fdd43a436c}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {D73A43AE-4635-44F1-826A-90D835547843} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {F0CDD231-0703-4978-AC1D-37B3315BC4ED} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {51D8F101-A2FE-4F9C-9550-4F67650AF170} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {62E05E07-B0D5-4721-9A89-EE3A1E4DD450} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2010-04-15] (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
DPF: HKLM {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1262.cab

FireFox:
========
FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default [2017-01-02]
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\2i4mdlek.default -> SuchMaschine
FF Homepage: Mozilla\Firefox\Profiles\2i4mdlek.default -> chrome://unitedtb/content/newtab/startpage.xhtml
FF Extension: (GMX MailCheck) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\browser-mailcheck@gmx.net [2016-03-01]
FF Extension: (Mailvelope) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-03-01]
FF SearchPlugin: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\searchplugins\yahoo-avast.xml [2014-06-27]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-10] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-21] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon [2016-12-27]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-20] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1221171.dll [2015-10-19] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll [2010-09-01] (Oberon-Media )
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2011-02-21] (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll [2012-08-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-06-28] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-10-24] (Apple Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11908
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?q={searchTerms}&li=ff
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default [2017-01-01]
CHR Extension: (Google Präsentationen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-07]
CHR Extension: (Google Docs) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-07]
CHR Extension: (Google Drive) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-17]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-17]
CHR Extension: (Norton Security Toolbar) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-11-20]
CHR Extension: (Google-Suche) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-19]
CHR Extension: (Google Tabellen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-07]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfoabcdjalmeenbjjngidappmppchblc [2016-11-04]
CHR Extension: (Google Docs Offline) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-17]
CHR Extension: (Norton Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmobhkkblcgdifigjglcjneplefbkmh [2016-11-04]
CHR Extension: (Norton Identity Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-11-20]
CHR Extension: (HP Network Check Launcher) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo [2016-11-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-17]
CHR Extension: (Google Mail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-19]
CHR Extension: (Chrome Media Router) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-04]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Foxtrick (Beta)) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\gpfggkkkmpaalfemiafhfobkfnadeegj [2016-11-08]
OPR Extension: (Deaktivierungs-Add-on von Google Analytics) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\hmffjpdmbgflojiohllanjaggdenggdo [2015-10-15]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2016-10-17]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
R3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
S3 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-05-19] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-11-29] (Malwarebytes)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe [289080 2016-11-12] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-11-24] (Electronic Arts)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [310016 2016-04-12] (Realtek Semiconductor)
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S3 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2015-12-21] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7183632 2016-07-18] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2205568 2016-12-22] (Sony)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976 2015-06-04] (Advanced Micro Devices, Inc.)
S3 andnetadb; C:\WINDOWS\System32\Drivers\lgandnetadb.sys [31744 2012-07-03] (Google Inc)
S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [111120 2016-05-17] (Advanced Micro Devices)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\BASHDefs\20161220.001\BHDrvx64.sys [1874136 2016-12-20] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
R2 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
R1 ccSet_N360; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\ccSetx64.sys [174328 2016-11-12] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [497368 2016-09-22] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156888 2016-12-27] (Symantec Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2016-12-14] ()
R0 gfibto; C:\WINDOWS\System32\drivers\gfibto.sys [14456 2012-12-03] (GFI Software)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [30424 2016-12-30] (Sony Mobile Communications)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-01] (REALiX(tm))
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\IPSDefs\20161230.001\IDSvia64.sys [1038032 2016-12-26] (Symantec Corporation)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176064 2017-01-01] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [102856 2017-01-02] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-01-02] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [250816 2017-01-02] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-01-02] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-23] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [936192 2016-05-17] (Realtek                                            )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [413912 2016-04-12] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-12-21] (Synaptics Incorporated)
R1 SRTSP; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSP64.SYS [784624 2016-11-12] (Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSPX64.SYS [49400 2016-11-12] (Symantec Corporation)
R0 SymEFASI; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SYMEFASI64.SYS [1628888 2016-11-12] (Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SymELAM.sys [24192 2016-11-12] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [100592 2016-12-27] (Symantec Corporation)
R1 SymIRON; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\Ironx64.SYS [289520 2016-11-12] (Symantec Corporation)
R1 SymNetS; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SYMNETS.SYS [567512 2016-11-12] (Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\EX64.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-02 21:48 - 2017-01-02 21:48 - 00000000 ____D C:\Users\USER\Desktop\FRST-OlderVersion
2017-01-02 21:42 - 2017-01-02 21:43 - 00001609 _____ C:\Users\USER\Desktop\JRT1.txt
2017-01-02 20:59 - 2017-01-02 20:59 - 00001686 _____ C:\Users\USER\Desktop\JRT.txt
2017-01-02 18:29 - 2017-01-02 18:31 - 00331892 _____ C:\WINDOWS\Minidump\010217-31125-01.dmp
2017-01-02 18:29 - 2017-01-02 18:29 - 608924197 _____ C:\WINDOWS\MEMORY.DMP
2017-01-02 18:29 - 2017-01-02 18:29 - 00000000 ____D C:\WINDOWS\Minidump
2017-01-02 17:34 - 2017-01-02 17:34 - 00000016 _____ C:\InjectIntoProcess crash
2017-01-01 21:41 - 2017-01-02 20:43 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-01 21:41 - 2017-01-02 20:43 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-01 21:41 - 2017-01-02 20:43 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-01-01 21:41 - 2017-01-01 21:41 - 00176064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-01-01 21:40 - 2017-01-01 21:40 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-01 21:40 - 2017-01-01 21:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-01 21:40 - 2017-01-01 21:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-01 21:40 - 2016-12-14 12:55 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-01-01 21:35 - 2017-01-02 20:48 - 01663040 _____ (Malwarebytes) C:\Users\USER\Desktop\JRT.exe
2017-01-01 21:34 - 2017-01-01 21:36 - 54199488 _____ (Malwarebytes ) C:\Users\USER\Desktop\mb3-setup-consumer-3.0.5.1299.exe
2017-01-01 21:25 - 2017-01-01 21:26 - 00566128 _____ (Malwarebytes) C:\Users\USER\Desktop\mbam-clean-2.3.0.1001.exe
2017-01-01 20:49 - 2017-01-01 20:50 - 00001801 _____ C:\Users\USER\Desktop\AdwCleaner[S5].txt
2016-12-30 23:22 - 2016-12-30 23:22 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2016-12-30 23:21 - 2016-12-30 23:21 - 00811664 _____ C:\Users\USER\Downloads\mobiletrans_setup_full1296.exe
2016-12-30 22:46 - 2016-12-30 22:46 - 00000000 ____D C:\Program Files\Sony
2016-12-30 22:45 - 2016-12-30 22:45 - 00002234 _____ C:\Users\Public\Desktop\Xperia Companion.lnk
2016-12-30 22:45 - 2016-12-30 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-12-30 22:45 - 2016-12-30 22:45 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-30 22:38 - 2016-12-31 08:55 - 00000000 __SHD C:\Config.Msi
2016-12-30 21:10 - 2016-12-30 22:43 - 49290112 _____ (Sony) C:\Users\USER\AppData\Local\pcc.exe
2016-12-30 12:38 - 2016-12-30 12:38 - 00030424 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggsomc.sys
2016-12-30 12:38 - 2016-12-30 12:38 - 00016088 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggflt.sys
2016-12-30 12:37 - 2016-12-30 22:39 - 00000000 ____D C:\ProgramData\Sony Mobile
2016-12-30 12:37 - 2016-12-30 22:39 - 00000000 ____D C:\Program Files (x86)\Sony Mobile
2016-12-28 20:02 - 2016-12-28 20:02 - 00036250 _____ C:\Users\USER\Desktop\Rechnung_201312040496.pdf
2016-12-28 09:13 - 2016-12-28 09:13 - 00001204 _____ C:\20161228.txt
2016-12-27 23:13 - 2016-12-27 23:59 - 00089214 _____ C:\Users\USER\Desktop\Addition.txt
2016-12-27 23:11 - 2017-01-02 21:50 - 00029903 _____ C:\Users\USER\Desktop\FRST.txt
2016-12-27 23:02 - 2017-01-02 20:43 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-27 23:01 - 2017-01-02 21:48 - 02418176 _____ (Farbar) C:\Users\USER\Desktop\FRST64.exe
2016-12-27 23:00 - 2016-12-27 23:01 - 22851472 ____N (Malwarebytes ) C:\Users\USER\Desktop\mbam-setup-2.2.1.1043.exe
2016-12-27 21:15 - 2017-01-02 20:50 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton 360
2016-12-27 21:12 - 2016-12-27 21:12 - 00100592 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2016-12-27 21:12 - 2016-12-27 21:12 - 00008319 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2016-12-27 21:12 - 2016-12-27 21:12 - 00002386 _____ C:\Users\Public\Desktop\Norton 360.lnk
2016-12-27 21:12 - 2016-12-27 21:12 - 00000854 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.INF
2016-12-27 21:11 - 2016-12-27 21:12 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2016-12-27 21:11 - 2016-12-27 21:11 - 00000000 ____D C:\Program Files (x86)\Norton 360
2016-12-27 21:10 - 2016-12-27 21:10 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-12-27 20:23 - 2016-12-27 21:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Remove and Reinstall
2016-12-27 20:20 - 2016-12-27 20:20 - 00000000 ____D C:\ProgramData\PCSettings
2016-12-27 20:18 - 2016-12-27 20:18 - 15359160 ____N (Symantec Corporation) C:\Users\USER\Desktop\NRnR.exe
2016-12-27 18:13 - 2016-12-27 18:13 - 00002088 _____ C:\Users\USER\Desktop\message-rfc822-attachment
2016-12-22 22:22 - 2016-12-22 22:22 - 04590795 _____ C:\Users\USER\Documents\Christmas letter 2016 .pages.pdf
2016-12-21 23:35 - 2016-12-21 23:35 - 00032507 _____ C:\Users\USER\Downloads\Einstellungszusage USER,Elger, .docx
2016-12-20 00:29 - 2016-12-20 00:29 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\7C003C78.sys
2016-12-19 22:21 - 2016-12-19 22:22 - 03977168 _____ C:\Users\USER\Downloads\AdwCleaner_6.041.exe
2016-12-19 22:13 - 2016-12-19 22:13 - 00002688 _____ C:\Users\USER\Documents\cc_20161219_221351.reg
2016-12-19 22:06 - 2016-12-19 22:08 - 08803648 _____ (Piriform Ltd) C:\Users\USER\Downloads\ccsetup525.exe
2016-12-19 21:16 - 2016-12-19 21:16 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-18 09:08 - 2016-12-18 09:08 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-18 09:08 - 2016-12-18 09:08 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 20:39 - 2016-12-17 20:39 - 04701691 _____ C:\Users\USER\Desktop\pepparkakshus-liten-stuga.pdf
2016-12-17 00:23 - 2016-12-17 00:23 - 00100080 ____H C:\WINDOWS\SysWOW64\mlfcache.dat
2016-12-17 00:22 - 2016-12-17 00:22 - 07604435 _____ C:\Users\USER\Desktop\Fotobuchexpress24_4.0 (1).exe
2016-12-17 00:22 - 2016-12-17 00:22 - 00001042 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00001030 _____ C:\Users\Public\Desktop\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00000000 ____D C:\Program Files (x86)\Fotobuchexpress24
2016-12-17 00:20 - 2016-12-17 00:20 - 00000000 _____ C:\Users\USER\Desktop\Fotobuchexpress24_4.0.exe
2016-12-16 15:42 - 2016-12-21 15:43 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 42.lnk
2016-12-13 21:34 - 2016-12-13 21:34 - 00645120 _____ C:\Users\USER\Documents\EhrenUrkunde.doc
2016-12-12 22:02 - 2016-12-12 22:02 - 00334939 _____ C:\Users\USER\Desktop\RE1_1212-20122016_fahrplan.pdf
2016-12-12 12:06 - 2016-12-12 12:06 - 00254432 _____ C:\Users\USER\Downloads\streetboccia.pdf
2016-12-11 23:33 - 2016-12-11 23:33 - 00076776 _____ C:\Users\USER\Documents\cc_20161211_233316.reg
2016-12-11 22:56 - 2016-12-11 22:56 - 02409674 _____ C:\Users\USER\Desktop\sony_xperia_m4_aqua.pdf
2016-12-11 22:06 - 2016-12-11 22:06 - 00012978 _____ C:\Users\USER\Downloads\NAS-SERVER_2016-12-10_0221.rom
2016-12-11 20:26 - 2016-12-11 20:26 - 00000000 ____D C:\Users\USER\Documents\Sony
2016-12-11 15:45 - 2016-12-11 15:46 - 47606656 _____ (Sony) C:\Users\USER\Downloads\XperiaCompanion.exe
2016-12-11 15:30 - 2016-12-11 15:30 - 02440207 _____ C:\Users\USER\Downloads\sony_xperia_m4_aqua.pdf
2016-12-10 20:47 - 2016-12-10 20:47 - 08576448 _____ (Piriform Ltd) C:\Users\USER\Desktop\ccsetup524.exe
2016-12-10 16:08 - 2016-12-10 16:08 - 01628760 _____ C:\Users\USER\Desktop\setup_OnlineFotoservice.exe
2016-12-10 15:34 - 2016-12-10 15:34 - 00000000 ____D C:\WINDOWS\Panther
2016-12-09 16:32 - 2016-12-09 16:33 - 51969976 _____ (Malwarebytes ) C:\Users\USER\Desktop\mb3-setup-consumer-3.0.4.1269.exe
2016-12-08 18:11 - 2016-12-08 18:11 - 00039010 _____ C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638.html
2016-12-08 18:11 - 2016-12-08 18:11 - 00000000 ____D C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638_files
2016-12-07 21:28 - 2016-12-07 21:28 - 03719935 _____ C:\Users\USER\Desktop\Meine_Rechte.pdf
2016-12-06 07:54 - 2016-12-10 20:45 - 00000000 ____D C:\Users\USER\Desktop\Verknüpfungen-Fotobuch
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\Users\USER\AppData\Local\Lidl_Fotos
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lidl-Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\ProgramData\Lidl_Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\Program Files (x86)\Lidl_Fotos

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-02 21:49 - 2014-08-31 22:02 - 00000000 ____D C:\FRST
2017-01-02 21:31 - 2016-09-04 15:20 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-02 20:52 - 2016-09-05 13:49 - 00004186 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{72D328A8-4A53-40B0-B1CF-3A30C42B7B36}
2017-01-02 20:46 - 2016-09-04 15:28 - 03535820 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-02 20:46 - 2016-07-16 23:51 - 01578812 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-02 20:46 - 2016-07-16 23:51 - 00401754 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-02 20:42 - 2016-09-04 15:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-02 20:41 - 2016-07-16 07:04 - 01310720 _____ C:\WINDOWS\system32\config\BBI
2017-01-02 18:31 - 2016-09-04 15:29 - 00000000 ____D C:\Users\USER
2017-01-02 18:31 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-01 22:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-01 20:38 - 2015-06-28 10:31 - 00000000 ____D C:\AdwCleaner
2016-12-31 23:06 - 2012-08-25 21:30 - 00000000 ____D C:\Users\USER\AppData\Roaming\TV-Browser
2016-12-31 22:42 - 2014-08-17 07:44 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2016-12-31 13:53 - 2010-11-29 22:24 - 00000000 ____D C:\Users\USER\ho-hrf
2016-12-31 13:52 - 2016-02-29 14:22 - 00000000 ____D C:\Users\USER\Desktop\DT
2016-12-30 23:22 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Public\Documents
2016-12-30 22:46 - 2016-09-04 15:23 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-30 22:46 - 2016-07-16 12:47 - 00000000 _SHDC C:\WINDOWS\Installer
2016-12-30 22:46 - 2016-07-16 07:04 - 00000000 ___RD C:\Program Files
2016-12-30 22:37 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\catroot2
2016-12-30 12:38 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\DriverStore
2016-12-30 12:38 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\CatRoot
2016-12-29 09:08 - 2016-07-16 12:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-12-29 09:08 - 2016-04-08 15:47 - 00000946 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-12-29 09:08 - 2013-11-20 08:26 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-28 23:27 - 2010-12-09 14:24 - 00000000 ____D C:\Users\USER\AppData\Local\CrashDumps
2016-12-28 09:13 - 2015-10-19 16:57 - 00000000 ____D C:\ProgramData\Ashampoo
2016-12-28 01:47 - 2016-10-28 13:35 - 00004052 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-12-28 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-12-28 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-12-28 01:47 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64
2016-12-27 22:44 - 2011-04-15 16:52 - 00000000 ____D C:\Users\USER\AppData\Local\NPE
2016-12-27 21:35 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-27 21:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Tasks
2016-12-27 21:14 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-12-27 21:12 - 2016-11-24 19:54 - 00003376 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-12-27 21:12 - 2016-07-16 12:47 - 00000340 ___SH C:\Users\Public\Desktop\desktop.ini
2016-12-27 21:12 - 2015-08-06 00:55 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2016-12-27 21:11 - 2010-10-12 09:13 - 00000000 ____D C:\ProgramData\Norton
2016-12-27 20:34 - 2016-11-20 08:45 - 00000396 _____ C:\WINDOWS\Tasks\HPCeeScheduleForUSER.job
2016-12-25 11:08 - 2016-11-20 20:57 - 00000000 ____D C:\Users\USER\Desktop\BIRTE
2016-12-25 08:43 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\config\RegBack
2016-12-25 08:36 - 2016-11-20 08:45 - 00003320 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForUSER
2016-12-22 22:22 - 2010-11-27 13:55 - 00000000 ___RD C:\Users\USER\Documents
2016-12-21 21:50 - 2016-07-17 17:00 - 00000000 ____D C:\Users\USER\MEDION NAS TOOL
2016-12-21 21:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-21 21:47 - 2014-08-05 20:31 - 00000000 ____D C:\Users\USER\AppData\Local\Diagnostics
2016-12-21 15:43 - 2016-09-08 12:36 - 00003992 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1425561347
2016-12-21 15:43 - 2010-11-28 20:42 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-20 13:27 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WDI
2016-12-19 22:09 - 2016-03-28 18:25 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-18 20:40 - 2014-10-22 11:33 - 00000000 ____D C:\1a-Pitt
2016-12-18 16:16 - 2011-10-21 14:16 - 01310720 ___SH C:\Users\Großadmin\ntuser.dat
2016-12-16 21:55 - 2016-07-16 07:04 - 33816576 _____ C:\WINDOWS\system32\config\COMPONENTS
2016-12-15 19:21 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\assembly
2016-12-15 09:10 - 2015-07-19 21:04 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-11 20:27 - 2014-07-05 09:15 - 00000000 ____D C:\Users\USER\AppData\Roaming\Apple Computer
2016-12-10 20:29 - 2016-11-29 17:09 - 00000000 ____D C:\Program Files\Pixum
2016-12-10 16:17 - 2016-01-12 22:54 - 00000000 ____D C:\Program Files\OnlineFotoservice
2016-12-10 15:56 - 2011-01-02 12:36 - 00000000 ____D C:\Users\USER\AppData\Local\ElevatedDiagnostics
2016-12-09 18:57 - 2010-11-27 13:55 - 00000000 ___RD C:\Users\USER\Pictures
2016-12-09 15:14 - 2011-04-25 10:59 - 00000356 _____ C:\WINDOWS\Tasks\HPCeeScheduleForUSER-HP$.job
2016-12-08 15:58 - 2011-04-16 17:20 - 00000000 ____D C:\Users\USER\AppData\Roaming\Skype
2016-12-07 12:37 - 2016-09-06 17:37 - 00003292 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForUSER-HP$

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2011-02-27 21:26 - 2011-06-27 17:59 - 0001854 _____ () C:\Users\USER\AppData\Roaming\GhostObjGAFix.xml
2011-01-09 19:51 - 2011-01-09 20:10 - 0003584 _____ () C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-12-30 21:10 - 2016-12-30 22:43 - 49290112 _____ (Sony) C:\Users\USER\AppData\Local\pcc.exe
2013-05-01 17:20 - 2013-05-01 17:30 - 0000600 _____ () C:\Users\USER\AppData\Local\PUTTY.RND
2014-08-08 21:43 - 2014-08-08 21:43 - 0000218 _____ () C:\Users\USER\AppData\Local\recently-used.xbel
2011-10-21 13:15 - 2014-10-18 11:48 - 0007595 _____ () C:\Users\USER\AppData\Local\resmon.resmoncfg
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
2010-07-20 15:11 - 2010-07-20 15:11 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
2010-07-20 15:06 - 2010-07-20 15:07 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-10-12 09:09 - 2010-10-12 09:09 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
2010-07-20 15:06 - 2010-07-20 15:06 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2010-07-20 15:07 - 2010-07-20 15:10 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\USER\AdwCleaner_5.037.exe
C:\Users\USER\GMX_Firefox_Setup.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-25 08:43

==================== Ende von FRST.txt ============================
         

Addition sagt

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von USER (02-01-2017 21:51:07)
Gestartet von C:\Users\USER\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-04 15:05:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1773077131-3649358975-729568603-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1773077131-3649358975-729568603-503 - Limited - Disabled)
Gast (S-1-5-21-1773077131-3649358975-729568603-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1773077131-3649358975-729568603-1002 - Limited - Enabled)
USER (S-1-5-21-1773077131-3649358975-729568603-1000 - Administrator - Enabled) => C:\Users\USER

