Sicherheitsmail von web.de bekommen

<harko · 10.08.2017, 18:04

Code:

ATTFilter

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-08-10 18:31 - 2017-04-29 08:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-08-10 18:31 - 2016-08-12 19:56 - 000192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-10 16:10 - 2016-11-18 10:46 - 000000000 ____D C:\Users\Camth\AppData\LocalLow\Mozilla
2017-08-10 15:49 - 2017-04-29 08:44 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-10 15:49 - 2016-08-12 19:42 - 000000000 ____D C:\Users\Camth\AppData\Local\WiFi Guard
2017-08-10 15:15 - 2016-08-12 19:56 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-10 14:50 - 2017-05-12 20:12 - 000000000 ____D C:\Program Files (x86)\GlassWire
2017-08-10 14:50 - 2016-12-03 09:20 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-08-10 12:22 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-10 11:44 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-10 11:16 - 2016-12-04 23:11 - 000000000 ____D C:\Users\TechnoCrack\AppData\LocalLow\Mozilla
2017-08-10 11:15 - 2016-12-12 08:02 - 000000000 ____D C:\ProgramData\Soda PDF Desktop
2017-08-10 08:48 - 2017-04-29 08:44 - 000000000 ____D C:\Users\Camth
2017-08-09 18:44 - 2017-04-29 08:44 - 004680784 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-09 18:44 - 2017-03-20 06:41 - 002289052 _____ C:\WINDOWS\system32\perfh007.dat
2017-08-09 18:44 - 2017-03-20 06:41 - 000601534 _____ C:\WINDOWS\system32\perfc007.dat
2017-08-09 18:40 - 2017-04-29 08:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-09 00:46 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2017-08-09 00:45 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF
2017-08-09 00:03 - 2016-09-04 17:12 - 000000000 ____D C:\Users\Camth\AppData\Roaming\vlc
2017-08-08 22:13 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-08 22:12 - 2016-07-29 00:28 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-08 22:11 - 2016-07-29 00:28 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-08 21:37 - 2016-09-04 15:22 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-07 10:01 - 2017-03-18 13:40 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2017-08-06 23:15 - 2017-01-06 19:45 - 000000000 ____D C:\Program Files (x86)\Origin
2017-08-06 20:51 - 2016-08-27 17:36 - 000000000 ____D C:\Users\TechnoCrack\AppData\Local\WiFi Guard
2017-08-06 20:24 - 2017-04-29 08:48 - 000003110 _____ C:\WINDOWS\System32\Tasks\MSIAfterburner
2017-08-06 15:20 - 2017-03-18 23:03 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-08-06 15:20 - 2017-03-18 23:03 - 000000000 ___RD C:\WINDOWS\MiracastView
2017-08-06 15:04 - 2016-04-27 07:55 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-06 14:33 - 2016-08-12 17:58 - 000000000 ____D C:\Users\TechnoCrack\AppData\Local\Packages
2017-08-06 14:25 - 2016-11-10 21:10 - 000000000 ____D C:\Users\TechnoCrack\AppData\Local\CrashDumps
2017-08-05 19:39 - 2016-09-04 15:25 - 000001166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2017-08-05 19:39 - 2016-09-04 15:25 - 000000000 ____D C:\Program Files\paint.net
2017-08-05 16:08 - 2016-08-12 23:20 - 000000000 ____D C:\Users\Camth\AppData\Local\Turbine
2017-08-05 14:35 - 2016-10-28 18:23 - 000000000 ____D C:\Users\Camth\AppData\Local\CrashDumps
2017-08-05 09:46 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache
2017-08-05 09:05 - 2016-08-12 17:32 - 000000000 ____D C:\Users\Camth\AppData\Local\Packages
2017-08-04 18:44 - 2016-09-19 08:32 - 000000000 ____D C:\ProgramData\MalwarebytesARW
2017-08-03 23:03 - 2016-07-28 11:27 - 000000000 ____D C:\ProgramData\Intel
2017-08-03 23:02 - 2016-07-29 01:42 - 000000000 ____D C:\Program Files\Intel
2017-08-03 23:01 - 2017-04-29 08:44 - 000000000 ____D C:\Users\TechnoCrack
2017-08-02 22:17 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-02 22:10 - 2017-04-29 08:48 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-02 22:10 - 2017-04-29 08:48 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-02 22:10 - 2017-04-29 08:48 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-02 22:10 - 2017-04-29 08:48 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-02 22:10 - 2017-04-29 08:48 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-02 22:10 - 2016-07-28 11:43 - 000000000 ____D C:\Temp
2017-08-02 12:19 - 2016-07-28 10:02 - 000000000 ___HD C:\Program Files (x86)\Temp
2017-08-02 12:18 - 2017-04-29 08:44 - 000000000 ____D C:\WINDOWS\system32\DAX2
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-02 09:16 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-07-31 22:59 - 2016-08-12 23:20 - 000000000 ____D C:\Users\Camth\AppData\Local\Akamai
2017-07-31 18:36 - 2016-10-07 23:32 - 000000000 ____D C:\Users\Public\Documents\AdobeGC
2017-07-31 18:36 - 2016-08-14 16:43 - 000000000 ____D C:\Users\Camth\AppData\Local\Adobe
2017-07-31 17:15 - 2017-03-18 23:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-07-31 17:15 - 2017-03-18 23:06 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-07-30 18:59 - 2016-08-30 21:43 - 000000000 ____D C:\Users\TechnoCrack\AppData\Roaming\Notepad++
2017-07-28 16:09 - 2016-09-04 15:55 - 000000000 ____D C:\Users\Camth\AppData\LocalLow\Google
2017-07-28 16:09 - 2016-09-04 15:22 - 000000000 ____D C:\Program Files (x86)\Google
2017-07-27 18:03 - 2017-04-29 08:55 - 000002389 _____ C:\Users\Camth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-27 18:03 - 2017-04-29 08:55 - 000000000 ___RD C:\Users\Camth\OneDrive
2017-07-25 19:35 - 2016-07-28 10:02 - 000000000 ____D C:\ProgramData\Package Cache
2017-07-24 16:21 - 2016-08-12 19:39 - 000000000 ____D C:\Program Files (x86)\TraXEx
2017-07-23 13:38 - 2016-08-12 16:53 - 000000000 ____D C:\Program Files\Common Files\AV
2017-07-23 13:13 - 2016-08-12 16:18 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2017-07-23 13:13 - 2016-08-12 16:18 - 000000000 ____D C:\WINDOWS\system32\Drivers\NSx64
2017-07-21 18:47 - 2016-08-12 16:18 - 000102568 _____ (Symantec Corporation) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2017-07-21 18:47 - 2016-08-12 16:18 - 000008309 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2017-07-19 02:40 - 2017-04-30 04:39 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-07-19 02:40 - 2017-03-18 09:29 - 004210032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-07-19 02:40 - 2017-03-18 09:29 - 003711328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-07-19 02:40 - 2017-03-18 09:29 - 001615448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2017-07-19 02:40 - 2017-03-18 09:29 - 000218712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2017-07-19 02:40 - 2017-03-18 09:29 - 000046463 _____ C:\WINDOWS\system32\nvinfo.pb
2017-07-19 01:24 - 2017-04-29 08:44 - 006463608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-07-19 01:24 - 2017-04-29 08:44 - 002479040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-07-19 01:24 - 2017-04-29 08:44 - 001762936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-07-19 01:24 - 2017-04-29 08:44 - 000549312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-07-19 01:24 - 2017-04-29 08:44 - 000392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-07-19 01:24 - 2017-04-29 08:44 - 000081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-07-19 01:24 - 2017-04-29 08:44 - 000069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-07-19 00:54 - 2017-04-29 08:44 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-07-14 20:37 - 2017-01-18 23:57 - 000000000 ____D C:\Program Files\MultiCommander (x64)
2017-07-13 18:12 - 2017-02-13 14:28 - 000000000 ____D C:\Users\TechnoCrack\AppData\Local\ElevatedDiagnostics
2017-07-13 17:03 - 2017-01-09 23:16 - 000000000 ____D C:\Users\Camth\AppData\Local\Discord
2017-07-13 17:03 - 2016-12-15 10:34 - 000000000 ____D C:\Program Files (x86)\WebSite X5 v12 - Home
2017-07-13 03:37 - 2017-04-29 08:44 - 008095171 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-07-12 22:38 - 2017-01-06 19:46 - 000000000 ____D C:\Users\Camth\AppData\Roaming\Origin
2017-07-12 19:07 - 2016-08-12 23:57 - 000000000 ____D C:\Users\Camth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-07-12 18:55 - 2016-08-14 00:02 - 000000000 ____D C:\Users\Camth\AppData\Local\Ubisoft Game Launcher
2017-07-12 18:27 - 2017-01-06 19:44 - 000000000 ____D C:\ProgramData\Origin
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ___RD C:\Program Files\Windows Defender
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\en-GB
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-07-11 21:38 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files (x86)\Windows Defender

