Antivirus-Programme werden blockiert beim Downloaden & PC wurde langsamer.

DasTutWeh · 23.09.2017, 16:13

Ich habe folgendes problem und Suche seit längerem nach einer Lösung habe auch keine Windows CD um es zurück zusetzten.

Ich kann keine Antiviren-Programme herunterladen und mein PC wurde langsamer, ich habe vermutliche mir mehrere Viren aufeinmal aufgefangen und das ist so schlimm das WindowsDefender blockiert ist und das Downloaden der Antivirenprogramme. Außerdem hab, ich auch mehre Browserviren drauf und vieles mehr brauche dringend hilfe würde mich freuen bei jeder Antwort. Ich würde auch hilfspersonen die Teamviewerdaten etc geben oder durch Skype/Teamspeak.

Gruß,
DasTutWeh.

cosinus · 23.09.2017, 18:27

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

DasTutWeh · 23.09.2017, 21:59

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-09-2017 02
durchgeführt von User (Administrator) auf USER-PC (23-09-2017 22:29:12)
Gestartet von C:\Users\User\Downloads
Geladene Profile: User & Pylx (Verfügbare Profile: User & Pylx)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\Logic Cramble\set.exe
() C:\Users\User\AppData\Roaming\SysMon\sysmon.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
() C:\ProgramData\PrefsSecure\Nettrans.exe
(O2Micro International) C:\Windows\SysWOW64\o2flash.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Search Module Ltd.) C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe
() C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\tor.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Windows\windefender.exe
() C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
() C:\Windows\rss\csrss.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\User\AppData\Local\Temp\csrss\wup.exe
(EpicNet Inc.) C:\Users\User\AppData\Local\Temp\csrss\cloudnet.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClient.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUx.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUxRender.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUxRender.exe
(TeamSpeak Systems GmbH) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
() C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}\4C44C175-FBEF-76DE-A2EC-D8B530283C4E.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(PortableAppZ.blogspot.com) C:\Users\User\Desktop\Emre\Design\Programme\Photoshop\AutoPlay\Docs\PhotoshopCS6Portable.exe
(Adobe Systems, Incorporated) C:\Users\User\Desktop\Emre\Design\Programme\Photoshop\AutoPlay\Docs\App\PhotoshopCS6\Photoshop.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [1878016 2017-04-19] (WinZip)
HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [124360 2017-04-19] (WinZip Computing, S.L.)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2017-04-19] (WinZip Computing, S.L.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2017-06-29] (LogMeIn Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKLM\...\Policies\Explorer: [NoShellSearchButton] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKLM\...\Policies\Explorer: [NoSetFolders] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== ACHTUNG
HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== ACHTUNG
HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== ACHTUNG
HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== ACHTUNG
HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== ACHTUNG
HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== ACHTUNG
HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== ACHTUNG
HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== ACHTUNG
HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== ACHTUNG
HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== ACHTUNG
HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== ACHTUNG
HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== ACHTUNG
HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== ACHTUNG
HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== ACHTUNG
HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== ACHTUNG
HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== ACHTUNG
HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== ACHTUNG
HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== ACHTUNG
HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== ACHTUNG
HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== ACHTUNG
HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== ACHTUNG
HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== ACHTUNG
HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== ACHTUNG
HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== ACHTUNG
HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== ACHTUNG
HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== ACHTUNG
HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Run: [ProudNight] => C:\Windows\rss\csrss.exe [2519552 2017-09-17] () <==== ACHTUNG
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Run: [CloudNet] => C:\Users\User\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe [776704 2017-09-23] (EpicNet Inc.)
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: E - E:\DriverPackSolution.exe
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: {020927ca-0bfe-11e3-a158-806e6f6e6963} - D:\AutoRun\AutoRunX\AutoRunX.exe
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: {256244b6-c1d7-11e1-a03e-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: {3f05bd66-fc1f-11e1-9988-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0
ShellExecuteHooks: Kein Name - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} - C:\Windows\C_KE763.dat [2035200 2017-07-29] (Micrasaft Carparation) <==== ACHTUNG
BootExecute: autocheck autochk * aswBoot.exe /M:10e4c8b3464 /wow /dir:"C:\Program Files\AVAST Software\Avast"
GroupPolicy: Beschränkung - Chrome <==== ACHTUNG
GroupPolicy\User: Beschränkung <==== ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyEnable: [.DEFAULT] => Proxy ist aktiviert.
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\Parameters: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{047B497F-8934-461B-929D-46BEA4597F10}: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{047B497F-8934-461B-929D-46BEA4597F10}: [DhcpNameServer] 82.163.143.176
Tcpip\..\Interfaces\{088F167F-2A69-4E6C-9AB4-301E41E807B3}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1CE51F56-C054-4B3A-B11A-8956C8077426}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{49F9229F-B5F5-405C-9271-A56BE420AC0B}: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{49F9229F-B5F5-405C-9271-A56BE420AC0B}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{6E8E423E-189B-4509-A62C-3AC9AF887306}: [DhcpNameServer] 95.211.171.160 95.211.171.161
Tcpip\..\Interfaces\{7EC0E702-3E77-4207-9330-5AA7C0357A50}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8C783455-075D-4336-BAA3-36BBA8FBB227}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8DDCB8D2-1423-4162-9618-CEFC7743F2F5}: [DhcpNameServer] 74.120.221.225 74.120.221.227
Tcpip\..\Interfaces\{96FE378A-A81F-4440-8DD9-35FF8B95CE57}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{B08DA078-E002-4202-A2AC-5F21BC06420A}: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{E7839079-1645-4609-9BF3-97336BF31CE3}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{F5A4CB2A-9728-4293-804C-7FA66F023309}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131183754482389298&GUID=6F5998D9-F889-42CE-A6B8-5798BCA970E5
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131466997966373592&GUID=6F5998D9-F889-42CE-A6B8-5798BCA970E5
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWr9pMP0ZqMMgUNcApe7xeZU4BNa5y6GanExQqRfV5nnQVbQQMEfQGQ_tGQapQbcRWKq8ZQ9w8hbMFDWgqsIJ1G7BbezgktKETJPH2Zv9hQk2rZF71ovk09BLT3yc6vpuhMo2OZ1O9hR_evlgYfQi_1iGoJxTAluXa0wsxDMqZ&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {114DB5FA-0AFB-BB92-A75B-F44D3CE875CD} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = 
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWr9pMP0ZqMMgUNcApe7xeZU4BNa5y6GanExQqRfV5nnQVbQQMEfQGQ_tGQapQbcRWKq8ZQ9w8hbMFDWgqsIJ1G7BbezgktKETJPH2Zv9hQk2rZF71ovk09BLT3yc6vpuhMo2OZ1O9hR_evlgYfQi_1iGoJxTAluXa0wsxDMqZ&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2783078182-1204926350-1955954555-1000 -> {114DB5FA-0AFB-BB92-A75B-F44D3CE875CD} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-22] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Kein Name -> {97510FAC-ED50-46BF-B2A1-25F434BF1030} -> Keine Datei
BHO: - -> {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} -> C:\Program Files\{C068E1D2-6CD6-4AF2-AABF-827A8B1C0010}\{8E07AFE8-501E-467F-BE60-D56D353E2291}.bin [2017-09-23] ( )
BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> Keine Datei
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-22] (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-11-07] (DVDVideoSoft Ltd.)
BHO-x32: Kein Name -> {0B789B27-A4B8-3CFF-5258-3A7E9496F2A2} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2016-01-22] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: - -> {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} -> C:\Program Files (x86)\{5CA29C8C-A3C1-4BFB-9251-7F4E7B4C7DB0}\{5AB17B29-FFBC-4AEF-BC67-3C523A60FCEB}.bin [2017-09-23] ( )
BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> Keine Datei
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2016-01-22] (Oracle Corporation)
Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} -  Keine Datei
Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} -  Keine Datei
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default [2017-09-23]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\user.js [2017-09-23]
FF Homepage: Mozilla\Firefox\Profiles\0yikam3g.default -> C:\ProgramData\Plusdaxs\ff.HP
FF NewTab: Mozilla\Firefox\Profiles\0yikam3g.default -> C:\ProgramData\Plusdaxs\ff.NT
FF Extension: (Avira Browser Safety) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\abs@avira.com [2015-05-29] [ist nicht signiert]
FF Extension: (Kein Name) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\amcontextmenu@loucypher [2017-08-01] [ist nicht signiert]
FF Extension: (MEGA) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\firefox@mega.co.nz.xpi [2016-03-19]
FF Extension: (Домашняя страница Mail.Ru) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\homepage@mail.ru [2016-09-03]
FF Extension: (SalePLaus) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\kXe@OV.edu [2015-04-12] [ist nicht signiert]
FF Extension: (Поиск@Mail.Ru) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\search@mail.ru [2016-09-03]
FF Extension: (youtubeadblocker) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\w@LBowbU.net [2015-04-12] [ist nicht signiert]
FF Extension: (Windows Desktop Search Scope Manager) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{2A7244A8-9606-51BB-155F-37E4B15E8B6F} [2015-01-24] [ist nicht signiert]
FF Extension: (Search Tool for Mozilla Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{74904424-ec46-4d61-bd52-8b528a96f6d1}.xpi [2015-01-02] [ist nicht signiert]
FF Extension: (Визуальные закладки @Mail.Ru) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [2016-09-03]
FF Extension: (Download videos and MP3s from YouTube) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-11-21] [ist nicht signiert]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\ask-web-search.xml [2013-10-09]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\bingp.xml [2014-03-12]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\findit.xml [2017-08-02]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\GoSearch.xml [2016-09-04]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\mailru.xml [2016-09-03]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\MPC Safe Search.xml [2016-09-03]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\Speedial.xml [2014-05-30]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\trovi-search.xml [2014-11-21]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25]
FF Extension: (Adblocker for Youtube™) - C:\Program Files (x86)\Mozilla Firefox\browser\features\{5C3FD6D1-9185-4195-B5E1-FAB622427F59} [2017-09-17] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{854E17DC-7FFC-4613-9F66-434E9BABD8AD}] - C:\Windows\Installer\{6DE70353-382D-4EC8-B2B7-0698AF63F8AC}\{854E17DC-7FFC-4613-9F66-434E9BABD8AD}.xpi
FF Extension: ( ) - C:\Windows\Installer\{6DE70353-382D-4EC8-B2B7-0698AF63F8AC}\{854E17DC-7FFC-4613-9F66-434E9BABD8AD}.xpi [2017-09-23]
FF HKLM-x32\...\Firefox\Extensions: [{854E17DC-7FFC-4613-9F66-434E9BABD8AD}] - C:\Windows\Installer\{6DE70353-382D-4EC8-B2B7-0698AF63F8AC}\{854E17DC-7FFC-4613-9F66-434E9BABD8AD}.xpi
FF HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: (Download videos and MP3s from YouTube) - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-21] [ist nicht signiert]
FF HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Firefox\Extensions: [{F34A720D-88EE-A7E4-3F20-D1887F3FDC17}] - C:\Program Files (x86)\ver8Re-Markable\190.xpi
FF Extension: (Re-Markable) - C:\Program Files (x86)\ver8Re-Markable\190.xpi [2015-03-24] [ist nicht signiert]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\findit.xml [2017-08-02]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nationzoom.xml [2014-01-09]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml [2014-12-22]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-22] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-06-08] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @haitao.com/npHaitaoPlugin -> C:\Users\User\AppData\Local\htyh\application\htwebHelper.dll [Keine Datei]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2016-01-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2016-01-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameeu.dll [2015-06-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-07] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-07-19] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-06-08] (Adobe Systems)

Chrome: 
=======
CHR DefaultProfile: Profile 3
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-09-23]
CHR Extension: (Google Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-16]
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-16]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-16]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-16]
CHR Extension: (Google Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-16]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-16]
CHR Extension: (History Open) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\icfhggboopebcohpcffdgnbmodalpbic [2017-08-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-16]
CHR Extension: (Modern Flat) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdcjjgefkpoemmlcjfcfkeminneboaob [2017-08-16]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-16]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-16]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-08-02]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-15]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-25]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-15]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-25]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3 [2017-09-23]
CHR Extension: (Kein Name) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-20]
CHR Extension: (Kein Name) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-20]
CHR Extension: ( ) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bommoahfmfghjhffenemenonkmgbckbb [2017-09-23]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-20]
CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-08-22]
CHR Extension: (Search Module Plus v2) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jlcgehabolcakkjhgmgpkagpolbjlhfa [2017-09-17]
CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Kein Name) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-20]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-01]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2017-08-18]
CHR HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pnfdifjinnoooocgmbdioahcpaplhbhb] -  <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [iinglghmhcgdgjjlafobajghjamdchik] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [njlppdgedlaobpcbobcllbibebebkgam] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ojmcefcpojnkmmblchnllkaphlpdobgd] - C:\Joygame\JoyTemp\ChromeEklenti\homepage_extension_1_5.crx <nicht gefunden>