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton 360 Premier (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Premier (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton 360 Premier (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.1.171 - Adobe Systems, Inc.)
Alien Swarm - SDK (HKLM-x32\...\Steam App 640) (Version:  - Valve)
Alien Swarm (HKLM-x32\...\Steam App 630) (Version:  - Valve)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Amazon Amazon Music) (Version: 4.0.0.1205 - Amazon Services LLC)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Ashampoo Burning Studio 2015 v.1.15.0 (HKLM-x32\...\{91B33C97-21E3-DF34-9630-2EE80DDE1648}_is1) (Version: 1.15.0 - Ashampoo GmbH & Co. KG)
Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version:  - )
Audacity Recovery Utility (HKLM-x32\...\AURC_is1) (Version:  - Markus Meyer)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.1.5122 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: 1.0.8.16603 - Blizzard Entertainment)
D-i-v-X AVI Codec Pack Pro 2.4.0 (HKLM-x32\...\D-i-v-X - AVI Codec Pack Pro) (Version:  - D-i-v-X AVI Codec Pack Pro)
dotoo (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\dotoo) (Version:  - tamster)
Drakensang (HKLM-x32\...\Steam App 12640) (Version:  - Radon Labs)
Dream Aquarium (HKLM-x32\...\DreamAqua) (Version:  - )
ElsterFormular (HKLM-x32\...\ElsterFormular für Privatanwender 12.3.2.6814p) (Version: 17.4.37.20160609 - )
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.4.19695 - Landesfinanzdirektion Thüringen)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.3 - Electronic Arts)
Fotobuchexpress24 Bestellsoftware (HKLM-x32\...\Fotobuchexpress24) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Fotobuchexpress24 Bestellsoftware (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version:  - Valve)
Hattrick Organizer (remove only) (HKLM-x32\...\Hattrick Organizer) (Version:  - )
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard)
HP Documentation (HKLM-x32\...\{B360E24A-BF25-4353-AA79-1B54F509024A}) (Version: 1.0.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (HKLM\...\{939D91BD-7C35-492A-A8B4-DE99939BD44F}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710a-f Hilfe (HKLM-x32\...\{958B08B0-C784-4A77-8D2B-C0A58F1E14B5}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12992 - HP)
HP Quick Launch (HKLM-x32\...\{00A42832-B21A-4296-B5F4-D296D0BC4A3E}) (Version: 2.6.3 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{AF6EB833-D48A-49AC-9394-4C57489FDFF2}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.3.50.9 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.203 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{E342EC6B-5F25-47FE-B92C-DE616149B430}) (Version: 4.0.9.0 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4 - HP)
Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.7 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{561b5fb5-1d4d-40e8-b3e4-ad52858b217c}) (Version: 2.4.0.7 - Intel)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
JiveX DICOM Viewer Light 4.7.1 (HKLM-x32\...\JiveX DICOM Viewer Light 4.7.1) (Version:  - VISUS Technology Transfer GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Codec Pack 5.2.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 5.2.0 - )
korAccount 3 (HKLM-x32\...\{944B9BCC-0499-47E0-A1D7-941DC2732612}) (Version: 3.3.21 - Kornelius)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2907 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.2907 - CyberLink Corp.) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Left 4 Dead (HKLM-x32\...\Steam App 500) (Version:  - Valve)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.8.1 - LG Electronics)
Lidl-Fotos (HKLM-x32\...\Lidl-Fotos_is1) (Version:  - )
LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe)
Lost Planet 2 (HKLM-x32\...\Steam App 45750) (Version:  - )
LOST PLANET 2 (x32 Version: 1.0.0002.133 - CAPCOM CO., LTD.) Hidden
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version:  - EasyBits Software AS)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Marketsplash Schnellzugriffe (HKLM-x32\...\{FB0C267C-8B4F-4867-8161-A6A3B66D42C1}) (Version: 1.0.0.9 - Hewlett-Packard)
Mediencenter 3.8.9799.6 (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Mediencenter) (Version: 3.8.9799.6 - Deutsche Telekom AG)
MEDION NAS TOOL (HKLM-x32\...\MEDION NAS TOOL) (Version:  - MEDION)
Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7939 - Memeo Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 44.0 (x86 de)) (Version: 44.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NAVIGON Fresh 3.4.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.4.1 - NAVIGON)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Norton 360 Premier (HKLM-x32\...\N360) (Version: 22.8.1.14 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Olympus ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.3.2207 - OLYMPUS IMAGING CORP.)
Olympus ib (x32 Version: 1.3.2207 - OLYMPUS IMAGING CORP.) Hidden
OLYMPUS Viewer 2 (HKLM-x32\...\{7177EE4E-3D1D-4F45-85B5-B93DC758BA0B}) (Version: 1.1.1 - OLYMPUS IMAGING CORP.)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4204 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4204 - CyberLink Corp.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7746 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30117 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden
Resident Evil™: Operation Raccoon City (HKLM-x32\...\Steam App 209100) (Version:  - )
Rossmann Fotowelt Software 4.9 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.9 - ORWO Net)
RtVOsd (HKLM\...\{091A0130-A82F-4A6D-9C61-3BBBB3289030}) (Version: 1.0.6 - Realtek Semiconductor Corp.)
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Saal Design Software (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Scan2PDF 1.6 (HKLM-x32\...\Scan2PDF_is1) (Version:  - Koma-Code)
Scan2PDF Professional 17 (HKLM-x32\...\Scan2PDF Professional 17) (Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH)
Scan2PDF Professional 17 (x32 Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH) Hidden
ScanToPDF 18 (HKLM-x32\...\ScanToPDF 1818) (Version: 18 - metier 2000 GmbH)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
SequoiaView (HKLM-x32\...\SequoiaView) (Version:  - )
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version:  - )
Serious Sam Classic: The Second Encounter (HKLM-x32\...\Steam App 41060) (Version:  - )
Serious Sam HD: The First Encounter (HKLM-x32\...\Steam App 41000) (Version:  - Croteam)
Serious Sam HD: The Second Encounter (HKLM-x32\...\Steam App 41010) (Version:  - Croteam)
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2014 (HKLM-x32\...\{2EE860C7-4551-479F-AF01-328B8AA46051}) (Version: 22.00.8811 - Buhl Data Service GmbH)
Steuer 2015 (HKLM-x32\...\{E262CD3B-8825-4D56-AEF1-5E127F2FBB05}) (Version: 23.00.1146 - Buhl Data Service GmbH)
Studie zur Verbesserung von HP Officejet 6500 E710a-f Produkten (HKLM\...\{A5C5CECF-648E-4263-B601-4D4CD3FCD11D}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.104 - Synaptics Incorporated)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.63017 - TeamViewer)
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - )
TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - )
TV-Browser 3.4 (HKLM-x32\...\tvbrowser) (Version: 3.4 - TV-Browser Team)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Video DVD Maker v3.30.0.75 (HKLM-x32\...\{1A3E23D7-7A1E-43EC-B35D-EB2A31BED943}) (Version:  - )
Vistaprint Fotobücher (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\{BA786D68-3AD8-42DC-8BE1-9E09B4737A27}_is1) (Version:  - Vistaprint)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WISO Haushaltsbuch 2011 (HKLM-x32\...\WISO Haushaltsbuch 2011) (Version:  - Buhl Data Service GmbH)
WISO Haushaltsbuch 2011 (x32 Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Xperia Companion (HKLM-x32\...\{efee6944-1231-492a-a157-93409130a098}) (Version: 1.4.7.0 - Sony)
Xperia Companion (x32 Version: 1.4.7.0 - Sony) Hidden
Xperia Companion Service (Version: 1.4.7.0 - Sony) Hidden
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{268502F4-815D-4358-A8D6-B783FDB58EF0}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{528EE335-5034-4EFC-834E-63E5F02D2BC2}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{6066ADF0-9EB0-43E5-ADB6-990F5A3B979C}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{77BC4082-DB5F-439A-8DC8-F9E24A63B0DE}\InprocServer32 -> C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0081B333-1014-4F60-9A96-03D012DE8F90} - System32\Tasks\Opera scheduled Autoupdate 1425561347 => C:\Program Files (x86)\Opera\launcher.exe [2016-12-19] (Opera Software)
Task: {03916019-BD7E-4389-844E-DB2431E95F60} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {096ECB4C-7DD1-41E6-9655-245040D1FF76} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0DA289FD-AB20-42D3-A442-2BD37DA95B1A} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {10A750F7-52B0-4932-AE0A-4C61EEECC3AE} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater -> Keine Datei <==== ACHTUNG
Task: {10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {11A105F6-6681-4DA1-9047-6A575C035221} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {11D2B752-FF72-44B9-9D67-B20F6CCBCB36} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {13D0216E-2B35-4415-A449-7DD2C847185D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {15B831EC-47E3-4AAA-B20D-0E60C432CE00} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report -> Keine Datei <==== ACHTUNG
Task: {19BEACD4-BA4B-479D-B622-658C3E9679A2} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {1BC8758E-FC55-46EC-81E7-8186D0BD78E2} - \{4A6854D6-96F4-415F-9393-BE04B423803C} -> Keine Datei <==== ACHTUNG
Task: {1F4C282D-A54C-48CC-A141-CF202D4ECEA9} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2A82F7A0-C35E-4FED-8743-B84E095B89C3} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {317B4898-F7B9-4291-B09E-0D03F17936F1} - \Driver Booster SkipUAC (USER) -> Keine Datei <==== ACHTUNG
Task: {32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {3862F23E-94D3-416A-BCC6-427D8866068E} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} - \Adobe Flash Player Updater -> Keine Datei <==== ACHTUNG
Task: {3D8C53A8-716C-48EC-8254-34AD4F0706B6} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {459EB60F-0D49-40D1-BA36-A762AD4B32C2} - \HP Photo Creations Communicator -> Keine Datei <==== ACHTUNG
Task: {4742AA9C-ECD6-4E48-998D-10C9515B60C2} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> Keine Datei <==== ACHTUNG
Task: {5010A17C-2F30-4227-8148-13AB9B2E2265} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {5172195F-FE75-4805-8116-4EA6AB591ED9} - System32\Tasks\Norton 360\Norton Autofix => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {529FC627-C4BF-4B1F-9F06-B15F724EF0F0} - System32\Tasks\HPCeeScheduleForUSER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {52F5D290-B2CC-4648-9670-488DB33FD3F6} - \Hewlett-Packard\HP Support Assistant\PC Health Analysis -> Keine Datei <==== ACHTUNG
Task: {548DBE10-99B3-4626-AE20-D4BEE2ED2C92} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {5598B730-6513-420C-9F91-C49110C50375} - \RecoveryCDWin7 -> Keine Datei <==== ACHTUNG
Task: {57EB0E85-CD55-4B9A-8007-0A245C2FF57B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> Keine Datei <==== ACHTUNG
Task: {5CACCCBE-2196-482B-88D8-57AAC1275885} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Keine Datei <==== ACHTUNG
Task: {6CD3E6C9-F872-4BE6-B074-3D870F8066DA} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {7785FF1D-78ED-4230-982E-BB815DFAEB95} - \{C404F7AD-46D6-4584-871A-531AEB1D27EE} -> Keine Datei <==== ACHTUNG
Task: {7B82FBC3-A3B0-4130-94D4-453C700FA920} - \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task -> Keine Datei <==== ACHTUNG
Task: {7F4F2968-7F88-4CBA-B3B6-FDD96B95AA03} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Keine Datei <==== ACHTUNG
Task: {88A25EBF-E761-44AE-9123-FD0CA810AEDD} - System32\Tasks\HPCeeScheduleForUSER => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {97F77198-30F1-4C3B-B9C3-26DA54877724} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> Keine Datei <==== ACHTUNG
Task: {99559E80-AA87-4973-9998-FDDED6F3D03E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {9AF7DD86-B06C-435D-A4CE-1047879E3614} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {9F5AB1AB-2282-49B2-A70C-01C07170C8D9} - \Microsoft\Windows\Media Center\PvrScheduleTask -> Keine Datei <==== ACHTUNG
Task: {A0407F7E-D012-4725-8606-2979744AE773} - \Microsoft\Windows\SideShow\SessionAgent -> Keine Datei <==== ACHTUNG
Task: {A0C9AF1E-B8FE-47B2-9489-A4994B3E2E1D} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A364E297-00AD-490D-900E-22AC34598C71} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Keine Datei <==== ACHTUNG
Task: {A3AABA13-B603-418C-9BB2-9B057D6E28E0} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\WSCStub.exe [2016-11-12] (Symantec Corporation)
Task: {A8E1692F-D2F7-4A8A-98A6-C6ADC321980D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {ACA35D83-5119-4404-A232-ACD86B28B0C8} - \Microsoft\Windows\Media Center\StartRecording -> Keine Datei <==== ACHTUNG
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> Keine Datei <==== ACHTUNG
Task: {B683D382-50C7-4F8E-B0FE-A6059B9BF1C9} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {BF05AB7D-FB19-435A-BB99-E96410238E97} - \Microsoft\Windows\Media Center\RegisterSearch -> Keine Datei <==== ACHTUNG
Task: {BFD508E7-B44D-4AE4-8971-67DD7F67AE03} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {C5154C5F-647C-4517-938D-25CC9246A8DD} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_186_pepper.exe [2016-12-28] (Adobe Systems Incorporated)
Task: {C6DC769C-38C4-4AE3-B025-387121D58014} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> Keine Datei <==== ACHTUNG
Task: {CCF009D2-936C-45F9-83FD-216DD46E1137} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {D273D400-8341-4720-8414-D0EF4FAA2067} - \Microsoft\Windows\Media Center\PBDADiscovery -> Keine Datei <==== ACHTUNG
Task: {D30CDE83-800C-466D-B43B-EFD5622B1C59} - \WPD\SqmUpload_S-1-5-21-1773077131-3649358975-729568603-1000 -> Keine Datei <==== ACHTUNG
Task: {D50E35A6-4804-44D9-B53E-ECA982B38334} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources -> Keine Datei <==== ACHTUNG
Task: {D6256F7C-0F43-49A7-A399-29881F396DAA} - \Microsoft\Windows\SideShow\GadgetManager -> Keine Datei <==== ACHTUNG
Task: {D807A277-25CB-4F16-B66E-7448CDFEB967} - \HPCustParticipation HP Officejet 6500 E710a-f -> Keine Datei <==== ACHTUNG
Task: {D821DC63-B2A8-4090-9C3B-786EA756C292} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {DDDFEE16-D182-48C7-A214-892E4A1D52DF} - \Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval -> Keine Datei <==== ACHTUNG
Task: {DED18EFE-380C-45D7-AA70-487B28ACB520} - \Microsoft\Windows\Media Center\mcupdate_scheduled -> Keine Datei <==== ACHTUNG
Task: {E0BA20C7-1C8E-405B-8605-7489D6CB51A4} - \Microsoft\Windows\Media Center\InstallPlayReady -> Keine Datei <==== ACHTUNG
Task: {E2258B6B-E21F-4F4A-ABC7-59C06881CFFE} - \Microsoft\Windows\SideShow\AutoWake -> Keine Datei <==== ACHTUNG
Task: {E524929C-9565-4B9E-ABCF-68B48BF20243} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> Keine Datei <==== ACHTUNG
Task: {E5D57917-62E6-46F4-8C1B-CEC09C7CCFCD} - \SidebarExecute -> Keine Datei <==== ACHTUNG
Task: {E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> Keine Datei <==== ACHTUNG
Task: {E6A8800C-3A44-45AD-A423-6D12B79447ED} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> Keine Datei <==== ACHTUNG
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Keine Datei <==== ACHTUNG
Task: {EAC61B4A-8F63-4127-AB57-569647CC147C} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Keine Datei <==== ACHTUNG
Task: {EB3147D2-4E97-4986-83D3-5DBC9E5D765D} - \Microsoft\Windows\WindowsBackup\AutomaticBackup -> Keine Datei <==== ACHTUNG
Task: {EFFD36A7-F88A-446C-8ECA-8712654F394F} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> Keine Datei <==== ACHTUNG
Task: {F0F06860-19E6-4F69-AA5A-1DDAD27C078F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {F86D9E76-5D59-46A2-92AB-5981F76A1FCE} - \Uninstaller_SkipUac_Administrator -> Keine Datei <==== ACHTUNG
Task: {FA2CF3BA-B827-49C2-9230-2EAA9966A5C1} - \Microsoft\Windows\WindowsBackup\Windows Backup Monitor -> Keine Datei <==== ACHTUNG
Task: {FD62C617-2A16-459A-9C32-195C31D1857C} - \{F3EFACD3-1DF7-4311-9CC3-285D8A6D7632} -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_186_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForUSER.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForUSER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-01 21:40 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-01 21:40 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-01-01 21:40 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-04 17:47 - 2016-09-04 17:47 - 01864384 _____ () C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2010-06-18 15:26 - 2010-06-18 15:26 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 12:43 - 2016-07-16 12:43 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01400320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01033728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-21 15:43 - 2016-12-21 15:43 - 68763736 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\opera.dll
2016-12-21 15:43 - 2016-12-21 15:42 - 01893976 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\libglesv2.dll
2016-12-21 15:43 - 2016-12-21 15:42 - 00086616 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [119]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1001movie.com -> 1001movie.com

Da befinden sich 6067 mehr Seiten.


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2014-12-11 21:28 - 00000027 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\USER\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{98c5018e-39e1-4440-88a9-2348368e3c8a}.JPG
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amazon Music => "C:\Users\USER\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: HPWirelessAssistant => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
MSCONFIG\startupreg: MDS_Menu => "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
MSCONFIG\startupreg: Olympus ib => "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Spotify => "C:\Users\USER\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\USER\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "Memeo Instant Backup"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Advanced SystemCare 9"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "BlueStacks Agent"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [{8E673705-01AD-4D38-85A1-6F163CE9B1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{13A19B5C-2266-4790-9AD4-A62C9D304751}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9AEBF3E5-5082-48B7-9930-ABBBBBD5C1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4E042324-1C0E-4252-AA59-53B4D6D1232E}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E407A208-AEDB-401D-80AA-604C425BC60A}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{8868062B-EA35-4A20-921F-27A414C21E67}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{FDDAE072-A898-44DA-B52D-889EBB97B36A}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E942A137-9566-4C84-B356-D6D3B81A2F07}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0F5B53DF-7C27-4124-A064-838D1BEE70F4}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{31F37177-7815-408F-8409-318F4598D580}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{30C28231-B4B5-4F45-B163-2FC6E3DE683D}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3FB135E8-2339-4458-91EF-3B3F02ED3291}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{F1AE4AB3-3D59-4F06-A9D4-C8A2ABDBF552}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C0891F06-BB9A-4793-9326-09146DAD2A48}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0CB946D-69B1-4409-BF44-E158494040A8}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{874D0741-F421-47C0-97C1-4AFEFE1275FE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{356474A1-932B-449D-8EDD-3F539A57F4F2}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{E763AF9E-7EFB-4E82-802F-9AD66975E178}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{5B4A8F87-8B8F-48B8-99EB-394D1FA69899}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{A7F394A0-E7F8-4D59-AF98-EB291E44F6FB}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{9B5A5AC2-3403-45DC-8C6F-3856C856547A}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{51F9F022-CF46-4E51-998A-55FEA5EF4B9F}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{63FC4A14-1B2C-43BB-8D6B-6C720416666F}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{CABEC949-8703-4788-B3D5-9F557F38DD57}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{40F4FD40-E093-40C3-8AFB-67D752AEFD10}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C4178D55-7200-4F02-94AE-E1356BD82B71}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A2D6469B-2CCB-4250-BE88-413E325B8A66}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0F7520B5-F22F-4601-B11D-A7E68EBE92AC}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4FC874CD-4833-45BF-B5DE-1241EE4F38E7}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{291A0EAA-4592-4882-9735-8B0C8CFC7B91}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{B27AB1EE-B334-40C8-B7DB-95EE6DE098BF}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{66E78BD3-5261-4B11-9A16-4C62B6B28CD0}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{B50431A0-B939-4DF7-92C6-F1FA0F5CE94E}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{D2902F6A-4F9B-4CC9-B683-23C2111146F7}] => C:\Users\USER\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{61B1A450-899D-4A27-BB9A-EC71F0442647}] => C:\Users\USER\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{AF8A86E7-57A8-4DF6-A164-477519A6FD29}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{70DE82FA-534C-45A6-9DC3-EDC5FE549930}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{03D24FD1-2C18-4464-A429-4A020B58C602}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{1A550A5B-D2F0-4CC3-947B-B8A09C0AB2B8}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{EEFD8A00-EB75-4B23-B8C3-BE0BDE9BD099}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{063C606F-67AB-46D1-85C8-B2F7F4DA57C3}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{01E85985-2672-4FF8-8855-92687C1EE44A}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{208C33A8-C683-4656-B293-6382E99813AA}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{D96C908F-A1AA-4C9B-94B1-C4DE6976EEFD}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{85404721-B741-4262-9564-1FA3F80042FB}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{C68BBCD4-EC8A-4852-819A-12D33ABD613B}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{D22E3925-6A3D-4A4A-B2F6-BAEB58216513}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{064BF8B4-7346-4EFA-AB2B-EC7EDF23CD61}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{55EE3B37-D1A3-4E2B-8BD8-B67E133C2F97}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{EF41ACED-E7EF-4E9F-A55C-98623094A35D}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{954F5189-DBC1-4F87-BE81-09A3C0306AEC}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{E54DE16B-C314-420D-A022-5066CF8C4300}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{ABE3AEE3-E8B0-4A74-BCF5-C9AF7391E13F}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C26A142F-DE3B-401C-AFD6-D03971353D71}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A60458C5-2BA1-4156-A106-1BBE590C375E}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C30283D4-B0EB-4D2D-8393-067CFC0F7A1C}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{7802C9AF-0D81-4F91-A5A7-2905F9C02439}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{6E9841AA-A551-429B-98FD-E5A1A17D3C8D}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{8C122C83-6BFA-49F2-971D-024D8253932A}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{A639776A-6546-4D5D-9EB2-27BE3E62A017}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{D96B78E8-9C57-4C75-B499-F8CFCF24CD33}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{AD615D88-6DCE-423A-B5D0-CD8643357ADA}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{F6DBC4DC-AA11-4B53-934A-3E707AD13002}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{A8C1A975-0625-40D5-9A34-5A5BAF2B9340}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{AE59F461-BBCA-4B4A-8EB5-7A3F5D006453}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7142AA43-3C27-4E61-A65E-075822D7DBEF}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6F08754B-0CEB-4B20-9890-FB34686FB13C}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{4BC24ADB-9A49-4A59-AF53-103A7320300B}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7635E990-AB5C-4B51-8CC3-61EEAEC0D388}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2DE2C132-9CD8-47CA-8E69-1B7F9E9EF4B0}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{91F9E95F-170F-441F-A02F-23CB74DA24CC}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{57F21F45-728A-48BB-A8B1-5041AF2EB35C}] => %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{1F47A498-2850-446C-ADBF-2C66298E2F3A}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{A8FF8FB6-FA45-4F86-A108-78F6753B0A9D}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{8E27E693-AD9E-4934-8835-76D8A4762952}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{45127CE1-A84B-4404-919C-B3F9F3F341A9}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{2D6FACDF-7F06-4729-9BB0-1E2FE986705E}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [{CA8A2016-77F1-4F3A-8C49-CD85C5C26186}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [UDP Query User{3E4E805B-1D69-43EE-8FD0-665D6F4AF1E4}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [TCP Query User{B87F9D58-A3A3-412F-BAA8-7C61B1AC6A22}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [UDP Query User{5C478DCE-8519-40EC-A6A9-B33BB585DD80}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{E81B8F49-EBB1-4FCC-8E2F-2E960B153433}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [{F7CBA578-7BD7-4E9D-80B1-884974C8CF3B}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{996C8DE2-CF76-43D6-B33F-B2607630CC27}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{A3596081-F015-4063-B20D-52BCE3DDCC48}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{2E1E54D2-790E-4918-998C-E41C3F686B7A}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{B52D967B-1499-4DFD-BB78-E57AA78012CB}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{A7F12640-0647-4944-B82C-FEC01404A261}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{286AE560-31FB-4C76-8037-A5F593CA3EE7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{4EC6BC05-4EC8-4B51-9BCC-05352CA84A28}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{7D42A802-CE2C-474D-8047-0CFB0E70F172}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{32DF9563-49BB-4154-AD3D-36C48511F136}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{227A1731-3D27-4924-A41C-EEB2BCAA8C74}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{B78ABD7B-20E3-4E4A-8D45-F82C8DAD45C7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{044807F4-73EE-470D-8AC3-CCD80DA3A443}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{766CFF0B-FD3E-45B9-AB6B-AA9E62CEE219}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{D675F046-E9D8-4BE4-B288-801D2A549914}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{4AB576B6-A159-416B-9851-339CE9E24874}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{57A3E5A2-BA35-4F7B-93C6-6466872E7F58}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{27D6BF9C-6D2A-414B-B953-06FC49F57E16}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{460EE69F-7787-4271-9B4D-66DEC6CF4BFE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{48870B22-94A0-4D44-9C20-59C47B375A46}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{D955B1B7-7559-4AA4-B255-F31E3C5731D6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{7A11A34F-7B53-48C5-AB1D-870876AB806C}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{4B42EDB3-5480-4273-BC0D-FB8789207389}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{FFF8DD45-0A6C-4C55-A324-4480C8260D81}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{0092FC42-953C-4AED-A3BC-70F296CF8A9D}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{24CD30F7-8932-483E-A58C-19CFE73005C6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{1709CBB8-9BA4-4BD9-9160-8D6DCFC4F723}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7F55FD67-FFB9-4883-858C-19B47539D306}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ACBCF7BD-8E2B-4704-A9B9-25959C70BFCF}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{30C11C2B-24A9-4FAE-B74C-6F076948638D}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4B38B008-640F-4945-AB11-F8E74D00D58A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F91AA893-804A-4132-9BAD-F87EAC975D48}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D76014A0-C5AF-4CE5-A07D-0B4B483D1C22}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{14FCBF9D-0B9C-45BD-AF49-8E7197C03B8A}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{EC3BC8F2-D9B2-4991-B013-CAABD3AC9431}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{67EABBE0-D980-4E04-8B3A-E07FB8BBA317}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A8FCFFD4-3FEE-4ED9-A92C-D7EC912543B7}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{5B0C1529-E204-4488-ACD0-F3D316941167}] => LPort=1900
FirewallRules: [{DC5BDE06-429E-4843-BBB6-7122042FC955}] => LPort=2869
FirewallRules: [{C39DCC74-AFE9-429E-8C03-2250B70D4761}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{9DA76145-487E-464A-A848-2E18577A7733}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FE961DF6-87C6-4EB3-BF54-82F3632AA1B2}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{048FC1AF-4D52-4577-AA5D-DD99CF968049}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{C618DC49-62F3-49D8-A017-60E1E7FD0B81}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{3802A6F0-AC14-4C62-97BD-C52DA309C89A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8A88397E-E582-420F-A3A0-8CC452CE5EDC}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3318B191-229E-4D4F-90E3-CB035B389072}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0ADB167-9BF5-42A0-BB8F-CF93BB7958A7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{75C6B1D1-960D-4224-ABE4-5FBBE02A35A9}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{809885C9-732F-4AFE-8F51-9C1A4DE1890D}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{94287C6E-F107-457C-B628-6B190AB710DE}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{3623F4D7-FE84-4C68-8805-86379A370233}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{D9808767-F417-4B1C-848A-3992F5E4C58C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{C8BFDC59-9E6E-4BD4-9B57-92833B75451C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{004A5073-6314-4614-8A27-1B69DA833FEB}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{B36FA190-D0E7-467F-AD32-B21B6F86504C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A75C2943-C6DF-4FCD-9F4F-34BF0682B877}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{7C27A078-B910-44C6-8164-C72C30104A92}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{23F6C804-249E-4888-A947-8DBA9F4EC9AB}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{47D650E5-4537-4BE6-9E16-CEC558BDC02B}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{F50A3F31-1AFE-4AC2-9683-A9933D7D92B7}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{C58AEA26-09C2-4340-B882-481D0742107A}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{CD3A984D-11A4-4440-AD9F-2119525252B0}] => LPort=3724
FirewallRules: [{71F80CCC-857B-45AF-87B3-DBFCCC8D2A2B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F7765463-7C6F-44C0-8B37-EC3EF6F1FACA}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CFBA7366-2C82-4BE3-8272-33356E93847E}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{40EC9991-C978-4327-9043-4A8DDA45B461}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{346D96C5-74BF-41DD-9C4C-D085B49F2965}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{9EA2066F-E4A2-43C8-AD02-2E39901F24A1}] => svchost.exe
FirewallRules: [{984F5B7A-65EC-4739-8177-460EACD23F8D}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{CB2D5697-3B2A-458E-9E2E-0111C7978A7F}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{FEF02A7D-8360-4A97-B42B-47D960F93CE0}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{21501978-E708-44C9-8E84-4BBC0DD912BF}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{27348E6C-547E-457A-ACC3-98EA777AB73F}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{8650EABB-65D9-418D-8480-58CF60CFDD38}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{7E9A1500-520A-4167-B665-9B20925810AD}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{4BBB084E-C450-4C8D-8612-E7D52CDC4278}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [{9581B01B-0259-4DAC-B40E-31168746C8CE}] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanion.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Eurowin\maxtax\SSONLINE.EXE] => Enabled:SSONLINE

==================== Wiederherstellungspunkte =========================

02-01-2017 20:50:58 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/02/2017 08:51:18 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (01/02/2017 08:47:46 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (01/02/2017 08:43:09 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (01/02/2017 07:32:38 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (01/02/2017 07:32:38 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (01/02/2017 06:36:40 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (01/02/2017 06:35:20 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (01/02/2017 06:35:20 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (01/02/2017 06:32:26 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (01/02/2017 06:32:26 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)


Systemfehler:
=============
Error: (01/02/2017 08:43:21 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 08:42:39 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (01/02/2017 08:41:20 PM) (Source: DCOM) (EventID: 10010) (User: USER-HP)
Description: Der Server "{D63B10C5-BB46-4990-A94F-E40B9D520160}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (01/02/2017 08:37:56 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (01/02/2017 06:31:47 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x0000003b (0x00000000c0000005, 0xfffff80e859d319a, 0xffffd380270ef130, 0x0000000000000000). Ein volles Abbild wurde gespeichert in: C:\WINDOWS\MEMORY.DMP. Berichts-ID: 27079677-6f2a-43af-856e-d5ef4618dd7c.

Error: (01/02/2017 06:31:01 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NetMsmqActivator" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (01/02/2017 06:31:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NetMsmqActivator erreicht.

Error: (01/02/2017 06:30:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NetPipeActivator" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (01/02/2017 06:30:53 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst NetPipeActivator erreicht.