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-04-29 08:44 - 2017-04-29 08:44 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2016-11-15 11:09 - 2016-11-15 11:09 - 000000100 _____ () C:\ProgramData\StreamingMediaTechnologyLog.txt

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-08-03 09:44

==================== Ende von FRST.txt ============================

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 09-08-2017
durchgeführt von TechnoCrack (10-08-2017 18:33:26)
Gestartet von E:\Downloads
Windows 10 Pro Version 1703 (X64) (2017-04-29 06:53:33)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-848758703-1503385747-3576675771-500 - Administrator - Disabled)
BitBox (S-1-5-21-848758703-1503385747-3576675771-1003 - Limited - Enabled)
Camth (S-1-5-21-848758703-1503385747-3576675771-1002 - Limited - Enabled) => C:\Users\Camth
DefaultAccount (S-1-5-21-848758703-1503385747-3576675771-503 - Limited - Disabled)
Gast (S-1-5-21-848758703-1503385747-3576675771-501 - Limited - Disabled)
TechnoCrack (S-1-5-21-848758703-1503385747-3576675771-1001 - Administrator - Enabled) => C:\Users\TechnoCrack
Tester (S-1-5-21-848758703-1503385747-3576675771-1004 - Limited - Enabled) => C:\Users\Tester

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton Security (Enabled - Up to date) {30744133-1E94-7B35-F4A3-82A5AEF1CBAA}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Security (Enabled - Up to date) {8B15A0D7-38AE-74BB-CE13-B9D7D5768117}
FW: Norton Security (Enabled) {084FC016-54FB-7A6D-DFFC-2B9050228CD1}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