Opera: 
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdsService; C:\Users\User\AppData\Local\AdService\AdService.dll [781312 2017-09-09] () [Datei ist nicht signiert]
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [389312 2017-08-02] (Avira Operations GmbH & Co. KG)
R2 backlh; C:\ProgramData\Logic Cramble\set.exe [3780096 2017-08-02] () [Datei ist nicht signiert] <==== ACHTUNG
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [400656 2017-02-04] (EasyAntiCheat Ltd)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3418024 2017-06-29] (LogMeIn Inc.)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [53168 2017-09-11] (AnchorFree Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
R2 Nettrans; C:\ProgramData\PrefsSecure\Nettrans.exe [43520 2017-07-20] () [Datei ist nicht signiert] <==== ACHTUNG
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3643520 2016-01-07] (INCA Internet Co., Ltd.)
R2 O2Flash; C:\Windows\SysWOW64\o2flash.exe [65536 2009-09-12] (O2Micro International) [Datei ist nicht signiert]
R2 OtherSearch; C:\Program Files (x86)\YkUBYysd0K\kl.dll [2137600 2017-09-18] () [Datei ist nicht signiert] <==== ACHTUNG
R2 SMUpd; C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe [3119104 2017-08-03] (Search Module Ltd.) [Datei ist nicht signiert] <==== ACHTUNG
R2 TCPSvc; C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\tor.exe [3282432 2017-09-17] () [Datei ist nicht signiert] <==== ACHTUNG
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10885360 2017-05-31] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WinDefender; C:\Windows\windefender.exe [1370624 2017-09-17] () [Datei ist nicht signiert]
R2 WinZip Smart Monitor Service; C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe [495616 2017-04-11] () [Datei ist nicht signiert]
R2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
S2 AdobeUpdateService; "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" [X]
S2 AGSService; "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe" [X]
S2 SvcHost Service Host; "C:\Windows\Microsoft\svchost.exe" -k LocalService [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AFTrafMgr1.3; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_3_64.sys [64912 2017-09-07] (AnchorFree Inc.)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44648 2015-06-04] (AnchorFree Inc.)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104560 2012-04-25] (Qualcomm Atheros Co., Ltd.)
R1 Lace514; C:\Windows\System32\drivers\Lace_wpf_x64.sys [107800 2017-09-18] (Driver Lace 514)
S3 MOSUMAC; C:\Windows\System32\DRIVERS\USBMAC64.SYS [54272 2009-12-10] (--)
S3 NSCIRDA; C:\Windows\System32\DRIVERS\nscirda.sys [36352 2008-01-19] (National Semiconductor Corporation)
S3 O2MDRDR; C:\Windows\System32\DRIVERS\o2mdx64.sys [57376 2009-09-12] (O2Micro )
S3 O2SCBUS; C:\Windows\System32\DRIVERS\ozscrx64.sys [107096 2008-06-12] (O2Micro)
R3 SMUpdd; C:\Program Files\Common Files\Noobzo\GNUpdate\smw.sys [52992 2017-08-03] () <==== ACHTUNG
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.)
R3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [196040 2017-07-27] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [206976 2017-07-27] (Oracle Corporation)
R1 wfcre; C:\Windows\System32\drivers\wfcre.sys [132992 2017-09-04] ()
S3 xspirit; C:\Windows\xspirit.sys [1 2016-07-17] () [Datei ist nicht signiert]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
S1 anqdepzh; \??\C:\Windows\system32\drivers\anqdepzh.sys [X]
S3 ASUSProcObsrv; \??\D:\I386\AsPrOb64.sys [X]
S1 atzmsmph; \??\C:\Windows\system32\drivers\atzmsmph.sys [X]
S1 brhtniij; \??\C:\Windows\system32\drivers\brhtniij.sys [X]
S1 bwaqyvao; \??\C:\Windows\system32\drivers\bwaqyvao.sys [X]
S1 bwvxlrns; \??\C:\Windows\system32\drivers\bwvxlrns.sys [X]
S1 cxhmqzji; \??\C:\Windows\system32\drivers\cxhmqzji.sys [X]
S1 dahfuouw; \??\C:\Windows\system32\drivers\dahfuouw.sys [X]
S1 ddceqniy; \??\C:\Windows\system32\drivers\ddceqniy.sys [X]
U3 DfSdkS; kein ImagePath
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 ebozkbiv; \??\C:\Windows\system32\drivers\ebozkbiv.sys [X]
S1 ecdjwauh; \??\C:\Windows\system32\drivers\ecdjwauh.sys [X]
S1 eiuzatax; \??\C:\Windows\system32\drivers\eiuzatax.sys [X]
S1 evjgvvbt; \??\C:\Windows\system32\drivers\evjgvvbt.sys [X]
S1 fyzmwjsl; \??\C:\Windows\system32\drivers\fyzmwjsl.sys [X]
S1 fzhzyakv; \??\C:\Windows\system32\drivers\fzhzyakv.sys [X]
S1 hjpqtynw; \??\C:\Windows\system32\drivers\hjpqtynw.sys [X]
S1 hoaibtxw; \??\C:\Windows\system32\drivers\hoaibtxw.sys [X]
S1 hwvquxew; \??\C:\Windows\system32\drivers\hwvquxew.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S1 jhbvjddm; \??\C:\Windows\system32\drivers\jhbvjddm.sys [X]
S1 jxcnvhxb; \??\C:\Windows\system32\drivers\jxcnvhxb.sys [X]
S1 kmvqwfvw; \??\C:\Windows\system32\drivers\kmvqwfvw.sys [X]
S1 kvqeepsa; \??\C:\Windows\system32\drivers\kvqeepsa.sys [X]
S1 laauyhha; \??\C:\Windows\system32\drivers\laauyhha.sys [X]
S1 laredpnp; \??\C:\Windows\system32\drivers\laredpnp.sys [X]
S1 mhioygoe; \??\C:\Windows\system32\drivers\mhioygoe.sys [X]
S1 moiqgwao; \??\C:\Windows\system32\drivers\moiqgwao.sys [X]
S1 mvcyvkmb; \??\C:\Windows\system32\drivers\mvcyvkmb.sys [X]
S1 mvicmlmp; \??\C:\Windows\system32\drivers\mvicmlmp.sys [X]
S1 mwrauity; \??\C:\Windows\system32\drivers\mwrauity.sys [X]
S1 nghwddal; \??\C:\Windows\system32\drivers\nghwddal.sys [X]
S1 nkxgrupf; \??\C:\Windows\system32\drivers\nkxgrupf.sys [X]
S1 nsqblejy; \??\C:\Windows\system32\drivers\nsqblejy.sys [X]
S1 oflfytuc; \??\C:\Windows\system32\drivers\oflfytuc.sys [X]
S1 olgchotm; \??\C:\Windows\system32\drivers\olgchotm.sys [X]
S1 ossufdxb; \??\C:\Windows\system32\drivers\ossufdxb.sys [X]
S1 prncgliv; \??\C:\Windows\system32\drivers\prncgliv.sys [X]
S1 psxmrgwy; \??\C:\Windows\system32\drivers\psxmrgwy.sys [X]
S1 pwhrjylj; \??\C:\Windows\system32\drivers\pwhrjylj.sys [X]
S1 qawmlzdz; \??\C:\Windows\system32\drivers\qawmlzdz.sys [X]
S1 qbrwplnu; \??\C:\Windows\system32\drivers\qbrwplnu.sys [X]
S1 quwsgyoc; \??\C:\Windows\system32\drivers\quwsgyoc.sys [X]
S1 qxuewkfb; \??\C:\Windows\system32\drivers\qxuewkfb.sys [X]
S1 qyfnvarv; \??\C:\Windows\system32\drivers\qyfnvarv.sys [X]
S1 rfidniqb; \??\C:\Windows\system32\drivers\rfidniqb.sys [X]
S1 rfomlngh; \??\C:\Windows\system32\drivers\rfomlngh.sys [X]
S1 rnchppmi; \??\C:\Windows\system32\drivers\rnchppmi.sys [X]
S1 scyrjscm; \??\C:\Windows\system32\drivers\scyrjscm.sys [X]
S3 SmbDrv; system32\DRIVERS\Smb_driver.sys [X]
U0 SR; kein ImagePath
U2 srservice; kein ImagePath
S1 sslcxkao; \??\C:\Windows\system32\drivers\sslcxkao.sys [X]
S1 tgopufcf; \??\C:\Windows\system32\drivers\tgopufcf.sys [X]
S1 tjszdxvm; \??\C:\Windows\system32\drivers\tjszdxvm.sys [X]
S1 ucdrv; \??\C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [X] <==== ACHTUNG
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S1 vqqgrdno; \??\C:\Windows\system32\drivers\vqqgrdno.sys [X]
S1 wnkrxfon; \??\C:\Windows\system32\drivers\wnkrxfon.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S1 xjyynmce; \??\C:\Windows\system32\drivers\xjyynmce.sys [X]
S1 xrvzhyob; \??\C:\Windows\system32\drivers\xrvzhyob.sys [X]
S1 yfcmtzxu; \??\C:\Windows\system32\drivers\yfcmtzxu.sys [X]
S1 znrjdefb; \??\C:\Windows\system32\drivers\znrjdefb.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-23 22:29 - 2017-09-23 22:36 - 000050515 _____ C:\Users\User\Downloads\FRST.txt
2017-09-23 22:28 - 2017-09-23 22:29 - 000000000 ____D C:\FRST
2017-09-23 22:28 - 2017-09-23 22:28 - 002399744 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2017-09-23 22:16 - 2017-09-23 22:16 - 000398826 _____ C:\Users\User\Desktop\ymirred.tga
2017-09-23 22:16 - 2017-09-23 22:16 - 000363165 _____ C:\Users\User\Desktop\ymirred - kopie.tga
2017-09-23 22:14 - 2017-09-23 22:14 - 000000000 ____D C:\Users\User\AppData\Roaming\Adobe
2017-09-23 22:14 - 2017-09-23 22:14 - 000000000 ____D C:\Users\User\AppData\Local\Adobe
2017-09-23 22:14 - 2017-09-23 22:14 - 000000000 ____D C:\ProgramData\Adobe
2017-09-23 22:11 - 2017-09-23 22:16 - 000000000 ____D C:\Users\User\Desktop\EterNexus
2017-09-23 21:57 - 2017-09-23 19:23 - 000000000 ____D C:\Users\User\Desktop\GENESIS2 TEST
2017-09-23 21:20 - 2017-09-23 21:22 - 1147137858 _____ C:\Users\User\Downloads\GENESIS2 TEST.rar
2017-09-23 17:53 - 2017-09-23 18:56 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Skype
2017-09-23 17:53 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx\Tracing
2017-09-23 17:53 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx\Documents\League of Legends
2017-09-23 17:53 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx\AppData\Local\CEF
2017-09-23 16:50 - 2017-09-23 16:50 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Opera Software
2017-09-23 16:50 - 2017-09-23 16:50 - 000000000 ____D C:\Users\Pylx\AppData\Local\Opera Software
2017-09-23 16:41 - 2017-09-23 16:41 - 003449304 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Pylx\Downloads\AVG_Protection_Free_1606.exe
2017-09-23 16:35 - 2017-09-23 16:35 - 000126272 _____ C:\Users\Pylx\AppData\Local\GDIPFONTCACHEV1.DAT
2017-09-23 16:34 - 2017-09-23 16:35 - 007142408 _____ (AVAST Software) C:\Users\Pylx\Downloads\avast_free_antivirus_setup_online_e1i.exe
2017-09-23 16:29 - 2017-09-23 16:29 - 000000000 ____D C:\Users\Pylx\AppData\Local\LogMeIn
2017-09-23 16:29 - 2017-09-23 16:29 - 000000000 ____D C:\Users\Pylx\AppData\Local\Google
2017-09-23 16:28 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx
2017-09-23 16:28 - 2017-09-23 16:35 - 000000000 ____D C:\Users\Pylx\AppData\Local\LogMeIn Hamachi
2017-09-23 16:28 - 2017-09-23 16:28 - 000001385 _____ C:\Users\Pylx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-09-23 16:28 - 2017-09-23 16:28 - 000000306 __RSH C:\Users\Pylx\ntuser.pol
2017-09-23 16:28 - 2017-09-23 16:28 - 000000020 ___SH C:\Users\Pylx\ntuser.ini
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Vorlagen
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Startmenü
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Netzwerkumgebung
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Lokale Einstellungen
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Eigene Dateien
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Druckumgebung
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Documents\Eigene Videos
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Documents\Eigene Musik
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Documents\Eigene Bilder
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\AppData\Local\Verlauf
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\AppData\Local\Anwendungsdaten
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Anwendungsdaten
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Adobe
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 ____D C:\Users\Pylx\AppData\Local\VirtualStore
2017-09-23 16:28 - 2016-10-15 19:29 - 000000000 ____D C:\Users\Pylx\AppData\Local\CrashRpt
2017-09-23 16:28 - 2011-04-12 09:54 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Media Center Programs
2017-09-23 11:42 - 2017-09-23 11:42 - 000633296 _____ (Microsoft Corporation) C:\Windows\system32\osloader.exe
2017-09-23 11:41 - 2017-09-23 11:42 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlmp.exe
2017-09-23 11:39 - 2017-09-23 11:39 - 000002996 _____ C:\Windows\System32\Tasks\RunAtStartup
2017-09-23 10:53 - 2017-09-23 11:51 - 000000000 ____D C:\Users\User\AppData\Local\LogMeIn Hamachi
2017-09-23 10:53 - 2017-09-23 10:53 - 000000000 ____D C:\Users\User\AppData\Local\LogMeIn
2017-09-23 08:15 - 2017-09-23 08:15 - 000000000 ____D C:\Program Files\{C068E1D2-6CD6-4AF2-AABF-827A8B1C0010}
2017-09-23 08:14 - 2017-09-23 08:14 - 000000000 ____D C:\Program Files (x86)\{5CA29C8C-A3C1-4BFB-9251-7F4E7B4C7DB0}
2017-09-22 23:20 - 2017-09-22 23:20 - 000000000 ____D C:\Users\User\AppData\Local\CEF
2017-09-22 19:35 - 2017-09-22 19:35 - 000000000 ____D C:\Users\User\AppData\Local\Blizzard
2017-09-20 21:32 - 2017-09-15 15:52 - 000000000 ____D C:\Users\User\Desktop\GENESIS2  9.4V
2017-09-20 21:27 - 2017-09-20 21:30 - 1070689393 _____ C:\Users\User\Downloads\GENESIS2 9.4V.rar
2017-09-19 13:40 - 2017-09-19 13:40 - 000001996 _____ C:\Windows\System32\Tasks\27DAVpQmvp
2017-09-19 13:30 - 2017-09-23 16:30 - 000000000 ____D C:\Program Files (x86)\YkUBYysd0K
2017-09-19 13:30 - 2017-09-19 13:41 - 000000002 _____ C:\END
2017-09-18 07:41 - 2017-09-18 07:41 - 000107800 _____ (Driver Lace 514) C:\Windows\system32\Drivers\Lace_wpf_x64.sys
2017-09-18 03:04 - 2017-09-19 03:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-09-18 03:02 - 2017-09-19 13:26 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2017-09-18 03:02 - 2017-09-19 13:26 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-09-17 20:11 - 2017-09-23 08:15 - 000004608 _____ C:\Windows\system32\mtxdm64.dll
2017-09-17 20:11 - 2017-09-22 19:31 - 000000000 ____D C:\Users\User\AppData\Roaming\Jawego
2017-09-17 20:11 - 2017-09-17 22:15 - 000000000 ____D C:\Users\User\AppData\Roaming\PCPRJ
2017-09-17 20:11 - 2017-09-17 20:11 - 000000000 ____D C:\Users\User\AppData\Local\Jawego
2017-09-17 20:07 - 2017-09-17 20:07 - 000009352 _____ C:\Windows\system32\Drivers\Winmon.sys
2017-09-17 19:48 - 2017-09-17 19:49 - 000000000 ____D C:\Program Files (x86)\nodejs
2017-09-17 19:48 - 2017-09-17 19:48 - 000000000 ____D C:\Users\User\AppData\Roaming\npm
2017-09-17 19:47 - 2017-09-23 08:15 - 000006656 _____ C:\Windows\system32\winusb64x.dll
2017-09-17 19:46 - 2017-09-17 19:46 - 001370624 _____ C:\Windows\windefender.exe
2017-09-17 19:45 - 2017-09-17 19:46 - 000000000 ____D C:\Windows\rss
2017-09-17 19:35 - 2017-09-17 19:50 - 000000000 ____D C:\Users\Public\Documents\InternetInfoTools
2017-09-15 21:29 - 2017-09-15 21:29 - 000001037 _____ C:\Users\Public\Desktop\Camtasia 9.lnk
2017-09-15 21:29 - 2017-09-15 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2017-09-15 21:28 - 2017-09-15 21:28 - 000000000 ____D C:\ProgramData\TechSmith
2017-09-15 21:28 - 2017-09-15 21:28 - 000000000 ____D C:\Program Files\TechSmith
2017-09-15 21:18 - 2017-09-15 21:20 - 286635456 _____ (TechSmith Corporation) C:\Users\User\Downloads\camtasiade.exe
2017-09-15 08:48 - 2017-09-15 08:48 - 000734208 _____ C:\Windows\88c6c384abdf4e17f71b76946d2becfa.exe
2017-09-15 08:48 - 2017-09-15 08:48 - 000037171 _____ C:\Windows\uninstaller.dat
2017-09-14 06:34 - 2017-09-14 06:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2017-09-13 01:17 - 2017-08-19 17:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-13 01:17 - 2017-08-19 17:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-09-13 01:17 - 2017-08-16 17:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-13 01:17 - 2017-08-16 17:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-09-13 01:17 - 2017-08-16 16:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-13 01:17 - 2017-08-16 03:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-13 01:17 - 2017-08-16 02:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-09-13 01:17 - 2017-08-15 17:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-13 01:17 - 2017-08-15 17:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-13 01:17 - 2017-08-15 17:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-09-13 01:17 - 2017-08-15 17:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-09-13 01:17 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-13 01:17 - 2017-08-15 16:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-09-13 01:17 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-09-13 01:17 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-09-13 01:17 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2017-09-13 01:17 - 2017-08-14 19:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2017-09-13 01:17 - 2017-08-13 23:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-09-13 01:17 - 2017-08-13 23:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-09-13 01:17 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-13 01:17 - 2017-08-13 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-13 01:17 - 2017-08-13 19:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-13 01:17 - 2017-08-13 19:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-13 01:17 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-13 01:17 - 2017-08-13 19:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-13 01:17 - 2017-08-13 19:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-13 01:17 - 2017-08-13 19:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-13 01:17 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-13 01:17 - 2017-08-13 18:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-13 01:17 - 2017-08-13 18:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-13 01:17 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-09-13 01:17 - 2017-08-13 18:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-13 01:17 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-13 01:17 - 2017-08-13 18:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-13 01:17 - 2017-08-13 18:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-13 01:17 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-13 01:17 - 2017-08-13 18:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-13 01:17 - 2017-08-13 18:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-09-13 01:17 - 2017-08-13 18:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-13 01:17 - 2017-08-13 18:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-13 01:17 - 2017-08-13 18:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-09-13 01:17 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-09-13 01:17 - 2017-08-13 18:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-09-13 01:17 - 2017-08-13 18:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-13 01:17 - 2017-08-13 18:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-13 01:17 - 2017-08-13 18:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-09-13 01:17 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-09-13 01:17 - 2017-08-13 18:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-13 01:17 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-09-13 01:17 - 2017-08-13 18:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-13 01:17 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-13 01:17 - 2017-08-13 18:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-09-13 01:17 - 2017-08-13 18:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-09-13 01:17 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-13 01:17 - 2017-08-13 18:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-09-13 01:17 - 2017-08-13 18:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-13 01:17 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-09-13 01:17 - 2017-08-13 18:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-09-13 01:17 - 2017-08-13 18:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-09-13 01:17 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-13 01:17 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-13 01:17 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-13 01:17 - 2017-08-13 18:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-13 01:17 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-13 01:17 - 2017-08-13 18:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-09-13 01:17 - 2017-08-13 18:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-09-13 01:17 - 2017-08-13 18:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-09-13 01:17 - 2017-08-13 17:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-09-13 01:17 - 2017-08-13 17:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-09-13 01:17 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-09-13 01:17 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-09-13 01:17 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-09-13 01:17 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-09-13 01:17 - 2017-08-13 17:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-09-13 01:17 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-13 01:17 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-13 01:17 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-13 01:17 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-09-13 01:17 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-09-13 01:17 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-09-13 01:17 - 2017-08-11 08:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-09-13 01:17 - 2017-08-11 08:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-13 01:17 - 2017-08-11 08:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-09-13 01:17 - 2017-08-11 08:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-13 01:17 - 2017-08-11 08:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-13 01:17 - 2017-08-11 08:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-09-13 01:17 - 2017-08-11 08:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-09-13 01:17 - 2017-08-11 08:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-09-13 01:17 - 2017-08-11 08:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2017-09-13 01:17 - 2017-08-11 08:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-13 01:17 - 2017-08-11 08:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2017-09-13 01:17 - 2017-08-11 08:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-13 01:17 - 2017-08-11 08:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2017-09-13 01:17 - 2017-08-11 08:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-13 01:17 - 2017-08-11 08:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-13 01:17 - 2017-08-11 08:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-13 01:17 - 2017-08-11 08:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-13 01:17 - 2017-08-11 08:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-13 01:17 - 2017-08-11 08:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2017-09-13 01:17 - 2017-08-11 08:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-13 01:17 - 2017-08-11 08:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-09-13 01:17 - 2017-08-11 08:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-13 01:17 - 2017-08-11 08:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-13 01:17 - 2017-08-11 08:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-09-13 01:17 - 2017-08-11 07:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-13 01:17 - 2017-08-11 07:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-13 01:17 - 2017-08-11 07:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-13 01:17 - 2017-08-11 07:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-13 01:17 - 2017-08-11 07:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-09-13 01:17 - 2017-08-11 07:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-09-13 01:17 - 2017-08-11 07:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-09-13 01:17 - 2017-08-11 07:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-09-13 01:17 - 2017-08-11 07:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-09-13 01:17 - 2017-07-07 17:29 - 001143296 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2017-09-13 01:17 - 2017-07-07 17:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
2017-09-11 00:05 - 2017-09-11 00:05 - 000208223 _____ C:\Users\User\Downloads\teamspeak-backup-3595990.dat
2017-09-10 01:52 - 2017-09-10 02:01 - 2374070190 _____ C:\Users\User\Downloads\Tsuyoshi2_28072017.zip
2017-09-10 01:31 - 2017-09-10 01:31 - 000023558 _____ C:\Windows\System32\Tasks\{797F0547-780A-0804-0811-7A04047E117D}
2017-09-09 22:25 - 2017-09-09 22:25 - 000000966 _____ C:\Users\Public\Desktop\Navicat Premium.lnk
2017-09-09 22:20 - 2017-09-09 22:20 - 000000000 _____ C:\Windows\SysWOW64\__015B144B__C0000005.dmp
2017-09-09 22:15 - 2017-09-09 22:15 - 000033792 _____ C:\Users\User\AppData\Local\amtfat.dll
2017-09-09 22:15 - 2017-09-09 22:15 - 000003072 _____ C:\Users\User\AppData\Local\uninstallce.exe
2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D C:\ProgramData\1a251446-1497-0
2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D C:\ProgramData\1a251446-0c35-1
2017-09-09 22:14 - 2017-09-17 20:19 - 000003156 _____ C:\Windows\System32\Tasks\01f8a84096caddd3c79baeadd404dcdf
2017-09-09 22:14 - 2017-09-17 20:03 - 000031481 _____ C:\Windows\d4b81cfa58e82cb84e315f74c23947cc.ps1
2017-09-09 22:14 - 2017-09-17 20:03 - 000003474 _____ C:\Windows\System32\Tasks\d4b81cfa58e82cb84e315f74c23947cc
2017-09-09 22:14 - 2017-09-09 22:14 - 000000000 ____D C:\Users\User\AppData\Local\AdService
2017-09-09 22:14 - 2017-09-09 22:14 - 000000000 ____D C:\Users\Public\Documents\XMUpdate
2017-09-05 14:38 - 2017-09-05 14:39 - 1010516273 _____ C:\Users\User\Downloads\S4MAX Game.zip
2017-09-05 13:19 - 2017-09-05 13:19 - 002548557 _____ C:\Users\User\Downloads\ModSkinLOL.VN_SkinLOL.zip
2017-09-04 18:02 - 2017-09-04 18:04 - 1226238598 _____ C:\Users\User\Downloads\Rocknada2.rar
2017-09-04 10:09 - 2017-09-04 10:09 - 000132992 _____ C:\Windows\system32\Drivers\wfcre.sys
2017-08-30 13:23 - 2017-08-30 13:23 - 000993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-08-30 13:23 - 2017-08-30 13:23 - 000987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2017-08-30 13:23 - 2017-08-30 13:23 - 000690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2017-08-30 13:23 - 2017-08-30 13:23 - 000485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2017-08-26 03:28 - 2017-08-26 03:28 - 000001073 _____ C:\Users\User\Desktop\Notepad-.lnk
2017-08-25 23:56 - 2017-09-20 21:31 - 000000000 ____D C:\Users\User\AppData\Local\WinZip
2017-08-25 23:56 - 2017-08-25 23:56 - 000000000 ____D C:\Program Files\WinZip Smart Monitor
2017-08-25 23:55 - 2017-08-25 23:55 - 000003398 _____ C:\Windows\System32\Tasks\WinZip Update Notifier
2017-08-25 23:55 - 2017-08-25 23:55 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Update Benachrichtigungsdienst.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000002323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip Hintergrund-Tools.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000002265 _____ C:\Users\Public\Desktop\WinZip.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 21.5
2017-08-25 23:54 - 2017-08-25 23:55 - 000000000 ____D C:\Program Files\WinZip
2017-08-25 23:54 - 2017-08-25 23:54 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinZip 21.5
2017-08-25 23:51 - 2017-08-25 23:52 - 000763112 _____ (WinZip Computing, S.L.) C:\Users\User\Downloads\winzip21-home.exe
2017-08-25 23:50 - 2017-08-25 23:50 - 017093771 _____ C:\Users\User\Downloads\TwixFiles (1).rar
2017-08-25 14:00 - 2017-08-25 14:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit)
2017-08-25 14:00 - 2017-08-25 14:00 - 000000000 ____D C:\Program Files\PuTTY
2017-08-25 13:57 - 2017-08-25 13:57 - 004430746 _____ C:\Users\User\Downloads\putty-0.70-installer.zip
2017-08-25 13:55 - 2017-08-25 13:55 - 000000000 ____D C:\ProgramData\UniqueId
2017-08-25 13:51 - 2017-08-25 13:51 - 000643144 _____ (Simon Tatham) C:\Users\User\Downloads\psftp.exe
2017-08-25 13:51 - 2017-08-25 13:51 - 000643144 _____ (Simon Tatham) C:\Users\User\Downloads\psftp (1).exe
2017-08-25 04:11 - 2017-08-25 23:56 - 000000000 ____D C:\ProgramData\WinZip
2017-08-25 04:11 - 2017-08-25 04:11 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinZip 21.0
2017-08-25 04:10 - 2017-08-25 04:10 - 000002994 _____ C:\Windows\System32\Tasks\LaunchChromeTask111
2017-08-25 04:10 - 2017-08-25 04:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2017-08-25 04:09 - 2017-08-25 04:10 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2017-08-25 04:07 - 2017-08-25 04:08 - 008736456 _____ (Tim Kosse) C:\Users\User\Downloads\FileZilla_3.27.1_win64-setup_bundled3.exe
2017-08-25 04:02 - 2017-08-25 04:02 - 001020416 _____ C:\Windows\SysWOW64\lastpass_downloader.exe
2017-08-25 04:02 - 2017-08-25 04:02 - 000000000 _____ C:\Windows\SysWOW64\lastpass_1337.exe
2017-08-25 04:01 - 2017-08-25 04:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-08-25 04:01 - 2017-08-25 04:01 - 000000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2017-08-25 03:53 - 2017-09-15 19:38 - 000000000 ____D C:\Users\User\.VirtualBox
2017-08-25 03:48 - 2017-08-25 03:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2017-08-25 03:47 - 2017-08-25 03:52 - 1218229015 _____ C:\Users\User\Downloads\FreeBSD11 64Bit.rar
2017-08-25 03:47 - 2017-07-27 13:33 - 000149816 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2017-08-25 03:46 - 2017-08-25 03:46 - 000000000 ____D C:\Program Files\Oracle
2017-08-25 03:46 - 2017-07-27 13:34 - 000965984 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2017-08-25 03:41 - 2017-08-25 03:42 - 001526792 _____ C:\Users\User\Downloads\VirtualBox - CHIP-Installer.exe
2017-08-25 03:14 - 2017-08-25 03:15 - 1026225371 _____ C:\Users\User\Downloads\Twix_Work_Client_German.7z
2017-08-25 03:11 - 2017-08-25 03:13 - 017093771 _____ C:\Users\User\Downloads\TwixFiles.rar
2017-08-24 22:20 - 2017-08-24 22:20 - 000202093 _____ C:\Users\User\Downloads\Metin2-Rcon[V1_0 - Reloaded].zip
2017-08-24 21:52 - 2017-08-24 21:52 - 000004026 _____ C:\Windows\System32\Tasks\{E061440E-57CA-F3A5-748A-789A8C266F9F}
2017-08-24 21:52 - 2017-08-24 21:52 - 000003726 _____ C:\Windows\System32\Tasks\{9CE6D844-F88B-A605-EE17-98C2EC4C0576}
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\c29817ef-7cb1-1
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\c29817ef-53a7-0
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\56757186
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}
2017-08-24 21:50 - 2017-08-24 21:50 - 000000000 ____D C:\ProgramData\{6bce105c-412c-0}
2017-08-24 21:50 - 2017-08-24 21:50 - 000000000 ____D C:\ProgramData\{1196708f-512c-0}
2017-08-24 21:50 - 2017-08-24 21:50 - 000000000 ____D C:\ProgramData\{0c2b1e56-312c-1}
2017-08-24 15:20 - 2017-08-24 15:20 - 022955954 _____ C:\Users\User\Downloads\webdesign_s_godsofgames_tree.rar
2017-08-24 15:19 - 2017-08-24 15:19 - 013972115 _____ C:\Users\User\Downloads\[Luna]Metin2ServerPresentation_Thedanielx32Design.zip
2017-08-24 14:58 - 2017-08-24 15:01 - 1486584934 _____ C:\Users\User\Downloads\Rubinum_Client_06_0_2017.rar
2017-08-24 14:50 - 2017-08-24 14:50 - 001603424 _____ C:\Users\User\Downloads\RubinumPatcher.zip
2017-08-24 14:34 - 2017-08-24 14:34 - 021285304 _____ (Michael Friese) C:\Users\User\Downloads\sinusbot-0.9.21.exe
2017-08-24 14:34 - 2017-08-24 14:34 - 021285304 _____ (Michael Friese) C:\Users\User\Downloads\sinusbot-0.9.21 (1).exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-23 22:38 - 2013-10-13 12:44 - 000000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2017-09-23 22:21 - 2012-09-11 17:04 - 000000000 ____D C:\Users\User\AppData\Roaming\Skype
2017-09-23 22:03 - 2013-12-22 23:03 - 000001326 _____ C:\Windows\Tasks\Plus-HD-1.2-updater.job
2017-09-23 22:03 - 2013-12-22 23:03 - 000001228 _____ C:\Windows\Tasks\Plus-HD-1.2-codedownloader.job
2017-09-23 22:03 - 2013-12-22 23:03 - 000001128 _____ C:\Windows\Tasks\Plus-HD-1.2-enabler.job
2017-09-23 22:02 - 2013-12-22 23:02 - 000002102 _____ C:\Windows\Tasks\Plus-HD-1.2-firefoxinstaller.job
2017-09-23 22:02 - 2013-12-22 23:02 - 000001974 _____ C:\Windows\Tasks\Plus-HD-1.2-chromeinstaller.job
2017-09-23 18:55 - 2014-07-26 20:31 - 000000000 ____D C:\ProgramData\Wizard101(DE)
2017-09-23 18:28 - 2017-08-08 01:58 - 000000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2017-09-23 17:53 - 2017-03-26 10:50 - 000002699 _____ C:\Users\Public\Desktop\Skype.lnk
2017-09-23 17:53 - 2017-03-26 10:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-09-23 17:53 - 2012-09-11 17:04 - 000000000 ____D C:\ProgramData\Skype
2017-09-23 16:33 - 2009-07-14 06:45 - 000046432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-23 16:33 - 2009-07-14 06:45 - 000046432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-23 16:28 - 2017-08-08 01:58 - 000000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2017-09-23 16:28 - 2015-03-24 01:12 - 000000416 _____ C:\Windows\Tasks\Re-Markable Update.job
2017-09-23 12:39 - 2013-12-25 01:23 - 000000000 ____D C:\Users\User\Desktop\Emre
2017-09-23 11:40 - 2017-08-02 07:48 - 000000000 ____D C:\Users\User\AppData\Roaming\SysMon
2017-09-23 11:37 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-23 11:14 - 2017-08-07 16:58 - 000002373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-23 11:14 - 2017-08-07 16:58 - 000002361 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-09-23 11:14 - 2017-03-16 04:05 - 000001481 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-09-23 11:02 - 2012-02-22 19:16 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-23 09:23 - 2014-02-20 22:52 - 000012686 __RSH C:\ProgramData\ntuser.pol
2017-09-22 19:34 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-09-19 15:38 - 2017-08-04 17:38 - 000000000 ____D C:\Windows\Max
2017-09-19 15:38 - 2017-05-12 08:56 - 000000000 ____D C:\Users\User\AppData\Roaming\Google
2017-09-19 13:30 - 2017-01-07 04:08 - 000360448 _____ C:\Users\User\AppData\Roaming\cert8.db
2017-09-19 13:30 - 2017-01-07 04:08 - 000016384 _____ C:\Users\User\AppData\Roaming\key3.db
2017-09-17 22:00 - 2017-08-02 12:44 - 000000000 ____D C:\Program Files\Opera
2017-09-17 20:19 - 2017-08-01 22:34 - 000000000 ____D C:\Windows\SysWOW64\SSL
2017-09-17 20:02 - 2009-07-14 06:45 - 005089856 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-17 19:47 - 2017-08-07 16:57 - 000003544 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-09-17 19:47 - 2017-08-07 16:57 - 000003416 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-09-17 19:47 - 2017-08-02 08:03 - 000004608 _____ C:\Windows\SysWOW64\mtxdm64.dll
2017-09-15 23:00 - 2015-01-25 05:38 - 000000000 ____D C:\Users\User\Documents\Camtasia Studio
2017-09-15 22:25 - 2015-01-25 05:39 - 000000000 ____D C:\Users\User\AppData\Roaming\TechSmith
2017-09-15 22:24 - 2012-02-22 18:15 - 000126272 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2017-09-15 21:26 - 2014-08-05 09:36 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-14 06:34 - 2015-09-01 21:33 - 000000000 ____D C:\ProgramData\Hotspot Shield
2017-09-14 06:34 - 2015-09-01 21:32 - 000000000 ____D C:\Program Files (x86)\Hotspot Shield
2017-09-13 06:08 - 2017-08-23 22:20 - 000004378 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-13 06:08 - 2017-08-20 00:31 - 000004524 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-09-13 06:08 - 2012-09-11 17:09 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-13 06:08 - 2012-02-22 19:16 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-13 06:08 - 2012-02-22 19:16 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-13 04:45 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2017-09-13 04:44 - 2012-09-13 18:15 - 000000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2017-09-13 03:39 - 2011-04-12 09:43 - 000699682 _____ C:\Windows\system32\perfh007.dat
2017-09-13 03:39 - 2011-04-12 09:43 - 000149790 _____ C:\Windows\system32\perfc007.dat
2017-09-13 03:39 - 2009-07-14 07:13 - 001620684 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-13 03:03 - 2013-12-22 23:07 - 001594964 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-09-09 22:26 - 2015-11-04 00:25 - 000000000 ____D C:\Program Files\PremiumSoft
2017-09-09 22:00 - 2017-08-02 12:45 - 000003854 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1501670702
2017-09-08 16:38 - 2013-08-24 14:38 - 000000000 ___RD C:\Program Files (x86)\Skype
2017-09-08 00:24 - 2015-01-24 18:52 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-08-26 15:21 - 2014-11-05 23:36 - 000000000 ____D C:\Users\User\AppData\Roaming\FileZilla
2017-08-26 15:10 - 2015-01-08 20:58 - 000000600 _____ C:\Users\User\AppData\Local\PUTTY.RND
2017-08-25 23:44 - 2017-02-18 00:07 - 000000000 ____D C:\Users\User\AppData\Local\FileZilla
2017-08-25 23:20 - 2015-01-07 18:14 - 000000000 ____D C:\Users\User\VirtualBox VMs
2017-08-25 17:31 - 2014-12-01 21:51 - 000000132 _____ C:\Users\User\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2017-08-24 21:55 - 2017-08-02 07:38 - 000000000 ____D C:\ProgramData\ca58f541-0891-0
2017-08-24 21:54 - 2017-08-02 07:38 - 000000000 ____D C:\ProgramData\ca58f541-17e7-1