Error: (01/02/2017 06:30:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BstHdLogRotatorSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


CodeIntegrity:
===================================
  Date: 2016-12-27 20:51:30.555
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.474
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.443
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.412
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.373
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.222
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.191
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.113
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.087
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 19:21:48.087
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Prozentuale Nutzung des RAM: 54%
Installierter physikalischer RAM: 3893.86 MB
Verfügbarer physikalischer RAM: 1754.25 MB
Summe virtueller Speicher: 7861.86 MB
Verfügbarer virtueller Speicher: 5563.89 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:281.98 GB) (Free:28.98 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (RECOVERY) (Fixed) (Total:15.82 GB) (Free:2.22 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.15 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32
Drive i: () (Removable) (Total:60.34 GB) (Free:51.46 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: CB9E9924)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=282 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

========================================================
Disk: 1 (Size: 60.4 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================
         

Ich fürchte, bei den ganzen ERRORS muss ich wohl noch was anderes machen ...aber was...?

LG
HotteX

Servus,



von welchen "Erros" bzw. Problemen sprichst du jetzt genau?






Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

start
CloseProcesses:
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {096ECB4C-7DD1-41E6-9655-245040D1FF76} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0DA289FD-AB20-42D3-A442-2BD37DA95B1A} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {10A750F7-52B0-4932-AE0A-4C61EEECC3AE} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater -> Keine Datei <==== ACHTUNG
Task: {10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {11A105F6-6681-4DA1-9047-6A575C035221} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {11D2B752-FF72-44B9-9D67-B20F6CCBCB36} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {13D0216E-2B35-4415-A449-7DD2C847185D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {15B831EC-47E3-4AAA-B20D-0E60C432CE00} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report -> Keine Datei <==== ACHTUNG
Task: {19BEACD4-BA4B-479D-B622-658C3E9679A2} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {1BC8758E-FC55-46EC-81E7-8186D0BD78E2} - \{4A6854D6-96F4-415F-9393-BE04B423803C} -> Keine Datei <==== ACHTUNG
Task: {1F4C282D-A54C-48CC-A141-CF202D4ECEA9} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2A82F7A0-C35E-4FED-8743-B84E095B89C3} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {317B4898-F7B9-4291-B09E-0D03F17936F1} - \Driver Booster SkipUAC (USER) -> Keine Datei <==== ACHTUNG
Task: {32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {3862F23E-94D3-416A-BCC6-427D8866068E} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} - \Adobe Flash Player Updater -> Keine Datei <==== ACHTUNG
Task: {459EB60F-0D49-40D1-BA36-A762AD4B32C2} - \HP Photo Creations Communicator -> Keine Datei <==== ACHTUNG
Task: {4742AA9C-ECD6-4E48-998D-10C9515B60C2} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> Keine Datei <==== ACHTUNG
Task: {5010A17C-2F30-4227-8148-13AB9B2E2265} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {52F5D290-B2CC-4648-9670-488DB33FD3F6} - \Hewlett-Packard\HP Support Assistant\PC Health Analysis -> Keine Datei <==== ACHTUNG
Task: {548DBE10-99B3-4626-AE20-D4BEE2ED2C92} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {5598B730-6513-420C-9F91-C49110C50375} - \RecoveryCDWin7 -> Keine Datei <==== ACHTUNG
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {096ECB4C-7DD1-41E6-9655-245040D1FF76} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0DA289FD-AB20-42D3-A442-2BD37DA95B1A} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {10A750F7-52B0-4932-AE0A-4C61EEECC3AE} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater -> Keine Datei <==== ACHTUNG
Task: {10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {11A105F6-6681-4DA1-9047-6A575C035221} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {11D2B752-FF72-44B9-9D67-B20F6CCBCB36} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {13D0216E-2B35-4415-A449-7DD2C847185D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {15B831EC-47E3-4AAA-B20D-0E60C432CE00} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report -> Keine Datei <==== ACHTUNG
Task: {19BEACD4-BA4B-479D-B622-658C3E9679A2} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {1BC8758E-FC55-46EC-81E7-8186D0BD78E2} - \{4A6854D6-96F4-415F-9393-BE04B423803C} -> Keine Datei <==== ACHTUNG
Task: {1F4C282D-A54C-48CC-A141-CF202D4ECEA9} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2A82F7A0-C35E-4FED-8743-B84E095B89C3} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {317B4898-F7B9-4291-B09E-0D03F17936F1} - \Driver Booster SkipUAC (USER) -> Keine Datei <==== ACHTUNG
Task: {32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {3862F23E-94D3-416A-BCC6-427D8866068E} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} - \Adobe Flash Player Updater -> Keine Datei <==== ACHTUNG
Task: {459EB60F-0D49-40D1-BA36-A762AD4B32C2} - \HP Photo Creations Communicator -> Keine Datei <==== ACHTUNG
Task: {4742AA9C-ECD6-4E48-998D-10C9515B60C2} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> Keine Datei <==== ACHTUNG
Task: {5010A17C-2F30-4227-8148-13AB9B2E2265} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {52F5D290-B2CC-4648-9670-488DB33FD3F6} - \Hewlett-Packard\HP Support Assistant\PC Health Analysis -> Keine Datei <==== ACHTUNG
Task: {548DBE10-99B3-4626-AE20-D4BEE2ED2C92} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {5598B730-6513-420C-9F91-C49110C50375} - \RecoveryCDWin7 -> Keine Datei <==== ACHTUNG
Task: {5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> Keine Datei <==== ACHTUNG
Task: {5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> Keine Datei <==== ACHTUNG
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Keine Datei <==== ACHTUNG
Task: {6CD3E6C9-F872-4BE6-B074-3D870F8066DA} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {7785FF1D-78ED-4230-982E-BB815DFAEB95} - \{C404F7AD-46D6-4584-871A-531AEB1D27EE} -> Keine Datei <==== ACHTUNG
Task: {7B82FBC3-A3B0-4130-94D4-453C700FA920} - \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task -> Keine Datei <==== ACHTUNG
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Keine Datei <==== ACHTUNG
Task: {97F77198-30F1-4C3B-B9C3-26DA54877724} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> Keine Datei <==== ACHTUNG
Task: {99559E80-AA87-4973-9998-FDDED6F3D03E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {9AF7DD86-B06C-435D-A4CE-1047879E3614} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {9F5AB1AB-2282-49B2-A70C-01C07170C8D9} - \Microsoft\Windows\Media Center\PvrScheduleTask -> Keine Datei <==== ACHTUNG
Task: {A0407F7E-D012-4725-8606-2979744AE773} - \Microsoft\Windows\SideShow\SessionAgent -> Keine Datei <==== ACHTUNG
Task: {A0C9AF1E-B8FE-47B2-9489-A4994B3E2E1D} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A364E297-00AD-490D-900E-22AC34598C71} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Keine Datei <==== ACHTUNG
Task: {ACA35D83-5119-4404-A232-ACD86B28B0C8} - \Microsoft\Windows\Media Center\StartRecording -> Keine Datei <==== ACHTUNG
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> Keine Datei <==== ACHTUNG
Task: {B683D382-50C7-4F8E-B0FE-A6059B9BF1C9} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {BF05AB7D-FB19-435A-BB99-E96410238E97} - \Microsoft\Windows\Media Center\RegisterSearch -> Keine Datei <==== ACHTUNG
Task: {BFD508E7-B44D-4AE4-8971-67DD7F67AE03} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {C6DC769C-38C4-4AE3-B025-387121D58014} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> Keine Datei <==== ACHTUNG
Task: {CCF009D2-936C-45F9-83FD-216DD46E1137} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {D273D400-8341-4720-8414-D0EF4FAA2067} - \Microsoft\Windows\Media Center\PBDADiscovery -> Keine Datei <==== ACHTUNG
Task: {D30CDE83-800C-466D-B43B-EFD5622B1C59} - \WPD\SqmUpload_S-1-5-21-1773077131-3649358975-729568603-1000 -> Keine Datei <==== ACHTUNG
Task: {D50E35A6-4804-44D9-B53E-ECA982B38334} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources -> Keine Datei <==== ACHTUNG
Task: {D6256F7C-0F43-49A7-A399-29881F396DAA} - \Microsoft\Windows\SideShow\GadgetManager -> Keine Datei <==== ACHTUNG
Task: {D807A277-25CB-4F16-B66E-7448CDFEB967} - \HPCustParticipation HP Officejet 6500 E710a-f -> Keine Datei <==== ACHTUNG
Task: {D821DC63-B2A8-4090-9C3B-786EA756C292} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {DDDFEE16-D182-48C7-A214-892E4A1D52DF} - \Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval -> Keine Datei <==== ACHTUNG
Task: {DED18EFE-380C-45D7-AA70-487B28ACB520} - \Microsoft\Windows\Media Center\mcupdate_scheduled -> Keine Datei <==== ACHTUNG
Task: {E0BA20C7-1C8E-405B-8605-7489D6CB51A4} - \Microsoft\Windows\Media Center\InstallPlayReady -> Keine Datei <==== ACHTUNG
Task: {E2258B6B-E21F-4F4A-ABC7-59C06881CFFE} - \Microsoft\Windows\SideShow\AutoWake -> Keine Datei <==== ACHTUNG
Task: {E524929C-9565-4B9E-ABCF-68B48BF20243} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> Keine Datei <==== ACHTUNG
Task: {E5D57917-62E6-46F4-8C1B-CEC09C7CCFCD} - \SidebarExecute -> Keine Datei <==== ACHTUNG
Task: {E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> Keine Datei <==== ACHTUNG
Task: {E6A8800C-3A44-45AD-A423-6D12B79447ED} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> Keine Datei <==== ACHTUNG
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Keine Datei <==== ACHTUNG
Task: {EAC61B4A-8F63-4127-AB57-569647CC147C} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Keine Datei <==== ACHTUNG
Task: {EB3147D2-4E97-4986-83D3-5DBC9E5D765D} - \Microsoft\Windows\WindowsBackup\AutomaticBackup -> Keine Datei <==== ACHTUNG
Task: {EFFD36A7-F88A-446C-8ECA-8712654F394F} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> Keine Datei <==== ACHTUNG
Task: {F86D9E76-5D59-46A2-92AB-5981F76A1FCE} - \Uninstaller_SkipUac_Administrator -> Keine Datei <==== ACHTUNG
Task: {FA2CF3BA-B827-49C2-9230-2EAA9966A5C1} - \Microsoft\Windows\WindowsBackup\Windows Backup Monitor -> Keine Datei <==== ACHTUNG
Task: {FD62C617-2A16-459A-9C32-195C31D1857C} - \{F3EFACD3-1DF7-4311-9CC3-285D8A6D7632} -> Keine Datei <==== ACHTUNG
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Schritt 2
MBAM wie bereits beschrieben nochmal ausführen und die Logdatei posten.






Schritt 3

• Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
• FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche? Beschreibe mir die Probleme so gut wie möglich.







Bitte poste mit deiner nächsten Antwort

• die Logdatei des FRST-Fix,
• die Logdatei von MBAM,
• die beiden neuen Logdateien von FRST (FRST.txt und Addition.txt),
• die Beantwortung der gestellten Fragen.

Hallo Matthias,

super, vielen Dank für die gut strukturierte Hilfe!

Ich sprach von den Errors im Addition-File - für mich sind das ja böhmische Dörfer aber Error und Systemfehler verstehe ich und dies habe ich da schon recht häufig gelesen...

Der PC läuft schon deutlich besser aber der Lüfter ist ständig auf Touren und gestern (vor der letzten Aktion) war wieder der Bildschirm schwarz und der Rechner fuhr ´runter. Es hat auch ewig gedauert, z.B. in den Code-Boxen zu scrollen... der Rechner war völlig ausgelastet aber Programme liefen nicht.

Wenn ich z.B. Bluestacks laufen lasse, kann der Seitenaufbau der Startseite vom Opera schon mal ein knappes Minütchen in Anspruch nehmen. Auch Fotos ansehen bzw. parallel öffnen oder bearbeiten geht schon sehr langsam...

Wenn ich im Netz auf bestimmten Seiten bin , öffnen sich auch mal ganz schnell ganz viele Browserfenster.... da ist der Rechner schon mal am japsen...


Das Fixlog

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von USER (03-01-2017 22:05:54) Run:1
Gestartet von C:\Users\USER\Desktop
Geladene Profile: USER (Verfügbare Profile: USER & DefaultAppPool)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {096ECB4C-7DD1-41E6-9655-245040D1FF76} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0DA289FD-AB20-42D3-A442-2BD37DA95B1A} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {10A750F7-52B0-4932-AE0A-4C61EEECC3AE} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater -> Keine Datei <==== ACHTUNG
Task: {10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {11A105F6-6681-4DA1-9047-6A575C035221} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {11D2B752-FF72-44B9-9D67-B20F6CCBCB36} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {13D0216E-2B35-4415-A449-7DD2C847185D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {15B831EC-47E3-4AAA-B20D-0E60C432CE00} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report -> Keine Datei <==== ACHTUNG
Task: {19BEACD4-BA4B-479D-B622-658C3E9679A2} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {1BC8758E-FC55-46EC-81E7-8186D0BD78E2} - \{4A6854D6-96F4-415F-9393-BE04B423803C} -> Keine Datei <==== ACHTUNG
Task: {1F4C282D-A54C-48CC-A141-CF202D4ECEA9} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2A82F7A0-C35E-4FED-8743-B84E095B89C3} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {317B4898-F7B9-4291-B09E-0D03F17936F1} - \Driver Booster SkipUAC (USER) -> Keine Datei <==== ACHTUNG
Task: {32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {3862F23E-94D3-416A-BCC6-427D8866068E} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} - \Adobe Flash Player Updater -> Keine Datei <==== ACHTUNG
Task: {459EB60F-0D49-40D1-BA36-A762AD4B32C2} - \HP Photo Creations Communicator -> Keine Datei <==== ACHTUNG
Task: {4742AA9C-ECD6-4E48-998D-10C9515B60C2} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> Keine Datei <==== ACHTUNG
Task: {5010A17C-2F30-4227-8148-13AB9B2E2265} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {52F5D290-B2CC-4648-9670-488DB33FD3F6} - \Hewlett-Packard\HP Support Assistant\PC Health Analysis -> Keine Datei <==== ACHTUNG
Task: {548DBE10-99B3-4626-AE20-D4BEE2ED2C92} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {5598B730-6513-420C-9F91-C49110C50375} - \RecoveryCDWin7 -> Keine Datei <==== ACHTUNG
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - \Microsoft\Windows\Tcpip\IpAddressConflict1 -> Keine Datei <==== ACHTUNG
Task: {08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {096ECB4C-7DD1-41E6-9655-245040D1FF76} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - \Microsoft\Windows\Tcpip\IpAddressConflict2 -> Keine Datei <==== ACHTUNG
Task: {0DA289FD-AB20-42D3-A442-2BD37DA95B1A} - \Microsoft\Windows\Media Center\UpdateRecordPath -> Keine Datei <==== ACHTUNG
Task: {10A750F7-52B0-4932-AE0A-4C61EEECC3AE} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater -> Keine Datei <==== ACHTUNG
Task: {10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} - \Microsoft\Windows\Media Center\ActivateWindowsSearch -> Keine Datei <==== ACHTUNG
Task: {11A105F6-6681-4DA1-9047-6A575C035221} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {11D2B752-FF72-44B9-9D67-B20F6CCBCB36} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {13D0216E-2B35-4415-A449-7DD2C847185D} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {15B831EC-47E3-4AAA-B20D-0E60C432CE00} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report -> Keine Datei <==== ACHTUNG
Task: {19BEACD4-BA4B-479D-B622-658C3E9679A2} - \Microsoft\Windows\Media Center\mcupdate -> Keine Datei <==== ACHTUNG
Task: {1BC8758E-FC55-46EC-81E7-8186D0BD78E2} - \{4A6854D6-96F4-415F-9393-BE04B423803C} -> Keine Datei <==== ACHTUNG
Task: {1F4C282D-A54C-48CC-A141-CF202D4ECEA9} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2A82F7A0-C35E-4FED-8743-B84E095B89C3} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} - \Microsoft\Windows\Media Center\RecordingRestart -> Keine Datei <==== ACHTUNG
Task: {317B4898-F7B9-4291-B09E-0D03F17936F1} - \Driver Booster SkipUAC (USER) -> Keine Datei <==== ACHTUNG
Task: {32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} - \Microsoft\Windows\MobilePC\HotStart -> Keine Datei <==== ACHTUNG
Task: {3862F23E-94D3-416A-BCC6-427D8866068E} - \Microsoft\Windows\Media Center\OCURActivate -> Keine Datei <==== ACHTUNG
Task: {3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} - \Adobe Flash Player Updater -> Keine Datei <==== ACHTUNG
Task: {459EB60F-0D49-40D1-BA36-A762AD4B32C2} - \HP Photo Creations Communicator -> Keine Datei <==== ACHTUNG
Task: {4742AA9C-ECD6-4E48-998D-10C9515B60C2} - \Microsoft\Windows\Media Center\ehDRMInit -> Keine Datei <==== ACHTUNG
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - \Microsoft\Windows\Shell\WindowsParentalControlsMigration -> Keine Datei <==== ACHTUNG
Task: {5010A17C-2F30-4227-8148-13AB9B2E2265} - \Microsoft\Windows\Media Center\ReindexSearchRoot -> Keine Datei <==== ACHTUNG
Task: {510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} - \Microsoft\Windows\SideShow\SystemDataProviders -> Keine Datei <==== ACHTUNG
Task: {52F5D290-B2CC-4648-9670-488DB33FD3F6} - \Hewlett-Packard\HP Support Assistant\PC Health Analysis -> Keine Datei <==== ACHTUNG
Task: {548DBE10-99B3-4626-AE20-D4BEE2ED2C92} - \Microsoft\Windows\Media Center\OCURDiscovery -> Keine Datei <==== ACHTUNG
Task: {5598B730-6513-420C-9F91-C49110C50375} - \RecoveryCDWin7 -> Keine Datei <==== ACHTUNG
Task: {5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> Keine Datei <==== ACHTUNG
Task: {5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - \Microsoft\Windows\Shell\WindowsParentalControls -> Keine Datei <==== ACHTUNG
Task: {611C823C-437B-46E7-9683-5312DFFCFD7B} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Keine Datei <==== ACHTUNG
Task: {6CD3E6C9-F872-4BE6-B074-3D870F8066DA} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {7785FF1D-78ED-4230-982E-BB815DFAEB95} - \{C404F7AD-46D6-4584-871A-531AEB1D27EE} -> Keine Datei <==== ACHTUNG
Task: {7B82FBC3-A3B0-4130-94D4-453C700FA920} - \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task -> Keine Datei <==== ACHTUNG
Task: {848DCC36-520C-4946-BF68-C7EFFEFA2F84} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Keine Datei <==== ACHTUNG
Task: {97F77198-30F1-4C3B-B9C3-26DA54877724} - \Microsoft\Windows\Media Center\ConfigureInternetTimeService -> Keine Datei <==== ACHTUNG
Task: {99559E80-AA87-4973-9998-FDDED6F3D03E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {9AF7DD86-B06C-435D-A4CE-1047879E3614} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {9F5AB1AB-2282-49B2-A70C-01C07170C8D9} - \Microsoft\Windows\Media Center\PvrScheduleTask -> Keine Datei <==== ACHTUNG
Task: {A0407F7E-D012-4725-8606-2979744AE773} - \Microsoft\Windows\SideShow\SessionAgent -> Keine Datei <==== ACHTUNG
Task: {A0C9AF1E-B8FE-47B2-9489-A4994B3E2E1D} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A364E297-00AD-490D-900E-22AC34598C71} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Keine Datei <==== ACHTUNG
Task: {ACA35D83-5119-4404-A232-ACD86B28B0C8} - \Microsoft\Windows\Media Center\StartRecording -> Keine Datei <==== ACHTUNG
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - \Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor -> Keine Datei <==== ACHTUNG
Task: {B683D382-50C7-4F8E-B0FE-A6059B9BF1C9} - \Microsoft\Windows\Media Center\PvrRecoveryTask -> Keine Datei <==== ACHTUNG
Task: {BF05AB7D-FB19-435A-BB99-E96410238E97} - \Microsoft\Windows\Media Center\RegisterSearch -> Keine Datei <==== ACHTUNG
Task: {BFD508E7-B44D-4AE4-8971-67DD7F67AE03} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {C6DC769C-38C4-4AE3-B025-387121D58014} - \Microsoft\Windows\Media Center\DispatchRecoveryTasks -> Keine Datei <==== ACHTUNG
Task: {CCF009D2-936C-45F9-83FD-216DD46E1137} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {D273D400-8341-4720-8414-D0EF4FAA2067} - \Microsoft\Windows\Media Center\PBDADiscovery -> Keine Datei <==== ACHTUNG
Task: {D30CDE83-800C-466D-B43B-EFD5622B1C59} - \WPD\SqmUpload_S-1-5-21-1773077131-3649358975-729568603-1000 -> Keine Datei <==== ACHTUNG
Task: {D50E35A6-4804-44D9-B53E-ECA982B38334} - \Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources -> Keine Datei <==== ACHTUNG
Task: {D6256F7C-0F43-49A7-A399-29881F396DAA} - \Microsoft\Windows\SideShow\GadgetManager -> Keine Datei <==== ACHTUNG
Task: {D807A277-25CB-4F16-B66E-7448CDFEB967} - \HPCustParticipation HP Officejet 6500 E710a-f -> Keine Datei <==== ACHTUNG
Task: {D821DC63-B2A8-4090-9C3B-786EA756C292} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {DDDFEE16-D182-48C7-A214-892E4A1D52DF} - \Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval -> Keine Datei <==== ACHTUNG
Task: {DED18EFE-380C-45D7-AA70-487B28ACB520} - \Microsoft\Windows\Media Center\mcupdate_scheduled -> Keine Datei <==== ACHTUNG
Task: {E0BA20C7-1C8E-405B-8605-7489D6CB51A4} - \Microsoft\Windows\Media Center\InstallPlayReady -> Keine Datei <==== ACHTUNG
Task: {E2258B6B-E21F-4F4A-ABC7-59C06881CFFE} - \Microsoft\Windows\SideShow\AutoWake -> Keine Datei <==== ACHTUNG
Task: {E524929C-9565-4B9E-ABCF-68B48BF20243} - \Microsoft\Windows\Media Center\PBDADiscoveryW1 -> Keine Datei <==== ACHTUNG
Task: {E5D57917-62E6-46F4-8C1B-CEC09C7CCFCD} - \SidebarExecute -> Keine Datei <==== ACHTUNG
Task: {E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} - \Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler -> Keine Datei <==== ACHTUNG
Task: {E6A8800C-3A44-45AD-A423-6D12B79447ED} - \Microsoft\Windows\Media Center\PeriodicScanRetry -> Keine Datei <==== ACHTUNG
Task: {EA3F661E-B31C-44A9-B40C-E3D5D56149D4} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Keine Datei <==== ACHTUNG
Task: {EAC61B4A-8F63-4127-AB57-569647CC147C} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Keine Datei <==== ACHTUNG
Task: {EB3147D2-4E97-4986-83D3-5DBC9E5D765D} - \Microsoft\Windows\WindowsBackup\AutomaticBackup -> Keine Datei <==== ACHTUNG
Task: {EFFD36A7-F88A-446C-8ECA-8712654F394F} - \Microsoft\Windows\Media Center\PBDADiscoveryW2 -> Keine Datei <==== ACHTUNG
Task: {F86D9E76-5D59-46A2-92AB-5981F76A1FCE} - \Uninstaller_SkipUac_Administrator -> Keine Datei <==== ACHTUNG
Task: {FA2CF3BA-B827-49C2-9230-2EAA9966A5C1} - \Microsoft\Windows\WindowsBackup\Windows Backup Monitor -> Keine Datei <==== ACHTUNG
Task: {FD62C617-2A16-459A-9C32-195C31D1857C} - \{F3EFACD3-1DF7-4311-9CC3-285D8A6D7632} -> Keine Datei <==== ACHTUNG
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************