„Der Herr der Ringe Online™“ v1301.0055.0535.4025 (HKLM-x32\...\12bbe590-c890-11d9-9669-0800200c9a66_is1) (Version: 1301.0055.0535.4025 - Turbine, Inc.)
64 Bit HP CIO Components Installer (HKLM\...\{C788B026-20BD-4E96-B698-533F1D6C5013}) (Version: 7.2.4 - Hewlett-Packard) Hidden
7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Adobe Photoshop Elements 15 (HKLM-x32\...\{E2D8F773-2E59-45CA-B0EA-CFFA5354A9E7}) (Version: 15.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 15 (HKLM-x32\...\{FD45A9C9-02BE-4E62-8629-78DF29A10FF5}) (Version: 15.0 - Adobe Systems Incorporated)
AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 1.01.46 - ASUSTeK Computer Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-848758703-1503385747-3576675771-1002\...\Akamai) (Version:  - Akamai Technologies, Inc)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.26.1 - Asmedia Technology)
Authorizer 2.9.2d15 (HKLM\...\{F6762963-9AE5-4bc6-A70F-2D749F6AC02F}_is1) (Version: 2.9.2d15 - Propellerhead Software AB)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Blender (HKLM\...\{437221A8-91D1-42A0-9E04-0AD64B502374}) (Version: 2.78.1 - Blender Foundation)
Browser in the Box (HKLM-x32\...\BitBox) (Version: 4.4.0-r244 - Sirrix AG)
Browser-Maulkorb 3.0 (HKLM-x32\...\Browser-Maulkorb_is1) (Version: 3.0.1.0 - Alexander Miehlke Softwareentwicklung)
calibre (HKLM-x32\...\{C94D271E-A338-48CD-A4F6-F031E928BC1F}) (Version: 2.80.0 - Kovid Goyal)
Corel PaintShop Pro X9 (HKLM-x32\...\_{998717E5-1031-4D28-A143-48ADAF062E5F}) (Version: 19.0.0.96 - Corel Corporation)
Crysis 2 Maximum Edition (HKLM\...\Steam App 108800) (Version:  - Crytek Studios)
Cura 2.4 (HKLM-x32\...\Cura 2.4) (Version: 2.4.0 - Ultimaker)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.3515.0 - CyberLink Corp.)
Der Herr der Ringe Online™: Bullroarer v1400.0055.1429.1379 (HKLM-x32\...\e01f4d10-f2d0-11dd-ba2f-0800200c9a66_is1) (Version: 1400.0055.1429.1379 - Turbine, Inc.)
Diablo II (HKLM-x32\...\Diablo II) (Version: 0.0.0.0 - Blizzard Entertainment)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.12 - Electronic Arts)
Dungeons 2 (HKLM-x32\...\{A0B76573-077C-4C18-A587-8CC94CFEA9C9}) (Version: 1.6.1 - Realmforge Studios GmbH)
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
FFU Loader Driver 1.0.0 (HKLM-x32\...\{7209d085-ed88-4a08-beb2-c49db2b9e838}) (Version: 1.0.0 - Microsoft)
FFU Loader Driver 1.0.0 (HKLM-x32\...\{CA839C49-B3D1-4EA6-BB8A-21937B808771}) (Version: 1.0.0 - Microsoft) Hidden
FireStorm version V2.0.0.006 (HKLM-x32\...\FireStorm_is1) (Version: V2.0.0.006 - )
G DATA USB KEYBOARD GUARD (HKLM-x32\...\{D8CBD59F-B29D-4E38-9D66-DEAEAB473FA9}) (Version: 1.1.0.4 - G DATA Software AG)
Glary Utilities PRO 5.66 (HKLM-x32\...\Glary Utilities 5) (Version: 5.66.0.87 - Glarysoft Ltd)
GlassWire 1.2 (remove only) (HKLM-x32\...\GlassWire 1.2) (Version: 1.2.100 - SecureMix LLC)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{09A8EA8A-9C9D-45E4-B20C-3F13C2CCD32C}) (Version: 7.3.0.3830 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Guardians of Ember (HKLM\...\Steam App 463680) (Version:  - Runewaker)
HITMAN™ Demo (HKLM\...\Steam App 649780) (Version:  - Io-Interactive)
Horus (HKLM-x32\...\Horus) (Version:  - )
HTTS 2.10 (HKLM-x32\...\HTTS 2.10) (Version:  - )
ICA (HKLM-x32\...\{998717E5-1031-4D28-A143-48ADAF062E5F}) (Version: 19.0.0.96 - Corel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1047 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4274 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 4.0.0.36 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{60c073df-e736-4210-9c3a-5fc2b651cef3}) (Version: 10.1.1.7 - Intel(R) Corporation) Hidden
IPM_Installer (HKLM\...\{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}) (Version: 2.2 - Your Company Name) Hidden
IPM_PSP_COM64 (HKLM\...\{966E78A9-AB34-4FC6-BEDA-7D3F1F42121D}) (Version: 19.0.0.96 - Corel Corporation) Hidden
JackKeane (HKLM-x32\...\JackKeane) (Version:  - )
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)
LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version:  - Crystal Rich Ltd)
Logitech Gaming Software 8.84 (HKLM\...\Logitech Gaming Software) (Version: 8.84.15 - Logitech Inc.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.)
LOTRO Plugin Compendium (HKLM-x32\...\{3BF7818D-2482-4676-A237-915A11A97847}) (Version: 1.0.3 - Lunarwater)
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.10 - Magical Jelly Bean)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Malwarebytes Anti-Ransomware version 0.9.18.797 (HKLM\...\{bebf7481-07c5-42f5-941e-2e9f78a76d56}_is1) (Version: 0.9.18.797 - Malwarebytes)
Mass Effect™ (HKLM-x32\...\{44A570EE-FD93-4086-8997-2C38DFDE0019}) (Version: 1.2.20608.0 - Electronic Arts)
Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Mass Effect™: Andromeda (HKLM-x32\...\{72BBCA87-9350-48BC-9E2F-6DBC1E80C993}) (Version: 1.0.0.9 - Electronic Arts)
Medal of Honor: Pacific Assault™ (HKLM-x32\...\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}) (Version: 1.2.1.281 - Electronic Arts)
MeshLab_64b 2016 (HKLM-x32\...\MeshLab_64b) (Version: 2016 - Paolo Cignoni - Guido Ranzuglia VCG - ISTI - CNR)
Microsoft Application Compatibility Toolkit 5.6 (HKLM-x32\...\{0F5AEBB0-43F3-4571-ACE7-A7942E8AA179}) (Version: 5.6.7324.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-848758703-1503385747-3576675771-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-848758703-1503385747-3576675771-1002\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Mozilla Firefox 53.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0 (x86 de)) (Version: 53.0 - Mozilla)
Mozilla Firefox 54.0.1 (x64 de) (HKLM\...\Mozilla Firefox 54.0.1 (x64 de)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0 - Mozilla)
Mozilla Thunderbird 45.8.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.8.0 (x86 de)) (Version: 45.8.0 - Mozilla)
MSI Afterburner 4.3.0 Beta 4 (HKLM-x32\...\Afterburner) (Version: 4.3.0 Beta 4 - MSI Co., LTD)
MultiCommander (x64) (HKLM\...\MultiCommander x64) (Version: 6.9.1.2306 - Mathias Svensson)
NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue)
Nitro Pro 10 (HKLM\...\{13B44F37-0A3D-4E5A-9742-3E259574E97A}) (Version: 10.5.9.9 - Nitro)
Norton Security (HKLM-x32\...\NS) (Version: 22.10.0.85 - Symantec Corporation)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.4.2 - Notepad++ Team)
NVIDIA Graphics Driver 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Oracle VM VirtualBox 5.1.0_Sirrix (HKLM\...\{3E94027F-171C-4D95-BAD6-AD97AB64A539}) (Version: 5.1.0 - Sirrix AG)
Origin (HKLM-x32\...\Origin) (Version: 10.3.5.6379 - Electronic Arts, Inc.)
paint.net (HKLM\...\{02D89175-E08F-401B-BA30-8B7512B57724}) (Version: 4.0.17 - dotPDN LLC)
Path of Exile (HKLM\...\Steam App 238960) (Version:  - Grinding Gear Games)
Pazera Free Audio Extractor 2.3 (HKLM-x32\...\{6899C238-3E4A-4A04-B251-A0C9EDC7EDBC}_is1) (Version: 2.3 - Jacek Pazera)
PCMark 8 (HKLM\...\{1C105B2F-E38F-4CE4-97F7-D5F9381AC85F}) (Version: 2.7.613.0 - Futuremark) Hidden
PCMark 8 (HKLM-x32\...\{ffbe2963-bbe7-49f1-9c32-6fe7e17e5200}) (Version: 2.7.613.0 - Futuremark)
Pillars of Eternity (HKLM\...\Steam App 291650) (Version:  - Obsidian Entertainment)
proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.114.1 - proDAD GmbH)
PSPPContent (HKLM-x32\...\{91773E30-F29C-4381-854A-95281DEB8DA1}) (Version: 19.0.0.96 - Corel Corporation) Hidden
PSPPHelp (HKLM-x32\...\{9F087D85-EDDC-4DC4-B665-AFDD3734D987}) (Version: 19.0.0.96 - Corel Corporation) Hidden
PSPPro64 (HKLM\...\{9722764A-D7C1-483A-931C-9C0A95D5F4EB}) (Version: 19.0.0.96 - Corel Corporation) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version:  - Ubisoft)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8186 - Realtek Semiconductor Corp.)
Reason 9 9.5.0d241 (HKLM\...\Reason9.0Stable_64_is1) (Version: 9.5.0d241 - Propellerhead Software AB)
Setup (HKLM-x32\...\{9E0054AB-F957-4177-850E-3541960DBD53}) (Version: 19.0.0.96 - Corel Corporation) Hidden
SketchUp 2017 (HKLM\...\{C711666A-E8CC-4E2A-802F-BAA35E76045F}) (Version: 17.2.2555 - Trimble Navigation Limited)
SoftMaker FreeOffice 2016 (HKLM-x32\...\{8EBB8452-274B-465D-8324-00B0832FBB05}) (Version: 1.0.3790 - SoftMaker Software GmbH)
SoftPerfect WiFi Guard version 1.0.7 (HKLM\...\{38AFD787-4D2E-4442-92D2-7739F5F92CF4}_is1) (Version: 1.0.7 - SoftPerfect)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk)
Syberia II (HKLM-x32\...\{BF1534B0-BE09-457E-A4CF-0EFC803125F2}) (Version: 1.0.0.16 - Microids)
Telegram Desktop version 1.1.19 (HKU\S-1-5-21-848758703-1503385747-3576675771-1002\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)
The Book of Unwritten Tales (HKLM-x32\...\{6F40FD05-54E9-4388-9275-782AE6B913E8}_is1) (Version:  - Nordic Games GmbH)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.0.0 - GOG.com)
Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version:  - Ubisoft)
TraXEx 7.0 (HKLM-x32\...\TraXEx_is1) (Version: 7.0.5.0 - Alexander Miehlke Softwareentwicklung)
Uplay (HKLM-x32\...\Uplay) (Version: 21.1 - Ubisoft)