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-05-29 12:15 - 2014-05-29 12:16 - 010395072 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
2016-05-31 18:24 - 2016-05-31 19:10 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen
2016-12-10 22:21 - 2017-01-04 05:13 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen
2014-12-01 21:51 - 2017-08-25 17:31 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-09-02 05:22 - 2017-07-26 01:45 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2017-01-07 04:08 - 2017-09-19 13:30 - 000360448 _____ () C:\Users\User\AppData\Roaming\cert8.db
2017-01-07 04:08 - 2017-09-19 13:30 - 000016384 _____ () C:\Users\User\AppData\Roaming\key3.db
2017-01-07 04:08 - 2016-04-09 20:52 - 000004816 _____ () C:\Users\User\AppData\Roaming\logins.json
2017-08-02 07:51 - 2017-08-02 07:51 - 000016384 _____ () C:\Users\User\AppData\Roaming\secmod.db
2017-01-07 04:08 - 2014-05-08 18:43 - 000327680 _____ () C:\Users\User\AppData\Roaming\signons.sqlite
2014-11-23 19:07 - 2015-03-19 21:35 - 000161359 _____ () C:\Users\User\AppData\Roaming\spritesa
2013-12-19 00:26 - 2014-10-21 23:02 - 000000094 _____ () C:\Users\User\AppData\Roaming\WB.CFG
2015-03-19 20:23 - 2015-03-19 21:36 - 000003066 _____ () C:\Users\User\AppData\Roaming\Microsoft\logsdata
2015-10-27 23:19 - 2017-02-11 23:11 - 000001456 _____ () C:\Users\User\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2017-08-02 07:56 - 2017-08-02 07:56 - 007324160 _____ () C:\Users\User\AppData\Local\agent.dat
2017-09-09 22:15 - 2017-09-09 22:15 - 000033792 _____ () C:\Users\User\AppData\Local\amtfat.dll
2017-01-07 04:08 - 2017-01-07 04:08 - 000000000 _____ () C:\Users\User\AppData\Local\chrome.txt
2017-08-02 07:56 - 2017-08-02 07:56 - 000070800 _____ () C:\Users\User\AppData\Local\Config.xml
2017-08-02 07:53 - 2017-08-02 07:54 - 000019008 _____ () C:\Users\User\AppData\Local\InstallationConfiguration.xml
2017-08-02 07:53 - 2017-08-02 07:53 - 000140800 _____ () C:\Users\User\AppData\Local\installer.dat
2017-08-02 07:56 - 2017-08-02 07:52 - 002554368 _____ (TODO: <Company name>) C:\Users\User\AppData\Local\K-quadity.exe
2017-08-02 07:56 - 2017-08-02 07:56 - 001899067 _____ () C:\Users\User\AppData\Local\K-quadity.tst
2017-01-07 04:08 - 2016-09-15 19:11 - 000094208 _____ () C:\Users\User\AppData\Local\Login DataC
2016-07-07 08:15 - 2016-07-07 08:15 - 000000000 ___SH () C:\Users\User\AppData\Local\LumaEmu
2017-08-02 07:56 - 2017-08-02 07:56 - 000018432 _____ () C:\Users\User\AppData\Local\Main.dat
2017-08-02 07:56 - 2017-08-02 07:56 - 000005568 _____ () C:\Users\User\AppData\Local\md.xml
2017-08-02 07:53 - 2017-08-02 12:46 - 001847296 _____ () C:\Users\User\AppData\Local\po.db
2015-01-08 20:58 - 2017-08-26 15:10 - 000000600 _____ () C:\Users\User\AppData\Local\PUTTY.RND
2015-04-22 23:57 - 2015-04-22 23:57 - 000001408 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2015-12-19 19:47 - 2015-12-19 19:47 - 000007602 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg
2015-04-05 23:24 - 2015-04-05 23:24 - 000011790 _____ () C:\Users\User\AppData\Local\Temp-log.txt
2017-03-17 01:05 - 2017-03-17 01:05 - 000000552 _____ () C:\Users\User\AppData\Local\TroubleshooterConfig.json
2017-09-09 22:15 - 2017-09-09 22:15 - 000003072 _____ () C:\Users\User\AppData\Local\uninstallce.exe
2017-08-02 08:01 - 2017-08-02 08:01 - 000001150 _____ () C:\Users\User\AppData\Local\uninstall_temp.ico
2017-01-07 04:07 - 2017-01-07 04:07 - 000000000 _____ () C:\Users\User\AppData\Local\WindowsLive26.cfg
2017-08-02 07:53 - 2017-08-03 02:23 - 000320000 _____ () C:\ProgramData\smp2.exe