Prozess erfolgreich geschlossen.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\EnableShellExecuteHooks => Wert erfolgreich entfernt
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{088482FA-65B8-4E17-9ABF-1DCD48E8D373} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{088482FA-65B8-4E17-9ABF-1DCD48E8D373} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Tcpip\IpAddressConflict1 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{096ECB4C-7DD1-41E6-9655-245040D1FF76} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{096ECB4C-7DD1-41E6-9655-245040D1FF76} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{09F06BFE-A3C8-40E3-846A-6E6F4000C238} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{09F06BFE-A3C8-40E3-846A-6E6F4000C238} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Tcpip\IpAddressConflict2 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0DA289FD-AB20-42D3-A442-2BD37DA95B1A} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0DA289FD-AB20-42D3-A442-2BD37DA95B1A} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\UpdateRecordPath => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10A750F7-52B0-4932-AE0A-4C61EEECC3AE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10A750F7-52B0-4932-AE0A-4C61EEECC3AE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{11A105F6-6681-4DA1-9047-6A575C035221} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11A105F6-6681-4DA1-9047-6A575C035221} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{11D2B752-FF72-44B9-9D67-B20F6CCBCB36} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11D2B752-FF72-44B9-9D67-B20F6CCBCB36} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{13D0216E-2B35-4415-A449-7DD2C847185D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{13D0216E-2B35-4415-A449-7DD2C847185D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{15B831EC-47E3-4AAA-B20D-0E60C432CE00} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{15B831EC-47E3-4AAA-B20D-0E60C432CE00} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{19BEACD4-BA4B-479D-B622-658C3E9679A2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{19BEACD4-BA4B-479D-B622-658C3E9679A2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1BC8758E-FC55-46EC-81E7-8186D0BD78E2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BC8758E-FC55-46EC-81E7-8186D0BD78E2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4A6854D6-96F4-415F-9393-BE04B423803C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1F4C282D-A54C-48CC-A141-CF202D4ECEA9} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F4C282D-A54C-48CC-A141-CF202D4ECEA9} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2A82F7A0-C35E-4FED-8743-B84E095B89C3} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2A82F7A0-C35E-4FED-8743-B84E095B89C3} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RecordingRestart => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{317B4898-F7B9-4291-B09E-0D03F17936F1} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{317B4898-F7B9-4291-B09E-0D03F17936F1} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (USER) => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\MobilePC\HotStart => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3862F23E-94D3-416A-BCC6-427D8866068E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3862F23E-94D3-416A-BCC6-427D8866068E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURActivate => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{459EB60F-0D49-40D1-BA36-A762AD4B32C2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{459EB60F-0D49-40D1-BA36-A762AD4B32C2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HP Photo Creations Communicator => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4742AA9C-ECD6-4E48-998D-10C9515B60C2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4742AA9C-ECD6-4E48-998D-10C9515B60C2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{486D715E-6AA2-44CF-BC48-B6990CBB53C6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{486D715E-6AA2-44CF-BC48-B6990CBB53C6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Shell\WindowsParentalControlsMigration => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5010A17C-2F30-4227-8148-13AB9B2E2265} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5010A17C-2F30-4227-8148-13AB9B2E2265} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ReindexSearchRoot => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SideShow\SystemDataProviders => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52F5D290-B2CC-4648-9670-488DB33FD3F6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52F5D290-B2CC-4648-9670-488DB33FD3F6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\PC Health Analysis => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{548DBE10-99B3-4626-AE20-D4BEE2ED2C92} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{548DBE10-99B3-4626-AE20-D4BEE2ED2C92} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURDiscovery => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5598B730-6513-420C-9F91-C49110C50375} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5598B730-6513-420C-9F91-C49110C50375} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RecoveryCDWin7 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{088482FA-65B8-4E17-9ABF-1DCD48E8D373} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Tcpip\IpAddressConflict1 => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08B52C9E-C03F-4A7E-B7B4-2B83E0C7D138} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{096ECB4C-7DD1-41E6-9655-245040D1FF76} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{09F06BFE-A3C8-40E3-846A-6E6F4000C238} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Tcpip\IpAddressConflict2 => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0DA289FD-AB20-42D3-A442-2BD37DA95B1A} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\UpdateRecordPath => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10A750F7-52B0-4932-AE0A-4C61EEECC3AE} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{10BF4D03-F51B-47F9-99E3-CCFA1B5EF2E3} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ActivateWindowsSearch => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11A105F6-6681-4DA1-9047-6A575C035221} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11D2B752-FF72-44B9-9D67-B20F6CCBCB36} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{13D0216E-2B35-4415-A449-7DD2C847185D} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{15B831EC-47E3-4AAA-B20D-0E60C432CE00} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{19BEACD4-BA4B-479D-B622-658C3E9679A2} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BC8758E-FC55-46EC-81E7-8186D0BD78E2} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4A6854D6-96F4-415F-9393-BE04B423803C} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1F4C282D-A54C-48CC-A141-CF202D4ECEA9} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2A82F7A0-C35E-4FED-8743-B84E095B89C3} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CB03E6E-BFCF-410B-9EB5-FC4299EA108A} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RecordingRestart => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{317B4898-F7B9-4291-B09E-0D03F17936F1} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (USER) => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{32A7701B-783C-4D1F-9BD4-510E1C0CFEBD} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\MobilePC\HotStart => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3862F23E-94D3-416A-BCC6-427D8866068E} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURActivate => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3CF6554B-AE1C-440A-8BD9-8BC13DB2AF2C} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{459EB60F-0D49-40D1-BA36-A762AD4B32C2} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HP Photo Creations Communicator => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4742AA9C-ECD6-4E48-998D-10C9515B60C2} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ehDRMInit => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{486D715E-6AA2-44CF-BC48-B6990CBB53C6} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Shell\WindowsParentalControlsMigration => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5010A17C-2F30-4227-8148-13AB9B2E2265} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ReindexSearchRoot => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{510E0ECD-2CC1-46FF-8DD0-12DF8FC0E697} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SideShow\SystemDataProviders => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52F5D290-B2CC-4648-9670-488DB33FD3F6} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\PC Health Analysis => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{548DBE10-99B3-4626-AE20-D4BEE2ED2C92} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\OCURDiscovery => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5598B730-6513-420C-9F91-C49110C50375} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RecoveryCDWin7 => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5B42DD9C-5A26-4F27-BB95-34603F0997E5} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B42DD9C-5A26-4F27-BB95-34603F0997E5} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Shell\WindowsParentalControls => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B26ACBE-BC02-41FB-BCD1-2BA4E0F7D2E3} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5B42DD9C-5A26-4F27-BB95-34603F0997E5} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Shell\WindowsParentalControls => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{611C823C-437B-46E7-9683-5312DFFCFD7B} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{611C823C-437B-46E7-9683-5312DFFCFD7B} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Policy Install => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6CD3E6C9-F872-4BE6-B074-3D870F8066DA} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CD3E6C9-F872-4BE6-B074-3D870F8066DA} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7785FF1D-78ED-4230-982E-BB815DFAEB95} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7785FF1D-78ED-4230-982E-BB815DFAEB95} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C404F7AD-46D6-4584-871A-531AEB1D27EE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7B82FBC3-A3B0-4130-94D4-453C700FA920} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7B82FBC3-A3B0-4130-94D4-453C700FA920} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{848DCC36-520C-4946-BF68-C7EFFEFA2F84} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{848DCC36-520C-4946-BF68-C7EFFEFA2F84} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{97F77198-30F1-4C3B-B9C3-26DA54877724} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97F77198-30F1-4C3B-B9C3-26DA54877724} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\ConfigureInternetTimeService => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{99559E80-AA87-4973-9998-FDDED6F3D03E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99559E80-AA87-4973-9998-FDDED6F3D03E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9AF7DD86-B06C-435D-A4CE-1047879E3614} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AF7DD86-B06C-435D-A4CE-1047879E3614} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9F5AB1AB-2282-49B2-A70C-01C07170C8D9} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F5AB1AB-2282-49B2-A70C-01C07170C8D9} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PvrScheduleTask => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A0407F7E-D012-4725-8606-2979744AE773} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0407F7E-D012-4725-8606-2979744AE773} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SideShow\SessionAgent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A0C9AF1E-B8FE-47B2-9489-A4994B3E2E1D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0C9AF1E-B8FE-47B2-9489-A4994B3E2E1D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A364E297-00AD-490D-900E-22AC34598C71} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A364E297-00AD-490D-900E-22AC34598C71} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Maintenance Install => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ACA35D83-5119-4404-A232-ACD86B28B0C8} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ACA35D83-5119-4404-A232-ACD86B28B0C8} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\StartRecording => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B0CBAB43-44FC-469B-A4CE-87426761FDCE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B0CBAB43-44FC-469B-A4CE-87426761FDCE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B683D382-50C7-4F8E-B0FE-A6059B9BF1C9} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B683D382-50C7-4F8E-B0FE-A6059B9BF1C9} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PvrRecoveryTask => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF05AB7D-FB19-435A-BB99-E96410238E97} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF05AB7D-FB19-435A-BB99-E96410238E97} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\RegisterSearch => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BFD508E7-B44D-4AE4-8971-67DD7F67AE03} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BFD508E7-B44D-4AE4-8971-67DD7F67AE03} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C6DC769C-38C4-4AE3-B025-387121D58014} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6DC769C-38C4-4AE3-B025-387121D58014} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\DispatchRecoveryTasks => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCF009D2-936C-45F9-83FD-216DD46E1137} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCF009D2-936C-45F9-83FD-216DD46E1137} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D273D400-8341-4720-8414-D0EF4FAA2067} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D273D400-8341-4720-8414-D0EF4FAA2067} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscovery => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D30CDE83-800C-466D-B43B-EFD5622B1C59} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D30CDE83-800C-466D-B43B-EFD5622B1C59} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1773077131-3649358975-729568603-1000 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D50E35A6-4804-44D9-B53E-ECA982B38334} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D50E35A6-4804-44D9-B53E-ECA982B38334} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D6256F7C-0F43-49A7-A399-29881F396DAA} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D6256F7C-0F43-49A7-A399-29881F396DAA} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SideShow\GadgetManager => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D807A277-25CB-4F16-B66E-7448CDFEB967} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D807A277-25CB-4F16-B66E-7448CDFEB967} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HPCustParticipation HP Officejet 6500 E710a-f => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D821DC63-B2A8-4090-9C3B-786EA756C292} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D821DC63-B2A8-4090-9C3B-786EA756C292} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DDDFEE16-D182-48C7-A214-892E4A1D52DF} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDDFEE16-D182-48C7-A214-892E4A1D52DF} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DED18EFE-380C-45D7-AA70-487B28ACB520} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DED18EFE-380C-45D7-AA70-487B28ACB520} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\mcupdate_scheduled => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E0BA20C7-1C8E-405B-8605-7489D6CB51A4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E0BA20C7-1C8E-405B-8605-7489D6CB51A4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\InstallPlayReady => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E2258B6B-E21F-4F4A-ABC7-59C06881CFFE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2258B6B-E21F-4F4A-ABC7-59C06881CFFE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\SideShow\AutoWake => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E524929C-9565-4B9E-ABCF-68B48BF20243} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E524929C-9565-4B9E-ABCF-68B48BF20243} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW1 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E5D57917-62E6-46F4-8C1B-CEC09C7CCFCD} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5D57917-62E6-46F4-8C1B-CEC09C7CCFCD} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SidebarExecute => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6010D43-6AE7-4B59-8E67-EC78FD8E8E96} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E6A8800C-3A44-45AD-A423-6D12B79447ED} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E6A8800C-3A44-45AD-A423-6D12B79447ED} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PeriodicScanRetry => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EA3F661E-B31C-44A9-B40C-E3D5D56149D4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA3F661E-B31C-44A9-B40C-E3D5D56149D4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EAC61B4A-8F63-4127-AB57-569647CC147C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EAC61B4A-8F63-4127-AB57-569647CC147C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EB3147D2-4E97-4986-83D3-5DBC9E5D765D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB3147D2-4E97-4986-83D3-5DBC9E5D765D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WindowsBackup\AutomaticBackup => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EFFD36A7-F88A-446C-8ECA-8712654F394F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EFFD36A7-F88A-446C-8ECA-8712654F394F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Media Center\PBDADiscoveryW2 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F86D9E76-5D59-46A2-92AB-5981F76A1FCE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F86D9E76-5D59-46A2-92AB-5981F76A1FCE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_Administrator => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FA2CF3BA-B827-49C2-9230-2EAA9966A5C1} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FA2CF3BA-B827-49C2-9230-2EAA9966A5C1} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FD62C617-2A16-459A-9C32-195C31D1857C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FD62C617-2A16-459A-9C32-195C31D1857C} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F3EFACD3-1DF7-4311-9CC3-285D8A6D7632} => Schlüssel erfolgreich entfernt

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


========= ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========= Ende von CMD: =========


========= netsh winsock reset =========


Der Winsock-Katalog wurde zur�ckgesetzt.
Sie m�ssen den Computer neu starten, um den Vorgang abzuschlieáen.


========= Ende von CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 2252672 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 20122777 B
Java, Flash, Steam htmlcache => 6721304 B
Windows/system/drivers => 89398 B
Edge => 382 B
Chrome => 662528 B
Firefox => 48532166 B
Opera => 137920169 B

Temp, IE cache, history, cookies, recent:
Default => 30522 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 4082 B
NetworkService => 0 B
USER => 103954810 B
DefaultAppPool => 22842 B

RecycleBin => 69782215 B
EmptyTemp: => 372 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 22:06:36 ====
         

mbam

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 03.01.17
Scan-Zeit: 22:13
Protokolldatei: mbam1.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.5.1299
Komponentenversion: 1.0.43
Version des Aktualisierungspakets: 1.0.917
Lizenz: Abgelaufen

-Systemdaten-
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: user-HP\USER

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 531855
Abgelaufene Zeit: 14 Min., 26 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
         

FRST

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
durchgeführt von USER (Administrator) auf user-HP (03-01-2017 23:19:48)
Gestartet von C:\Users\USER\Desktop
Geladene Profile: USER (Verfügbare Profile: USER & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Sony) C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8849152 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3936936 2015-12-21] (Synaptics Incorporated)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Memeo Instant Backup] => C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [Amazon Music] => C:\Users\USER\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-12-15] ()
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2088832 2016-12-22] (Sony)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2010-07-20] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [01Mediencenter_InSync] -> {77BC4082-DB5F-439A-8DC8-F9E24A63B0DE} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [02Mediencenter_ToSync] -> {528EE335-5034-4EFC-834E-63E5F02D2BC2} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [03Mediencenter_Failed] -> {6066ADF0-9EB0-43E5-ADB6-990F5A3B979C} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1491a579-74bf-46d2-a369-35fdd43a436c}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {D73A43AE-4635-44F1-826A-90D835547843} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {F0CDD231-0703-4978-AC1D-37B3315BC4ED} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {51D8F101-A2FE-4F9C-9550-4F67650AF170} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {62E05E07-B0D5-4721-9A89-EE3A1E4DD450} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2010-04-15] (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
DPF: HKLM {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1262.cab

FireFox:
========
FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default [2017-01-03]
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\2i4mdlek.default -> SuchMaschine
FF Homepage: Mozilla\Firefox\Profiles\2i4mdlek.default -> chrome://unitedtb/content/newtab/startpage.xhtml
FF Extension: (GMX MailCheck) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\browser-mailcheck@gmx.net [2016-03-01]
FF Extension: (Mailvelope) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-03-01]
FF SearchPlugin: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\searchplugins\yahoo-avast.xml [2014-06-27]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-10] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-21] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon [2016-12-27]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-20] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1221171.dll [2015-10-19] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll [2010-09-01] (Oberon-Media )
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2011-02-21] (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll [2012-08-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-06-28] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-10-24] (Apple Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11908
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?q={searchTerms}&li=ff
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default [2017-01-03]
CHR Extension: (Google Präsentationen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-07]
CHR Extension: (Google Docs) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-07]
CHR Extension: (Google Drive) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-17]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-17]
CHR Extension: (Norton Security Toolbar) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-11-20]
CHR Extension: (Google-Suche) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-19]
CHR Extension: (Google Tabellen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-07]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfoabcdjalmeenbjjngidappmppchblc [2016-11-04]
CHR Extension: (Google Docs Offline) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-17]
CHR Extension: (Norton Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmobhkkblcgdifigjglcjneplefbkmh [2016-11-04]
CHR Extension: (Norton Identity Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-11-20]
CHR Extension: (HP Network Check Launcher) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo [2016-11-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-17]
CHR Extension: (Google Mail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-19]
CHR Extension: (Chrome Media Router) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-04]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Foxtrick (Beta)) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\gpfggkkkmpaalfemiafhfobkfnadeegj [2016-11-08]
OPR Extension: (Deaktivierungs-Add-on von Google Analytics) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\hmffjpdmbgflojiohllanjaggdenggdo [2015-10-15]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2016-10-17]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
S3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
S3 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-05-19] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-11-29] (Malwarebytes)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe [289080 2016-11-12] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-11-24] (Electronic Arts)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [310016 2016-04-12] (Realtek Semiconductor)
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S3 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2015-12-21] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7183632 2016-07-18] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976 2015-06-04] (Advanced Micro Devices, Inc.)
S3 andnetadb; C:\WINDOWS\System32\Drivers\lgandnetadb.sys [31744 2012-07-03] (Google Inc)
S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [111120 2016-05-17] (Advanced Micro Devices)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\BASHDefs\20161220.001\BHDrvx64.sys [1874136 2016-12-20] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
R2 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
R1 ccSet_N360; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\ccSetx64.sys [174328 2016-11-12] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [497368 2016-09-22] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156888 2016-12-27] (Symantec Corporation)
R0 gfibto; C:\WINDOWS\System32\drivers\gfibto.sys [14456 2012-12-03] (GFI Software)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [30424 2016-12-30] (Sony Mobile Communications)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-01] (REALiX(tm))
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\IPSDefs\20161230.001\IDSvia64.sys [1038032 2016-12-26] (Symantec Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [250816 2017-01-03] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-23] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [936192 2016-05-17] (Realtek                                            )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [413912 2016-04-12] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-12-21] (Synaptics Incorporated)
R3 SRTSP; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSP64.SYS [784624 2016-11-12] (Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSPX64.SYS [49400 2016-11-12] (Symantec Corporation)
R0 SymEFASI; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SYMEFASI64.SYS [1628888 2016-11-12] (Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SymELAM.sys [24192 2016-11-12] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [100592 2016-12-27] (Symantec Corporation)
R1 SymIRON; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\Ironx64.SYS [289520 2016-11-12] (Symantec Corporation)
R1 SymNetS; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SYMNETS.SYS [567512 2016-11-12] (Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\EX64.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-03 23:19 - 2017-01-03 23:21 - 00029462 _____ C:\Users\USER\Desktop\FRST.txt
2017-01-03 23:17 - 2017-01-03 23:17 - 00001199 _____ C:\Users\USER\Desktop\mbam.txt
2017-01-03 22:05 - 2017-01-03 22:06 - 00056574 _____ C:\Users\USER\Desktop\Fixlog.txt
2017-01-03 21:59 - 2017-01-03 21:59 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-03 20:10 - 2017-01-03 20:10 - 00024683 _____ C:\Users\USER\Desktop\Rechnung_13245477.pdf
2017-01-03 14:15 - 2017-01-03 14:15 - 02773681 _____ C:\Users\USER\Downloads\002014030.pdf
2017-01-02 21:48 - 2017-01-02 21:48 - 00000000 ____D C:\Users\USER\Desktop\FRST-OlderVersion
2017-01-02 18:29 - 2017-01-02 18:31 - 00331892 _____ C:\WINDOWS\Minidump\010217-31125-01.dmp
2017-01-02 18:29 - 2017-01-02 18:29 - 608924197 _____ C:\WINDOWS\MEMORY.DMP
2017-01-02 18:29 - 2017-01-02 18:29 - 00000000 ____D C:\WINDOWS\Minidump
2017-01-02 17:34 - 2017-01-02 17:34 - 00000016 _____ C:\InjectIntoProcess crash
2017-01-01 21:41 - 2017-01-02 20:43 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-01 21:41 - 2017-01-02 20:43 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-01 21:40 - 2017-01-03 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-01 21:40 - 2017-01-01 21:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-01 21:40 - 2016-12-14 12:55 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-01-01 21:35 - 2017-01-02 20:48 - 01663040 _____ (Malwarebytes) C:\Users\USER\Desktop\JRT.exe
2017-01-01 21:34 - 2017-01-01 21:36 - 54199488 _____ (Malwarebytes ) C:\Users\USER\Desktop\mb3-setup-consumer-3.0.5.1299.exe
2017-01-01 21:25 - 2017-01-01 21:26 - 00566128 _____ (Malwarebytes) C:\Users\USER\Desktop\mbam-clean-2.3.0.1001.exe
2016-12-30 23:22 - 2016-12-30 23:22 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2016-12-30 23:21 - 2016-12-30 23:21 - 00811664 _____ C:\Users\USER\Downloads\mobiletrans_setup_full1296.exe
2016-12-30 22:45 - 2017-01-02 23:20 - 00002234 _____ C:\Users\Public\Desktop\Xperia Companion.lnk
2016-12-30 22:45 - 2016-12-30 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-12-30 22:45 - 2016-12-30 22:45 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-30 21:10 - 2017-01-02 23:17 - 49290112 _____ (Sony) C:\Users\USER\AppData\Local\pcc.exe
2016-12-30 12:38 - 2016-12-30 12:38 - 00030424 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggsomc.sys
2016-12-30 12:38 - 2016-12-30 12:38 - 00016088 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggflt.sys
2016-12-30 12:37 - 2016-12-30 22:39 - 00000000 ____D C:\ProgramData\Sony Mobile
2016-12-30 12:37 - 2016-12-30 22:39 - 00000000 ____D C:\Program Files (x86)\Sony Mobile
2016-12-28 20:02 - 2016-12-28 20:02 - 00036250 _____ C:\Users\USER\Desktop\Rechnung_201312040496.pdf
2016-12-28 09:13 - 2016-12-28 09:13 - 00001204 _____ C:\20161228.txt
2016-12-27 23:02 - 2017-01-03 22:08 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-27 23:01 - 2017-01-02 21:48 - 02418176 _____ (Farbar) C:\Users\USER\Desktop\FRST64.exe
2016-12-27 23:00 - 2016-12-27 23:01 - 22851472 ____N (Malwarebytes ) C:\Users\USER\Desktop\mbam-setup-2.2.1.1043.exe
2016-12-27 21:15 - 2017-01-03 23:06 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton 360
2016-12-27 21:12 - 2016-12-27 21:12 - 00100592 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2016-12-27 21:12 - 2016-12-27 21:12 - 00008319 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2016-12-27 21:12 - 2016-12-27 21:12 - 00002386 _____ C:\Users\Public\Desktop\Norton 360.lnk
2016-12-27 21:12 - 2016-12-27 21:12 - 00000854 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.INF
2016-12-27 21:11 - 2016-12-27 21:12 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2016-12-27 21:11 - 2016-12-27 21:11 - 00000000 ____D C:\Program Files (x86)\Norton 360
2016-12-27 21:10 - 2016-12-27 21:10 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-12-27 20:23 - 2016-12-27 21:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Remove and Reinstall
2016-12-27 20:20 - 2016-12-27 20:20 - 00000000 ____D C:\ProgramData\PCSettings
2016-12-27 20:18 - 2016-12-27 20:18 - 15359160 ____N (Symantec Corporation) C:\Users\USER\Desktop\NRnR.exe
2016-12-27 18:13 - 2016-12-27 18:13 - 00002088 _____ C:\Users\USER\Desktop\message-rfc822-attachment
2016-12-22 22:22 - 2016-12-22 22:22 - 04590795 _____ C:\Users\USER\Documents\Christmas letter 2016 .pages.pdf
2016-12-21 23:35 - 2016-12-21 23:35 - 00032507 _____ C:\Users\USER\Downloads\Einstellungszusage Wachholtz,Elger, .docx
2016-12-20 00:29 - 2016-12-20 00:29 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\7C003C78.sys
2016-12-19 22:21 - 2016-12-19 22:22 - 03977168 _____ C:\Users\USER\Downloads\AdwCleaner_6.041.exe
2016-12-19 22:13 - 2016-12-19 22:13 - 00002688 _____ C:\Users\USER\Documents\cc_20161219_221351.reg
2016-12-19 22:06 - 2016-12-19 22:08 - 08803648 _____ (Piriform Ltd) C:\Users\USER\Downloads\ccsetup525.exe
2016-12-19 21:16 - 2016-12-19 21:16 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-18 09:08 - 2016-12-18 09:08 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-18 09:08 - 2016-12-18 09:08 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 20:39 - 2016-12-17 20:39 - 04701691 _____ C:\Users\USER\Desktop\pepparkakshus-liten-stuga.pdf
2016-12-17 00:23 - 2016-12-17 00:23 - 00100080 ____H C:\WINDOWS\SysWOW64\mlfcache.dat
2016-12-17 00:22 - 2016-12-17 00:22 - 00001042 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00001030 _____ C:\Users\Public\Desktop\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00000000 ____D C:\Program Files (x86)\Fotobuchexpress24
2016-12-17 00:20 - 2016-12-17 00:20 - 00000000 _____ C:\Users\USER\Desktop\Fotobuchexpress24_4.0.exe
2016-12-16 15:42 - 2016-12-21 15:43 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 42.lnk
2016-12-13 21:34 - 2016-12-13 21:34 - 00645120 _____ C:\Users\USER\Documents\EhrenUrkunde.doc
2016-12-12 22:02 - 2016-12-12 22:02 - 00334939 _____ C:\Users\USER\Desktop\RE1_1212-20122016_fahrplan.pdf
2016-12-12 12:06 - 2016-12-12 12:06 - 00254432 _____ C:\Users\USER\Downloads\streetboccia.pdf
2016-12-11 23:33 - 2016-12-11 23:33 - 00076776 _____ C:\Users\USER\Documents\cc_20161211_233316.reg
2016-12-11 22:56 - 2016-12-11 22:56 - 02409674 _____ C:\Users\USER\Desktop\sony_xperia_m4_aqua.pdf
2016-12-11 22:06 - 2016-12-11 22:06 - 00012978 _____ C:\Users\USER\Downloads\NAS-SERVER_2016-12-10_0221.rom
2016-12-11 20:26 - 2016-12-11 20:26 - 00000000 ____D C:\Users\USER\Documents\Sony
2016-12-11 15:45 - 2016-12-11 15:46 - 47606656 _____ (Sony) C:\Users\USER\Downloads\XperiaCompanion.exe
2016-12-11 15:30 - 2016-12-11 15:30 - 02440207 _____ C:\Users\USER\Downloads\sony_xperia_m4_aqua.pdf
2016-12-10 15:34 - 2016-12-10 15:34 - 00000000 ____D C:\WINDOWS\Panther
2016-12-08 18:11 - 2016-12-08 18:11 - 00039010 _____ C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638.html
2016-12-08 18:11 - 2016-12-08 18:11 - 00000000 ____D C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638_files
2016-12-07 21:28 - 2016-12-07 21:28 - 03719935 _____ C:\Users\USER\Desktop\Meine_Rechte.pdf
2016-12-06 07:54 - 2016-12-10 20:45 - 00000000 ____D C:\Users\USER\Desktop\Verknüpfungen-Fotobuch
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\Users\USER\AppData\Local\Lidl_Fotos
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lidl-Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\ProgramData\Lidl_Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\Program Files (x86)\Lidl_Fotos