UVK - Ultra Virus Killer (HKLM\...\UVK - Ultra virus killer) (Version: 10.6.4.0 - Carifred)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows 10 Upgrade Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17387 - Microsoft Corporation)
Windows Device Recovery Tool 3.11.34101 (HKLM-x32\...\{c4570e47-39e0-450b-a02c-d64965cbf0f0}) (Version: 3.11.34101 - Microsoft)
Windows Driver Package - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/04/2013 1.0.0.0) (HKLM\...\1E3EA5624DD04BEFECF3FFF6D3A21CCE9CD70A91) (Version: 01/04/2013 1.0.0.0 - Arduino LLC (www.arduino.cc))
Windows IP Over USB (HKLM-x32\...\{FF0EA481-42DB-A8AE-8356-48C09F7D953D}) (Version: 10.1.10586.15 - Microsoft Corporation)
Windows-Treiberpaket - Google, Inc. (WinUSB) AndroidUsbDeviceClass  (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
Windows-Treiberpaket - Microsoft USBDevice  (02/19/2016 1.0.0.0) (HKLM\...\01D4AA89568B59E5941907D403E3B682EE413AB7) (Version: 02/19/2016 1.0.0.0 - Microsoft)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{29BAAF65-09E5-4F52-8D15-2FAF2E23A8DC}) (Version: 1.1.24.1544 - Microsoft)
Wolfenstein: The New Order German Edition (HKLM\...\Steam App 288570) (Version:  - MachineGames)
Wolfenstein: The Old Blood German Edition (HKLM\...\Steam App 354830) (Version:  - MachineGames)
XMedia Recode Version 3.3.3.6 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.3.3.6 - XMedia Recode)
XTUPackage (HKLM-x32\...\{84D11A20-6E7F-4FBB-A2FB-117FCF871040}) (Version: 1.0.0 - ASUSTeK COMPUTER INC.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2016-05-18] ()
ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => D:\Glary Utilities 5\x64\ContextHandler.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2013-11-21] (Crystal Rich Ltd)
ContextMenuHandlers1: [NP8ShellExtension] -> {9C4B85B8-956C-49BF-9BA5-101384E562B2} => C:\Program Files\Nitro\Pro 10\NPShellExtension.dll [2016-07-23] (Nitro PDF)
ContextMenuHandlers1: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\NavShExt.dll [2017-07-15] (Symantec Corporation)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => D:\Glary Utilities 5\x64\ContextHandler.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2013-11-21] (Crystal Rich Ltd)
ContextMenuHandlers2: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\NavShExt.dll [2017-07-15] (Symantec Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamext.dll [2016-03-10] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov)
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2013-11-21] (Crystal Rich Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-07-19] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-05-21] (Igor Pavlov)
ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\buShell.dll [2017-07-14] (Symantec Corporation)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => D:\Glary Utilities 5\x64\ContextHandler.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamext.dll [2016-03-10] (Malwarebytes)
ContextMenuHandlers6: [Symantec.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\NavShExt.dll [2017-07-15] (Symantec Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {045D7442-104E-4641-8762-195D8618613C} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {054DEB90-F168-4354-B4CA-5759439E16B1} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {06C2C2CD-4060-45C2-BD4C-8979A3E5DBE1} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {0C5C734E-C5BB-4321-88C3-511FEDE41D8C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {0CD00B4B-668A-495D-81A3-8CC6E6706F13} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-19] (NVIDIA Corporation)
Task: {17C3147D-CDD6-4092-BF4D-FFA48090C708} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1ED6E84F-A04D-4B03-A7AC-081AC688CD65} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {20A9F6A5-0AF5-4D20-B71B-D5A31C9823CD} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {217671D1-2135-43D6-B9CF-45D05F30A0BD} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {296F18BC-7069-423A-8834-DF4FEFAC82D2} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {29D5E4A4-53B8-4A2E-AE64-989BE947FEEC} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {29E68324-F26D-4280-BEEC-0612DEA3619C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2BFD76BA-AE14-4F59-92DE-742CE5CCE11F} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {2E3C7DE0-429D-49E3-85A3-B5993AB208BA} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2FE4A192-DE52-4946-8D9B-1E6A161E314F} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-10-13] (Intel(R) Corporation)
Task: {337B312F-C386-403C-B8C4-C11B76F06384} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-19] (NVIDIA Corporation)
Task: {34CCDD47-B030-4988-86C4-8FC78B5D4E69} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {382C117D-1CAA-4F5B-B14C-9F321FF662B0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-04] (Google Inc.)
Task: {3959EDB9-20E2-4DF1-8997-6541D5307589} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {3BBFC001-B49D-4511-A99D-9D727ECFE6EC} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3DCA4961-872D-4948-8BFD-7C4A3AAA88BB} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\SymErr.exe [2017-07-14] (Symantec Corporation)
Task: {3FEF97D6-CA2B-4B56-BA8D-816585C20B2C} - \Microsoft\Windows\Setup\EOONotify -> Keine Datei <==== ACHTUNG
Task: {40C13D21-9D1F-4A2D-BB16-F0A5A7DBC863} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {410ECD1A-CF81-4F91-B045-C7685E5BE7DE} - System32\Tasks\GU5SkipUAC => D:\Glary Utilities 5\Integrator.exe [2016-12-16] (Glarysoft Ltd)
Task: {453A580C-B76A-4A73-9910-49C0F3B735D4} - System32\Tasks\MSIAfterburner => D:\MSI Afterburner\MSIAfterburner.exe [2016-05-30] ()
Task: {46E0FF10-74D0-44F6-8000-CD5374E67ACA} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2016-07-28] ()
Task: {4FC415BC-4641-45D1-877D-1BCC8962A195} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5173A86E-538F-4FF2-9B79-CDD4AE6C60DB} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-07-19] (NVIDIA Corporation)
Task: {5A5C8DEF-DFE8-4F51-8283-2F95FD8CBD48} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {64AED523-383E-453A-BF05-EF35A2432240} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2016-07-27] (ASUSTeK Computer Inc.)
Task: {795D0BF8-B676-4897-8F5A-77973E00D121} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
Task: {7DB656D3-D94E-4615-B6A9-94DDC7E0C668} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-camthalion@outlook.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)
Task: {9728209E-AB0F-47EB-A1EF-5468E559CDF3} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {9DFC4772-47E4-4BFA-BEC6-CA3A22150211} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {AD05A21D-FB3D-41A5-BA8F-25EB6822F947} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {AD84E458-0626-4DBF-BE33-3EDC30374616} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BD6EDBAE-E2B8-46C0-AF9C-A22DAF6449F8} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C3F9AD0C-84F4-42BB-921B-189CE6A3450C} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C9679FD6-4BED-4E92-837B-9382D0F763E2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {CA875B0A-E1CF-4092-93DE-7ECC1AF0F3E2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {CE500A8D-4139-4A3E-88EE-A2688E680FED} - System32\Tasks\GlaryInitialize 5 => D:\Glary Utilities 5\Initialize.exe [2016-12-16] (Glarysoft Ltd)
Task: {D5EBF28C-A33D-4CBA-8355-0F457EE12498} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\WINDOWS\system32\compattelrunner.exe
Task: {DEEA6E4E-313E-4FDD-B680-A7C62E376173} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-19] (NVIDIA Corporation)
Task: {E4734B18-93FF-46EB-BB14-670AE3EF8D45} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-19] (NVIDIA Corporation)
Task: {E545723E-BB1D-4D28-9EF0-C9283AA18399} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\SymErr.exe [2017-07-14] (Symantec Corporation)
Task: {E5D91C46-3E3F-4090-BAEE-4EA3E3FAF5CF} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2016-03-07] (TODO: <Company name>)
Task: {E6249BEE-2B6D-48E3-A928-845B9D34A1E4} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\WSCStub.exe [2017-07-15] (Symantec Corporation)
Task: {E6C55794-A566-4496-A4FA-2B2B9783608B} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {EA138705-041A-4248-A56A-B5657A10498E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-04] (Google Inc.)
Task: {EC11A6F7-343D-49E9-A974-A3716157F2C1} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\WINDOWS\system32\compattelrunner.exe
Task: {F06B48A9-029B-4327-80D6-88117A65C3BC} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files (x86)\Norton Security\Engine\22.10.0.85\SymErr.exe [2017-07-14] (Symantec Corporation)
Task: {F36FEF42-3D98-48DE-B8C2-0880F0E16F21} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2016-06-29] (Corel Corporation)
Task: {FC15343D-FE6D-49E5-85E7-271D253D8BC6} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe [2017-07-15] (Symantec Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> -user-agent="Mozilla/5.0 (Windows; U; Windows NT 10.0; Win64; x64; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Anonymisiert durch AlMiSoft Browser-Maulkorb 60338733"