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\rss\csrss.exe
C:\ProgramData\smp2.exe


Einige Dateien in TEMP:
====================
2017-09-17 19:45 - 2017-09-23 11:41 - 001527488 _____ (Microsoft Corporation) C:\Users\User\AppData\Local\Temp\dbghelp.dll
2017-09-17 19:45 - 2017-09-23 11:41 - 000167616 _____ (Microsoft Corporation) C:\Users\User\AppData\Local\Temp\symsrv.dll
2017-09-09 22:17 - 2017-09-09 22:14 - 000067140 _____ () C:\Users\User\AppData\Local\Temp\Uninstall.exe

Einige mit null Byte Größe Dateien/Ordner:
==========================
C:\Windows\SysWOW64\lastpass_1337.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


nointegritychecks: ==> "IntegrityChecks" ist deaktiviert. <==== ACHTUNG

BCD (recoveryenabled=No -> recoveryenabled=Yes) <==== erfolgreich wiederhergestellt

LastRegBack: 2017-09-20 00:11

==================== Ende von FRST.txt ============================

--- --- ---

DasTutWeh · 23.09.2017, 22:00

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-09-2017 02
durchgeführt von User (Administrator) auf USER-PC (23-09-2017 22:29:12)
Gestartet von C:\Users\User\Downloads
Geladene Profile: User & Pylx (Verfügbare Profile: User & Pylx)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
() C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\Logic Cramble\set.exe
() C:\Users\User\AppData\Roaming\SysMon\sysmon.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
() C:\ProgramData\PrefsSecure\Nettrans.exe
(O2Micro International) C:\Windows\SysWOW64\o2flash.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Search Module Ltd.) C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe
() C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\tor.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Windows\windefender.exe
() C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
() C:\Windows\rss\csrss.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\WzPreloader.exe
(Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
() C:\Users\User\AppData\Local\Temp\csrss\wup.exe
(EpicNet Inc.) C:\Users\User\AppData\Local\Temp\csrss\cloudnet.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
(Opera Software) C:\Program Files\Opera\47.0.2631.80\opera.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClient.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUx.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUxRender.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUxRender.exe
(TeamSpeak Systems GmbH) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
() C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}\4C44C175-FBEF-76DE-A2EC-D8B530283C4E.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(PortableAppZ.blogspot.com) C:\Users\User\Desktop\Emre\Design\Programme\Photoshop\AutoPlay\Docs\PhotoshopCS6Portable.exe
(Adobe Systems, Incorporated) C:\Users\User\Desktop\Emre\Design\Programme\Photoshop\AutoPlay\Docs\App\PhotoshopCS6\Photoshop.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [1878016 2017-04-19] (WinZip)
HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [124360 2017-04-19] (WinZip Computing, S.L.)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2017-04-19] (WinZip Computing, S.L.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2017-06-29] (LogMeIn Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKLM\...\Policies\Explorer: [NoShellSearchButton] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayContextMenu] 0
HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKLM\...\Policies\Explorer: [NoSetFolders] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoSetTaskbar] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== ACHTUNG
HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== ACHTUNG
HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== ACHTUNG
HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== ACHTUNG
HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== ACHTUNG
HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== ACHTUNG
HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== ACHTUNG
HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== ACHTUNG
HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== ACHTUNG
HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== ACHTUNG
HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== ACHTUNG
HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== ACHTUNG
HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== ACHTUNG
HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== ACHTUNG
HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== ACHTUNG
HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== ACHTUNG
HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== ACHTUNG
HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== ACHTUNG
HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== ACHTUNG
HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== ACHTUNG
HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== ACHTUNG
HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== ACHTUNG
HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== ACHTUNG
HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== ACHTUNG
HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== ACHTUNG
HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== ACHTUNG
HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== ACHTUNG
HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== ACHTUNG
HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== ACHTUNG
HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKU\S-1-5-19\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-19\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-19\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-19\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-19\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-19\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-20\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-20\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-20\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-20\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-20\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-20\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Run: [ProudNight] => C:\Windows\rss\csrss.exe [2519552 2017-09-17] () <==== ACHTUNG
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Run: [CloudNet] => C:\Users\User\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe [776704 2017-09-23] (EpicNet Inc.)
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Policies\Explorer: [NoStartMenuSubFolders] 0
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: E - E:\DriverPackSolution.exe
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: {020927ca-0bfe-11e3-a158-806e6f6e6963} - D:\AutoRun\AutoRunX\AutoRunX.exe
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: {256244b6-c1d7-11e1-a03e-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\MountPoints2: {3f05bd66-fc1f-11e1-9988-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-18\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-18\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-18\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-18\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayContextMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetFolders] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSetTaskbar] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-18\...\Policies\Explorer: [NoStartMenuSubFolders] 0
ShellExecuteHooks: Kein Name - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} - C:\Windows\C_KE763.dat [2035200 2017-07-29] (Micrasaft Carparation) <==== ACHTUNG
BootExecute: autocheck autochk * aswBoot.exe /M:10e4c8b3464 /wow /dir:"C:\Program Files\AVAST Software\Avast"
GroupPolicy: Beschränkung - Chrome <==== ACHTUNG
GroupPolicy\User: Beschränkung <==== ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyEnable: [.DEFAULT] => Proxy ist aktiviert.
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\Parameters: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{047B497F-8934-461B-929D-46BEA4597F10}: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{047B497F-8934-461B-929D-46BEA4597F10}: [DhcpNameServer] 82.163.143.176
Tcpip\..\Interfaces\{088F167F-2A69-4E6C-9AB4-301E41E807B3}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1CE51F56-C054-4B3A-B11A-8956C8077426}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{49F9229F-B5F5-405C-9271-A56BE420AC0B}: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{49F9229F-B5F5-405C-9271-A56BE420AC0B}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{6E8E423E-189B-4509-A62C-3AC9AF887306}: [DhcpNameServer] 95.211.171.160 95.211.171.161
Tcpip\..\Interfaces\{7EC0E702-3E77-4207-9330-5AA7C0357A50}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8C783455-075D-4336-BAA3-36BBA8FBB227}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8DDCB8D2-1423-4162-9618-CEFC7743F2F5}: [DhcpNameServer] 74.120.221.225 74.120.221.227
Tcpip\..\Interfaces\{96FE378A-A81F-4440-8DD9-35FF8B95CE57}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{B08DA078-E002-4202-A2AC-5F21BC06420A}: [NameServer] 82.163.143.176 82.163.142.178
Tcpip\..\Interfaces\{E7839079-1645-4609-9BF3-97336BF31CE3}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{F5A4CB2A-9728-4293-804C-7FA66F023309}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131183754482389298&GUID=6F5998D9-F889-42CE-A6B8-5798BCA970E5
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131466997966373592&GUID=6F5998D9-F889-42CE-A6B8-5798BCA970E5
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWr9pMP0ZqMMgUNcApe7xeZU4BNa5y6GanExQqRfV5nnQVbQQMEfQGQ_tGQapQbcRWKq8ZQ9w8hbMFDWgqsIJ1G7BbezgktKETJPH2Zv9hQk2rZF71ovk09BLT3yc6vpuhMo2OZ1O9hR_evlgYfQi_1iGoJxTAluXa0wsxDMqZ&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {114DB5FA-0AFB-BB92-A75B-F44D3CE875CD} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = 
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWr9pMP0ZqMMgUNcApe7xeZU4BNa5y6GanExQqRfV5nnQVbQQMEfQGQ_tGQapQbcRWKq8ZQ9w8hbMFDWgqsIJ1G7BbezgktKETJPH2Zv9hQk2rZF71ovk09BLT3yc6vpuhMo2OZ1O9hR_evlgYfQi_1iGoJxTAluXa0wsxDMqZ&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2783078182-1204926350-1955954555-1000 -> {114DB5FA-0AFB-BB92-A75B-F44D3CE875CD} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-08-22] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Kein Name -> {97510FAC-ED50-46BF-B2A1-25F434BF1030} -> Keine Datei
BHO: - -> {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} -> C:\Program Files\{C068E1D2-6CD6-4AF2-AABF-827A8B1C0010}\{8E07AFE8-501E-467F-BE60-D56D353E2291}.bin [2017-09-23] ( )
BHO: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> Keine Datei
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-08-22] (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-11-07] (DVDVideoSoft Ltd.)
BHO-x32: Kein Name -> {0B789B27-A4B8-3CFF-5258-3A7E9496F2A2} -> Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2016-01-22] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: - -> {C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} -> C:\Program Files (x86)\{5CA29C8C-A3C1-4BFB-9251-7F4E7B4C7DB0}\{5AB17B29-FFBC-4AEF-BC67-3C523A60FCEB}.bin [2017-09-23] ( )
BHO-x32: Webroot Vault -> {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} -> Keine Datei
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2016-01-22] (Oracle Corporation)
Toolbar: HKLM - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} -  Keine Datei
Toolbar: HKLM-x32 - Webroot Toolbar - {97ab88ef-346b-4179-a0b1-7445896547a5} -  Keine Datei
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default [2017-09-23]
FF user.js: detected! => C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\user.js [2017-09-23]
FF Homepage: Mozilla\Firefox\Profiles\0yikam3g.default -> C:\ProgramData\Plusdaxs\ff.HP
FF NewTab: Mozilla\Firefox\Profiles\0yikam3g.default -> C:\ProgramData\Plusdaxs\ff.NT
FF Extension: (Avira Browser Safety) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\abs@avira.com [2015-05-29] [ist nicht signiert]
FF Extension: (Kein Name) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\amcontextmenu@loucypher [2017-08-01] [ist nicht signiert]
FF Extension: (MEGA) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\firefox@mega.co.nz.xpi [2016-03-19]
FF Extension: (Домашняя страница Mail.Ru) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\homepage@mail.ru [2016-09-03]
FF Extension: (SalePLaus) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\kXe@OV.edu [2015-04-12] [ist nicht signiert]
FF Extension: (Поиск@Mail.Ru) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\search@mail.ru [2016-09-03]
FF Extension: (youtubeadblocker) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\w@LBowbU.net [2015-04-12] [ist nicht signiert]
FF Extension: (Windows Desktop Search Scope Manager) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{2A7244A8-9606-51BB-155F-37E4B15E8B6F} [2015-01-24] [ist nicht signiert]
FF Extension: (Search Tool for Mozilla Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{74904424-ec46-4d61-bd52-8b528a96f6d1}.xpi [2015-01-02] [ist nicht signiert]
FF Extension: (Визуальные закладки @Mail.Ru) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [2016-09-03]
FF Extension: (Download videos and MP3s from YouTube) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-11-21] [ist nicht signiert]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\ask-web-search.xml [2013-10-09]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\bingp.xml [2014-03-12]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\findit.xml [2017-08-02]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\GoSearch.xml [2016-09-04]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\mailru.xml [2016-09-03]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\MPC Safe Search.xml [2016-09-03]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\Speedial.xml [2014-05-30]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0yikam3g.default\searchplugins\trovi-search.xml [2014-11-21]
FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25]
FF Extension: (Adblocker for Youtube™) - C:\Program Files (x86)\Mozilla Firefox\browser\features\{5C3FD6D1-9185-4195-B5E1-FAB622427F59} [2017-09-17] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{854E17DC-7FFC-4613-9F66-434E9BABD8AD}] - C:\Windows\Installer\{6DE70353-382D-4EC8-B2B7-0698AF63F8AC}\{854E17DC-7FFC-4613-9F66-434E9BABD8AD}.xpi
FF Extension: ( ) - C:\Windows\Installer\{6DE70353-382D-4EC8-B2B7-0698AF63F8AC}\{854E17DC-7FFC-4613-9F66-434E9BABD8AD}.xpi [2017-09-23]
FF HKLM-x32\...\Firefox\Extensions: [{854E17DC-7FFC-4613-9F66-434E9BABD8AD}] - C:\Windows\Installer\{6DE70353-382D-4EC8-B2B7-0698AF63F8AC}\{854E17DC-7FFC-4613-9F66-434E9BABD8AD}.xpi
FF HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: (Download videos and MP3s from YouTube) - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-21] [ist nicht signiert]
FF HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Firefox\Extensions: [{F34A720D-88EE-A7E4-3F20-D1887F3FDC17}] - C:\Program Files (x86)\ver8Re-Markable\190.xpi
FF Extension: (Re-Markable) - C:\Program Files (x86)\ver8Re-Markable\190.xpi [2015-03-24] [ist nicht signiert]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\findit.xml [2017-08-02]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\nationzoom.xml [2014-01-09]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\webssearches.xml [2014-12-22]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-08-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-08-22] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-06-08] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @haitao.com/npHaitaoPlugin -> C:\Users\User\AppData\Local\htyh\application\htwebHelper.dll [Keine Datei]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2011-12-01] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2016-01-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2016-01-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameeu.dll [2015-06-12] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-08-07] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-07-19] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-06-08] (Adobe Systems)

Chrome: 
=======
CHR DefaultProfile: Profile 3
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-09-23]
CHR Extension: (Google Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-16]
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-16]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-16]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-16]
CHR Extension: (Google Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-16]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-16]
CHR Extension: (History Open) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\icfhggboopebcohpcffdgnbmodalpbic [2017-08-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-16]
CHR Extension: (Modern Flat) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdcjjgefkpoemmlcjfcfkeminneboaob [2017-08-16]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-16]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-16]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-08-02]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-15]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-25]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-15]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-25]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3 [2017-09-23]
CHR Extension: (Kein Name) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-20]
CHR Extension: (Kein Name) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-10-20]
CHR Extension: ( ) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bommoahfmfghjhffenemenonkmgbckbb [2017-09-23]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-20]
CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-08-22]
CHR Extension: (Search Module Plus v2) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\jlcgehabolcakkjhgmgpkagpolbjlhfa [2017-09-17]
CHR Extension: (Chrome Web Store Payments) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Kein Name) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-10-20]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-01]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2017-08-18]
CHR HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pnfdifjinnoooocgmbdioahcpaplhbhb] -  <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [iinglghmhcgdgjjlafobajghjamdchik] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [njlppdgedlaobpcbobcllbibebebkgam] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ojmcefcpojnkmmblchnllkaphlpdobgd] - C:\Joygame\JoyTemp\ChromeEklenti\homepage_extension_1_5.crx <nicht gefunden>