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-03 23:19 - 2014-08-31 22:02 - 00000000 ____D C:\FRST
2017-01-03 23:13 - 2016-09-04 15:20 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-03 23:03 - 2016-09-05 13:49 - 00004186 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{72D328A8-4A53-40B0-B1CF-3A30C42B7B36}
2017-01-03 22:14 - 2016-09-04 15:28 - 03598080 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-03 22:14 - 2016-07-16 23:51 - 01612696 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-03 22:14 - 2016-07-16 23:51 - 00411226 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-03 22:08 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-01-03 22:07 - 2016-09-04 15:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-03 22:07 - 2016-07-16 07:04 - 01310720 _____ C:\WINDOWS\system32\config\BBI
2017-01-03 22:06 - 2010-12-04 12:45 - 00000000 ____D C:\Users\USER\AppData\LocalLow\Temp
2017-01-03 16:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-02 23:20 - 2016-09-04 15:23 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-02 22:51 - 2014-08-17 07:44 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2017-01-02 18:31 - 2016-09-04 15:29 - 00000000 ____D C:\Users\USER
2017-01-02 18:31 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-01 20:38 - 2015-06-28 10:31 - 00000000 ____D C:\AdwCleaner
2016-12-31 23:06 - 2012-08-25 21:30 - 00000000 ____D C:\Users\USER\AppData\Roaming\TV-Browser
2016-12-31 13:53 - 2010-11-29 22:24 - 00000000 ____D C:\Users\USER\ho-hrf
2016-12-31 13:52 - 2016-02-29 14:22 - 00000000 ____D C:\Users\USER\Desktop\DT
2016-12-30 23:22 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Public\Documents
2016-12-30 22:37 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\catroot2
2016-12-30 12:38 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\DriverStore
2016-12-30 12:38 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\CatRoot
2016-12-29 09:08 - 2016-07-16 12:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-12-29 09:08 - 2016-04-08 15:47 - 00000946 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-12-29 09:08 - 2013-11-20 08:26 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-28 23:27 - 2010-12-09 14:24 - 00000000 ____D C:\Users\USER\AppData\Local\CrashDumps
2016-12-28 09:13 - 2015-10-19 16:57 - 00000000 ____D C:\ProgramData\Ashampoo
2016-12-28 01:47 - 2016-10-28 13:35 - 00004052 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-12-28 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-12-28 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-12-28 01:47 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64
2016-12-27 22:44 - 2011-04-15 16:52 - 00000000 ____D C:\Users\USER\AppData\Local\NPE
2016-12-27 21:35 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-27 21:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Tasks
2016-12-27 21:12 - 2016-11-24 19:54 - 00003376 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-12-27 21:12 - 2016-07-16 12:47 - 00000340 ___SH C:\Users\Public\Desktop\desktop.ini
2016-12-27 21:12 - 2015-08-06 00:55 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2016-12-27 21:11 - 2010-10-12 09:13 - 00000000 ____D C:\ProgramData\Norton
2016-12-27 20:34 - 2016-11-20 08:45 - 00000396 _____ C:\WINDOWS\Tasks\HPCeeScheduleForUSER.job
2016-12-25 11:08 - 2016-11-20 20:57 - 00000000 ____D C:\Users\USER\Desktop\BIRTE
2016-12-25 08:36 - 2016-11-20 08:45 - 00003320 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForUSER
2016-12-22 22:22 - 2010-11-27 13:55 - 00000000 ___RD C:\Users\USER\Documents
2016-12-21 21:50 - 2016-07-17 17:00 - 00000000 ____D C:\Users\USER\MEDION NAS TOOL
2016-12-21 21:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-21 21:47 - 2014-08-05 20:31 - 00000000 ____D C:\Users\USER\AppData\Local\Diagnostics
2016-12-21 15:43 - 2016-09-08 12:36 - 00003992 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1425561347
2016-12-21 15:43 - 2010-11-28 20:42 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-20 13:27 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WDI
2016-12-19 22:09 - 2016-03-28 18:25 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-18 20:40 - 2014-10-22 11:33 - 00000000 ____D C:\1a-Pitt
2016-12-18 16:16 - 2011-10-21 14:16 - 01310720 ___SH C:\Users\Großadmin\ntuser.dat
2016-12-16 21:55 - 2016-07-16 07:04 - 33816576 _____ C:\WINDOWS\system32\config\COMPONENTS
2016-12-15 19:21 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\assembly
2016-12-15 09:10 - 2015-07-19 21:04 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-11 20:27 - 2014-07-05 09:15 - 00000000 ____D C:\Users\USER\AppData\Roaming\Apple Computer
2016-12-10 20:29 - 2016-11-29 17:09 - 00000000 ____D C:\Program Files\Pixum
2016-12-10 16:17 - 2016-01-12 22:54 - 00000000 ____D C:\Program Files\OnlineFotoservice
2016-12-10 15:56 - 2011-01-02 12:36 - 00000000 ____D C:\Users\USER\AppData\Local\ElevatedDiagnostics
2016-12-09 18:57 - 2010-11-27 13:55 - 00000000 ___RD C:\Users\USER\Pictures
2016-12-09 15:14 - 2011-04-25 10:59 - 00000356 _____ C:\WINDOWS\Tasks\HPCeeScheduleForuser-HP$.job
2016-12-08 15:58 - 2011-04-16 17:20 - 00000000 ____D C:\Users\USER\AppData\Roaming\Skype
2016-12-07 12:37 - 2016-09-06 17:37 - 00003292 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForuser-HP$

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2011-02-27 21:26 - 2011-06-27 17:59 - 0001854 _____ () C:\Users\USER\AppData\Roaming\GhostObjGAFix.xml
2011-01-09 19:51 - 2011-01-09 20:10 - 0003584 _____ () C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-12-30 21:10 - 2017-01-02 23:17 - 49290112 _____ (Sony) C:\Users\USER\AppData\Local\pcc.exe
2013-05-01 17:20 - 2013-05-01 17:30 - 0000600 _____ () C:\Users\USER\AppData\Local\PUTTY.RND
2014-08-08 21:43 - 2014-08-08 21:43 - 0000218 _____ () C:\Users\USER\AppData\Local\recently-used.xbel
2011-10-21 13:15 - 2014-10-18 11:48 - 0007595 _____ () C:\Users\USER\AppData\Local\resmon.resmoncfg
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
2010-07-20 15:11 - 2010-07-20 15:11 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
2010-07-20 15:06 - 2010-07-20 15:07 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-10-12 09:09 - 2010-10-12 09:09 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
2010-07-20 15:06 - 2010-07-20 15:06 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2010-07-20 15:07 - 2010-07-20 15:10 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\USER\AdwCleaner_5.037.exe
C:\Users\USER\GMX_Firefox_Setup.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-03 16:28

==================== Ende von FRST.txt ============================
         

Addition

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von user (03-01-2017 23:22:08)
Gestartet von C:\Users\user\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-04 15:05:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1773077131-3649358975-729568603-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1773077131-3649358975-729568603-503 - Limited - Disabled)
Gast (S-1-5-21-1773077131-3649358975-729568603-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1773077131-3649358975-729568603-1002 - Limited - Enabled)
user (S-1-5-21-1773077131-3649358975-729568603-1000 - Administrator - Enabled) => C:\Users\user

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton 360 Premier (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Premier (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton 360 Premier (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.1.171 - Adobe Systems, Inc.)
Alien Swarm - SDK (HKLM-x32\...\Steam App 640) (Version:  - Valve)
Alien Swarm (HKLM-x32\...\Steam App 630) (Version:  - Valve)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Amazon Amazon Music) (Version: 4.0.0.1205 - Amazon Services LLC)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Ashampoo Burning Studio 2015 v.1.15.0 (HKLM-x32\...\{91B33C97-21E3-DF34-9630-2EE80DDE1648}_is1) (Version: 1.15.0 - Ashampoo GmbH & Co. KG)
Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version:  - )
Audacity Recovery Utility (HKLM-x32\...\AURC_is1) (Version:  - Markus Meyer)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.1.5122 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: 1.0.8.16603 - Blizzard Entertainment)
D-i-v-X AVI Codec Pack Pro 2.4.0 (HKLM-x32\...\D-i-v-X - AVI Codec Pack Pro) (Version:  - D-i-v-X AVI Codec Pack Pro)
dotoo (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\dotoo) (Version:  - tamster)
Drakensang (HKLM-x32\...\Steam App 12640) (Version:  - Radon Labs)
Dream Aquarium (HKLM-x32\...\DreamAqua) (Version:  - )
ElsterFormular (HKLM-x32\...\ElsterFormular für Privatanwender 12.3.2.6814p) (Version: 17.4.37.20160609 - )
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.4.19695 - Landesfinanzdirektion Thüringen)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.3 - Electronic Arts)
Fotobuchexpress24 Bestellsoftware (HKLM-x32\...\Fotobuchexpress24) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Fotobuchexpress24 Bestellsoftware (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version:  - Valve)
Hattrick Organizer (remove only) (HKLM-x32\...\Hattrick Organizer) (Version:  - )
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard)
HP Documentation (HKLM-x32\...\{B360E24A-BF25-4353-AA79-1B54F509024A}) (Version: 1.0.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (HKLM\...\{939D91BD-7C35-492A-A8B4-DE99939BD44F}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710a-f Hilfe (HKLM-x32\...\{958B08B0-C784-4A77-8D2B-C0A58F1E14B5}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12992 - HP)
HP Quick Launch (HKLM-x32\...\{00A42832-B21A-4296-B5F4-D296D0BC4A3E}) (Version: 2.6.3 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{AF6EB833-D48A-49AC-9394-4C57489FDFF2}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.3.50.9 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.203 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{E342EC6B-5F25-47FE-B92C-DE616149B430}) (Version: 4.0.9.0 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4 - HP)
Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.7 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{561b5fb5-1d4d-40e8-b3e4-ad52858b217c}) (Version: 2.4.0.7 - Intel)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
JiveX DICOM Viewer Light 4.7.1 (HKLM-x32\...\JiveX DICOM Viewer Light 4.7.1) (Version:  - VISUS Technology Transfer GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Codec Pack 5.2.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 5.2.0 - )
korAccount 3 (HKLM-x32\...\{944B9BCC-0499-47E0-A1D7-941DC2732612}) (Version: 3.3.21 - Kornelius)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2907 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.2907 - CyberLink Corp.) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Left 4 Dead (HKLM-x32\...\Steam App 500) (Version:  - Valve)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.8.1 - LG Electronics)
Lidl-Fotos (HKLM-x32\...\Lidl-Fotos_is1) (Version:  - )
LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe)
Lost Planet 2 (HKLM-x32\...\Steam App 45750) (Version:  - )
LOST PLANET 2 (x32 Version: 1.0.0002.133 - CAPCOM CO., LTD.) Hidden
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version:  - EasyBits Software AS)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Marketsplash Schnellzugriffe (HKLM-x32\...\{FB0C267C-8B4F-4867-8161-A6A3B66D42C1}) (Version: 1.0.0.9 - Hewlett-Packard)
Mediencenter 3.8.9799.6 (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Mediencenter) (Version: 3.8.9799.6 - Deutsche Telekom AG)
MEDION NAS TOOL (HKLM-x32\...\MEDION NAS TOOL) (Version:  - MEDION)
Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7939 - Memeo Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 44.0 (x86 de)) (Version: 44.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NAVIGON Fresh 3.4.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.4.1 - NAVIGON)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Norton 360 Premier (HKLM-x32\...\N360) (Version: 22.8.1.14 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Olympus ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.3.2207 - OLYMPUS IMAGING CORP.)
Olympus ib (x32 Version: 1.3.2207 - OLYMPUS IMAGING CORP.) Hidden
OLYMPUS Viewer 2 (HKLM-x32\...\{7177EE4E-3D1D-4F45-85B5-B93DC758BA0B}) (Version: 1.1.1 - OLYMPUS IMAGING CORP.)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4204 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4204 - CyberLink Corp.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7746 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30117 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden
Resident Evil™: Operation Raccoon City (HKLM-x32\...\Steam App 209100) (Version:  - )
Rossmann Fotowelt Software 4.9 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.9 - ORWO Net)
RtVOsd (HKLM\...\{091A0130-A82F-4A6D-9C61-3BBBB3289030}) (Version: 1.0.6 - Realtek Semiconductor Corp.)
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Saal Design Software (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Scan2PDF 1.6 (HKLM-x32\...\Scan2PDF_is1) (Version:  - Koma-Code)
Scan2PDF Professional 17 (HKLM-x32\...\Scan2PDF Professional 17) (Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH)
Scan2PDF Professional 17 (x32 Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH) Hidden
ScanToPDF 18 (HKLM-x32\...\ScanToPDF 1818) (Version: 18 - metier 2000 GmbH)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
SequoiaView (HKLM-x32\...\SequoiaView) (Version:  - )
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version:  - )
Serious Sam Classic: The Second Encounter (HKLM-x32\...\Steam App 41060) (Version:  - )
Serious Sam HD: The First Encounter (HKLM-x32\...\Steam App 41000) (Version:  - Croteam)
Serious Sam HD: The Second Encounter (HKLM-x32\...\Steam App 41010) (Version:  - Croteam)
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2014 (HKLM-x32\...\{2EE860C7-4551-479F-AF01-328B8AA46051}) (Version: 22.00.8811 - Buhl Data Service GmbH)
Steuer 2015 (HKLM-x32\...\{E262CD3B-8825-4D56-AEF1-5E127F2FBB05}) (Version: 23.00.1146 - Buhl Data Service GmbH)
Studie zur Verbesserung von HP Officejet 6500 E710a-f Produkten (HKLM\...\{A5C5CECF-648E-4263-B601-4D4CD3FCD11D}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.104 - Synaptics Incorporated)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.63017 - TeamViewer)
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - )
TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - )
TV-Browser 3.4 (HKLM-x32\...\tvbrowser) (Version: 3.4 - TV-Browser Team)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Video DVD Maker v3.30.0.75 (HKLM-x32\...\{1A3E23D7-7A1E-43EC-B35D-EB2A31BED943}) (Version:  - )
Vistaprint Fotobücher (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\{BA786D68-3AD8-42DC-8BE1-9E09B4737A27}_is1) (Version:  - Vistaprint)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WISO Haushaltsbuch 2011 (HKLM-x32\...\WISO Haushaltsbuch 2011) (Version:  - Buhl Data Service GmbH)
WISO Haushaltsbuch 2011 (x32 Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Xperia Companion (HKLM-x32\...\{efee6944-1231-492a-a157-93409130a098}) (Version: 1.4.7.0 - Sony)
Xperia Companion (x32 Version: 1.4.7.0 - Sony) Hidden
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{268502F4-815D-4358-A8D6-B783FDB58EF0}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{528EE335-5034-4EFC-834E-63E5F02D2BC2}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{6066ADF0-9EB0-43E5-ADB6-990F5A3B979C}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{77BC4082-DB5F-439A-8DC8-F9E24A63B0DE}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0081B333-1014-4F60-9A96-03D012DE8F90} - System32\Tasks\Opera scheduled Autoupdate 1425561347 => C:\Program Files (x86)\Opera\launcher.exe [2016-12-19] (Opera Software)
Task: {3D8C53A8-716C-48EC-8254-34AD4F0706B6} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {42A0F2AB-34D0-4BDF-8A19-83378B689C14} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {529FC627-C4BF-4B1F-9F06-B15F724EF0F0} - System32\Tasks\HPCeeScheduleForUSER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {57EB0E85-CD55-4B9A-8007-0A245C2FF57B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {5CACCCBE-2196-482B-88D8-57AAC1275885} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {615B7687-499E-4151-8075-2B4918BE6128} - System32\Tasks\Norton 360\Norton Autofix => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {7F4F2968-7F88-4CBA-B3B6-FDD96B95AA03} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {88A25EBF-E761-44AE-9123-FD0CA810AEDD} - System32\Tasks\HPCeeScheduleForuser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {A3AABA13-B603-418C-9BB2-9B057D6E28E0} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\WSCStub.exe [2016-11-12] (Symantec Corporation)
Task: {A8E1692F-D2F7-4A8A-98A6-C6ADC321980D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {C5154C5F-647C-4517-938D-25CC9246A8DD} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_186_pepper.exe [2016-12-28] (Adobe Systems Incorporated)
Task: {F0F06860-19E6-4F69-AA5A-1DDAD27C078F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_186_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForuser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForUSER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-01-01 21:40 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-04 17:47 - 2016-09-04 17:47 - 01864384 _____ () C:\Users\user\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 12:43 - 2016-07-16 12:43 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01400320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01033728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2012-11-26 22:54 - 2012-11-26 22:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-06-18 15:26 - 2010-06-18 15:26 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2016-12-21 15:43 - 2016-12-21 15:43 - 68763736 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\opera.dll
2016-12-21 15:43 - 2016-12-21 15:42 - 01893976 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\libglesv2.dll
2016-12-21 15:43 - 2016-12-21 15:42 - 00086616 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [119]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1001movie.com -> 1001movie.com

Da befinden sich 6067 mehr Seiten.


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2014-12-11 21:28 - 00000027 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{98c5018e-39e1-4440-88a9-2348368e3c8a}.JPG
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amazon Music => "C:\Users\user\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: HPWirelessAssistant => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
MSCONFIG\startupreg: MDS_Menu => "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
MSCONFIG\startupreg: Olympus ib => "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Spotify => "C:\Users\user\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\user\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "Memeo Instant Backup"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Advanced SystemCare 9"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "BlueStacks Agent"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [{8E673705-01AD-4D38-85A1-6F163CE9B1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{13A19B5C-2266-4790-9AD4-A62C9D304751}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9AEBF3E5-5082-48B7-9930-ABBBBBD5C1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4E042324-1C0E-4252-AA59-53B4D6D1232E}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E407A208-AEDB-401D-80AA-604C425BC60A}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{8868062B-EA35-4A20-921F-27A414C21E67}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{FDDAE072-A898-44DA-B52D-889EBB97B36A}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E942A137-9566-4C84-B356-D6D3B81A2F07}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0F5B53DF-7C27-4124-A064-838D1BEE70F4}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{31F37177-7815-408F-8409-318F4598D580}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{30C28231-B4B5-4F45-B163-2FC6E3DE683D}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3FB135E8-2339-4458-91EF-3B3F02ED3291}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{F1AE4AB3-3D59-4F06-A9D4-C8A2ABDBF552}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C0891F06-BB9A-4793-9326-09146DAD2A48}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0CB946D-69B1-4409-BF44-E158494040A8}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{874D0741-F421-47C0-97C1-4AFEFE1275FE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{356474A1-932B-449D-8EDD-3F539A57F4F2}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{E763AF9E-7EFB-4E82-802F-9AD66975E178}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{5B4A8F87-8B8F-48B8-99EB-394D1FA69899}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{A7F394A0-E7F8-4D59-AF98-EB291E44F6FB}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{9B5A5AC2-3403-45DC-8C6F-3856C856547A}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{51F9F022-CF46-4E51-998A-55FEA5EF4B9F}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{63FC4A14-1B2C-43BB-8D6B-6C720416666F}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{CABEC949-8703-4788-B3D5-9F557F38DD57}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{40F4FD40-E093-40C3-8AFB-67D752AEFD10}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C4178D55-7200-4F02-94AE-E1356BD82B71}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A2D6469B-2CCB-4250-BE88-413E325B8A66}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0F7520B5-F22F-4601-B11D-A7E68EBE92AC}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4FC874CD-4833-45BF-B5DE-1241EE4F38E7}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{291A0EAA-4592-4882-9735-8B0C8CFC7B91}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{B27AB1EE-B334-40C8-B7DB-95EE6DE098BF}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{66E78BD3-5261-4B11-9A16-4C62B6B28CD0}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{B50431A0-B939-4DF7-92C6-F1FA0F5CE94E}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{D2902F6A-4F9B-4CC9-B683-23C2111146F7}] => C:\Users\user\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{61B1A450-899D-4A27-BB9A-EC71F0442647}] => C:\Users\user\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{AF8A86E7-57A8-4DF6-A164-477519A6FD29}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{70DE82FA-534C-45A6-9DC3-EDC5FE549930}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{03D24FD1-2C18-4464-A429-4A020B58C602}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{1A550A5B-D2F0-4CC3-947B-B8A09C0AB2B8}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{EEFD8A00-EB75-4B23-B8C3-BE0BDE9BD099}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{063C606F-67AB-46D1-85C8-B2F7F4DA57C3}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{01E85985-2672-4FF8-8855-92687C1EE44A}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{208C33A8-C683-4656-B293-6382E99813AA}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{D96C908F-A1AA-4C9B-94B1-C4DE6976EEFD}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{85404721-B741-4262-9564-1FA3F80042FB}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{C68BBCD4-EC8A-4852-819A-12D33ABD613B}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{D22E3925-6A3D-4A4A-B2F6-BAEB58216513}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{064BF8B4-7346-4EFA-AB2B-EC7EDF23CD61}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{55EE3B37-D1A3-4E2B-8BD8-B67E133C2F97}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{EF41ACED-E7EF-4E9F-A55C-98623094A35D}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{954F5189-DBC1-4F87-BE81-09A3C0306AEC}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{E54DE16B-C314-420D-A022-5066CF8C4300}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{ABE3AEE3-E8B0-4A74-BCF5-C9AF7391E13F}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C26A142F-DE3B-401C-AFD6-D03971353D71}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A60458C5-2BA1-4156-A106-1BBE590C375E}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C30283D4-B0EB-4D2D-8393-067CFC0F7A1C}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{7802C9AF-0D81-4F91-A5A7-2905F9C02439}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{6E9841AA-A551-429B-98FD-E5A1A17D3C8D}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{8C122C83-6BFA-49F2-971D-024D8253932A}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{A639776A-6546-4D5D-9EB2-27BE3E62A017}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{D96B78E8-9C57-4C75-B499-F8CFCF24CD33}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{AD615D88-6DCE-423A-B5D0-CD8643357ADA}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{F6DBC4DC-AA11-4B53-934A-3E707AD13002}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{A8C1A975-0625-40D5-9A34-5A5BAF2B9340}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{AE59F461-BBCA-4B4A-8EB5-7A3F5D006453}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7142AA43-3C27-4E61-A65E-075822D7DBEF}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6F08754B-0CEB-4B20-9890-FB34686FB13C}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{4BC24ADB-9A49-4A59-AF53-103A7320300B}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7635E990-AB5C-4B51-8CC3-61EEAEC0D388}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2DE2C132-9CD8-47CA-8E69-1B7F9E9EF4B0}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{91F9E95F-170F-441F-A02F-23CB74DA24CC}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{57F21F45-728A-48BB-A8B1-5041AF2EB35C}] => %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{1F47A498-2850-446C-ADBF-2C66298E2F3A}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{A8FF8FB6-FA45-4F86-A108-78F6753B0A9D}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{8E27E693-AD9E-4934-8835-76D8A4762952}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{45127CE1-A84B-4404-919C-B3F9F3F341A9}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{2D6FACDF-7F06-4729-9BB0-1E2FE986705E}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [{CA8A2016-77F1-4F3A-8C49-CD85C5C26186}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [UDP Query User{3E4E805B-1D69-43EE-8FD0-665D6F4AF1E4}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [TCP Query User{B87F9D58-A3A3-412F-BAA8-7C61B1AC6A22}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [UDP Query User{5C478DCE-8519-40EC-A6A9-B33BB585DD80}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{E81B8F49-EBB1-4FCC-8E2F-2E960B153433}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [{F7CBA578-7BD7-4E9D-80B1-884974C8CF3B}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{996C8DE2-CF76-43D6-B33F-B2607630CC27}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{A3596081-F015-4063-B20D-52BCE3DDCC48}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{2E1E54D2-790E-4918-998C-E41C3F686B7A}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{B52D967B-1499-4DFD-BB78-E57AA78012CB}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{A7F12640-0647-4944-B82C-FEC01404A261}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{286AE560-31FB-4C76-8037-A5F593CA3EE7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{4EC6BC05-4EC8-4B51-9BCC-05352CA84A28}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{7D42A802-CE2C-474D-8047-0CFB0E70F172}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{32DF9563-49BB-4154-AD3D-36C48511F136}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{227A1731-3D27-4924-A41C-EEB2BCAA8C74}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{B78ABD7B-20E3-4E4A-8D45-F82C8DAD45C7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{044807F4-73EE-470D-8AC3-CCD80DA3A443}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{766CFF0B-FD3E-45B9-AB6B-AA9E62CEE219}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{D675F046-E9D8-4BE4-B288-801D2A549914}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{4AB576B6-A159-416B-9851-339CE9E24874}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{57A3E5A2-BA35-4F7B-93C6-6466872E7F58}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{27D6BF9C-6D2A-414B-B953-06FC49F57E16}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{460EE69F-7787-4271-9B4D-66DEC6CF4BFE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{48870B22-94A0-4D44-9C20-59C47B375A46}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{D955B1B7-7559-4AA4-B255-F31E3C5731D6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{7A11A34F-7B53-48C5-AB1D-870876AB806C}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{4B42EDB3-5480-4273-BC0D-FB8789207389}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{FFF8DD45-0A6C-4C55-A324-4480C8260D81}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{0092FC42-953C-4AED-A3BC-70F296CF8A9D}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{24CD30F7-8932-483E-A58C-19CFE73005C6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{1709CBB8-9BA4-4BD9-9160-8D6DCFC4F723}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7F55FD67-FFB9-4883-858C-19B47539D306}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ACBCF7BD-8E2B-4704-A9B9-25959C70BFCF}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{30C11C2B-24A9-4FAE-B74C-6F076948638D}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4B38B008-640F-4945-AB11-F8E74D00D58A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F91AA893-804A-4132-9BAD-F87EAC975D48}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D76014A0-C5AF-4CE5-A07D-0B4B483D1C22}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{14FCBF9D-0B9C-45BD-AF49-8E7197C03B8A}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{EC3BC8F2-D9B2-4991-B013-CAABD3AC9431}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{67EABBE0-D980-4E04-8B3A-E07FB8BBA317}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A8FCFFD4-3FEE-4ED9-A92C-D7EC912543B7}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{5B0C1529-E204-4488-ACD0-F3D316941167}] => LPort=1900
FirewallRules: [{DC5BDE06-429E-4843-BBB6-7122042FC955}] => LPort=2869
FirewallRules: [{C39DCC74-AFE9-429E-8C03-2250B70D4761}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{9DA76145-487E-464A-A848-2E18577A7733}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FE961DF6-87C6-4EB3-BF54-82F3632AA1B2}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{048FC1AF-4D52-4577-AA5D-DD99CF968049}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{C618DC49-62F3-49D8-A017-60E1E7FD0B81}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{3802A6F0-AC14-4C62-97BD-C52DA309C89A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8A88397E-E582-420F-A3A0-8CC452CE5EDC}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3318B191-229E-4D4F-90E3-CB035B389072}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0ADB167-9BF5-42A0-BB8F-CF93BB7958A7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{75C6B1D1-960D-4224-ABE4-5FBBE02A35A9}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{809885C9-732F-4AFE-8F51-9C1A4DE1890D}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{94287C6E-F107-457C-B628-6B190AB710DE}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{3623F4D7-FE84-4C68-8805-86379A370233}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{D9808767-F417-4B1C-848A-3992F5E4C58C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{C8BFDC59-9E6E-4BD4-9B57-92833B75451C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{004A5073-6314-4614-8A27-1B69DA833FEB}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{B36FA190-D0E7-467F-AD32-B21B6F86504C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A75C2943-C6DF-4FCD-9F4F-34BF0682B877}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{7C27A078-B910-44C6-8164-C72C30104A92}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{23F6C804-249E-4888-A947-8DBA9F4EC9AB}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{47D650E5-4537-4BE6-9E16-CEC558BDC02B}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{F50A3F31-1AFE-4AC2-9683-A9933D7D92B7}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{C58AEA26-09C2-4340-B882-481D0742107A}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{CD3A984D-11A4-4440-AD9F-2119525252B0}] => LPort=3724
FirewallRules: [{71F80CCC-857B-45AF-87B3-DBFCCC8D2A2B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F7765463-7C6F-44C0-8B37-EC3EF6F1FACA}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CFBA7366-2C82-4BE3-8272-33356E93847E}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{40EC9991-C978-4327-9043-4A8DDA45B461}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{346D96C5-74BF-41DD-9C4C-D085B49F2965}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{9EA2066F-E4A2-43C8-AD02-2E39901F24A1}] => svchost.exe
FirewallRules: [{984F5B7A-65EC-4739-8177-460EACD23F8D}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{CB2D5697-3B2A-458E-9E2E-0111C7978A7F}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{FEF02A7D-8360-4A97-B42B-47D960F93CE0}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{21501978-E708-44C9-8E84-4BBC0DD912BF}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{27348E6C-547E-457A-ACC3-98EA777AB73F}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{8650EABB-65D9-418D-8480-58CF60CFDD38}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{7E9A1500-520A-4167-B665-9B20925810AD}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{4BBB084E-C450-4C8D-8612-E7D52CDC4278}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [{9581B01B-0259-4DAC-B40E-31168746C8CE}] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanion.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Eurowin\maxtax\SSONLINE.EXE] => Enabled:SSONLINE

==================== Wiederherstellungspunkte =========================

02-01-2017 20:50:58 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/03/2017 10:08:16 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (01/03/2017 10:03:15 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest.