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2016-08-30 20:20 - 2013-04-07 14:37 - 000081920 _____ () C:\Program Files (x86)\TraXEx\Integration\CppShellExtContextMenuHandler.dll
2016-05-18 00:42 - 2016-05-18 00:42 - 000230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2017-03-18 22:59 - 2017-03-20 06:43 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-12-19 09:38 - 2016-12-19 09:38 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2010-12-23 12:06 - 2010-12-23 12:06 - 000028672 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\cx_Logging.pyd
2012-10-27 16:21 - 2012-10-27 16:21 - 000098816 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32api.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000110080 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\pywintypes27.dll
2012-10-27 16:20 - 2012-10-27 16:20 - 000018432 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32event.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000119808 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32file.pyd
2012-10-27 16:21 - 2012-10-27 16:21 - 000167936 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32gui.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000024064 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32pipe.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000035840 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32process.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000017408 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32profile.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000108544 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32security.pyd
2012-10-27 16:21 - 2012-10-27 16:21 - 000022528 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32ts.pyd
2012-10-27 16:22 - 2012-10-27 16:22 - 000364544 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\pythoncom27.dll
2012-10-27 16:23 - 2012-10-27 16:23 - 000320512 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32com.shell.shell.pyd
2014-06-30 17:03 - 2014-06-30 17:03 - 000046080 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\_socket.pyd
2014-06-30 17:04 - 2014-06-30 17:04 - 001160704 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\_ssl.pyd
2014-04-30 09:25 - 2014-04-30 09:25 - 000036352 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\_psutil_windows.pyd
2014-06-30 17:04 - 2014-06-30 17:04 - 000087552 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\_ctypes.pyd
2014-06-30 17:04 - 2014-06-30 17:04 - 000715264 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\_hashlib.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000025600 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32cred.pyd
2014-04-14 16:06 - 2014-04-14 16:06 - 000055510 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\pacparser._pacparser.pyd
2014-04-14 16:06 - 2014-04-14 16:06 - 000976827 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\pacparser.dll
2012-10-27 16:20 - 2012-10-27 16:20 - 000011264 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32crypt.pyd
2012-10-27 16:20 - 2012-10-27 16:20 - 000064512 _____ () C:\Program Files (x86)\Sirrix AG\BitBox\bin\win32net.pyd