Opera: 
=======
StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdsService; C:\Users\User\AppData\Local\AdService\AdService.dll [781312 2017-09-09] () [Datei ist nicht signiert]
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [389312 2017-08-02] (Avira Operations GmbH & Co. KG)
R2 backlh; C:\ProgramData\Logic Cramble\set.exe [3780096 2017-08-02] () [Datei ist nicht signiert] <==== ACHTUNG
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [400656 2017-02-04] (EasyAntiCheat Ltd)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3418024 2017-06-29] (LogMeIn Inc.)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [53168 2017-09-11] (AnchorFree Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
R2 Nettrans; C:\ProgramData\PrefsSecure\Nettrans.exe [43520 2017-07-20] () [Datei ist nicht signiert] <==== ACHTUNG
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3643520 2016-01-07] (INCA Internet Co., Ltd.)
R2 O2Flash; C:\Windows\SysWOW64\o2flash.exe [65536 2009-09-12] (O2Micro International) [Datei ist nicht signiert]
R2 OtherSearch; C:\Program Files (x86)\YkUBYysd0K\kl.dll [2137600 2017-09-18] () [Datei ist nicht signiert] <==== ACHTUNG
R2 SMUpd; C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe [3119104 2017-08-03] (Search Module Ltd.) [Datei ist nicht signiert] <==== ACHTUNG
R2 TCPSvc; C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\tor.exe [3282432 2017-09-17] () [Datei ist nicht signiert] <==== ACHTUNG
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10885360 2017-05-31] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 WinDefender; C:\Windows\windefender.exe [1370624 2017-09-17] () [Datei ist nicht signiert]
R2 WinZip Smart Monitor Service; C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe [495616 2017-04-11] () [Datei ist nicht signiert]
R2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
S2 AdobeUpdateService; "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" [X]
S2 AGSService; "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe" [X]
S2 SvcHost Service Host; "C:\Windows\Microsoft\svchost.exe" -k LocalService [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AFTrafMgr1.3; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_3_64.sys [64912 2017-09-07] (AnchorFree Inc.)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44648 2015-06-04] (AnchorFree Inc.)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [104560 2012-04-25] (Qualcomm Atheros Co., Ltd.)
R1 Lace514; C:\Windows\System32\drivers\Lace_wpf_x64.sys [107800 2017-09-18] (Driver Lace 514)
S3 MOSUMAC; C:\Windows\System32\DRIVERS\USBMAC64.SYS [54272 2009-12-10] (--)
S3 NSCIRDA; C:\Windows\System32\DRIVERS\nscirda.sys [36352 2008-01-19] (National Semiconductor Corporation)
S3 O2MDRDR; C:\Windows\System32\DRIVERS\o2mdx64.sys [57376 2009-09-12] (O2Micro )
S3 O2SCBUS; C:\Windows\System32\DRIVERS\ozscrx64.sys [107096 2008-06-12] (O2Micro)
R3 SMUpdd; C:\Program Files\Common Files\Noobzo\GNUpdate\smw.sys [52992 2017-08-03] () <==== ACHTUNG
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42088 2015-06-04] (Anchorfree Inc.)
R3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [196040 2017-07-27] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [206976 2017-07-27] (Oracle Corporation)
R1 wfcre; C:\Windows\System32\drivers\wfcre.sys [132992 2017-09-04] ()
S3 xspirit; C:\Windows\xspirit.sys [1 2016-07-17] () [Datei ist nicht signiert]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
S1 anqdepzh; \??\C:\Windows\system32\drivers\anqdepzh.sys [X]
S3 ASUSProcObsrv; \??\D:\I386\AsPrOb64.sys [X]
S1 atzmsmph; \??\C:\Windows\system32\drivers\atzmsmph.sys [X]
S1 brhtniij; \??\C:\Windows\system32\drivers\brhtniij.sys [X]
S1 bwaqyvao; \??\C:\Windows\system32\drivers\bwaqyvao.sys [X]
S1 bwvxlrns; \??\C:\Windows\system32\drivers\bwvxlrns.sys [X]
S1 cxhmqzji; \??\C:\Windows\system32\drivers\cxhmqzji.sys [X]
S1 dahfuouw; \??\C:\Windows\system32\drivers\dahfuouw.sys [X]
S1 ddceqniy; \??\C:\Windows\system32\drivers\ddceqniy.sys [X]
U3 DfSdkS; kein ImagePath
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S1 ebozkbiv; \??\C:\Windows\system32\drivers\ebozkbiv.sys [X]
S1 ecdjwauh; \??\C:\Windows\system32\drivers\ecdjwauh.sys [X]
S1 eiuzatax; \??\C:\Windows\system32\drivers\eiuzatax.sys [X]
S1 evjgvvbt; \??\C:\Windows\system32\drivers\evjgvvbt.sys [X]
S1 fyzmwjsl; \??\C:\Windows\system32\drivers\fyzmwjsl.sys [X]
S1 fzhzyakv; \??\C:\Windows\system32\drivers\fzhzyakv.sys [X]
S1 hjpqtynw; \??\C:\Windows\system32\drivers\hjpqtynw.sys [X]
S1 hoaibtxw; \??\C:\Windows\system32\drivers\hoaibtxw.sys [X]
S1 hwvquxew; \??\C:\Windows\system32\drivers\hwvquxew.sys [X]
S3 hxsyol; \??\C:\AeriaGames\AuraKingdom\avital\hxsy64.sys [X]
S1 jhbvjddm; \??\C:\Windows\system32\drivers\jhbvjddm.sys [X]
S1 jxcnvhxb; \??\C:\Windows\system32\drivers\jxcnvhxb.sys [X]
S1 kmvqwfvw; \??\C:\Windows\system32\drivers\kmvqwfvw.sys [X]
S1 kvqeepsa; \??\C:\Windows\system32\drivers\kvqeepsa.sys [X]
S1 laauyhha; \??\C:\Windows\system32\drivers\laauyhha.sys [X]
S1 laredpnp; \??\C:\Windows\system32\drivers\laredpnp.sys [X]
S1 mhioygoe; \??\C:\Windows\system32\drivers\mhioygoe.sys [X]
S1 moiqgwao; \??\C:\Windows\system32\drivers\moiqgwao.sys [X]
S1 mvcyvkmb; \??\C:\Windows\system32\drivers\mvcyvkmb.sys [X]
S1 mvicmlmp; \??\C:\Windows\system32\drivers\mvicmlmp.sys [X]
S1 mwrauity; \??\C:\Windows\system32\drivers\mwrauity.sys [X]
S1 nghwddal; \??\C:\Windows\system32\drivers\nghwddal.sys [X]
S1 nkxgrupf; \??\C:\Windows\system32\drivers\nkxgrupf.sys [X]
S1 nsqblejy; \??\C:\Windows\system32\drivers\nsqblejy.sys [X]
S1 oflfytuc; \??\C:\Windows\system32\drivers\oflfytuc.sys [X]
S1 olgchotm; \??\C:\Windows\system32\drivers\olgchotm.sys [X]
S1 ossufdxb; \??\C:\Windows\system32\drivers\ossufdxb.sys [X]
S1 prncgliv; \??\C:\Windows\system32\drivers\prncgliv.sys [X]
S1 psxmrgwy; \??\C:\Windows\system32\drivers\psxmrgwy.sys [X]
S1 pwhrjylj; \??\C:\Windows\system32\drivers\pwhrjylj.sys [X]
S1 qawmlzdz; \??\C:\Windows\system32\drivers\qawmlzdz.sys [X]
S1 qbrwplnu; \??\C:\Windows\system32\drivers\qbrwplnu.sys [X]
S1 quwsgyoc; \??\C:\Windows\system32\drivers\quwsgyoc.sys [X]
S1 qxuewkfb; \??\C:\Windows\system32\drivers\qxuewkfb.sys [X]
S1 qyfnvarv; \??\C:\Windows\system32\drivers\qyfnvarv.sys [X]
S1 rfidniqb; \??\C:\Windows\system32\drivers\rfidniqb.sys [X]
S1 rfomlngh; \??\C:\Windows\system32\drivers\rfomlngh.sys [X]
S1 rnchppmi; \??\C:\Windows\system32\drivers\rnchppmi.sys [X]
S1 scyrjscm; \??\C:\Windows\system32\drivers\scyrjscm.sys [X]
S3 SmbDrv; system32\DRIVERS\Smb_driver.sys [X]
U0 SR; kein ImagePath
U2 srservice; kein ImagePath
S1 sslcxkao; \??\C:\Windows\system32\drivers\sslcxkao.sys [X]
S1 tgopufcf; \??\C:\Windows\system32\drivers\tgopufcf.sys [X]
S1 tjszdxvm; \??\C:\Windows\system32\drivers\tjszdxvm.sys [X]
S1 ucdrv; \??\C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [X] <==== ACHTUNG
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S1 vqqgrdno; \??\C:\Windows\system32\drivers\vqqgrdno.sys [X]
S1 wnkrxfon; \??\C:\Windows\system32\drivers\wnkrxfon.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S1 xjyynmce; \??\C:\Windows\system32\drivers\xjyynmce.sys [X]
S1 xrvzhyob; \??\C:\Windows\system32\drivers\xrvzhyob.sys [X]
S1 yfcmtzxu; \??\C:\Windows\system32\drivers\yfcmtzxu.sys [X]
S1 znrjdefb; \??\C:\Windows\system32\drivers\znrjdefb.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-23 22:29 - 2017-09-23 22:36 - 000050515 _____ C:\Users\User\Downloads\FRST.txt
2017-09-23 22:28 - 2017-09-23 22:29 - 000000000 ____D C:\FRST
2017-09-23 22:28 - 2017-09-23 22:28 - 002399744 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2017-09-23 22:16 - 2017-09-23 22:16 - 000398826 _____ C:\Users\User\Desktop\ymirred.tga
2017-09-23 22:16 - 2017-09-23 22:16 - 000363165 _____ C:\Users\User\Desktop\ymirred - kopie.tga
2017-09-23 22:14 - 2017-09-23 22:14 - 000000000 ____D C:\Users\User\AppData\Roaming\Adobe
2017-09-23 22:14 - 2017-09-23 22:14 - 000000000 ____D C:\Users\User\AppData\Local\Adobe
2017-09-23 22:14 - 2017-09-23 22:14 - 000000000 ____D C:\ProgramData\Adobe
2017-09-23 22:11 - 2017-09-23 22:16 - 000000000 ____D C:\Users\User\Desktop\EterNexus
2017-09-23 21:57 - 2017-09-23 19:23 - 000000000 ____D C:\Users\User\Desktop\GENESIS2 TEST
2017-09-23 21:20 - 2017-09-23 21:22 - 1147137858 _____ C:\Users\User\Downloads\GENESIS2 TEST.rar
2017-09-23 17:53 - 2017-09-23 18:56 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Skype
2017-09-23 17:53 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx\Tracing
2017-09-23 17:53 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx\Documents\League of Legends
2017-09-23 17:53 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx\AppData\Local\CEF
2017-09-23 16:50 - 2017-09-23 16:50 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Opera Software
2017-09-23 16:50 - 2017-09-23 16:50 - 000000000 ____D C:\Users\Pylx\AppData\Local\Opera Software
2017-09-23 16:41 - 2017-09-23 16:41 - 003449304 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Pylx\Downloads\AVG_Protection_Free_1606.exe
2017-09-23 16:35 - 2017-09-23 16:35 - 000126272 _____ C:\Users\Pylx\AppData\Local\GDIPFONTCACHEV1.DAT
2017-09-23 16:34 - 2017-09-23 16:35 - 007142408 _____ (AVAST Software) C:\Users\Pylx\Downloads\avast_free_antivirus_setup_online_e1i.exe
2017-09-23 16:29 - 2017-09-23 16:29 - 000000000 ____D C:\Users\Pylx\AppData\Local\LogMeIn
2017-09-23 16:29 - 2017-09-23 16:29 - 000000000 ____D C:\Users\Pylx\AppData\Local\Google
2017-09-23 16:28 - 2017-09-23 17:53 - 000000000 ____D C:\Users\Pylx
2017-09-23 16:28 - 2017-09-23 16:35 - 000000000 ____D C:\Users\Pylx\AppData\Local\LogMeIn Hamachi
2017-09-23 16:28 - 2017-09-23 16:28 - 000001385 _____ C:\Users\Pylx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-09-23 16:28 - 2017-09-23 16:28 - 000000306 __RSH C:\Users\Pylx\ntuser.pol
2017-09-23 16:28 - 2017-09-23 16:28 - 000000020 ___SH C:\Users\Pylx\ntuser.ini
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Vorlagen
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Startmenü
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Netzwerkumgebung
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Lokale Einstellungen
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Eigene Dateien
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Druckumgebung
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Documents\Eigene Videos
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Documents\Eigene Musik
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Documents\Eigene Bilder
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\AppData\Local\Verlauf
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\AppData\Local\Anwendungsdaten
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 _SHDL C:\Users\Pylx\Anwendungsdaten
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Adobe
2017-09-23 16:28 - 2017-09-23 16:28 - 000000000 ____D C:\Users\Pylx\AppData\Local\VirtualStore
2017-09-23 16:28 - 2016-10-15 19:29 - 000000000 ____D C:\Users\Pylx\AppData\Local\CrashRpt
2017-09-23 16:28 - 2011-04-12 09:54 - 000000000 ____D C:\Users\Pylx\AppData\Roaming\Media Center Programs
2017-09-23 11:42 - 2017-09-23 11:42 - 000633296 _____ (Microsoft Corporation) C:\Windows\system32\osloader.exe
2017-09-23 11:41 - 2017-09-23 11:42 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlmp.exe
2017-09-23 11:39 - 2017-09-23 11:39 - 000002996 _____ C:\Windows\System32\Tasks\RunAtStartup
2017-09-23 10:53 - 2017-09-23 11:51 - 000000000 ____D C:\Users\User\AppData\Local\LogMeIn Hamachi
2017-09-23 10:53 - 2017-09-23 10:53 - 000000000 ____D C:\Users\User\AppData\Local\LogMeIn
2017-09-23 08:15 - 2017-09-23 08:15 - 000000000 ____D C:\Program Files\{C068E1D2-6CD6-4AF2-AABF-827A8B1C0010}
2017-09-23 08:14 - 2017-09-23 08:14 - 000000000 ____D C:\Program Files (x86)\{5CA29C8C-A3C1-4BFB-9251-7F4E7B4C7DB0}
2017-09-22 23:20 - 2017-09-22 23:20 - 000000000 ____D C:\Users\User\AppData\Local\CEF
2017-09-22 19:35 - 2017-09-22 19:35 - 000000000 ____D C:\Users\User\AppData\Local\Blizzard
2017-09-20 21:32 - 2017-09-15 15:52 - 000000000 ____D C:\Users\User\Desktop\GENESIS2  9.4V
2017-09-20 21:27 - 2017-09-20 21:30 - 1070689393 _____ C:\Users\User\Downloads\GENESIS2 9.4V.rar
2017-09-19 13:40 - 2017-09-19 13:40 - 000001996 _____ C:\Windows\System32\Tasks\27DAVpQmvp
2017-09-19 13:30 - 2017-09-23 16:30 - 000000000 ____D C:\Program Files (x86)\YkUBYysd0K
2017-09-19 13:30 - 2017-09-19 13:41 - 000000002 _____ C:\END
2017-09-18 07:41 - 2017-09-18 07:41 - 000107800 _____ (Driver Lace 514) C:\Windows\system32\Drivers\Lace_wpf_x64.sys
2017-09-18 03:04 - 2017-09-19 03:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-09-18 03:02 - 2017-09-19 13:26 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2017-09-18 03:02 - 2017-09-19 13:26 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-09-17 20:11 - 2017-09-23 08:15 - 000004608 _____ C:\Windows\system32\mtxdm64.dll
2017-09-17 20:11 - 2017-09-22 19:31 - 000000000 ____D C:\Users\User\AppData\Roaming\Jawego
2017-09-17 20:11 - 2017-09-17 22:15 - 000000000 ____D C:\Users\User\AppData\Roaming\PCPRJ
2017-09-17 20:11 - 2017-09-17 20:11 - 000000000 ____D C:\Users\User\AppData\Local\Jawego
2017-09-17 20:07 - 2017-09-17 20:07 - 000009352 _____ C:\Windows\system32\Drivers\Winmon.sys
2017-09-17 19:48 - 2017-09-17 19:49 - 000000000 ____D C:\Program Files (x86)\nodejs
2017-09-17 19:48 - 2017-09-17 19:48 - 000000000 ____D C:\Users\User\AppData\Roaming\npm
2017-09-17 19:47 - 2017-09-23 08:15 - 000006656 _____ C:\Windows\system32\winusb64x.dll
2017-09-17 19:46 - 2017-09-17 19:46 - 001370624 _____ C:\Windows\windefender.exe
2017-09-17 19:45 - 2017-09-17 19:46 - 000000000 ____D C:\Windows\rss
2017-09-17 19:35 - 2017-09-17 19:50 - 000000000 ____D C:\Users\Public\Documents\InternetInfoTools
2017-09-15 21:29 - 2017-09-15 21:29 - 000001037 _____ C:\Users\Public\Desktop\Camtasia 9.lnk
2017-09-15 21:29 - 2017-09-15 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2017-09-15 21:28 - 2017-09-15 21:28 - 000000000 ____D C:\ProgramData\TechSmith
2017-09-15 21:28 - 2017-09-15 21:28 - 000000000 ____D C:\Program Files\TechSmith
2017-09-15 21:18 - 2017-09-15 21:20 - 286635456 _____ (TechSmith Corporation) C:\Users\User\Downloads\camtasiade.exe
2017-09-15 08:48 - 2017-09-15 08:48 - 000734208 _____ C:\Windows\88c6c384abdf4e17f71b76946d2becfa.exe
2017-09-15 08:48 - 2017-09-15 08:48 - 000037171 _____ C:\Windows\uninstaller.dat
2017-09-14 06:34 - 2017-09-14 06:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2017-09-13 01:17 - 2017-08-19 17:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-13 01:17 - 2017-08-19 17:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-09-13 01:17 - 2017-08-16 17:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-13 01:17 - 2017-08-16 17:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-09-13 01:17 - 2017-08-16 16:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-13 01:17 - 2017-08-16 03:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-13 01:17 - 2017-08-16 02:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-09-13 01:17 - 2017-08-15 17:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-13 01:17 - 2017-08-15 17:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-13 01:17 - 2017-08-15 17:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-09-13 01:17 - 2017-08-15 17:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-09-13 01:17 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-13 01:17 - 2017-08-15 16:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-09-13 01:17 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-09-13 01:17 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-09-13 01:17 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2017-09-13 01:17 - 2017-08-14 19:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2017-09-13 01:17 - 2017-08-14 19:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2017-09-13 01:17 - 2017-08-13 23:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-09-13 01:17 - 2017-08-13 23:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-09-13 01:17 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-13 01:17 - 2017-08-13 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-13 01:17 - 2017-08-13 19:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-13 01:17 - 2017-08-13 19:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-13 01:17 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-13 01:17 - 2017-08-13 19:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-13 01:17 - 2017-08-13 19:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-13 01:17 - 2017-08-13 19:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-13 01:17 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-13 01:17 - 2017-08-13 18:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-13 01:17 - 2017-08-13 18:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-13 01:17 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-09-13 01:17 - 2017-08-13 18:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-13 01:17 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-13 01:17 - 2017-08-13 18:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-13 01:17 - 2017-08-13 18:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-13 01:17 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-13 01:17 - 2017-08-13 18:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-13 01:17 - 2017-08-13 18:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-09-13 01:17 - 2017-08-13 18:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-13 01:17 - 2017-08-13 18:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-13 01:17 - 2017-08-13 18:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-09-13 01:17 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-09-13 01:17 - 2017-08-13 18:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-09-13 01:17 - 2017-08-13 18:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-13 01:17 - 2017-08-13 18:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-13 01:17 - 2017-08-13 18:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-09-13 01:17 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-09-13 01:17 - 2017-08-13 18:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-13 01:17 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-09-13 01:17 - 2017-08-13 18:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-13 01:17 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-13 01:17 - 2017-08-13 18:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-09-13 01:17 - 2017-08-13 18:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-09-13 01:17 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-13 01:17 - 2017-08-13 18:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-09-13 01:17 - 2017-08-13 18:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-13 01:17 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-09-13 01:17 - 2017-08-13 18:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-09-13 01:17 - 2017-08-13 18:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-09-13 01:17 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-13 01:17 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-13 01:17 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-13 01:17 - 2017-08-13 18:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-13 01:17 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-13 01:17 - 2017-08-13 18:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-09-13 01:17 - 2017-08-13 18:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-09-13 01:17 - 2017-08-13 18:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-09-13 01:17 - 2017-08-13 17:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-09-13 01:17 - 2017-08-13 17:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-09-13 01:17 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-09-13 01:17 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-09-13 01:17 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-09-13 01:17 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-09-13 01:17 - 2017-08-13 17:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-09-13 01:17 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-13 01:17 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-13 01:17 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-13 01:17 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-09-13 01:17 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-09-13 01:17 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-09-13 01:17 - 2017-08-11 08:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-09-13 01:17 - 2017-08-11 08:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-13 01:17 - 2017-08-11 08:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-09-13 01:17 - 2017-08-11 08:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-13 01:17 - 2017-08-11 08:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-13 01:17 - 2017-08-11 08:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-09-13 01:17 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-09-13 01:17 - 2017-08-11 08:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-09-13 01:17 - 2017-08-11 08:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-09-13 01:17 - 2017-08-11 08:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2017-09-13 01:17 - 2017-08-11 08:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-13 01:17 - 2017-08-11 08:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2017-09-13 01:17 - 2017-08-11 08:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 08:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-13 01:17 - 2017-08-11 08:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2017-09-13 01:17 - 2017-08-11 08:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-13 01:17 - 2017-08-11 08:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-13 01:17 - 2017-08-11 08:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-13 01:17 - 2017-08-11 08:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-13 01:17 - 2017-08-11 08:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-13 01:17 - 2017-08-11 08:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2017-09-13 01:17 - 2017-08-11 08:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-13 01:17 - 2017-08-11 08:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-09-13 01:17 - 2017-08-11 08:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-13 01:17 - 2017-08-11 08:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-13 01:17 - 2017-08-11 08:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-09-13 01:17 - 2017-08-11 07:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-13 01:17 - 2017-08-11 07:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-13 01:17 - 2017-08-11 07:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-13 01:17 - 2017-08-11 07:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-13 01:17 - 2017-08-11 07:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-13 01:17 - 2017-08-11 07:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-09-13 01:17 - 2017-08-11 07:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-09-13 01:17 - 2017-08-11 07:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-09-13 01:17 - 2017-08-11 07:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-09-13 01:17 - 2017-08-11 07:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-09-13 01:17 - 2017-08-11 07:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-09-13 01:17 - 2017-07-07 17:29 - 001143296 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2017-09-13 01:17 - 2017-07-07 17:10 - 000973312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DXPTaskRingtone.dll
2017-09-11 00:05 - 2017-09-11 00:05 - 000208223 _____ C:\Users\User\Downloads\teamspeak-backup-3595990.dat
2017-09-10 01:52 - 2017-09-10 02:01 - 2374070190 _____ C:\Users\User\Downloads\Tsuyoshi2_28072017.zip
2017-09-10 01:31 - 2017-09-10 01:31 - 000023558 _____ C:\Windows\System32\Tasks\{797F0547-780A-0804-0811-7A04047E117D}
2017-09-09 22:25 - 2017-09-09 22:25 - 000000966 _____ C:\Users\Public\Desktop\Navicat Premium.lnk
2017-09-09 22:20 - 2017-09-09 22:20 - 000000000 _____ C:\Windows\SysWOW64\__015B144B__C0000005.dmp
2017-09-09 22:15 - 2017-09-09 22:15 - 000033792 _____ C:\Users\User\AppData\Local\amtfat.dll
2017-09-09 22:15 - 2017-09-09 22:15 - 000003072 _____ C:\Users\User\AppData\Local\uninstallce.exe
2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D C:\ProgramData\1a251446-1497-0
2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D C:\ProgramData\1a251446-0c35-1
2017-09-09 22:14 - 2017-09-17 20:19 - 000003156 _____ C:\Windows\System32\Tasks\01f8a84096caddd3c79baeadd404dcdf
2017-09-09 22:14 - 2017-09-17 20:03 - 000031481 _____ C:\Windows\d4b81cfa58e82cb84e315f74c23947cc.ps1
2017-09-09 22:14 - 2017-09-17 20:03 - 000003474 _____ C:\Windows\System32\Tasks\d4b81cfa58e82cb84e315f74c23947cc
2017-09-09 22:14 - 2017-09-09 22:14 - 000000000 ____D C:\Users\User\AppData\Local\AdService
2017-09-09 22:14 - 2017-09-09 22:14 - 000000000 ____D C:\Users\Public\Documents\XMUpdate
2017-09-05 14:38 - 2017-09-05 14:39 - 1010516273 _____ C:\Users\User\Downloads\S4MAX Game.zip
2017-09-05 13:19 - 2017-09-05 13:19 - 002548557 _____ C:\Users\User\Downloads\ModSkinLOL.VN_SkinLOL.zip
2017-09-04 18:02 - 2017-09-04 18:04 - 1226238598 _____ C:\Users\User\Downloads\Rocknada2.rar
2017-09-04 10:09 - 2017-09-04 10:09 - 000132992 _____ C:\Windows\system32\Drivers\wfcre.sys
2017-08-30 13:23 - 2017-08-30 13:23 - 000993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-08-30 13:23 - 2017-08-30 13:23 - 000987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2017-08-30 13:23 - 2017-08-30 13:23 - 000690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2017-08-30 13:23 - 2017-08-30 13:23 - 000485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2017-08-26 03:28 - 2017-08-26 03:28 - 000001073 _____ C:\Users\User\Desktop\Notepad-.lnk
2017-08-25 23:56 - 2017-09-20 21:31 - 000000000 ____D C:\Users\User\AppData\Local\WinZip
2017-08-25 23:56 - 2017-08-25 23:56 - 000000000 ____D C:\Program Files\WinZip Smart Monitor
2017-08-25 23:55 - 2017-08-25 23:55 - 000003398 _____ C:\Windows\System32\Tasks\WinZip Update Notifier
2017-08-25 23:55 - 2017-08-25 23:55 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Update Benachrichtigungsdienst.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000002323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip Hintergrund-Tools.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinZip.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000002265 _____ C:\Users\Public\Desktop\WinZip.lnk
2017-08-25 23:55 - 2017-08-25 23:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 21.5
2017-08-25 23:54 - 2017-08-25 23:55 - 000000000 ____D C:\Program Files\WinZip
2017-08-25 23:54 - 2017-08-25 23:54 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinZip 21.5
2017-08-25 23:51 - 2017-08-25 23:52 - 000763112 _____ (WinZip Computing, S.L.) C:\Users\User\Downloads\winzip21-home.exe
2017-08-25 23:50 - 2017-08-25 23:50 - 017093771 _____ C:\Users\User\Downloads\TwixFiles (1).rar
2017-08-25 14:00 - 2017-08-25 14:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit)
2017-08-25 14:00 - 2017-08-25 14:00 - 000000000 ____D C:\Program Files\PuTTY
2017-08-25 13:57 - 2017-08-25 13:57 - 004430746 _____ C:\Users\User\Downloads\putty-0.70-installer.zip
2017-08-25 13:55 - 2017-08-25 13:55 - 000000000 ____D C:\ProgramData\UniqueId
2017-08-25 13:51 - 2017-08-25 13:51 - 000643144 _____ (Simon Tatham) C:\Users\User\Downloads\psftp.exe
2017-08-25 13:51 - 2017-08-25 13:51 - 000643144 _____ (Simon Tatham) C:\Users\User\Downloads\psftp (1).exe
2017-08-25 04:11 - 2017-08-25 23:56 - 000000000 ____D C:\ProgramData\WinZip
2017-08-25 04:11 - 2017-08-25 04:11 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinZip 21.0
2017-08-25 04:10 - 2017-08-25 04:10 - 000002994 _____ C:\Windows\System32\Tasks\LaunchChromeTask111
2017-08-25 04:10 - 2017-08-25 04:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2017-08-25 04:09 - 2017-08-25 04:10 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2017-08-25 04:07 - 2017-08-25 04:08 - 008736456 _____ (Tim Kosse) C:\Users\User\Downloads\FileZilla_3.27.1_win64-setup_bundled3.exe
2017-08-25 04:02 - 2017-08-25 04:02 - 001020416 _____ C:\Windows\SysWOW64\lastpass_downloader.exe
2017-08-25 04:02 - 2017-08-25 04:02 - 000000000 _____ C:\Windows\SysWOW64\lastpass_1337.exe
2017-08-25 04:01 - 2017-08-25 04:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-08-25 04:01 - 2017-08-25 04:01 - 000000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2017-08-25 03:53 - 2017-09-15 19:38 - 000000000 ____D C:\Users\User\.VirtualBox
2017-08-25 03:48 - 2017-08-25 03:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2017-08-25 03:47 - 2017-08-25 03:52 - 1218229015 _____ C:\Users\User\Downloads\FreeBSD11 64Bit.rar
2017-08-25 03:47 - 2017-07-27 13:33 - 000149816 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2017-08-25 03:46 - 2017-08-25 03:46 - 000000000 ____D C:\Program Files\Oracle
2017-08-25 03:46 - 2017-07-27 13:34 - 000965984 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2017-08-25 03:41 - 2017-08-25 03:42 - 001526792 _____ C:\Users\User\Downloads\VirtualBox - CHIP-Installer.exe
2017-08-25 03:14 - 2017-08-25 03:15 - 1026225371 _____ C:\Users\User\Downloads\Twix_Work_Client_German.7z
2017-08-25 03:11 - 2017-08-25 03:13 - 017093771 _____ C:\Users\User\Downloads\TwixFiles.rar
2017-08-24 22:20 - 2017-08-24 22:20 - 000202093 _____ C:\Users\User\Downloads\Metin2-Rcon[V1_0 - Reloaded].zip
2017-08-24 21:52 - 2017-08-24 21:52 - 000004026 _____ C:\Windows\System32\Tasks\{E061440E-57CA-F3A5-748A-789A8C266F9F}
2017-08-24 21:52 - 2017-08-24 21:52 - 000003726 _____ C:\Windows\System32\Tasks\{9CE6D844-F88B-A605-EE17-98C2EC4C0576}
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\c29817ef-7cb1-1
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\c29817ef-53a7-0
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\56757186
2017-08-24 21:52 - 2017-08-24 21:52 - 000000000 ____D C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}
2017-08-24 21:50 - 2017-08-24 21:50 - 000000000 ____D C:\ProgramData\{6bce105c-412c-0}
2017-08-24 21:50 - 2017-08-24 21:50 - 000000000 ____D C:\ProgramData\{1196708f-512c-0}
2017-08-24 21:50 - 2017-08-24 21:50 - 000000000 ____D C:\ProgramData\{0c2b1e56-312c-1}
2017-08-24 15:20 - 2017-08-24 15:20 - 022955954 _____ C:\Users\User\Downloads\webdesign_s_godsofgames_tree.rar
2017-08-24 15:19 - 2017-08-24 15:19 - 013972115 _____ C:\Users\User\Downloads\[Luna]Metin2ServerPresentation_Thedanielx32Design.zip
2017-08-24 14:58 - 2017-08-24 15:01 - 1486584934 _____ C:\Users\User\Downloads\Rubinum_Client_06_0_2017.rar
2017-08-24 14:50 - 2017-08-24 14:50 - 001603424 _____ C:\Users\User\Downloads\RubinumPatcher.zip
2017-08-24 14:34 - 2017-08-24 14:34 - 021285304 _____ (Michael Friese) C:\Users\User\Downloads\sinusbot-0.9.21.exe
2017-08-24 14:34 - 2017-08-24 14:34 - 021285304 _____ (Michael Friese) C:\Users\User\Downloads\sinusbot-0.9.21 (1).exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-09-23 22:38 - 2013-10-13 12:44 - 000000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2017-09-23 22:21 - 2012-09-11 17:04 - 000000000 ____D C:\Users\User\AppData\Roaming\Skype
2017-09-23 22:03 - 2013-12-22 23:03 - 000001326 _____ C:\Windows\Tasks\Plus-HD-1.2-updater.job
2017-09-23 22:03 - 2013-12-22 23:03 - 000001228 _____ C:\Windows\Tasks\Plus-HD-1.2-codedownloader.job
2017-09-23 22:03 - 2013-12-22 23:03 - 000001128 _____ C:\Windows\Tasks\Plus-HD-1.2-enabler.job
2017-09-23 22:02 - 2013-12-22 23:02 - 000002102 _____ C:\Windows\Tasks\Plus-HD-1.2-firefoxinstaller.job
2017-09-23 22:02 - 2013-12-22 23:02 - 000001974 _____ C:\Windows\Tasks\Plus-HD-1.2-chromeinstaller.job
2017-09-23 18:55 - 2014-07-26 20:31 - 000000000 ____D C:\ProgramData\Wizard101(DE)
2017-09-23 18:28 - 2017-08-08 01:58 - 000000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2017-09-23 17:53 - 2017-03-26 10:50 - 000002699 _____ C:\Users\Public\Desktop\Skype.lnk
2017-09-23 17:53 - 2017-03-26 10:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-09-23 17:53 - 2012-09-11 17:04 - 000000000 ____D C:\ProgramData\Skype
2017-09-23 16:33 - 2009-07-14 06:45 - 000046432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-23 16:33 - 2009-07-14 06:45 - 000046432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-23 16:28 - 2017-08-08 01:58 - 000000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2017-09-23 16:28 - 2015-03-24 01:12 - 000000416 _____ C:\Windows\Tasks\Re-Markable Update.job
2017-09-23 12:39 - 2013-12-25 01:23 - 000000000 ____D C:\Users\User\Desktop\Emre
2017-09-23 11:40 - 2017-08-02 07:48 - 000000000 ____D C:\Users\User\AppData\Roaming\SysMon
2017-09-23 11:37 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-23 11:14 - 2017-08-07 16:58 - 000002373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-23 11:14 - 2017-08-07 16:58 - 000002361 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-09-23 11:14 - 2017-03-16 04:05 - 000001481 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-09-23 11:02 - 2012-02-22 19:16 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-23 09:23 - 2014-02-20 22:52 - 000012686 __RSH C:\ProgramData\ntuser.pol
2017-09-22 19:34 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-09-19 15:38 - 2017-08-04 17:38 - 000000000 ____D C:\Windows\Max
2017-09-19 15:38 - 2017-05-12 08:56 - 000000000 ____D C:\Users\User\AppData\Roaming\Google
2017-09-19 13:30 - 2017-01-07 04:08 - 000360448 _____ C:\Users\User\AppData\Roaming\cert8.db
2017-09-19 13:30 - 2017-01-07 04:08 - 000016384 _____ C:\Users\User\AppData\Roaming\key3.db
2017-09-17 22:00 - 2017-08-02 12:44 - 000000000 ____D C:\Program Files\Opera
2017-09-17 20:19 - 2017-08-01 22:34 - 000000000 ____D C:\Windows\SysWOW64\SSL
2017-09-17 20:02 - 2009-07-14 06:45 - 005089856 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-17 19:47 - 2017-08-07 16:57 - 000003544 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-09-17 19:47 - 2017-08-07 16:57 - 000003416 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-09-17 19:47 - 2017-08-02 08:03 - 000004608 _____ C:\Windows\SysWOW64\mtxdm64.dll
2017-09-15 23:00 - 2015-01-25 05:38 - 000000000 ____D C:\Users\User\Documents\Camtasia Studio
2017-09-15 22:25 - 2015-01-25 05:39 - 000000000 ____D C:\Users\User\AppData\Roaming\TechSmith
2017-09-15 22:24 - 2012-02-22 18:15 - 000126272 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2017-09-15 21:26 - 2014-08-05 09:36 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-14 06:34 - 2015-09-01 21:33 - 000000000 ____D C:\ProgramData\Hotspot Shield
2017-09-14 06:34 - 2015-09-01 21:32 - 000000000 ____D C:\Program Files (x86)\Hotspot Shield
2017-09-13 06:08 - 2017-08-23 22:20 - 000004378 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-13 06:08 - 2017-08-20 00:31 - 000004524 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-09-13 06:08 - 2012-09-11 17:09 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-13 06:08 - 2012-02-22 19:16 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-13 06:08 - 2012-02-22 19:16 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-13 04:45 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2017-09-13 04:44 - 2012-09-13 18:15 - 000000000 ____D C:\Users\User\AppData\Local\ElevatedDiagnostics
2017-09-13 03:39 - 2011-04-12 09:43 - 000699682 _____ C:\Windows\system32\perfh007.dat
2017-09-13 03:39 - 2011-04-12 09:43 - 000149790 _____ C:\Windows\system32\perfc007.dat
2017-09-13 03:39 - 2009-07-14 07:13 - 001620684 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-13 03:03 - 2013-12-22 23:07 - 001594964 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-09-09 22:26 - 2015-11-04 00:25 - 000000000 ____D C:\Program Files\PremiumSoft
2017-09-09 22:00 - 2017-08-02 12:45 - 000003854 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1501670702
2017-09-08 16:38 - 2013-08-24 14:38 - 000000000 ___RD C:\Program Files (x86)\Skype
2017-09-08 00:24 - 2015-01-24 18:52 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-08-26 15:21 - 2014-11-05 23:36 - 000000000 ____D C:\Users\User\AppData\Roaming\FileZilla
2017-08-26 15:10 - 2015-01-08 20:58 - 000000600 _____ C:\Users\User\AppData\Local\PUTTY.RND
2017-08-25 23:44 - 2017-02-18 00:07 - 000000000 ____D C:\Users\User\AppData\Local\FileZilla
2017-08-25 23:20 - 2015-01-07 18:14 - 000000000 ____D C:\Users\User\VirtualBox VMs
2017-08-25 17:31 - 2014-12-01 21:51 - 000000132 _____ C:\Users\User\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2017-08-24 21:55 - 2017-08-02 07:38 - 000000000 ____D C:\ProgramData\ca58f541-0891-0
2017-08-24 21:54 - 2017-08-02 07:38 - 000000000 ____D C:\ProgramData\ca58f541-17e7-1