Error: (01/03/2017 08:32:40 PM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (01/03/2017 01:14:44 PM) (Source: MsiInstaller) (EventID: 1002) (User: USER-HP)
Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList".

Error: (01/02/2017 10:51:34 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (01/02/2017 10:51:33 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.

Error: (01/02/2017 10:51:33 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (01/02/2017 10:51:33 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\WINDOWS\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (01/02/2017 10:51:32 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (01/02/2017 10:51:32 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\WINDOWS\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.


Systemfehler:
=============
Error: (01/03/2017 10:07:51 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (01/03/2017 10:07:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "RtVOsdService Installer" wurde aufgrund folgenden Fehlers nicht gestartet: 
Die Pipe wurde beendet.

Error: (01/03/2017 10:06:53 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\bcmihvsrv64.dll

Error: (01/03/2017 10:06:53 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\bcmihvsrv64.dll

Error: (01/03/2017 10:06:52 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\bcmihvsrv64.dll

Error: (01/03/2017 10:06:48 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\bcmihvsrv64.dll

Error: (01/03/2017 10:06:47 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\bcmihvsrv64.dll

Error: (01/03/2017 10:06:37 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\System32\bcmihvsrv64.dll

Error: (01/03/2017 10:06:24 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
Es wird bereits eine Instanz des Dienstes ausgeführt.

Error: (01/03/2017 10:05:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Malwarebytes Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-12-27 20:51:30.555
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.474
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.443
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.412
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.373
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.222
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.191
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.113
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.087
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 19:21:48.087
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Prozentuale Nutzung des RAM: 64%
Installierter physikalischer RAM: 3893.86 MB
Verfügbarer physikalischer RAM: 1363.83 MB
Summe virtueller Speicher: 7861.86 MB
Verfügbarer virtueller Speicher: 4871.93 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:281.98 GB) (Free:28.95 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (RECOVERY) (Fixed) (Total:15.82 GB) (Free:2.22 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.15 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32
Drive i: () (Removable) (Total:60.34 GB) (Free:51.46 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: CB9E9924)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=282 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

========================================================
Disk: 1 (Size: 60.4 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================
         

Servus,


wir kontrollieren nochmal alles.



Hinweis: Der Suchlauf mit ESET kann länger dauern.






Schritt 1

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 2
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

• Starte die HitmanPro.exe
• Klicke auf
  
• Entferne den Haken bei
  
• Klicke auf
  und
• Akzeptiere die Lizenzbedingungen und klicke auf
• Klicke auf
  
  und auf
• Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
  und speichere die Logdatei auf Deinem Desktop.
• Schließe HitmanPro und poste mir das Log.

 

Schritt 3

• Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
• FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?







Bitte poste mit deiner nächsten Antwort

• die Logdatei von ESET,
• die Logdatei von HitmanPro,
• die beiden neuen Logdateien von FRST,
• die Beantwortung der gestellten Fragen.

Hey Matthias,

der PC läuft schon deutlich besser aber immer noch springt der Lüfter recht schnell an aber das ist vll auch im Normbereich. Provozieren kann ich den schwarzen Bildschirm nicht aber es ist gestern und heute nicht vorgekommen.


Additional

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von user (05-01-2017 21:23:18)
Gestartet von C:\Users\user\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-04 15:05:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1773077131-3649358975-729568603-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1773077131-3649358975-729568603-503 - Limited - Disabled)
Gast (S-1-5-21-1773077131-3649358975-729568603-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1773077131-3649358975-729568603-1002 - Limited - Enabled)
user (S-1-5-21-1773077131-3649358975-729568603-1000 - Administrator - Enabled) => C:\Users\user

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Norton 360 Premier (Enabled - Up to date) {53C7D717-52E2-B95E-FA61-6F32ECC805DB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Premier (Enabled - Up to date) {E8A636F3-74D8-B6D0-C0D1-5440974F4F66}
FW: Norton 360 Premier (Enabled) {6BFC5632-188D-B806-D13E-C607121B42A0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acer System Information (HKLM-x32\...\{72199E33-4F2A-4B7F-8E25-95DDDD50A678}) (Version: 1.0.0 - Acer)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\{9ECF7817-DB11-4FBA-9DF1-296A578D513A}) (Version: 11.5.7.609 - Adobe Systems, Inc)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.1.171 - Adobe Systems, Inc.)
Alien Swarm - SDK (HKLM-x32\...\Steam App 640) (Version:  - Valve)
Alien Swarm (HKLM-x32\...\Steam App 630) (Version:  - Valve)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Amazon Amazon Music) (Version: 4.0.0.1205 - Amazon Services LLC)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Ashampoo Burning Studio 2015 v.1.15.0 (HKLM-x32\...\{91B33C97-21E3-DF34-9630-2EE80DDE1648}_is1) (Version: 1.15.0 - Ashampoo GmbH & Co. KG)
Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version:  - )
Audacity Recovery Utility (HKLM-x32\...\AURC_is1) (Version:  - Markus Meyer)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.350.6 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
CyberLink DVD Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.3003 - CyberLink Corp.)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.1.5122 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: 1.0.8.16603 - Blizzard Entertainment)
D-i-v-X AVI Codec Pack Pro 2.4.0 (HKLM-x32\...\D-i-v-X - AVI Codec Pack Pro) (Version:  - D-i-v-X AVI Codec Pack Pro)
dotoo (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\dotoo) (Version:  - tamster)
Drakensang (HKLM-x32\...\Steam App 12640) (Version:  - Radon Labs)
Dream Aquarium (HKLM-x32\...\DreamAqua) (Version:  - )
ElsterFormular (HKLM-x32\...\ElsterFormular für Privatanwender 12.3.2.6814p) (Version: 17.4.37.20160609 - )
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 17.4.19695 - Landesfinanzdirektion Thüringen)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version:  - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai)
FIFA 14 (HKLM-x32\...\{AA7A2800-1E75-4240-855B-03AFF8E5171E}) (Version: 1.0.0.3 - Electronic Arts)
Fotobuchexpress24 Bestellsoftware (HKLM-x32\...\Fotobuchexpress24) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Fotobuchexpress24 Bestellsoftware (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Half-Life 2: Deathmatch (HKLM-x32\...\Steam App 320) (Version:  - Valve)
Hattrick Organizer (remove only) (HKLM-x32\...\Hattrick Organizer) (Version:  - )
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.15.281 - SurfRight B.V.)
HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.10262.3295 - Hewlett-Packard)
HP Documentation (HKLM-x32\...\{B360E24A-BF25-4353-AA79-1B54F509024A}) (Version: 1.0.0.0 - Hewlett-Packard)
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.1.3 - WildTangent)
HP Officejet 6500 E710a-f - Grundlegende Software für das Gerät (HKLM\...\{939D91BD-7C35-492A-A8B4-DE99939BD44F}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
HP Officejet 6500 E710a-f Hilfe (HKLM-x32\...\{958B08B0-C784-4A77-8D2B-C0A58F1E14B5}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12992 - HP)
HP Quick Launch (HKLM-x32\...\{00A42832-B21A-4296-B5F4-D296D0BC4A3E}) (Version: 2.6.3 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{AF6EB833-D48A-49AC-9394-4C57489FDFF2}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.3.50.9 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.203 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{787D1A33-A97B-4245-87C0-7174609A540C}) (Version: 5.002.005.003 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{E342EC6B-5F25-47FE-B92C-DE616149B430}) (Version: 4.0.9.0 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4 - HP)
Inkscape 0.48.5 (HKLM-x32\...\Inkscape) (Version: 0.48.5 - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Driver Update Utility 2.4 (x32 Version: 2.4.0.7 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{561b5fb5-1d4d-40e8-b3e4-ad52858b217c}) (Version: 2.4.0.7 - Intel)
Java 8 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218065F0}) (Version: 8.0.650.17 - Oracle Corporation)
JiveX DICOM Viewer Light 4.7.1 (HKLM-x32\...\JiveX DICOM Viewer Light 4.7.1) (Version:  - VISUS Technology Transfer GmbH)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Codec Pack 5.2.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 5.2.0 - )
korAccount 3 (HKLM-x32\...\{944B9BCC-0499-47E0-A1D7-941DC2732612}) (Version: 3.3.21 - Kornelius)
LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2907 - CyberLink Corp.)
LabelPrint (x32 Version: 2.5.2907 - CyberLink Corp.) Hidden
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Left 4 Dead (HKLM-x32\...\Steam App 500) (Version:  - Valve)
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}) (Version: 3.8.1 - LG Electronics)
Lidl-Fotos (HKLM-x32\...\Lidl-Fotos_is1) (Version:  - )
LightScribe System Software (HKLM-x32\...\{46BA053F-57B3-4153-BDB6-D37EEC8B12D7}) (Version: 1.18.15.1 - LightScribe)
Lost Planet 2 (HKLM-x32\...\Steam App 45750) (Version:  - )
LOST PLANET 2 (x32 Version: 1.0.0002.133 - CAPCOM CO., LTD.) Hidden
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version:  - EasyBits Software AS)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Marketsplash Schnellzugriffe (HKLM-x32\...\{FB0C267C-8B4F-4867-8161-A6A3B66D42C1}) (Version: 1.0.0.9 - Hewlett-Packard)
Mediencenter 3.8.9799.6 (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Mediencenter) (Version: 3.8.9799.6 - Deutsche Telekom AG)
MEDION NAS TOOL (HKLM-x32\...\MEDION NAS TOOL) (Version:  - MEDION)
Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7939 - Memeo Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 44.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 44.0 (x86 de)) (Version: 44.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NAVIGON Fresh 3.4.1 (HKLM-x32\...\NAVIGON Fresh) (Version: 3.4.1 - NAVIGON)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Norton 360 Premier (HKLM-x32\...\N360) (Version: 22.8.1.14 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
Olympus ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.3.2207 - OLYMPUS IMAGING CORP.)
Olympus ib (x32 Version: 1.3.2207 - OLYMPUS IMAGING CORP.) Hidden
OLYMPUS Viewer 2 (HKLM-x32\...\{7177EE4E-3D1D-4F45-85B5-B93DC758BA0B}) (Version: 1.1.1 - OLYMPUS IMAGING CORP.)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 42.0.2393.94 (HKLM-x32\...\Opera 42.0.2393.94) (Version: 42.0.2393.94 - Opera Software)
Oracle VM VirtualBox 4.3.12 (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.3.1.4482 - Electronic Arts, Inc.)
PDF24 Creator 7.9.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.)
PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden
Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden
Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4204 - CyberLink Corp.)
Power2Go (x32 Version: 6.1.4204 - CyberLink Corp.) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.21.531.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7746 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30117 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 5.5.3023 - CyberLink Corp.) Hidden
Resident Evil™: Operation Raccoon City (HKLM-x32\...\Steam App 209100) (Version:  - )
Rossmann Fotowelt Software 4.9 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.9 - ORWO Net)
RtVOsd (HKLM\...\{091A0130-A82F-4A6D-9C61-3BBBB3289030}) (Version: 1.0.6 - Realtek Semiconductor Corp.)
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 4.0 - Saal Digital Fotoservice GmbH)
Saal Design Software (x32 Version: 4.0 - Saal Digital Fotoservice GmbH) Hidden
Scan2PDF 1.6 (HKLM-x32\...\Scan2PDF_is1) (Version:  - Koma-Code)
Scan2PDF Professional 17 (HKLM-x32\...\Scan2PDF Professional 17) (Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH)
Scan2PDF Professional 17 (x32 Version: 17.0.3.3004 - metier 2000 - Softwareentwicklung GmbH) Hidden
ScanToPDF 18 (HKLM-x32\...\ScanToPDF 1818) (Version: 18 - metier 2000 GmbH)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
SequoiaView (HKLM-x32\...\SequoiaView) (Version:  - )
Serious Sam 3: BFE (HKLM-x32\...\Steam App 41070) (Version:  - Croteam)
Serious Sam Classic: The First Encounter (HKLM-x32\...\Steam App 41050) (Version:  - )
Serious Sam Classic: The Second Encounter (HKLM-x32\...\Steam App 41060) (Version:  - )
Serious Sam HD: The First Encounter (HKLM-x32\...\Steam App 41000) (Version:  - Croteam)
Serious Sam HD: The Second Encounter (HKLM-x32\...\Steam App 41010) (Version:  - Croteam)
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2014 (HKLM-x32\...\{2EE860C7-4551-479F-AF01-328B8AA46051}) (Version: 22.00.8811 - Buhl Data Service GmbH)
Steuer 2015 (HKLM-x32\...\{E262CD3B-8825-4D56-AEF1-5E127F2FBB05}) (Version: 23.00.1146 - Buhl Data Service GmbH)
Studie zur Verbesserung von HP Officejet 6500 E710a-f Produkten (HKLM\...\{A5C5CECF-648E-4263-B601-4D4CD3FCD11D}) (Version: 22.0.334.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.104 - Synaptics Incorporated)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.63017 - TeamViewer)
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - )
TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - )
TV-Browser 3.4 (HKLM-x32\...\tvbrowser) (Version: 3.4 - TV-Browser Team)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Video DVD Maker v3.30.0.75 (HKLM-x32\...\{1A3E23D7-7A1E-43EC-B35D-EB2A31BED943}) (Version:  - )
Vistaprint Fotobücher (HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\{BA786D68-3AD8-42DC-8BE1-9E09B4737A27}_is1) (Version:  - Vistaprint)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WISO Haushaltsbuch 2011 (HKLM-x32\...\WISO Haushaltsbuch 2011) (Version:  - Buhl Data Service GmbH)
WISO Haushaltsbuch 2011 (x32 Version: 12.00.02.0024 - Buhl Data Service GmbH) Hidden
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
Xperia Companion (HKLM-x32\...\{efee6944-1231-492a-a157-93409130a098}) (Version: 1.4.7.0 - Sony)
Xperia Companion (x32 Version: 1.4.7.0 - Sony) Hidden
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{268502F4-815D-4358-A8D6-B783FDB58EF0}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.ContextMenuHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{528EE335-5034-4EFC-834E-63E5F02D2BC2}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{6066ADF0-9EB0-43E5-ADB6-990F5A3B979C}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)
CustomCLSID: HKU\S-1-5-21-1773077131-3649358975-729568603-1000_Classes\CLSID\{77BC4082-DB5F-439A-8DC8-F9E24A63B0DE}\InprocServer32 -> C:\Users\user\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (Deutsche Telekom AG)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0081B333-1014-4F60-9A96-03D012DE8F90} - System32\Tasks\Opera scheduled Autoupdate 1425561347 => C:\Program Files (x86)\Opera\launcher.exe [2016-12-19] (Opera Software)
Task: {1B48B82C-D876-4705-A565-D08D2E8DB2C9} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {3D8C53A8-716C-48EC-8254-34AD4F0706B6} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {529FC627-C4BF-4B1F-9F06-B15F724EF0F0} - System32\Tasks\HPCeeScheduleForUSER-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {57EB0E85-CD55-4B9A-8007-0A245C2FF57B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {5CACCCBE-2196-482B-88D8-57AAC1275885} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-19] (Google Inc.)
Task: {7F4F2968-7F88-4CBA-B3B6-FDD96B95AA03} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {88A25EBF-E761-44AE-9123-FD0CA810AEDD} - System32\Tasks\HPCeeScheduleForuser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {A3AABA13-B603-418C-9BB2-9B057D6E28E0} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\WSCStub.exe [2016-11-12] (Symantec Corporation)
Task: {A8E1692F-D2F7-4A8A-98A6-C6ADC321980D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {C5154C5F-647C-4517-938D-25CC9246A8DD} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_186_pepper.exe [2016-12-28] (Adobe Systems Incorporated)
Task: {CDEE2823-41BF-422C-BE40-E0C051CC92F9} - System32\Tasks\Norton 360\Norton Autofix => C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\SymErr.exe [2016-11-12] (Symantec Corporation)
Task: {F0F06860-19E6-4F69-AA5A-1DDAD27C078F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_186_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForuser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForUSER-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-01-01 21:40 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2010-06-18 15:26 - 2010-06-18 15:26 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-04 17:47 - 2016-09-04 17:47 - 01864384 _____ () C:\Users\user\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-07-16 12:43 - 2016-07-16 12:43 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-07-16 12:43 - 2016-07-16 12:43 - 00693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01400320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 01033728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-16 12:43 - 2016-07-16 23:56 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2012-11-26 22:54 - 2012-11-26 22:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2016-08-06 15:26 - 2016-03-09 07:28 - 03306496 _____ () C:\Program Files (x86)\BlueStacks\libGLESv2.dll
2016-12-21 15:43 - 2016-12-21 15:43 - 68763736 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\opera.dll
2016-12-21 15:43 - 2016-12-21 15:42 - 01893976 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\libglesv2.dll
2016-12-21 15:43 - 2016-12-21 15:42 - 00086616 _____ () C:\Program Files (x86)\Opera\42.0.2393.94\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [119]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0411dd.com -> 0411dd.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0511zfhl.com -> 0511zfhl.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0632qyw.com -> 0632qyw.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\1001movie.com -> 1001movie.com

Da befinden sich 6067 mehr Seiten.