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MB3Service => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2016-08-12 18:17 - 000002887 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1	localhost
127.0.0.1	localhost.localdomain
255.255.255.255	broadcasthost
127.0.0.1	local
0.0.0.0 vortex.data.microsoft.com
0.0.0.0 vortex-win.data.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net
0.0.0.0 oca.telemetry.microsoft.com
0.0.0.0 oca.telemetry.microsoft.com.nsatc.net
0.0.0.0 sqm.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net
0.0.0.0 watson.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net
0.0.0.0 redir.metaservices.microsoft.com
0.0.0.0 choice.microsoft.com
0.0.0.0 choice.microsoft.com.nsatc.net
0.0.0.0 df.telemetry.microsoft.com
0.0.0.0 reports.wes.df.telemetry.microsoft.com
0.0.0.0 wes.df.telemetry.microsoft.com
0.0.0.0 services.wes.df.telemetry.microsoft.com
0.0.0.0 sqm.df.telemetry.microsoft.com
0.0.0.0 telemetry.microsoft.com
0.0.0.0 watson.ppe.telemetry.microsoft.com
0.0.0.0 telemetry.appex.bing.net
0.0.0.0 telemetry.urs.microsoft.com
0.0.0.0 telemetry.appex.bing.net:443
0.0.0.0 settings-sandbox.data.microsoft.com
0.0.0.0 vortex-sandbox.data.microsoft.com
0.0.0.0 survey.watson.microsoft.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-848758703-1503385747-3576675771-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-848758703-1503385747-3576675771-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Camth\AppData\Local\Packages\55888ChristopheLavalle.DynamicTheme_jdggxwd41xcr0\LocalState\Bing\Huacachina_DE-DE10013158599_1920x1200.0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "ASUS AiChargerPlus Execute"
HKLM\...\StartupApproved\Run32: => "AO Link Server"
HKU\S-1-5-21-848758703-1503385747-3576675771-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-848758703-1503385747-3576675771-1001\...\StartupApproved\Run: => "GUDelayStartup"
HKU\S-1-5-21-848758703-1503385747-3576675771-1002\...\StartupApproved\Run: => "NetBalancer"
HKU\S-1-5-21-848758703-1503385747-3576675771-1002\...\StartupApproved\Run: => "CAHeadless"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{D96CD5F5-7C38-4C76-88C8-E031CB5D38F1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{4F59A40C-5191-4DD7-AD96-6DDDBFBDF7D6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{9FC8972D-F1AB-4516-BE8E-47F9BF896D86}] => (Allow) D:\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
FirewallRules: [{507C3167-DF19-421C-AEC0-B97CA7A600D3}] => (Allow) D:\Steam\steamapps\common\Crysis 2 Game of the Year\bin32\Crysis2Launcher.exe
FirewallRules: [UDP Query User{91DEDC58-8018-4CFC-A8B4-3DD24988E210}C:\program files\cura 2.4\cura.exe] => (Block) C:\program files\cura 2.4\cura.exe
FirewallRules: [TCP Query User{8874930E-8B72-4BAD-A220-FD1D2CA0A8BB}C:\program files\cura 2.4\cura.exe] => (Block) C:\program files\cura 2.4\cura.exe
FirewallRules: [{7723896F-84EC-4CEF-AC5A-E0C15CD2E16B}] => (Allow) D:\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{685F46B8-EA2B-4096-BE7B-D65E2430B026}] => (Allow) D:\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{96D73CD8-98B4-441B-AC3B-3AFF9976E643}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8B1B3CB0-0943-4EA0-A0FF-D2DE17A08F50}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{9DD730A8-8B5E-40C8-8764-1F924EE63D8E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FB2404D3-A56D-4491-BDBB-E3E4484BD556}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4A72A1E0-00C6-45B0-A1AD-1498756D3C8D}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{D44A1671-12DB-45E9-8860-5F5B49B702C1}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{2F72C229-3771-465E-A9B9-02B6EE9B57AF}] => (Allow) D:\Origin Games\Syberia II\Syberia2.exe
FirewallRules: [{3DA7316D-3627-454C-B67D-AF3EBDDAD335}] => (Allow) D:\Origin Games\Syberia II\Syberia2.exe
FirewallRules: [UDP Query User{E2A360B4-8660-4ECC-B27A-B5453F298634}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{F211D7E8-3969-4B05-B2FD-92D106B17608}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{BD2CFA9F-B22C-4BE6-B3D7-FE215041E197}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe
FirewallRules: [{CE33938F-2ECE-4730-98BF-0672E5338DE0}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe
FirewallRules: [{AEE9ABE2-D834-4D9A-80CF-A6008364A2E3}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\gu.exe
FirewallRules: [{A6705664-A838-4414-91BE-1306D97C2D82}] => (Allow) D:\Ubisoft Game Launcher\games\Rayman Origins\gu.exe
FirewallRules: [{5578E53A-4A83-45CC-9A42-23394640E1A5}] => (Allow) D:\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{8DA85830-C233-4FF4-A3AE-1FB3D97468DC}] => (Allow) D:\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{2EAA1E8D-B5A5-4FAD-92B9-DDA229A18C6A}] => (Allow) D:\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11_b.exe
FirewallRules: [{D51CA948-70D5-4A34-AD1C-B51DBD58D5B2}] => (Allow) D:\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11_b.exe
FirewallRules: [{7133FFFD-77D9-4739-A90B-3856DF092E1D}] => (Allow) D:\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{F02C7C02-8A60-468F-8564-DE62F883D008}] => (Allow) D:\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{37983EBD-9F90-419B-883C-4D258CC976EE}] => (Allow) D:\Origin Games\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{68A16B4F-1C77-428E-A563-BAF917084FA4}] => (Allow) D:\Origin Games\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{94C2236A-A86A-4D45-8C7D-7F5ABBC3AAF0}] => (Allow) D:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{51205D87-5937-47D9-AD75-DB4DE025CD37}] => (Allow) D:\Origin Games\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{B5C4F07A-BA92-4A5B-86E9-FB3AD8E482D7}] => (Allow) D:\Origin Games\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{49972C61-7117-4D7F-9E2A-4DCEBD50C2B0}] => (Allow) D:\Origin Games\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [UDP Query User{E4BA19E1-034C-492D-8CD3-B31D61F4F47D}D:\steam\steamapps\common\guardians of ember\client_x86.exe] => (Block) D:\steam\steamapps\common\guardians of ember\client_x86.exe
FirewallRules: [TCP Query User{A0300CA1-8783-4CA9-A264-9E46B4FE0725}D:\steam\steamapps\common\guardians of ember\client_x86.exe] => (Block) D:\steam\steamapps\common\guardians of ember\client_x86.exe
FirewallRules: [UDP Query User{8994FCB4-72E9-40E2-902E-B727305C9F9D}D:\steam\steamapps\common\guardians of ember\exedir\ruplatform.exe] => (Block) D:\steam\steamapps\common\guardians of ember\exedir\ruplatform.exe
FirewallRules: [TCP Query User{C27A409A-7987-4383-962E-EACFF02DB274}D:\steam\steamapps\common\guardians of ember\exedir\ruplatform.exe] => (Block) D:\steam\steamapps\common\guardians of ember\exedir\ruplatform.exe