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-05-29 12:15 - 2014-05-29 12:16 - 010395072 _____ (Webroot Software, Inc.) C:\Program Files (x86)\Common Files\wruninstall.exe
2016-05-31 18:24 - 2016-05-31 19:10 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-BMP-Format - Voreinstellungen
2016-12-10 22:21 - 2017-01-04 05:13 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen
2014-12-01 21:51 - 2017-08-25 17:31 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2015-09-02 05:22 - 2017-07-26 01:45 - 000000132 _____ () C:\Users\User\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2017-01-07 04:08 - 2017-09-19 13:30 - 000360448 _____ () C:\Users\User\AppData\Roaming\cert8.db
2017-01-07 04:08 - 2017-09-19 13:30 - 000016384 _____ () C:\Users\User\AppData\Roaming\key3.db
2017-01-07 04:08 - 2016-04-09 20:52 - 000004816 _____ () C:\Users\User\AppData\Roaming\logins.json
2017-08-02 07:51 - 2017-08-02 07:51 - 000016384 _____ () C:\Users\User\AppData\Roaming\secmod.db
2017-01-07 04:08 - 2014-05-08 18:43 - 000327680 _____ () C:\Users\User\AppData\Roaming\signons.sqlite
2014-11-23 19:07 - 2015-03-19 21:35 - 000161359 _____ () C:\Users\User\AppData\Roaming\spritesa
2013-12-19 00:26 - 2014-10-21 23:02 - 000000094 _____ () C:\Users\User\AppData\Roaming\WB.CFG
2015-03-19 20:23 - 2015-03-19 21:36 - 000003066 _____ () C:\Users\User\AppData\Roaming\Microsoft\logsdata
2015-10-27 23:19 - 2017-02-11 23:11 - 000001456 _____ () C:\Users\User\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2017-08-02 07:56 - 2017-08-02 07:56 - 007324160 _____ () C:\Users\User\AppData\Local\agent.dat
2017-09-09 22:15 - 2017-09-09 22:15 - 000033792 _____ () C:\Users\User\AppData\Local\amtfat.dll
2017-01-07 04:08 - 2017-01-07 04:08 - 000000000 _____ () C:\Users\User\AppData\Local\chrome.txt
2017-08-02 07:56 - 2017-08-02 07:56 - 000070800 _____ () C:\Users\User\AppData\Local\Config.xml
2017-08-02 07:53 - 2017-08-02 07:54 - 000019008 _____ () C:\Users\User\AppData\Local\InstallationConfiguration.xml
2017-08-02 07:53 - 2017-08-02 07:53 - 000140800 _____ () C:\Users\User\AppData\Local\installer.dat
2017-08-02 07:56 - 2017-08-02 07:52 - 002554368 _____ (TODO: <Company name>) C:\Users\User\AppData\Local\K-quadity.exe
2017-08-02 07:56 - 2017-08-02 07:56 - 001899067 _____ () C:\Users\User\AppData\Local\K-quadity.tst
2017-01-07 04:08 - 2016-09-15 19:11 - 000094208 _____ () C:\Users\User\AppData\Local\Login DataC
2016-07-07 08:15 - 2016-07-07 08:15 - 000000000 ___SH () C:\Users\User\AppData\Local\LumaEmu
2017-08-02 07:56 - 2017-08-02 07:56 - 000018432 _____ () C:\Users\User\AppData\Local\Main.dat
2017-08-02 07:56 - 2017-08-02 07:56 - 000005568 _____ () C:\Users\User\AppData\Local\md.xml
2017-08-02 07:53 - 2017-08-02 12:46 - 001847296 _____ () C:\Users\User\AppData\Local\po.db
2015-01-08 20:58 - 2017-08-26 15:10 - 000000600 _____ () C:\Users\User\AppData\Local\PUTTY.RND
2015-04-22 23:57 - 2015-04-22 23:57 - 000001408 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2015-12-19 19:47 - 2015-12-19 19:47 - 000007602 _____ () C:\Users\User\AppData\Local\Resmon.ResmonCfg
2015-04-05 23:24 - 2015-04-05 23:24 - 000011790 _____ () C:\Users\User\AppData\Local\Temp-log.txt
2017-03-17 01:05 - 2017-03-17 01:05 - 000000552 _____ () C:\Users\User\AppData\Local\TroubleshooterConfig.json
2017-09-09 22:15 - 2017-09-09 22:15 - 000003072 _____ () C:\Users\User\AppData\Local\uninstallce.exe
2017-08-02 08:01 - 2017-08-02 08:01 - 000001150 _____ () C:\Users\User\AppData\Local\uninstall_temp.ico
2017-01-07 04:07 - 2017-01-07 04:07 - 000000000 _____ () C:\Users\User\AppData\Local\WindowsLive26.cfg
2017-08-02 07:53 - 2017-08-03 02:23 - 000320000 _____ () C:\ProgramData\smp2.exe