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2014-12-11 21:28 - 00000027 ____N C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{98c5018e-39e1-4440-88a9-2348368e3c8a}.JPG
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Amazon Music => "C:\Users\user\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: HPWirelessAssistant => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
MSCONFIG\startupreg: MDS_Menu => "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
MSCONFIG\startupreg: Olympus ib => "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Spotify => "C:\Users\user\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\user\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "Memeo Instant Backup"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Amazon Music"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "Advanced SystemCare 9"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\StartupApproved\Run: => "BlueStacks Agent"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808
FirewallRules: [{8E673705-01AD-4D38-85A1-6F163CE9B1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{13A19B5C-2266-4790-9AD4-A62C9D304751}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9AEBF3E5-5082-48B7-9930-ABBBBBD5C1E4}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{4E042324-1C0E-4252-AA59-53B4D6D1232E}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E407A208-AEDB-401D-80AA-604C425BC60A}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{8868062B-EA35-4A20-921F-27A414C21E67}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{FDDAE072-A898-44DA-B52D-889EBB97B36A}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E942A137-9566-4C84-B356-D6D3B81A2F07}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0F5B53DF-7C27-4124-A064-838D1BEE70F4}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{31F37177-7815-408F-8409-318F4598D580}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{30C28231-B4B5-4F45-B163-2FC6E3DE683D}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3FB135E8-2339-4458-91EF-3B3F02ED3291}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{F1AE4AB3-3D59-4F06-A9D4-C8A2ABDBF552}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C0891F06-BB9A-4793-9326-09146DAD2A48}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B0CB946D-69B1-4409-BF44-E158494040A8}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{874D0741-F421-47C0-97C1-4AFEFE1275FE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{356474A1-932B-449D-8EDD-3F539A57F4F2}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{E763AF9E-7EFB-4E82-802F-9AD66975E178}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{5B4A8F87-8B8F-48B8-99EB-394D1FA69899}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{A7F394A0-E7F8-4D59-AF98-EB291E44F6FB}] => C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{9B5A5AC2-3403-45DC-8C6F-3856C856547A}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{51F9F022-CF46-4E51-998A-55FEA5EF4B9F}] => C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{63FC4A14-1B2C-43BB-8D6B-6C720416666F}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{CABEC949-8703-4788-B3D5-9F557F38DD57}] => C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{40F4FD40-E093-40C3-8AFB-67D752AEFD10}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C4178D55-7200-4F02-94AE-E1356BD82B71}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{A2D6469B-2CCB-4250-BE88-413E325B8A66}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{0F7520B5-F22F-4601-B11D-A7E68EBE92AC}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4FC874CD-4833-45BF-B5DE-1241EE4F38E7}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{291A0EAA-4592-4882-9735-8B0C8CFC7B91}] => C:\Program Files (x86)\TV-Browser\tvbrowser_noDD.exe
FirewallRules: [{B27AB1EE-B334-40C8-B7DB-95EE6DE098BF}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{66E78BD3-5261-4B11-9A16-4C62B6B28CD0}] => C:\Program Files (x86)\TV-Browser\tvbrowser.exe
FirewallRules: [{B50431A0-B939-4DF7-92C6-F1FA0F5CE94E}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [{D2902F6A-4F9B-4CC9-B683-23C2111146F7}] => C:\Users\user\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{61B1A450-899D-4A27-BB9A-EC71F0442647}] => C:\Users\user\AppData\Roaming\Spotify\spotify.exe
FirewallRules: [{AF8A86E7-57A8-4DF6-A164-477519A6FD29}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{70DE82FA-534C-45A6-9DC3-EDC5FE549930}] => C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{03D24FD1-2C18-4464-A429-4A020B58C602}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{1A550A5B-D2F0-4CC3-947B-B8A09C0AB2B8}] => C:\Program Files (x86)\Electronic Arts\FIFA 14\Game\fifa14.exe
FirewallRules: [{EEFD8A00-EB75-4B23-B8C3-BE0BDE9BD099}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{063C606F-67AB-46D1-85C8-B2F7F4DA57C3}] => C:\Program Files (x86)\Steam\steamapps\common\left 4 dead\left4dead.exe
FirewallRules: [{01E85985-2672-4FF8-8855-92687C1EE44A}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{208C33A8-C683-4656-B293-6382E99813AA}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{D96C908F-A1AA-4C9B-94B1-C4DE6976EEFD}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{85404721-B741-4262-9564-1FA3F80042FB}] => C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{C68BBCD4-EC8A-4852-819A-12D33ABD613B}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{D22E3925-6A3D-4A4A-B2F6-BAEB58216513}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{064BF8B4-7346-4EFA-AB2B-EC7EDF23CD61}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{55EE3B37-D1A3-4E2B-8BD8-B67E133C2F97}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3_d3d11.exe
FirewallRules: [{EF41ACED-E7EF-4E9F-A55C-98623094A35D}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{954F5189-DBC1-4F87-BE81-09A3C0306AEC}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\farcry3.exe
FirewallRules: [{E54DE16B-C314-420D-A022-5066CF8C4300}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{ABE3AEE3-E8B0-4A74-BCF5-C9AF7391E13F}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C26A142F-DE3B-401C-AFD6-D03971353D71}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A60458C5-2BA1-4156-A106-1BBE590C375E}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C30283D4-B0EB-4D2D-8393-067CFC0F7A1C}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{7802C9AF-0D81-4F91-A5A7-2905F9C02439}] => C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{6E9841AA-A551-429B-98FD-E5A1A17D3C8D}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{8C122C83-6BFA-49F2-971D-024D8253932A}] => C:\Program Files (x86)\Opera\opera.exe
FirewallRules: [{A639776A-6546-4D5D-9EB2-27BE3E62A017}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{D96B78E8-9C57-4C75-B499-F8CFCF24CD33}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD_Demo.exe
FirewallRules: [{AD615D88-6DCE-423A-B5D0-CD8643357ADA}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{F6DBC4DC-AA11-4B53-934A-3E707AD13002}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\srcds.exe
FirewallRules: [{A8C1A975-0625-40D5-9A34-5A5BAF2B9340}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{AE59F461-BBCA-4B4A-8EB5-7A3F5D006453}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7142AA43-3C27-4E61-A65E-075822D7DBEF}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6F08754B-0CEB-4B20-9890-FB34686FB13C}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{4BC24ADB-9A49-4A59-AF53-103A7320300B}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{7635E990-AB5C-4B51-8CC3-61EEAEC0D388}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2DE2C132-9CD8-47CA-8E69-1B7F9E9EF4B0}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{91F9E95F-170F-441F-A02F-23CB74DA24CC}] => %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{57F21F45-728A-48BB-A8B1-5041AF2EB35C}] => %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{1F47A498-2850-446C-ADBF-2C66298E2F3A}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{A8FF8FB6-FA45-4F86-A108-78F6753B0A9D}] => C:\Program Files (x86)\Steam\steamapps\common\resident evil operation raccoon city\RaccoonCity.exe
FirewallRules: [{8E27E693-AD9E-4934-8835-76D8A4762952}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{45127CE1-A84B-4404-919C-B3F9F3F341A9}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\bin\SDKLauncher.exe
FirewallRules: [{2D6FACDF-7F06-4729-9BB0-1E2FE986705E}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [{CA8A2016-77F1-4F3A-8C49-CD85C5C26186}] => C:\Program Files (x86)\Steam\steamapps\common\alien swarm\swarm.exe
FirewallRules: [UDP Query User{3E4E805B-1D69-43EE-8FD0-665D6F4AF1E4}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [TCP Query User{B87F9D58-A3A3-412F-BAA8-7C61B1AC6A22}C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe] => C:\program files (x86)\steam\steamapps\common\lost planet 2\lp2dx9.exe
FirewallRules: [UDP Query User{5C478DCE-8519-40EC-A6A9-B33BB585DD80}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{E81B8F49-EBB1-4FCC-8E2F-2E960B153433}C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe] => C:\program files\hp\hp officejet 6500 e710a-f\bin\hpnetworkcommunicator.exe
FirewallRules: [{F7CBA578-7BD7-4E9D-80B1-884974C8CF3B}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{996C8DE2-CF76-43D6-B33F-B2607630CC27}] => C:\Program Files (x86)\Steam\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{A3596081-F015-4063-B20D-52BCE3DDCC48}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{2E1E54D2-790E-4918-998C-E41C3F686B7A}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE_Unrestricted.exe
FirewallRules: [{B52D967B-1499-4DFD-BB78-E57AA78012CB}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{A7F12640-0647-4944-B82C-FEC01404A261}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the second encounter\Bin\SamHD_TSE.exe
FirewallRules: [{286AE560-31FB-4C76-8037-A5F593CA3EE7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{4EC6BC05-4EC8-4B51-9BCC-05352CA84A28}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam hd the first encounter\Bin\SamHD.exe
FirewallRules: [{7D42A802-CE2C-474D-8047-0CFB0E70F172}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{32DF9563-49BB-4154-AD3D-36C48511F136}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\sam3_unrestricted.exe
FirewallRules: [{227A1731-3D27-4924-A41C-EEB2BCAA8C74}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{B78ABD7B-20E3-4E4A-8D45-F82C8DAD45C7}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam 3\Bin\Sam3.exe
FirewallRules: [{044807F4-73EE-470D-8AC3-CCD80DA3A443}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{766CFF0B-FD3E-45B9-AB6B-AA9E62CEE219}] => C:\Program Files (x86)\Steam\steamapps\common\lost planet 2\Launcher.exe
FirewallRules: [{D675F046-E9D8-4BE4-B288-801D2A549914}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{4AB576B6-A159-416B-9851-339CE9E24874}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousModeler.exe
FirewallRules: [{57A3E5A2-BA35-4F7B-93C6-6466872E7F58}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{27D6BF9C-6D2A-414B-B953-06FC49F57E16}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousEditor.exe
FirewallRules: [{460EE69F-7787-4271-9B4D-66DEC6CF4BFE}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{48870B22-94A0-4D44-9C20-59C47B375A46}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the second encounter\Bin\SeriousSam.exe
FirewallRules: [{D955B1B7-7559-4AA4-B255-F31E3C5731D6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{7A11A34F-7B53-48C5-AB1D-870876AB806C}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousModeler.exe
FirewallRules: [{4B42EDB3-5480-4273-BC0D-FB8789207389}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{FFF8DD45-0A6C-4C55-A324-4480C8260D81}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousEditor.exe
FirewallRules: [{0092FC42-953C-4AED-A3BC-70F296CF8A9D}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{24CD30F7-8932-483E-A58C-19CFE73005C6}] => C:\Program Files (x86)\Steam\steamapps\common\serious sam classic the first encounter\Bin\SeriousSam.exe
FirewallRules: [{1709CBB8-9BA4-4BD9-9160-8D6DCFC4F723}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{7F55FD67-FFB9-4883-858C-19B47539D306}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{ACBCF7BD-8E2B-4704-A9B9-25959C70BFCF}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{30C11C2B-24A9-4FAE-B74C-6F076948638D}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{4B38B008-640F-4945-AB11-F8E74D00D58A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F91AA893-804A-4132-9BAD-F87EAC975D48}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D76014A0-C5AF-4CE5-A07D-0B4B483D1C22}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{14FCBF9D-0B9C-45BD-AF49-8E7197C03B8A}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{EC3BC8F2-D9B2-4991-B013-CAABD3AC9431}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{67EABBE0-D980-4E04-8B3A-E07FB8BBA317}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A8FCFFD4-3FEE-4ED9-A92C-D7EC912543B7}] => C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{5B0C1529-E204-4488-ACD0-F3D316941167}] => LPort=1900
FirewallRules: [{DC5BDE06-429E-4843-BBB6-7122042FC955}] => LPort=2869
FirewallRules: [{C39DCC74-AFE9-429E-8C03-2250B70D4761}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{9DA76145-487E-464A-A848-2E18577A7733}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{FE961DF6-87C6-4EB3-BF54-82F3632AA1B2}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{048FC1AF-4D52-4577-AA5D-DD99CF968049}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{C618DC49-62F3-49D8-A017-60E1E7FD0B81}] => C:\Program Files (x86)\Eurowin\MaxTax Deluxe\STMAXTAX.exe
FirewallRules: [{3802A6F0-AC14-4C62-97BD-C52DA309C89A}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{8A88397E-E582-420F-A3A0-8CC452CE5EDC}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3318B191-229E-4D4F-90E3-CB035B389072}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{F0ADB167-9BF5-42A0-BB8F-CF93BB7958A7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{75C6B1D1-960D-4224-ABE4-5FBBE02A35A9}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{809885C9-732F-4AFE-8F51-9C1A4DE1890D}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\VersionCheck\VersionCheck.exe
FirewallRules: [{94287C6E-F107-457C-B628-6B190AB710DE}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{3623F4D7-FE84-4C68-8805-86379A370233}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\tvtvSetup\tvtv_Wizard.exe
FirewallRules: [{D9808767-F417-4B1C-848A-3992F5E4C58C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{C8BFDC59-9E6E-4BD4-9B57-92833B75451C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{004A5073-6314-4614-8A27-1B69DA833FEB}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{B36FA190-D0E7-467F-AD32-B21B6F86504C}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
FirewallRules: [{A75C2943-C6DF-4FCD-9F4F-34BF0682B877}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{7C27A078-B910-44C6-8164-C72C30104A92}] => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\InstTool.exe
FirewallRules: [{23F6C804-249E-4888-A947-8DBA9F4EC9AB}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{47D650E5-4537-4BE6-9E16-CEC558BDC02B}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\HPNetworkCommunicator.exe
FirewallRules: [{F50A3F31-1AFE-4AC2-9683-A9933D7D92B7}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{C58AEA26-09C2-4340-B882-481D0742107A}] => C:\Program Files\HP\HP Officejet 6500 E710a-f\Bin\DeviceSetup.exe
FirewallRules: [{CD3A984D-11A4-4440-AD9F-2119525252B0}] => LPort=3724
FirewallRules: [{71F80CCC-857B-45AF-87B3-DBFCCC8D2A2B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F7765463-7C6F-44C0-8B37-EC3EF6F1FACA}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CFBA7366-2C82-4BE3-8272-33356E93847E}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{40EC9991-C978-4327-9043-4A8DDA45B461}] => C:\Program Files (x86)\EasyBits For Kids\Programs\My First Browser\MyFirstBrowser.exe
FirewallRules: [{346D96C5-74BF-41DD-9C4C-D085B49F2965}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{9EA2066F-E4A2-43C8-AD02-2E39901F24A1}] => svchost.exe
FirewallRules: [{984F5B7A-65EC-4739-8177-460EACD23F8D}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{CB2D5697-3B2A-458E-9E2E-0111C7978A7F}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{FEF02A7D-8360-4A97-B42B-47D960F93CE0}] => C:\Program Files (x86)\Scan2PDF Professional 17\SCAN2PDF17pro.exe
FirewallRules: [{21501978-E708-44C9-8E84-4BBC0DD912BF}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{27348E6C-547E-457A-ACC3-98EA777AB73F}] => C:\Program Files (x86)\ScanToPDF 18\SCAN2PDF18pro.exe
FirewallRules: [{8650EABB-65D9-418D-8480-58CF60CFDD38}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{7E9A1500-520A-4167-B665-9B20925810AD}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{4BBB084E-C450-4C8D-8612-E7D52CDC4278}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [{9581B01B-0259-4DAC-B40E-31168746C8CE}] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanion.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Eurowin\maxtax\SSONLINE.EXE] => Enabled:SSONLINE

==================== Wiederherstellungspunkte =========================

02-01-2017 20:50:58 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/05/2017 01:41:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: USER-HP)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2147023673. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (01/05/2017 09:47:50 AM) (Source: MsiInstaller) (EventID: 1002) (User: USER-HP)
Description: Nicht erwarteter oder fehlender Wert (Name: "PackageName", Wert: "") für Schlüssel "HKLM\Software\Classes\Installer\Products\D139E7FE48CDB174D86B8A3385904547\SourceList".

Error: (01/05/2017 07:01:05 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest.

Error: (01/04/2017 09:39:38 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest.

Error: (01/04/2017 09:35:35 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\VONWAC~1\AppData\Local\Temp\scoped_dir8344_17571\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest.

Error: (01/04/2017 09:35:33 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\users\vonwac~1\appdata\local\temp\scoped_dir8344_17571\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest.

Error: (01/04/2017 08:02:55 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\WINDOWS\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (01/04/2017 08:02:54 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.

Error: (01/04/2017 08:02:54 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (01/04/2017 08:02:54 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\WINDOWS\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.


Systemfehler:
=============
Error: (01/05/2017 01:09:06 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (01/05/2017 01:09:06 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\VONWAC~1\AppData\Local\Temp\ehdrv.sys

Error: (01/05/2017 01:09:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (01/05/2017 01:09:05 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\VONWAC~1\AppData\Local\Temp\ehdrv.sys

Error: (01/05/2017 01:09:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (01/05/2017 01:09:05 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\VONWAC~1\AppData\Local\Temp\ehdrv.sys

Error: (01/05/2017 01:09:05 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (01/05/2017 01:09:05 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\VONWAC~1\AppData\Local\Temp\ehdrv.sys

Error: (01/05/2017 01:09:04 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (01/05/2017 01:09:04 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\VONWAC~1\AppData\Local\Temp\ehdrv.sys


CodeIntegrity:
===================================
  Date: 2016-12-27 20:51:30.555
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.474
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.443
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.412
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:01:28.373
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.222
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.191
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.113
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 20:00:58.087
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-02 19:21:48.087
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Prozentuale Nutzung des RAM: 77%
Installierter physikalischer RAM: 3893.86 MB
Verfügbarer physikalischer RAM: 889.92 MB
Summe virtueller Speicher: 7861.86 MB
Verfügbarer virtueller Speicher: 4173.24 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:281.98 GB) (Free:28.71 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (RECOVERY) (Fixed) (Total:15.82 GB) (Free:2.22 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.15 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive g: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.08 GB) FAT32
Drive i: () (Removable) (Total:60.34 GB) (Free:51.46 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 298.1 GB) (Disk ID: CB9E9924)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=282 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

========================================================
Disk: 1 (Size: 60.4 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================
         

FRST

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
durchgeführt von USER (Administrator) auf USER-HP (05-01-2017 21:19:29)
Gestartet von C:\Users\USER\Desktop
Geladene Profile: USER & DefaultAppPool (Verfügbare Profile: USER & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Opera)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Sony) C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\42.0.2393.94\opera.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8849152 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-04-12] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3936936 2015-12-21] (Synaptics Incorporated)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-01] (Symantec Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Memeo Instant Backup] => C:\Program Files (x86)\Memeo\AutoBackup\MemeoLauncher2.exe [136416 2011-09-16] (Memeo Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [210432 2016-07-05] (Geek Software GmbH)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [Amazon Music] => C:\Users\USER\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-12-15] ()
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2088832 2016-12-22] (Sony)
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\RunOnce: [Uninstall C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\USER\AppData\Local\Microsoft\OneDrive\17.3.6390.0509"
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2010-07-20] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\buShell.dll [2016-11-12] (Symantec Corporation)
ShellIconOverlayIdentifiers: [01Mediencenter_InSync] -> {77BC4082-DB5F-439A-8DC8-F9E24A63B0DE} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [02Mediencenter_ToSync] -> {528EE335-5034-4EFC-834E-63E5F02D2BC2} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)
ShellIconOverlayIdentifiers: [03Mediencenter_Failed] -> {6066ADF0-9EB0-43E5-ADB6-990F5A3B979C} => C:\Users\USER\AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll [2013-04-18] (Deutsche Telekom AG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1491a579-74bf-46d2-a369-35fdd43a436c}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1773077131-3649358975-729568603-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM-x32 -> {D73A43AE-4635-44F1-826A-90D835547843} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {F0CDD231-0703-4978-AC1D-37B3315BC4ED} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {51D8F101-A2FE-4F9C-9550-4F67650AF170} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1773077131-3649358975-729568603-1000 -> {62E05E07-B0D5-4721-9A89-EE3A1E4DD450} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-21] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll [2010-04-15] (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\coIEPlg.dll [2016-11-12] (Symantec Corporation)
DPF: HKLM {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab
DPF: HKLM {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1262.cab

FireFox:
========
FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default [2017-01-05]
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\2i4mdlek.default -> SuchMaschine
FF Homepage: Mozilla\Firefox\Profiles\2i4mdlek.default -> chrome://unitedtb/content/newtab/startpage.xhtml
FF Extension: (GMX MailCheck) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\browser-mailcheck@gmx.net [2016-03-01]
FF Extension: (Mailvelope) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-03-01]
FF SearchPlugin: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\2i4mdlek.default\searchplugins\yahoo-avast.xml [2014-06-27]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-10] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-21] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon [2016-12-27]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_22.8.1.14\coFFAddon
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-20] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-20] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1221171.dll [2015-10-19] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll [2010-09-01] (Oberon-Media )
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2011-02-21] (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101714.dll [2012-08-30] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-1773077131-3649358975-729568603-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-06-28] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2014-10-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2014-10-24] (Apple Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR DefaultSearchURL: Default -> hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11908
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?q={searchTerms}&li=ff
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default [2017-01-03]
CHR Extension: (Google Präsentationen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-07]
CHR Extension: (Google Docs) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-07]
CHR Extension: (Google Drive) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-17]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-17]
CHR Extension: (Norton Security Toolbar) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2016-11-20]
CHR Extension: (Google-Suche) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-19]
CHR Extension: (Google Tabellen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-07]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfoabcdjalmeenbjjngidappmppchblc [2016-11-04]
CHR Extension: (Google Docs Offline) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-17]
CHR Extension: (Norton Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmobhkkblcgdifigjglcjneplefbkmh [2016-11-04]
CHR Extension: (Norton Identity Safe) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2016-11-20]
CHR Extension: (HP Network Check Launcher) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkfpchpiljkaemlpmpebnglgkomamfeo [2016-11-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-17]
CHR Extension: (Google Mail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-19]
CHR Extension: (Chrome Media Router) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-04]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\Exts\Chrome.crx [2016-12-27]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
OPR Extension: (Foxtrick (Beta)) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\gpfggkkkmpaalfemiafhfobkfnadeegj [2016-11-08]
OPR Extension: (Deaktivierungs-Add-on von Google Analytics) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\hmffjpdmbgflojiohllanjaggdenggdo [2015-10-15]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\USER\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2016-10-17]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2017-01-05] (SurfRight B.V.)
R3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
S3 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-05-19] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-11-29] (Malwarebytes)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\22.8.1.14\N360.exe [289080 2016-11-12] (Symantec Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2016-11-24] (Electronic Arts)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [310016 2016-04-12] (Realtek Semiconductor)
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S3 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736 2015-12-21] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7183632 2016-07-18] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976 2015-06-04] (Advanced Micro Devices, Inc.)
S3 andnetadb; C:\WINDOWS\System32\Drivers\lgandnetadb.sys [31744 2012-07-03] (Google Inc)
S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [111120 2016-05-17] (Advanced Micro Devices)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\BASHDefs\20161220.001\BHDrvx64.sys [1874136 2016-12-20] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
R2 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
R1 ccSet_N360; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\ccSetx64.sys [174328 2016-11-12] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [497368 2016-09-22] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156888 2016-12-27] (Symantec Corporation)
R0 gfibto; C:\WINDOWS\System32\drivers\gfibto.sys [14456 2012-12-03] (GFI Software)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [30424 2016-12-30] (Sony Mobile Communications)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-01-01] (REALiX(tm))
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\IPSDefs\20170104.001\IDSvia64.sys [1038032 2016-12-26] (Symantec Corporation)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [250816 2017-01-03] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 PSI; C:\WINDOWS\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-23] (Realtek Semiconductor Corp.) [Datei ist nicht signiert]
S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [936192 2016-05-17] (Realtek                                            )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [413912 2016-04-12] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-12-21] (Synaptics Incorporated)
R3 SRTSP; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSP64.SYS [784624 2016-11-12] (Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SRTSPX64.SYS [49400 2016-11-12] (Symantec Corporation)
R0 SymEFASI; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SYMEFASI64.SYS [1628888 2016-11-12] (Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\N360x64\1608010.00E\SymELAM.sys [24192 2016-11-12] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [100592 2016-12-27] (Symantec Corporation)
R1 SymIRON; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\Ironx64.SYS [289520 2016-11-12] (Symantec Corporation)
R1 SymNetS; C:\WINDOWS\system32\drivers\N360x64\1608010.00E\SYMNETS.SYS [567512 2016-11-12] (Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\22.8.1.14\Definitions\SDSDefs\20161227.007\EX64.SYS [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 07:48 - 2017-01-05 07:48 - 00001974 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2017-01-05 07:48 - 2017-01-05 07:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2017-01-05 07:48 - 2017-01-05 07:48 - 00000000 ____D C:\Program Files\HitmanPro
2017-01-05 07:09 - 2017-01-05 21:14 - 00000000 ____D C:\ProgramData\HitmanPro
2017-01-05 07:09 - 2017-01-05 07:09 - 11581544 _____ (SurfRight B.V.) C:\Users\USER\Desktop\HitmanPro_x64.exe
2017-01-05 07:03 - 2017-01-05 07:03 - 00006217 _____ C:\Users\USER\Desktop\eset.txt
2017-01-04 21:35 - 2017-01-04 21:35 - 02870984 _____ (ESET) C:\Users\USER\Downloads\esetsmartinstaller_deu.exe
2017-01-03 23:26 - 2017-01-03 23:27 - 00001171 _____ C:\Users\USER\Desktop\mbam1.txt
2017-01-03 23:22 - 2017-01-04 00:47 - 00074007 _____ C:\Users\USER\Desktop\Addition.txt
2017-01-03 23:19 - 2017-01-05 21:22 - 00030420 _____ C:\Users\USER\Desktop\FRST.txt
2017-01-03 23:17 - 2017-01-03 23:25 - 00001185 _____ C:\Users\USER\Desktop\mbam.txt
2017-01-03 22:05 - 2017-01-03 23:33 - 00056532 _____ C:\Users\USER\Desktop\Fixlog.txt
2017-01-03 21:59 - 2017-01-03 21:59 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-03 20:10 - 2017-01-03 20:10 - 00024683 _____ C:\Users\USER\Desktop\Rechnung_13245477.pdf
2017-01-03 14:15 - 2017-01-03 14:15 - 02773681 _____ C:\Users\USER\Downloads\002014030.pdf
2017-01-02 21:48 - 2017-01-02 21:48 - 00000000 ____D C:\Users\USER\Desktop\FRST-OlderVersion
2017-01-02 18:29 - 2017-01-05 21:16 - 00000000 ____D C:\WINDOWS\Minidump
2017-01-02 17:34 - 2017-01-02 17:34 - 00000016 _____ C:\InjectIntoProcess crash
2017-01-01 21:41 - 2017-01-02 20:43 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-01 21:41 - 2017-01-02 20:43 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-01 21:40 - 2017-01-03 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-01 21:40 - 2017-01-01 21:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-01 21:40 - 2016-12-14 12:55 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-01-01 21:35 - 2017-01-02 20:48 - 01663040 _____ (Malwarebytes) C:\Users\USER\Desktop\JRT.exe
2017-01-01 21:34 - 2017-01-01 21:36 - 54199488 _____ (Malwarebytes ) C:\Users\USER\Desktop\mb3-setup-consumer-3.0.5.1299.exe
2017-01-01 21:25 - 2017-01-01 21:26 - 00566128 _____ (Malwarebytes) C:\Users\USER\Desktop\mbam-clean-2.3.0.1001.exe
2016-12-30 23:22 - 2016-12-30 23:22 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2016-12-30 23:21 - 2016-12-30 23:21 - 00811664 _____ C:\Users\USER\Downloads\mobiletrans_setup_full1296.exe
2016-12-30 22:45 - 2017-01-02 23:20 - 00002234 _____ C:\Users\Public\Desktop\Xperia Companion.lnk
2016-12-30 22:45 - 2016-12-30 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-12-30 22:45 - 2016-12-30 22:45 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-30 21:10 - 2017-01-02 23:17 - 49290112 _____ (Sony) C:\Users\USER\AppData\Local\pcc.exe
2016-12-30 12:38 - 2016-12-30 12:38 - 00030424 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggsomc.sys
2016-12-30 12:38 - 2016-12-30 12:38 - 00016088 _____ (Sony Mobile Communications) C:\WINDOWS\system32\Drivers\ggflt.sys
2016-12-30 12:37 - 2016-12-30 22:39 - 00000000 ____D C:\ProgramData\Sony Mobile
2016-12-30 12:37 - 2016-12-30 22:39 - 00000000 ____D C:\Program Files (x86)\Sony Mobile
2016-12-28 20:02 - 2016-12-28 20:02 - 00036250 _____ C:\Users\USER\Desktop\Rechnung_201312040496.pdf
2016-12-28 09:13 - 2016-12-28 09:13 - 00001204 _____ C:\20161228.txt
2016-12-27 23:02 - 2017-01-03 22:08 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-27 23:01 - 2017-01-02 21:48 - 02418176 _____ (Farbar) C:\Users\USER\Desktop\FRST64.exe
2016-12-27 23:00 - 2016-12-27 23:01 - 22851472 ____N (Malwarebytes ) C:\Users\USER\Desktop\mbam-setup-2.2.1.1043.exe
2016-12-27 21:15 - 2017-01-05 19:15 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton 360
2016-12-27 21:12 - 2016-12-27 21:12 - 00100592 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2016-12-27 21:12 - 2016-12-27 21:12 - 00008319 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2016-12-27 21:12 - 2016-12-27 21:12 - 00002386 _____ C:\Users\Public\Desktop\Norton 360.lnk
2016-12-27 21:12 - 2016-12-27 21:12 - 00000854 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.INF
2016-12-27 21:11 - 2016-12-27 21:12 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2016-12-27 21:11 - 2016-12-27 21:11 - 00000000 ____D C:\Program Files (x86)\Norton 360
2016-12-27 21:10 - 2016-12-27 21:10 - 00000000 ____D C:\Program Files (x86)\NortonInstaller
2016-12-27 20:23 - 2016-12-27 21:39 - 00000000 ____D C:\WINDOWS\System32\Tasks\Norton Remove and Reinstall
2016-12-27 20:20 - 2016-12-27 20:20 - 00000000 ____D C:\ProgramData\PCSettings
2016-12-27 20:18 - 2016-12-27 20:18 - 15359160 ____N (Symantec Corporation) C:\Users\USER\Desktop\NRnR.exe
2016-12-27 18:13 - 2016-12-27 18:13 - 00002088 _____ C:\Users\USER\Desktop\message-rfc822-attachment
2016-12-22 22:22 - 2016-12-22 22:22 - 04590795 _____ C:\Users\USER\Documents\Christmas letter 2016 .pages.pdf
2016-12-21 23:35 - 2016-12-21 23:35 - 00032507 _____ C:\Users\USER\Downloads\Einstellungszusage Wachholtz,Elger, .docx
2016-12-20 00:29 - 2016-12-20 00:29 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\7C003C78.sys
2016-12-19 22:21 - 2016-12-19 22:22 - 03977168 _____ C:\Users\USER\Downloads\AdwCleaner_6.041.exe
2016-12-19 22:13 - 2016-12-19 22:13 - 00002688 _____ C:\Users\USER\Documents\cc_20161219_221351.reg
2016-12-19 22:06 - 2016-12-19 22:08 - 08803648 _____ (Piriform Ltd) C:\Users\USER\Downloads\ccsetup525.exe
2016-12-19 21:16 - 2016-12-19 21:16 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-18 09:08 - 2016-12-18 09:08 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-18 09:08 - 2016-12-18 09:08 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-17 20:39 - 2016-12-17 20:39 - 04701691 _____ C:\Users\USER\Desktop\pepparkakshus-liten-stuga.pdf
2016-12-17 00:23 - 2016-12-17 00:23 - 00100080 ____H C:\WINDOWS\SysWOW64\mlfcache.dat
2016-12-17 00:22 - 2016-12-17 00:22 - 00001042 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00001030 _____ C:\Users\Public\Desktop\Fotobuchexpress24.lnk
2016-12-17 00:22 - 2016-12-17 00:22 - 00000000 ____D C:\Program Files (x86)\Fotobuchexpress24
2016-12-17 00:20 - 2016-12-17 00:20 - 00000000 _____ C:\Users\USER\Desktop\Fotobuchexpress24_4.0.exe
2016-12-16 15:42 - 2016-12-21 15:43 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 42.lnk
2016-12-13 21:34 - 2016-12-13 21:34 - 00645120 _____ C:\Users\USER\Documents\EhrenUrkunde.doc
2016-12-12 22:02 - 2016-12-12 22:02 - 00334939 _____ C:\Users\USER\Desktop\RE1_1212-20122016_fahrplan.pdf
2016-12-12 12:06 - 2016-12-12 12:06 - 00254432 _____ C:\Users\USER\Downloads\streetboccia.pdf
2016-12-11 23:33 - 2016-12-11 23:33 - 00076776 _____ C:\Users\USER\Documents\cc_20161211_233316.reg
2016-12-11 22:56 - 2016-12-11 22:56 - 02409674 _____ C:\Users\USER\Desktop\sony_xperia_m4_aqua.pdf
2016-12-11 22:06 - 2016-12-11 22:06 - 00012978 _____ C:\Users\USER\Downloads\NAS-SERVER_2016-12-10_0221.rom
2016-12-11 20:26 - 2016-12-11 20:26 - 00000000 ____D C:\Users\USER\Documents\Sony
2016-12-11 15:45 - 2016-12-11 15:46 - 47606656 _____ (Sony) C:\Users\USER\Downloads\XperiaCompanion.exe
2016-12-11 15:30 - 2016-12-11 15:30 - 02440207 _____ C:\Users\USER\Downloads\sony_xperia_m4_aqua.pdf
2016-12-10 15:34 - 2016-12-10 15:34 - 00000000 ____D C:\WINDOWS\Panther
2016-12-08 18:11 - 2016-12-08 18:11 - 00039010 _____ C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638.html
2016-12-08 18:11 - 2016-12-08 18:11 - 00000000 ____D C:\Users\USER\Desktop\WA628_User_Manual.pdf (PDF) - TeckNet Türklingel WA638_files
2016-12-07 21:28 - 2016-12-07 21:28 - 03719935 _____ C:\Users\USER\Desktop\Meine_Rechte.pdf
2016-12-06 07:54 - 2016-12-10 20:45 - 00000000 ____D C:\Users\USER\Desktop\Verknüpfungen-Fotobuch
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\Users\USER\AppData\Local\Lidl_Fotos
2016-12-06 00:15 - 2016-12-06 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lidl-Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\ProgramData\Lidl_Fotos
2016-12-06 00:13 - 2016-12-06 00:13 - 00000000 ____D C:\Program Files (x86)\Lidl_Fotos