FirewallRules: [{C7C7B1D8-D66E-4495-814A-6AAF237F0685}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{AE7C857C-CDA8-4389-AE47-30FFC9834EF6}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{00630BC1-F165-47B5-8449-ED21528D490C}] => (Allow) D:\Steam\steamapps\common\Guardians of Ember\RuLauncher.exe
FirewallRules: [{8D7894DC-F52B-4276-86E4-3BD4884A3CDA}] => (Allow) D:\Steam\steamapps\common\Guardians of Ember\RuLauncher.exe
FirewallRules: [{C371F4CA-56A8-4942-B540-493EE36672D1}] => (Allow) D:\PowerDirector14\PowerDirector14\PDR10.EXE
FirewallRules: [{584626CF-AAEB-47B0-BC13-6B5D2DF6F643}] => (Allow) D:\Diablo II Install\Downloader_Diablo2_Lord_of_Destruction_deDE.exe
FirewallRules: [{EEBF5BE4-37A5-476F-8359-3CD41E5F7303}] => (Allow) D:\Diablo II Install\Downloader_Diablo2_Lord_of_Destruction_deDE.exe
FirewallRules: [{5C871658-919A-4A42-8C10-6403A1CD187B}] => (Allow) D:\Diablo II Install\Downloader_Diablo2_deDE.exe
FirewallRules: [{FBDA1BF0-2CB3-4C37-997F-891FD096D310}] => (Allow) D:\Diablo II Install\Downloader_Diablo2_deDE.exe
FirewallRules: [{452E492E-FCE4-4C79-928E-A4DE9E63620F}] => (Allow) LPort=3724
FirewallRules: [{86A29917-68CF-4C9A-972E-1774C9138E68}] => (Allow) C:\Users\Camth\Downloads\Downloader_Diablo2_deDE.exe
FirewallRules: [{7C7DECF4-3382-4F62-BB89-C02FFD3A95FD}] => (Allow) C:\Users\Camth\Downloads\Downloader_Diablo2_deDE.exe
FirewallRules: [{715C2522-4BE3-43AD-B594-8B0C18AFB2D1}] => (Allow) C:\Program Files (x86)\Kalypso Media\Dungeons2\mono\bin\mono.exe
FirewallRules: [{E5F942DA-84B8-4067-8525-95A3238FBB50}] => (Allow) D:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{0E942E51-A3F0-4BBE-85CC-EABC18DEA3C0}] => (Allow) D:\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{4C639F21-E3FD-4378-8B0D-47566A47630A}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
FirewallRules: [{FE2861F5-4A46-482A-838B-F0EB767AFD19}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
FirewallRules: [UDP Query User{D84379C6-DEB5-419C-8308-B4FA1C179950}C:\users\camth\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\camth\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{1C5AB840-1B1F-43E3-9225-168661E4A7A1}C:\users\camth\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\camth\appdata\local\akamai\netsession_win.exe
FirewallRules: [{E01D10AA-8B70-4EE7-A28C-C127F4E0B08F}] => (Allow) D:\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{DC0A666D-2E31-4CC7-B4F9-FD96402B71FF}] => (Allow) D:\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{1C512A92-34EE-4E89-AB1E-E9DDD768DE78}] => (Allow) D:\Steam\steamapps\common\Wolfenstein.The.New.Order.DE\WolfNewOrder_x64.exe
FirewallRules: [{1261A5A8-CB66-45C6-AB6D-11FF72C98098}] => (Allow) D:\Steam\steamapps\common\Wolfenstein.The.New.Order.DE\WolfNewOrder_x64.exe
FirewallRules: [{68A8EB18-5D79-49B7-A944-B46AF9AF98D3}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{62FC52AF-ED32-4B2E-8D76-C2933D91A99B}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{33C4458F-3CA8-4A69-A120-BFBAB458A3AD}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{554BD4F6-2F31-4A8E-B9E6-69131E9009F1}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{93D825AE-BDD9-4404-A157-BC070624ADD8}] => (Allow) D:\Tom Clancy's The Division\TheDivision.exe
FirewallRules: [UDP Query User{1BD2BA74-59CE-42D7-8109-071D5FDEDFC7}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{C2A5CA5F-2768-487F-BF18-BE506A856726}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{696A6407-ECCE-4481-9630-5A7A83584038}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9E427A85-29AC-4E16-A439-1339408A3CD1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E86D3ED6-514B-49CC-B329-A811575AAB56}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{7CBD2C9E-ACDB-41CB-AA7C-AD3EB528A4E6}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
FirewallRules: [{A7058190-85F4-45C7-865F-3B1CB4513BFD}] => (Allow) D:\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{8B1D8D43-3976-4199-A021-4996FBA37CA1}] => (Allow) D:\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{014CD5B0-D40E-4963-844B-DE6B018BFCDD}] => (Allow) D:\Origin Games\Medal of Honor Pacific Assault\mohpa_setup.exe
FirewallRules: [{8192008E-0283-4B1E-AB4C-39F21B7C7D36}] => (Allow) D:\Origin Games\Medal of Honor Pacific Assault\mohpa_setup.exe
FirewallRules: [{3AFC0FE6-E887-4596-9444-6C890ACED738}] => (Allow) D:\Origin Games\Medal of Honor Pacific Assault\mohpa.exe
FirewallRules: [{645BBF32-81CC-424B-8AD7-F185B5776B64}] => (Allow) D:\Origin Games\Medal of Honor Pacific Assault\mohpa.exe
FirewallRules: [{10927964-0D77-4403-A403-FEBCC842358D}] => (Allow) D:\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{2FCACA1B-70C0-446F-B9A9-E0028E7CDF41}] => (Allow) D:\Origin Games\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{9F6FF8A2-44F1-4C29-AA82-04A5091069B3}] => (Allow) D:\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{B2B15D36-8A41-49CA-B9F4-19C172322CEF}] => (Allow) D:\Origin Games\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{F8CB53AF-71E1-4AFE-9E83-1D6FF6E42B3B}] => (Allow) D:\Steam\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [{0229E30D-ED1E-4BEB-B26F-EC1C9ECB96BC}] => (Allow) D:\Steam\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [{805CA3F7-0134-4AB7-97BC-025872FDADCF}] => (Allow) D:\Steam\steamapps\common\Wolfenstein.The.Old.Blood.DE\WolfOldBlood_x64.exe
FirewallRules: [{3F85F4F0-B26A-4A0E-87AB-E48B10D963CD}] => (Allow) D:\Steam\steamapps\common\Wolfenstein.The.Old.Blood.DE\WolfOldBlood_x64.exe
FirewallRules: [{0C46B51C-A4A2-4F12-AC58-0D02BABA0482}] => (Allow) C:\Program Files\UVK - Ultra Virus Killer\UVK_en64.exe
FirewallRules: [{A9CD75DC-F270-4341-939E-CC3BC42ADFA2}] => (Allow) C:\Program Files\UVK - Ultra Virus Killer\UVK_en64.exe
FirewallRules: [{2B9E4F7E-3494-4DB6-8AA9-55B690C54E60}] => (Allow) C:\Program Files\UVK - Ultra Virus Killer\UVK_en64.exe
FirewallRules: [{0BBCB49D-21F1-456D-ABD3-19CF0A1805F0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{C18688B8-79CE-4482-92EE-1CBC7EFA52DB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{DDFB2E9F-2799-4739-A832-ED26817CAA33}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{681C65AA-14EA-4821-AB06-638B33A7107E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{20CC32D4-B3C3-405B-BDDE-B6A93153F7B6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{CC8865B0-AC43-4347-ADBA-419CDEB72481}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{DD6FE0C0-3C73-4898-BA1C-9C2BE90E313D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{30422505-0B4F-4FFF-B4C6-9C0217F965B5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.60.492.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{7E9D53A8-BC3E-434A-AF49-8C3123375CA6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