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\rss\csrss.exe
C:\ProgramData\smp2.exe


Einige Dateien in TEMP:
====================
2017-09-17 19:45 - 2017-09-23 11:41 - 001527488 _____ (Microsoft Corporation) C:\Users\User\AppData\Local\Temp\dbghelp.dll
2017-09-17 19:45 - 2017-09-23 11:41 - 000167616 _____ (Microsoft Corporation) C:\Users\User\AppData\Local\Temp\symsrv.dll
2017-09-09 22:17 - 2017-09-09 22:14 - 000067140 _____ () C:\Users\User\AppData\Local\Temp\Uninstall.exe

Einige mit null Byte Größe Dateien/Ordner:
==========================
C:\Windows\SysWOW64\lastpass_1337.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


nointegritychecks: ==> "IntegrityChecks" ist deaktiviert. <==== ACHTUNG

BCD (recoveryenabled=No -> recoveryenabled=Yes) <==== erfolgreich wiederhergestellt

LastRegBack: 2017-09-20 00:11

==================== Ende von FRST.txt ============================

--- --- ---

DasTutWeh · 24.09.2017, 12:21

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-09-2017 02
durchgeführt von User (23-09-2017 22:43:45)
Gestartet von C:\Users\User\Downloads
Windows 7 Professional Service Pack 1 (X64) (2012-02-22 15:55:23)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2783078182-1204926350-1955954555-500 - Administrator - Disabled)
Gast (S-1-5-21-2783078182-1204926350-1955954555-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2783078182-1204926350-1955954555-1002 - Limited - Enabled)
Pylx (S-1-5-21-2783078182-1204926350-1955954555-1003 - Administrator - Enabled) => C:\Users\Pylx
User (S-1-5-21-2783078182-1204926350-1955954555-1000 - Administrator - Enabled) => C:\Users\User