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-05 21:19 - 2014-08-31 22:02 - 00000000 ____D C:\FRST
2017-01-05 21:16 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-05 21:13 - 2016-09-04 15:20 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-05 20:45 - 2016-09-05 13:49 - 00004186 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{72D328A8-4A53-40B0-B1CF-3A30C42B7B36}
2017-01-05 20:10 - 2014-08-17 07:44 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2017-01-03 22:14 - 2016-09-04 15:28 - 03598080 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-03 22:14 - 2016-07-16 23:51 - 01612696 _____ C:\WINDOWS\system32\perfh007.dat
2017-01-03 22:14 - 2016-07-16 23:51 - 00411226 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-03 22:08 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2017-01-03 22:07 - 2016-09-04 15:50 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-03 22:07 - 2016-07-16 07:04 - 01310720 _____ C:\WINDOWS\system32\config\BBI
2017-01-03 22:06 - 2010-12-04 12:45 - 00000000 ____D C:\Users\USER\AppData\LocalLow\Temp
2017-01-03 16:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-02 23:20 - 2016-09-04 15:23 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-02 18:31 - 2016-09-04 15:29 - 00000000 ____D C:\Users\USER
2017-01-01 20:38 - 2015-06-28 10:31 - 00000000 ____D C:\AdwCleaner
2016-12-31 23:06 - 2012-08-25 21:30 - 00000000 ____D C:\Users\USER\AppData\Roaming\TV-Browser
2016-12-31 13:53 - 2010-11-29 22:24 - 00000000 ____D C:\Users\USER\ho-hrf
2016-12-31 13:52 - 2016-02-29 14:22 - 00000000 ____D C:\Users\USER\Desktop\DT
2016-12-30 23:22 - 2009-07-14 04:20 - 00000000 ___RD C:\Users\Public\Documents
2016-12-30 22:37 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\catroot2
2016-12-30 12:38 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\DriverStore
2016-12-30 12:38 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\CatRoot
2016-12-29 09:08 - 2016-07-16 12:47 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-12-29 09:08 - 2016-04-08 15:47 - 00000946 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-12-29 09:08 - 2013-11-20 08:26 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-28 23:27 - 2010-12-09 14:24 - 00000000 ____D C:\Users\USER\AppData\Local\CrashDumps
2016-12-28 09:13 - 2015-10-19 16:57 - 00000000 ____D C:\ProgramData\Ashampoo
2016-12-28 01:47 - 2016-10-28 13:35 - 00004052 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-12-28 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-12-28 01:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-12-28 01:47 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64
2016-12-27 22:44 - 2011-04-15 16:52 - 00000000 ____D C:\Users\USER\AppData\Local\NPE
2016-12-27 21:35 - 2016-07-16 07:04 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-27 21:15 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Tasks
2016-12-27 21:12 - 2016-11-24 19:54 - 00003376 _____ C:\WINDOWS\System32\Tasks\Norton WSC Integration
2016-12-27 21:12 - 2016-07-16 12:47 - 00000340 ___SH C:\Users\Public\Desktop\desktop.ini
2016-12-27 21:12 - 2015-08-06 00:55 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2016-12-27 21:11 - 2010-10-12 09:13 - 00000000 ____D C:\ProgramData\Norton
2016-12-27 20:34 - 2016-11-20 08:45 - 00000396 _____ C:\WINDOWS\Tasks\HPCeeScheduleForUSER.job
2016-12-25 11:08 - 2016-11-20 20:57 - 00000000 ____D C:\Users\USER\Desktop\BIRTE
2016-12-25 08:36 - 2016-11-20 08:45 - 00003320 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForUSER
2016-12-22 22:22 - 2010-11-27 13:55 - 00000000 ___RD C:\Users\USER\Documents
2016-12-21 21:50 - 2016-07-17 17:00 - 00000000 ____D C:\Users\USER\MEDION NAS TOOL
2016-12-21 21:47 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-12-21 21:47 - 2014-08-05 20:31 - 00000000 ____D C:\Users\USER\AppData\Local\Diagnostics
2016-12-21 15:43 - 2016-09-08 12:36 - 00003992 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1425561347
2016-12-21 15:43 - 2010-11-28 20:42 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-20 13:27 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WDI
2016-12-19 22:09 - 2016-03-28 18:25 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-12-18 20:40 - 2014-10-22 11:33 - 00000000 ____D C:\1a-Pitt
2016-12-18 16:16 - 2011-10-21 14:16 - 01310720 ___SH C:\Users\Großadmin\ntuser.dat
2016-12-16 21:55 - 2016-07-16 07:04 - 33816576 _____ C:\WINDOWS\system32\config\COMPONENTS
2016-12-15 19:21 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\assembly
2016-12-15 09:10 - 2015-07-19 21:04 - 00002264 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-11 20:27 - 2014-07-05 09:15 - 00000000 ____D C:\Users\USER\AppData\Roaming\Apple Computer
2016-12-10 20:29 - 2016-11-29 17:09 - 00000000 ____D C:\Program Files\Pixum
2016-12-10 16:17 - 2016-01-12 22:54 - 00000000 ____D C:\Program Files\OnlineFotoservice
2016-12-10 15:56 - 2011-01-02 12:36 - 00000000 ____D C:\Users\USER\AppData\Local\ElevatedDiagnostics
2016-12-09 18:57 - 2010-11-27 13:55 - 00000000 ___RD C:\Users\USER\Pictures
2016-12-09 15:14 - 2011-04-25 10:59 - 00000356 _____ C:\WINDOWS\Tasks\HPCeeScheduleForUSER-HP$.job
2016-12-08 15:58 - 2011-04-16 17:20 - 00000000 ____D C:\Users\USER\AppData\Roaming\Skype
2016-12-07 12:37 - 2016-09-06 17:37 - 00003292 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForUSER-HP$

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2011-02-27 21:26 - 2011-06-27 17:59 - 0001854 _____ () C:\Users\USER\AppData\Roaming\GhostObjGAFix.xml
2011-01-09 19:51 - 2011-01-09 20:10 - 0003584 _____ () C:\Users\USER\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-12-30 21:10 - 2017-01-02 23:17 - 49290112 _____ (Sony) C:\Users\USER\AppData\Local\pcc.exe
2013-05-01 17:20 - 2013-05-01 17:30 - 0000600 _____ () C:\Users\USER\AppData\Local\PUTTY.RND
2014-08-08 21:43 - 2014-08-08 21:43 - 0000218 _____ () C:\Users\USER\AppData\Local\recently-used.xbel
2011-10-21 13:15 - 2014-10-18 11:48 - 0007595 _____ () C:\Users\USER\AppData\Local\resmon.resmoncfg
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
2010-07-20 15:11 - 2010-07-20 15:11 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
2010-07-20 15:06 - 2010-07-20 15:07 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2010-10-12 09:09 - 2010-10-12 09:09 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
2010-07-20 15:06 - 2010-07-20 15:06 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2010-07-20 15:07 - 2010-07-20 15:10 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2010-10-12 09:10 - 2010-10-12 09:10 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\USER\AdwCleaner_5.037.exe
C:\Users\USER\GMX_Firefox_Setup.exe


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-03 16:28

==================== Ende von FRST.txt ============================
         

Hitman Pro

	
	
HitmanPro 3.7.15.281
www.hitmanpro.com

   Computer name . . . . : USER-HP
   Windows . . . . . . . : 10.0.0.14393.X64/4
   User name . . . . . . : USER-HP\user
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2017-01-05 07:48:46
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 9m 58s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 25

   Objects scanned . . . : 2.419.321
   Files scanned . . . . : 80.766
   Remnants scanned  . . : 738.014 files / 1.600.541 keys

Suspicious files ____________________________________________________________

   C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZIB8DP3T\FRST64[1].exe
      Size . . . . . . . : 2.418.176 bytes
      Age  . . . . . . . : 2.4 days (2017-01-02 21:48:47)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 7B1EAFF262CB947F39609AA61124E60FD28DCD3CCD592DA5826588D3ECDA1E8F
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
         -2.2s C:\Users\user\AppData\Local\Microsoft\Windows\INetCookies\PFOAYABW.cookie
         -1.7s C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\56DPCZFK\82[1].htm
         -0.8s C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\EWX1S3GI\82[1].htm
         -0.8s C:\Users\user\AppData\Local\Microsoft\Windows\INetCookies\I00G6T2M.cookie
         -0.2s C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AF4EE75E3A4ABA658C0087EB9A0BB5B_556BB0FF4D382D90E7703209690E089E
         -0.2s C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AF4EE75E3A4ABA658C0087EB9A0BB5B_556BB0FF4D382D90E7703209690E089E
          0.0s C:\Users\user\Desktop\FRST64.exe
          0.0s C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZIB8DP3T\FRST64[1].exe
          2.5s C:\Users\user\Desktop\FRST-OlderVersion\

   C:\Users\user\AppData\Local\PunkBuster\FC3\pb\pbcl.dll
      Size . . . . . . . : 953.886 bytes
      Age  . . . . . . . : 1286.7 days (2013-06-28 13:20:29)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 6D5E2CD4A7A43EB00B600BA783AD3BEE6B817C030A40600D40367173A6ECEB13
      Fuzzy  . . . . . . : 29.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.

   C:\Users\user\AppData\Local\PunkBuster\FC3\pb\pbcls.dll
      Size . . . . . . . : 953.886 bytes
      Age  . . . . . . . : 1286.7 days (2013-06-28 13:20:29)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 6D5E2CD4A7A43EB00B600BA783AD3BEE6B817C030A40600D40367173A6ECEB13
      Fuzzy  . . . . . . : 29.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.

   C:\Users\user\AppData\Local\PunkBuster\FC3\pb\PnkBstrK.sys
      Size . . . . . . . : 138.032 bytes
      Age  . . . . . . . : 1286.7 days (2013-06-28 13:20:55)
      Entropy  . . . . . : 7.8
      SHA-256  . . . . . : ABAF3FACF01E10E4C685F79C3B9E5D2118B3CF8629C4277EBE035B2A10474148
      RSA Key Size . . . : 2048
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 22.0
         The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program contains PE structure anomalies. This is not typical for most programs.
         The file is a device driver. Device drivers run as trusted (highly privileged) code.
         Program is code signed with a valid Authenticode certificate.

   C:\Users\user\Desktop\FRST-OlderVersion\FRST64.exe
      Size . . . . . . . : 2.420.736 bytes
      Age  . . . . . . . : 8.3 days (2016-12-27 23:01:32)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : E58ADE7FA354A1F256B4608AFD698C379E33FF23D5F62C95BDFC33995C230745
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 23.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

   C:\Users\user\Desktop\FRST64.exe
      Size . . . . . . . : 2.418.176 bytes
      Age  . . . . . . . : 2.4 days (2017-01-02 21:48:47)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 7B1EAFF262CB947F39609AA61124E60FD28DCD3CCD592DA5826588D3ECDA1E8F
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
         -2.2s C:\Users\user\AppData\Local\Microsoft\Windows\INetCookies\PFOAYABW.cookie
         -1.7s C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\56DPCZFK\82[1].htm
         -0.8s C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\EWX1S3GI\82[1].htm
         -0.8s C:\Users\user\AppData\Local\Microsoft\Windows\INetCookies\I00G6T2M.cookie
         -0.2s C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AF4EE75E3A4ABA658C0087EB9A0BB5B_556BB0FF4D382D90E7703209690E089E
         -0.2s C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AF4EE75E3A4ABA658C0087EB9A0BB5B_556BB0FF4D382D90E7703209690E089E
          0.0s C:\Users\user\Desktop\FRST64.exe
          0.0s C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZIB8DP3T\FRST64[1].exe
          2.5s C:\Users\user\Desktop\FRST-OlderVersion\

   C:\Users\user\Desktop\x\DeTo\virus\FRST64.exe
      Size . . . . . . . : 2.104.832 bytes
      Age  . . . . . . . : 857.4 days (2014-08-31 22:01:46)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : B0F53A6B7B2E0E3F72C08762D8264E20D56D07446D4194763929863818CC7193
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 22.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.


Potential Unwanted Programs _________________________________________________

   HKLM\SOFTWARE\Classes\Interface\{050000CE-F9D5-4145-9490-DB9E7E40FDF9}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{476DAA21-E0C3-4EEB-B27B-5F4123334ABA}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{7DE6769A-E482-4AB7-8ED9-0CAFEA11D687}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{813F8915-C940-44ED-ADED-8B782D85FA87}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{8D182E50-D646-49FF-B518-34B09BDF5375}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{9563917C-2D1F-4E92-A90F-01E470099B68}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{A182C848-76B5-4473-B742-A688D38982A1}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{AC5C40D0-DC3A-4406-A35C-9102C5FA4D7E}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{C336533A-5E74-457F-AD87-9598F4AADF49}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{C8C14216-4D34-4866-B66E-BC25B98FCCCA}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{E54B3747-7507-43B0-8537-A64189F28B35}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{F761BABE-0622-4DCE-A1B0-9D1BCA75DFEF}\ (Iminent)
   HKLM\SOFTWARE\Classes\Interface\{F98F0DE1-9B6F-4C87-8E08-6EE5928D8558}\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\RegClean Pro_DEFAULT.job (RegClean Pro)
   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\RegClean Pro_DEFAULT.job.fp (RegClean Pro)
   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\RegClean Pro_UPDATES.job (RegClean Pro)
   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\RegClean Pro_UPDATES.job.fp (RegClean Pro)
   HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ba20b5da-0f48-40c5-b8c9-2cda4ecf75c2}\ (Blekko)
         
 
 

ESET

ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=907bd7d6f810df418a347913a7695274
# end=init
# utc_time=2017-01-04 08:35:45
# local_time=2017-01-04 09:35:45 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 31958
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=907bd7d6f810df418a347913a7695274
# end=updated
# utc_time=2017-01-04 08:39:20
# local_time=2017-01-04 09:39:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=907bd7d6f810df418a347913a7695274
# engine=31958
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-01-05 12:09:03
# local_time=2017-01-05 01:09:03 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=3589 16777213 100 57 579628 4658557 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 5419403 38845315 0 0
# scanned=439055
# found=20
# cleaned=19
# scan_time=12582
sh=5BD733FC899983802C461277F398BDE8E408225B ft=1 fh=b3aa8a54435c4292 vn="Variante von Win32/InstallCore.QW eventuell unerwünschte Anwendung" ac=I fn="C:\FRST\Downloads\FileExtractorSetup.exe"
sh=AB08C029F985DA2A9896472BF0D13DA2806460AE ft=1 fh=55b9aa36e7bd85b2 vn="Variante von Win32/ELEX.FZ eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RayDld\ihpmServer.exe.vir"
sh=AB08C029F985DA2A9896472BF0D13DA2806460AE ft=1 fh=55b9aa36e7bd85b2 vn="Variante von Win32/ELEX.FZ eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RayDld\ihpmServer.ini.vir"
sh=595810C622E22F83A0A1CFC416FBD0EB69A3ED9E ft=1 fh=4e9464a2e5be3249 vn="Variante von Win32/ELEX.GJ eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RayDld\Raydld.exe.vir"
sh=E693BDF2D74A2EA686D969566DCFFB7D039CCE15 ft=1 fh=4ae29b5fcb1be483 vn="Variante von Win32/Adware.RK.AM Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlls.dll.vir"
sh=69B75DD01D882665BBD82B525F6A4F099A308D10 ft=1 fh=7e4ebb8b8b980475 vn="Variante von Win64/Adware.RK.A Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlls64.dll.vir"
sh=9B1934F0EE50E47596F591125427B4DA69E2D89A ft=1 fh=5eff13d5937b538f vn="Variante von Win32/Adware.RK.AU Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlservice.exe.vir"
sh=0046FECA6F91E188D51147FB37B66BE556428864 ft=1 fh=9fc19799266eb56b vn="Variante von Win32/Adware.RK.AU Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlservice.ex_.vir"
sh=421DF10D232FDC2270A1E2740A0087442F460469 ft=1 fh=6b0fa6b010b74339 vn="Variante von Win32/Adware.RK.AE Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlvknlg.exe.vir"
sh=F29040346A0CFF5B3FB5DCA08F73AEFBD4DA7031 ft=1 fh=476d85cd177b26de vn="Variante von Win32/Adware.RK.AV Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe.vir"
sh=502B6423599A95F557327CDBA6E5CF42DE63B3F1 ft=1 fh=82e2ca107264bac5 vn="Variante von Win64/Adware.RK.A Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe.vir"
sh=BEA449A87DD8D38888F170DAFF634338F495C3CC ft=1 fh=aefb5f391681e801 vn="Variante von Win32/Adware.RK.AT Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlxf.dll.vir"
sh=AC686EC4B77A3EA04710ED59EC0469CA7C2133B8 ft=1 fh=d07377497eb80c41 vn="Variante von Win32/Adware.RK.AM Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\components\rlxg.dll.vir"
sh=0B6DEB19846409041422FCFCF1C44FB1101D63ED ft=1 fh=66a243c41eda0d6d vn="Variante von Win32/Adware.RK.AM Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\firefox\rlnx.dll.vir"
sh=A2690E49E815CD7AD56DB4D2FB74EFBE59E49395 ft=1 fh=719d75498d7bf806 vn="Variante von Win32/ELEX.FK eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Users\von user\AppData\Roaming\sweet-page\Uninstall.exe.vir"
sh=5EA8ED61F086FE883E19788344FFD2C314C922F2 ft=1 fh=20cd31b461ba6448 vn="Variante von Win32/Adware.RK.AM Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\WINDOWS\SysWOW64\rlls.dll.vir"
sh=7C8AF61898A36D3158F8ED6CF77B6F4B99402E83 ft=0 fh=0000000000000000 vn="JS/Lightning.A eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\N360_BACKUP\{63D3CF20-5D08-4CF6-9C63-B4805FD139B7}\{4\0BF7DE4-7B9D-4564-B28E-D9AF66E87063}"
sh=E877D68A62FA039D2B64EB1CA9DA07D5FD346884 ft=0 fh=0000000000000000 vn="Win32/DealPly.E eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\N360_BACKUP\{63D3CF20-5D08-4CF6-9C63-B4805FD139B7}\{7\C984962-C80E-4870-8DBE-BC548ED32DF3}"
sh=E877D68A62FA039D2B64EB1CA9DA07D5FD346884 ft=0 fh=0000000000000000 vn="Win32/DealPly.E eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\N360_BACKUP\{63D3CF20-5D08-4CF6-9C63-B4805FD139B7}\{8\222E100-4664-447D-83F0-1BF46971BAB6}"
sh=E877D68A62FA039D2B64EB1CA9DA07D5FD346884 ft=0 fh=0000000000000000 vn="Win32/DealPly.E eventuell unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\N360_BACKUP\{EEB021D8-CC43-4163-AC41-07B2D3F7878A}\{D\25CABFD-502B-4FD0-8C0C-5D9A1C84F2BF}"
         

Servus,






Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

start
CloseProcesses:
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{050000CE-F9D5-4145-9490-DB9E7E40FDF9}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{476DAA21-E0C3-4EEB-B27B-5F4123334ABA}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{7DE6769A-E482-4AB7-8ED9-0CAFEA11D687}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{813F8915-C940-44ED-ADED-8B782D85FA87}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{8D182E50-D646-49FF-B518-34B09BDF5375}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{9563917C-2D1F-4E92-A90F-01E470099B68}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{A182C848-76B5-4473-B742-A688D38982A1}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{AC5C40D0-DC3A-4406-A35C-9102C5FA4D7E}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{C336533A-5E74-457F-AD87-9598F4AADF49}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{C8C14216-4D34-4866-B66E-BC25B98FCCCA}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{E54B3747-7507-43B0-8537-A64189F28B35}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{F761BABE-0622-4DCE-A1B0-9D1BCA75DFEF}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{F98F0DE1-9B6F-4C87-8E08-6EE5928D8558}
DeleteKey: HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ba20b5da-0f48-40c5-b8c9-2cda4ecf75c2}
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_DEFAULT.job /f
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_DEFAULT.job.fp /f
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_UPDATES.job /f
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_UPDATES.job.fp /f
Reboot:
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird!





Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.





Cleanup:
Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.





Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.




Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

	Emsisoft	Microsoft Security Essentials	ESET

Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.




Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.




Optional:
Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .




Abschließend noch ein paar grundsätzliche Bemerkungen:

• Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
• Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
• Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

schonmal das FIXLOG

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-01-2017
durchgeführt von user (06-01-2017 21:17:46) Run:2
Gestartet von C:\Users\user\Desktop
Geladene Profile: user (Verfügbare Profile: user & DefaultAppPool)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{050000CE-F9D5-4145-9490-DB9E7E40FDF9}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{476DAA21-E0C3-4EEB-B27B-5F4123334ABA}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{7DE6769A-E482-4AB7-8ED9-0CAFEA11D687}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{813F8915-C940-44ED-ADED-8B782D85FA87}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{8D182E50-D646-49FF-B518-34B09BDF5375}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{9563917C-2D1F-4E92-A90F-01E470099B68}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{A182C848-76B5-4473-B742-A688D38982A1}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{AC5C40D0-DC3A-4406-A35C-9102C5FA4D7E}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{C336533A-5E74-457F-AD87-9598F4AADF49}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{C8C14216-4D34-4866-B66E-BC25B98FCCCA}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{E54B3747-7507-43B0-8537-A64189F28B35}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{F761BABE-0622-4DCE-A1B0-9D1BCA75DFEF}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{F98F0DE1-9B6F-4C87-8E08-6EE5928D8558}
DeleteKey: HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ba20b5da-0f48-40c5-b8c9-2cda4ecf75c2}
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_DEFAULT.job /f
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_DEFAULT.job.fp /f
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_UPDATES.job /f
CMD: reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_UPDATES.job.fp /f
Reboot:
end
         
*****************

Prozess erfolgreich geschlossen.
HKLM\SOFTWARE\Classes\Interface\{050000CE-F9D5-4145-9490-DB9E7E40FDF9} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{476DAA21-E0C3-4EEB-B27B-5F4123334ABA} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{7DE6769A-E482-4AB7-8ED9-0CAFEA11D687} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{813F8915-C940-44ED-ADED-8B782D85FA87} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{8D182E50-D646-49FF-B518-34B09BDF5375} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{9563917C-2D1F-4E92-A90F-01E470099B68} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{A182C848-76B5-4473-B742-A688D38982A1} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{AC5C40D0-DC3A-4406-A35C-9102C5FA4D7E} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{C336533A-5E74-457F-AD87-9598F4AADF49} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{C8C14216-4D34-4866-B66E-BC25B98FCCCA} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{E54B3747-7507-43B0-8537-A64189F28B35} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{F761BABE-0622-4DCE-A1B0-9D1BCA75DFEF} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{F98F0DE1-9B6F-4C87-8E08-6EE5928D8558} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ba20b5da-0f48-40c5-b8c9-2cda4ecf75c2} => Schlüssel erfolgreich entfernt

========= reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_DEFAULT.job /f =========

FEHLER: Ung�ltige Syntax.
Geben Sie "REG DELETE /?" ein, um die Syntax anzuzeigen.

========= Ende von CMD: =========


========= reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_DEFAULT.job.fp /f =========

FEHLER: Ung�ltige Syntax.
Geben Sie "REG DELETE /?" ein, um die Syntax anzuzeigen.

========= Ende von CMD: =========


========= reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_UPDATES.job /f =========

FEHLER: Ung�ltige Syntax.
Geben Sie "REG DELETE /?" ein, um die Syntax anzuzeigen.

========= Ende von CMD: =========


========= reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures" /v RegClean Pro_UPDATES.job.fp /f =========

FEHLER: Ung�ltige Syntax.
Geben Sie "REG DELETE /?" ein, um die Syntax anzuzeigen.

========= Ende von CMD: =========



Das System musste neu gestartet werden.

==== Ende von Fixlog 21:17:51 ====