04-08-2017 17:19:50 DVDVideoSoftRestorePoint
05-08-2017 19:39:29 paint.net 4.0.17
08-08-2017 22:11:08 Windows Update
08-08-2017 22:11:16 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/09/2017 12:59:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 10.0.15063.0, Zeitstempel: 0x02799ef5
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.15063.447, Zeitstempel: 0xa329d3a8
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00000000000aa020
ID des fehlerhaften Prozesses: 0x1d4c
Startzeit der fehlerhaften Anwendung: 0x01d310fdeb8e3c4e
Pfad der fehlerhaften Anwendung: c:\windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichtskennung: e0c6f511-0d2a-4ede-a645-68993eeccf5a
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (08/06/2017 03:20:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: MasterofSound)
Description: Bei der Aktivierung der App „Microsoft.BingWeather_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NitroUpdateService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Malwarebytes Anti-Ransomware Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "GlassWire Control Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Cyberlink RichVideo64 Service(CRVS)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA Telemetry Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "PnkBstrB" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/10/2017 03:49:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Message Queuing" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 18%
Installierter physikalischer RAM: 32708.33 MB
Verfügbarer physikalischer RAM: 26684.56 MB
Summe virtueller Speicher: 65476.33 MB
Verfügbarer virtueller Speicher: 58955.05 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:237.81 GB) (Free:122.46 GB) NTFS
Drive d: (Programme) (Fixed) (Total:447.13 GB) (Free:3.33 GB) NTFS
Drive e: (Daten) (Fixed) (Total:931.51 GB) (Free:824.47 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 7769FEEC)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 447.1 GB) (Disk ID: 286BAED8)
Partition 1: (Not Active) - (Size=447.1 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 12832DE9)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Sicherheitsmail von web.de bekommen

Log-Analyse und Auswertung: Sicherheitsmail von web.de bekommen

Sicherheitsmail von web.de bekommen

Ähnliche Themen: Sicherheitsmail von web.de bekommen