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe After Effects CC 2015.3 (HKLM-x32\...\AEFT_13_8_0) (Version: 13.8.0 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.7.0.272 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Reader X (10.1.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated)
ATI AVIVO64 Codecs (HKLM\...\{968720F5-3D81-7A28-C902-0876A57B1523}) (Version: 11.6.0.10309 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{363836F9-D52D-8976-EC20-8C6965A4D045}) (Version: 3.0.820.0 - ATI Technologies, Inc.)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0003 - ASUS)
Avira Connect (HKLM-x32\...\{7990b9d3-2da3-4eef-bf20-73a05086fd12}) (Version: 1.2.92.32157 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM-x32\...\{E972AE5C-71B3-4D35-8193-BC4CC2F1FA20}) (Version: 1.2.92.32157 - Avira Operations GmbH & Co. KG) Hidden
Blizzard App (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 15.0.7.3 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 15.0.7.1 - Broadcom Corporation)
Camtasia 9 (HKLM\...\{821A4F74-0328-40EF-823D-C4A6FCE5A17F}) (Version: 9.0.5.2021 - TechSmith Corporation) Hidden
Camtasia 9 (HKLM-x32\...\{cae8c23d-8a3c-411a-a01a-c5d6d04d6cd5}) (Version: 9.0.5.2021 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 3.02 - Piriform)
Cheat Engine 6.5.1 (HKLM-x32\...\Cheat Engine 6.5.1_is1) (Version:  - Cheat Engine)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DragonBoost (HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\119) (Version:  - ) <==== ACHTUNG
FileZilla Client 3.27.1 (HKLM-x32\...\FileZilla Client) (Version: 3.27.1 - Tim Kosse)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Gyazo 3.3.2 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version:  - Nota Inc.)
HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFAOR2C06_118) (Version:  - )
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hotspot Shield 7.1.2 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925C137CD26}) (Version: 7.1.2.10755 - AnchorFree Inc.) Hidden
Hotspot Shield 7.1.2 (HKLM-x32\...\{ddcf3c73-2b97-4dc5-bdf5-ab48869082b3}) (Version: 7.1.2.10755 - AnchorFree Inc.)
Hotspot Shield 7.1.2 (HKLM-x32\...\HotspotShield) (Version: 7.1.2 - AnchorFree Inc.) Hidden
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{AA67D612-0BE5-44D6-9A91-592958F754A1}) (Version: 13.0.198 - Intel Corporation)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35132 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel® Active-Management-Technologie (HKLM\...\MESOL) (Version:  - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{6199B534-A1B6-46ED-873B-97B0ECF8F81E}) (Version: 1.23.216.0 - Intel Corporation)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.600 - Oracle)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java SE Development Kit 8 Update 101 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180101}) (Version: 8.0.1010.13 - Oracle Corporation)
Java(TM) 6 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216025F0}) (Version: 6.0.250 - Oracle)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.17.1 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.33.2 - JMicron Technology Corp.)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\{31AC3B64-AB6C-4659-BB1A-EEDFBA9B98F7}) (Version: 4.1.2 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
LogMeIn Hamachi (HKLM-x32\...\{BE82D2D7-6CA2-43B3-8C22-CCF6405806E7}) (Version: 2.2.0.579 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.579 - LogMeIn, Inc.)
Magic Bullet PhotoLooks (HKLM-x32\...\Magic Bullet PhotoLooks) (Version:  - )
Metric Collection SDK (HKLM-x32\...\{DDAA788F-52E6-44EA-ADB8-92837B11BF26}) (Version: 1.1.0012.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4.6.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft .NET Framework 4.6.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01590 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.2 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}) (Version: 9.09.1112 - NVIDIA Corporation)
O2Micro Flash Memory Card Windows Driver (HKLM\...\{854C008F-A636-4EC8-AFD0-090B820A4A1F}) (Version: 3.00.0007 - O2Micro International LTD.) Hidden
O2Micro Flash Memory Card Windows Driver (HKLM-x32\...\InstallShield_{854C008F-A636-4EC8-AFD0-090B820A4A1F}) (Version: 3.00.0007 - O2Micro International LTD.)
O2Micro PCIe SCR Driver (HKLM-x32\...\{5F24B278-14E0-4DD8-9D52-DE49085A958F}) (Version: 1.0.01 - O2Micro) Hidden
O2Micro PCIe SCR Driver (HKLM-x32\...\InstallShield_{5F24B278-14E0-4DD8-9D52-DE49085A958F}) (Version: 1.0.01 - O2Micro)
OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)
OpenOffice Updater (HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\OpenOffice Updater) (Version: 1.1.10 - OpenOffice)
Opera Stable 47.0.2631.80 (HKLM-x32\...\Opera 47.0.2631.80) (Version: 47.0.2631.80 - Opera Software)
Oracle VM VirtualBox 5.1.26 (HKLM\...\{11A88BD5-F059-4743-81D9-1432AC9C3D4E}) (Version: 5.1.26 - Oracle Corporation)
OZ711 SCR Driver V3.0.1.6 (x64) (HKLM\...\{F954E9F1-6935-4B63-9B00-7C586DC2A835}) (Version: 3.0.1.6 - O2Micro) Hidden
OZ711 SCR Driver V3.0.1.6 (x64) (HKLM-x32\...\InstallShield_{F954E9F1-6935-4B63-9B00-7C586DC2A835}) (Version: 3.0.1.6 - O2Micro)
paint.net (HKLM\...\{02D89175-E08F-401B-BA30-8B7512B57724}) (Version: 4.0.17 - dotPDN LLC)
PremiumSoft Navicat Premium 11.1 (HKLM\...\PremiumSoft Navicat Premium_is1) (Version: 11.1.9 - PremiumSoft CyberTech Ltd.)
PuTTY release 0.70 (64-bit) (HKLM\...\{45B3032F-22CC-40CD-9E97-4DA7095FA5A2}) (Version: 0.70.0.0 - Simon Tatham)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 3.0 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6543 - Realtek Semiconductor Corp.)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\Spotify) (Version: 1.0.53.758.gde3fc4b2 - Spotify AB)
SupraSavings (HKLM\...\{D12C40DB-CD7D-4D86-9285-5E2FE23693E4}) (Version: 1.0.0.0 - SupraSavings) Hidden
TeamSpeak 3 Client (HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.78716 - TeamViewer)
Virtual Audio Cable 4.10 (HKLM\...\Virtual Audio Cable 4.10) (Version:  - )
VLC media player 2.0.3 (HKLM-x32\...\VLC media player) (Version: 2.0.3 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - Intel (NETwLv64) net  (10/07/2010 13.4.0.139) (HKLM\...\EA1C8ECD4E416637C38F0079F98C8C7B0A112265) (Version: 10/07/2010 13.4.0.139 - Intel)
Windows-Treiberpaket - Intel (NETwNs64) net  (01/22/2012 14.3.2.1) (HKLM\...\CD88F0FADE1395C9F91302912FD35B13CF75C196) (Version: 01/22/2012 14.3.2.1 - Intel)
Windows-Treiberpaket - Intel (NETwNs64) net  (02/20/2012 15.1.0.18) (HKLM\...\69A53671180AECD99453E40E613B8E7237D26CDB) (Version: 02/20/2012 15.1.0.18 - Intel)
WinZip 21.5 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C2410F}) (Version: 21.5.12480 - WinZip Computing, S.L. )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2783078182-1204926350-1955954555-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Keine Datei
ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2015-04-15] ()
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-04-19] (WinZip Computing, S.L.)
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal)
ContextMenuHandlers4-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-04-19] (WinZip Computing, S.L.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2011-03-09] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2012-12-14] (Intel Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2017-04-19] (WinZip Computing, S.L.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0407C505-02A5-4F44-B211-E16311862AE6} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_130_pepper.exe [2017-09-13] (Adobe Systems Incorporated)
Task: {043914CC-2656-48CF-AB3B-E2C3BCADFC1B} - System32\Tasks\{9CE6D844-F88B-A605-EE17-98C2EC4C0576} => C:\Windows\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\56757186\65944c82.dll" <==== ACHTUNG
Task: {05D8C1FB-6348-4502-88AE-350D24B1255D} - System32\Tasks\SMW_UpdateTask_Time_333637333730363934362d3437415a556c2a3223346c41 => wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== ACHTUNG
Task: {0911FAAD-F7CF-4755-8258-38F204F40C2E} - System32\Tasks\{F8EC8BF8-E26F-43E7-A7E4-DDE5E1E755BD} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {0912A3C5-C96E-4F58-A807-FD1A47A9DE80} - System32\Tasks\{25D8CCD2-8371-4A03-88BF-BC6AF1EA07A4} => C:\Windows\system32\pcalua.exe -a "C:\Users\User\Desktop\Virtual Audio Cable 4.10 (Full)\Virtual Audio Cable 4.10 (Full)\setup.exe" -d "C:\Users\User\Desktop\Virtual Audio Cable 4.10 (Full)\Virtual Audio Cable 4.10 (Full)"
Task: {10E4C399-506C-427A-B1AE-2F74EDE4CC5F} - System32\Tasks\{DFFCFED3-641A-4F6B-ACDF-2928B922EAB8} => C:\Users\User\Desktop\Cymera2 Client(LIVE)\Cymera.exe
Task: {147A69A5-9CD0-419E-8DB4-D6FFE107F36C} - System32\Tasks\Plus-HD-1.2-enabler => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-enabler.exe
Task: {1CF318AC-A650-4DBD-B89B-6BE41471E1A2} - System32\Tasks\{3B976F72-4D9C-4B2B-9F3C-9B46B43C9CBB} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.33.73.105.456/de/abandoninstall?page=tsInstall
Task: {1FAE587A-851B-4729-A9EF-AC3E0E5CBCDF} - System32\Tasks\{9C87D66D-F9FD-4202-BFA8-C01883B51F22} => C:\Users\User\Desktop\Plutonia2 Client 2015\.Plutonia2 - Clientstarter (2).exe
Task: {21E9DE55-3B5C-4058-9CA9-B972CC192950} - System32\Tasks\{F27B5FEA-8622-477A-B270-538DF7C86286} => C:\Nexon\Combat Arms EU\CombatArms.exe
Task: {22E7D1E9-C8D2-4C78-AEE1-4340EF03DD20} - System32\Tasks\DNSLOCKINGTON => dnslockington.exe <==== ACHTUNG
Task: {2DDBE839-3A63-449B-B8DF-53E8C9621832} - System32\Tasks\{AE9BCFC1-11F6-4B04-AE48-F92A115ECDDC} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {2FFCDEBF-B73E-4144-88D9-04171E739F85} - System32\Tasks\{C2156576-D81C-4FE5-8FE7-14EE2BB7745D} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {31807AB3-0D9F-4B57-AA7A-3FAAF16ABC59} - System32\Tasks\{9A80B55D-1607-4606-B681-5AC775B2B824} => C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win64.exe [2017-07-15] (TeamSpeak Systems GmbH)
Task: {33571AB1-A14A-4FD0-80A1-663A7D234CF4} - System32\Tasks\{C8B57DBF-793D-41E9-8B7F-20C93AE817C5} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.3.73.105.457/en/abandoninstall?page=tsWLM
Task: {34D4F396-C4E2-4C01-AF6E-C25B4477CD37} - System32\Tasks\{F8817069-6BED-5BEB-215F-D9A72F9A2837} => C:\Windows\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\56757186\65944c82.dll" <==== ACHTUNG
Task: {34FD0F5B-AD36-4007-81BF-3B139A3D4548} - System32\Tasks\{4A28C953-EDA8-4BA9-B3DF-7B959E41DABF} => C:\Users\User\Desktop\Cymera2 Client(LIVE)\Cymera.exe
Task: {35F2B1A9-E8E2-417F-8DBD-1E6BAB7ACD7A} - System32\Tasks\{DA557F96-A20F-46BC-A3C3-B162B27999FD} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {420F1DE5-4F9D-4458-9D6D-0F2595B1DA81} - System32\Tasks\{CEDBA970-52EF-44BE-867F-D5D0666C70F1} => C:\Windows\system32\pcalua.exe -a C:\ProgramData\Wizard101(DE)\Wizard101.exe -d C:\ProgramData\Wizard101(DE)
Task: {48C6211D-F447-4F59-8134-1D95A49A7976} - System32\Tasks\{68D31DEE-4936-45FA-AD7A-9E562CEC8E54} => C:\Users\User\Desktop\Plutonia2 Client 2015\.Plutonia2 - Clientstarter (2).exe
Task: {4F6ADE90-B6A4-4019-ABC5-66239BE121AF} - System32\Tasks\WinZip Update Notifier => C:\Program Files\WinZip\WZUpdateNotifier.exe [2017-04-19] (WinZip)
Task: {53A218B7-11CE-4754-8423-B8415748C48D} - System32\Tasks\IBUpd2 => C:\Users\User\AppData\Local\BrowserAir\48.0.0.0\updater.exe <==== ACHTUNG
Task: {587908E2-D68B-4073-963D-9A05788C9C9D} - System32\Tasks\27DAVpQmvp => C:\Program Files (x86)\YkUBYysd0K\updengine.exe [2017-09-18] () <==== ACHTUNG
Task: {5F35BB51-DFAA-4654-A039-2C6957F4BCFE} - System32\Tasks\RunAtStartup => C:\Users\User\AppData\Roaming\SysMon\sysmon.exe [2017-09-20] ()
Task: {664BBB40-C317-41FF-81EE-DD92C49C61D3} - System32\Tasks\{E0349E83-FEF4-47D1-A9F0-68AF3116544A} => C:\Nexon\Combat Arms EU\CombatArms.exe
Task: {6B2A40C6-4F52-4379-88FB-3407946AA889} - System32\Tasks\{797F0547-780A-0804-0811-7A04047E117D} => C:\Windows\system32\WindowsPowershell\v1.0\powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand IAAgADsAOwA7ACAAIAA7ADsAIAA7ADsAOwAkAEUAcgByAG8AcgBBAGMAdABpAG8AbgBQAHIAZQBmAGUAcgBlAG4AYwBlAD0AIgBzAHQAbwBwACIAOwAkAHMAYwA9ACIAUwBpAGwAZQBuAHQAbAB5AEMAbwBuAHQAaQBuAHUAZQAiADsAJABXAGEAcgBuAGkAbgBnAFAAcgBlAGYAZQByAGUA (Der Dateneintrag hat 9620 mehr Zeichen). <==== ACHTUNG
Task: {73B6283F-3BC7-4699-89B3-F7BB44675E7B} - System32\Tasks\{1D4A7932-3480-465C-B358-6AD60BECD1AC} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.14.0.104/en/go/help.faq.installer?LastError=1601
Task: {76C2E13B-2A65-4798-B063-332469C46171} - System32\Tasks\Update\Windows => C:\Users\User\Downloads\440446d0e8f9b613d8b7dc50ff92f02c970752.exe <==== ACHTUNG
Task: {76C892B2-E9A5-489E-AEF8-D73BDA02A4B2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-07] (Google Inc.)
Task: {79388FA0-888D-4056-B584-28D57720BBED} - C:\Windows\System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {79388FA0-888D-4056-B584-28D57720BBED} - C:\Windows\System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-07-04] (Microsoft Corporation)
Task: {7B9DB399-A788-49E5-82EA-54A5461C1786} - System32\Tasks\{2801D14C-3F2B-474E-B56A-16BF8375B234} => C:\Windows\system32\pcalua.exe -a C:\Windows\unvise32.exe -c \Plug-ins\mbphotolooks.log
Task: {801786BD-AE81-4DF1-B9BA-306C3479B448} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
Task: {81504E9C-6C52-4053-81AC-D23B1985BA3C} - System32\Tasks\Plus-HD-1.2-chromeinstaller => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-chromeinstaller.exe
Task: {82E168EF-A6FD-410C-B46B-AA354C6BF4BB} - System32\Tasks\{29EB3777-4C11-4FC4-9081-B6EC81B6C332} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {83A1F172-A0C1-42F6-8B42-B0A7B7DD1A5D} - System32\Tasks\LaunchChromeTask111 => C:\Program Files\FileZilla FTP Client\FileZilla.exe [2017-08-14] (FileZilla Project)
Task: {85FCCE6B-C1CE-40E8-9F71-998033C53079} - System32\Tasks\{BBA68737-996A-4923-867D-CE5041D60E0B} => C:\Riot Games\League of Legends\lol.launcher.exe [2016-04-01] ()
Task: {87323BA0-A768-448F-A184-3A8FA599AA32} - System32\Tasks\Re-Markable Update => C:\Program Files (x86)\ver8Re-Markable\H8Re-MarkableR09.exe
Task: {87B08677-A2EC-4C73-8FA2-5DCD99DC7675} - System32\Tasks\Opera scheduled Autoupdate 1501670702 => C:\Program Files\Opera\launcher.exe [2017-09-06] (Opera Software)
Task: {8B5D27A5-EFE6-4943-BF75-4F927EA54928} - System32\Tasks\{92F49C99-A522-4EAF-A5DA-D2E8F032C86A} => C:\Nexon\Combat Arms EU\CombatArms.exe
Task: {8CDE47AF-3B65-45F8-8AB5-23FA7D0C2344} - System32\Tasks\{999EF341-08DB-4B4D-A9F0-6E4059F72D00} => C:\Riot Games\League of Legends\lol.launcher.exe [2016-04-01] ()
Task: {8EF78D11-D66F-4987-86C8-AC3EA1228884} - System32\Tasks\{10D42DE6-5326-4074-9151-0A194B5A5F6A} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.23.85.105/de/abandoninstall?page=tsProgressBar
Task: {8F384B34-61EF-4347-AAF5-8A42F1358A25} - System32\Tasks\{7F75C7E3-5EEA-45CE-841B-00A805EF53DD} => C:\Nexon\Combat Arms EU\CombatArms.exe
Task: {9363ED9F-B6F2-45AB-95FA-F1F4310F14A3} - System32\Tasks\{4314A051-8D8A-4B30-87EE-B138F51225A0} => C:\Program Files (x86)\Nexon\Nexon Launcher\nexon_launcher.exe
Task: {98DC68FF-FC2E-484F-BCA2-8BC6172ECD85} - System32\Tasks\d4b81cfa58e82cb84e315f74c23947cc => powershell.exe -NoProfile -NoLogo -NonInteractive -ExecutionPolicy Bypass -File "C:\Windows\d4b81cfa58e82cb84e315f74c23947cc.ps1" <==== ACHTUNG
Task: {9A233379-988D-415E-9343-C2B80D3A994B} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\ErrorReporting => C:\\ProgramData\\WindowsErrorReporting\\wvermgr.exe [2017-08-01] ()
Task: {9DBCD2F3-C5EB-44CF-AA34-D69A9E09BF67} - System32\Tasks\{C2543F35-DC0D-4D38-B24D-F6DB0F3DB2CA} => C:\Users\User\Desktop\Plutonia2 Client 2015\.Plutonia2 - Clientstarter (2).exe
Task: {9E082357-86A2-4200-B3AD-31C9B7C4CBE6} - System32\Tasks\Plus-HD-1.2-codedownloader => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-codedownloader.exe
Task: {A48A398D-9CFF-4CAC-89A7-D984CB5539D8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated)
Task: {A713676A-1C69-4369-A66E-77C914D8663D} - System32\Tasks\Microsoft.NETAcrobat => C:\Program Files (x86)\nodejs\node.exe [2017-05-02] (Node.js)
Task: {A8101320-8A5B-431E-B294-E8404794A9DE} - System32\Tasks\{BC947F93-D79C-4A14-A07F-8D8FADFF72F3} => C:\Users\User\Desktop\Cymera2 Client(LIVE)\Cymera.exe
Task: {A8A95926-0981-4DEB-A96D-037782F48A8D} - System32\Tasks\{DA9C3F1B-9BFD-4DDB-9702-92F6A816378C} => C:\Program Files (x86)\Nexon\Nexon Launcher\nexon_launcher.exe
Task: {AC37E256-8BC0-4E9B-B936-F55518BA580F} - System32\Tasks\01f8a84096caddd3c79baeadd404dcdf => sc start 01f8a84096caddd3c79baeadd404dcdf <==== ACHTUNG
Task: {AF75B6EA-1D04-4865-B1C2-BD9D72121450} - C:\Windows\System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {AF75B6EA-1D04-4865-B1C2-BD9D72121450} - C:\Windows\System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent
Task: {AF75B6EA-1D04-4865-B1C2-BD9D72121450} - C:\Windows\System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2015-07-04] (Microsoft Corporation)
Task: {B004DAD0-208A-41EC-9659-5E5F1D9923D4} - System32\Tasks\{416EB133-8136-4FE0-9D41-E1E212CB3A3F} => C:\Riot Games\League of Legends\lol.launcher.exe [2016-04-01] ()
Task: {B99EC587-BBA4-4F43-BD11-871AC986F71E} - System32\Tasks\Keyboard Trainer => C:\Windows\system32\rundll32.exe "C:\Program Files\Keyboard Trainer\Keyboard Trainer.dll",TfMxibDFBh <==== ACHTUNG
Task: {B9C034D1-781E-41DB-8DDE-40E7CFD14347} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {BDE0D4D2-4A10-48DE-865A-992AA100D7EB} - System32\Tasks\{1309BD4C-B2D5-4CD9-AFE9-0556F62DF196} => C:\Users\User\Desktop\Cymera2 Client(LIVE)\Cymera.exe
Task: {C055B2D1-64A9-40DA-B28A-E318F82476DF} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo)
Task: {C7343B0D-3823-4DC1-B3C4-B9EC61C8972A} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2017-05-16] ()
Task: {CDA1B6CA-339B-42EC-B59F-9F900EADBBD6} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {CE8DFE51-BE50-46F7-A6B4-AAA3A6323028} - System32\Tasks\{5ABA2743-160D-4DDC-BEA1-B9487B0DCA03} => C:\Users\User\Desktop\Cymera2 Client(LIVE)\Patcher.exe
Task: {D2018DDB-141C-44C0-B1FF-39BDB79BFA7A} - System32\Tasks\{DEAE8F9E-1653-40B2-9633-5D8385E6A5F1} => rundll32.exe "C:\Users\User\AppData\Local\Microsoft\TaskPlay\caches.dat",StaticCache
Task: {DAE0269D-5B41-4882-9DDF-788677FF7995} - System32\Tasks\{95BA90B9-4118-4AAB-92B8-7D855B4CC05D} => C:\Users\User\Desktop\Cymera2 Client(LIVE)\Cymera.exe
Task: {DB92B0AA-2AAA-4E7D-A72C-4961D7E938B1} - System32\Tasks\{92E548C0-EAB8-41A1-9860-0895BD0D24CD} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {E9AC447E-9ABD-4735-8E71-3C3ED8E6DD6A} - System32\Tasks\SMW_P => C:\ProgramData\smp2.exe [2017-08-03] () <==== ACHTUNG
Task: {EA158391-C3D5-4811-907F-530E6C86D4C4} - C:\Windows\System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent
Task: {EA158391-C3D5-4811-907F-530E6C86D4C4} - C:\Windows\System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-07-04] (Microsoft Corporation)
Task: {EECA143E-D4FC-405E-99AC-25B0F39C62D4} - System32\Tasks\{3EA43B9E-2AC2-4055-B49A-DF7D9D328643} => C:\Users\User\Desktop\Cymera2 Client(LIVE)\Cymera.exe
Task: {EFA7B181-14FA-4E11-8E66-3FF038A84F23} - System32\Tasks\361971e86847fe4cd4491b6da416b4a6 => sc start 361971e86847fe4cd4491b6da416b4a6 <==== ACHTUNG
Task: {F2CFB2DC-CC4C-462A-BDA7-D1FEB1F30AF8} - System32\Tasks\Plus-HD-1.2-firefoxinstaller => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-firefoxinstaller.exe
Task: {F4877897-B1CC-44EA-8C4D-0314C18A881C} - System32\Tasks\{10FE99D7-F35C-4B89-9FE1-6475676B13A6} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {FD92A04F-4E41-497E-A412-A5CC7599B4F8} - System32\Tasks\{DE3C99F6-60DD-4D3F-B175-32E7A1DD742B} => C:\Users\User\Desktop\wolfteam_us_downloader.exe
Task: {FE841711-1913-4CF3-8319-B9AA044A3288} - System32\Tasks\Plus-HD-1.2-updater => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-updater.exe
Task: {FE86CDBC-B366-471F-AA93-7D0966703058} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-07] (Google Inc.)
Task: {FE87EAFB-FED5-4378-B81D-D34D604E7969} - System32\Tasks\{B85B8E44-0E7B-40D0-A9B5-B80C121E5988} => C:\Nexon\Combat Arms EU\CombatArms.exe
Task: {FF363164-F3F3-4AC7-B71D-6FD4F9F3CFBD} - System32\Tasks\{E061440E-57CA-F3A5-748A-789A8C266F9F} => C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}\4C44C175-FBEF-76DE-A2EC-D8B530283C4E.exe [2017-08-24] () <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\Plus-HD-1.2-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-chromeinstaller.exe/installcrx /crxinstalltype=0 /agentregpath='Plus-HD-1.2' /extensionfilepath C:\Program Files (x86)\Plus-HD-1.2\31255.crx' /appid=31255 /srcid='000817' /subid='0' /zdata='0' /bic=F383CA6B37D0472BAD0C4DDA25D691AAIE /verifier=3cec8fa51696c82c56cb9ac0d7a90776 /installerversion=1_32_153 /installerfullversion=1.32.153.0 /installationtime=1387746140 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com <==== ACHTUNG
Task: C:\Windows\Tasks\Plus-HD-1.2-codedownloader.job => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-codedownloader.exeǀ/reinstallapp /agentregpath='Plus-HD-1.2' /appid=31255 /srcid='000817' /subid='0' /zdata='0' /bic=F383CA6B37D0472BAD0C4DDA25D691AAIE /verifier=3cec8fa51696c82c56cb9ac0d7a90776 /installerversion=1_32_153 /installerfullversion=1.32.153.0 /installationtime=1387746140 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /codedownloaddomain=hxxp:/app-static.crossrider.com <==== ACHTUNG
Task: C:\Windows\Tasks\Plus-HD-1.2-enabler.job => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-enabler.exeƕ/enablebho /agentregpath='Plus-HD-1.2' /appid=31255 /srcid='000817' /subid='0' /zdata='0' /bic=F383CA6B37D0472BAD0C4DDA25D691AAIE /verifier=3cec8fa51696c82c56cb9ac0d7a90776 /installerversion=1_32_153 /installationtime=1387746140 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com <==== ACHTUNG
Task: C:\Windows\Tasks\Plus-HD-1.2-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-firefoxinstaller.exeͳ/installxpi /agentregpath='Plus-HD-1.2' /extensionfilepath C:\Program Files (x86)\Plus-HD-1.2\31255.xpi' /appid=31255 /srcid='000817' /subid='0' /zdata='0' /bic=F383CA6B37D0472BAD0C4DDA25D691AAIE /verifier=3cec8fa51696c82c56cb9ac0d7a90776 /installerversion=1_32_153 /installerfullversion=1.32.153.0 /installationtime=1387746140 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=39e612de-2951-40c2-ab4a-82e121c42778@4e0cecc2-7c67-4374-bc4c-f15656d80ab7.com /extensionversion=0.93 /prefsbranch=a39e612de295140c2ab4a82e121c427784e0cecc27c674374bc4cf15656d80ab7com31255 /updateurl=hxxps:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/31255.rdf <==== ACHTUNG
Task: C:\Windows\Tasks\Plus-HD-1.2-updater.job => C:\Program Files (x86)\Plus-HD-1.2\Plus-HD-1.2-updater.exeǸ/runupdater /agentregpath='Plus-HD-1.2' /appid=31255 /srcid='000817' /subid='0' /zdata='0' /bic=F383CA6B37D0472BAD0C4DDA25D691AAIE /verifier=3cec8fa51696c82c56cb9ac0d7a90776 /installerversion=1_32_153 /installationtime=1387746140 /statsdomain=hxxp:/stats.srvstatsdata.com /errorsdomain=hxxp:/errors.srvstatsdata.com /geoserviceurl=hxxp:/ipgeoapi.com/ /updatejsondomain=hxxp:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=hxxp:/stats.syncstatsdata.com <==== ACHTUNG
Task: C:\Windows\Tasks\Re-Markable Update.job => C:\Program Files (x86)\ver8Re-Markable\H8Re-MarkableR09.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\User\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> "hxxp://polili.ru/?utm_source=startlink03&utm_content=bacb3052e711b838cb97b414cfc9bf33&utm_term=D8FCEA74B404414E941AC587DBA1A4C5&utm_d=20160903"
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet-Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,
ShortcutWithArgument: C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\225bb61db2f318c1\Pokeeh - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=h82zbcnbl1bu,db68b118-7732-4251-bb57-788b9fa12b56,

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-05-22 19:33 - 2016-05-22 19:33 - 000491184 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2017-08-14 18:05 - 2017-08-14 18:05 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2017-08-02 07:58 - 2017-08-02 07:39 - 003780096 _____ () C:\ProgramData\Logic Cramble\set.exe
2017-08-02 07:48 - 2017-09-20 16:21 - 003098048 _____ () C:\Users\User\AppData\Roaming\SysMon\sysmon.exe
2017-08-02 07:54 - 2017-07-20 08:36 - 000043520 _____ () C:\ProgramData\PrefsSecure\Nettrans.exe
2017-09-17 19:46 - 2017-09-17 19:46 - 003282432 _____ () C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\tor.exe
2017-09-17 19:46 - 2017-09-17 19:46 - 001370624 _____ () C:\Windows\windefender.exe
2017-04-11 16:08 - 2017-04-11 16:08 - 000495616 _____ () C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe
2017-09-17 19:45 - 2017-09-17 19:45 - 002519552 _____ () C:\Windows\rss\csrss.exe
2017-08-25 23:56 - 2017-08-25 23:56 - 000349696 _____ () C:\Program Files\WinZip Smart Monitor\Plugins\7BC0E678-C2D8-43A4-B694-A458734AEF6D.2.1.0.10\7BC0E678-C2D8-43A4-B694-A458734AEF6D.2.1.0.10.dll
2017-09-18 04:23 - 2017-09-23 11:53 - 000627200 _____ () C:\Users\User\AppData\Local\Temp\csrss\wup.exe
2015-04-15 22:13 - 2015-04-15 22:13 - 000222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2017-09-09 22:00 - 2017-09-09 22:00 - 090016856 _____ () C:\Program Files\Opera\47.0.2631.80\opera_browser.dll
2017-09-09 22:00 - 2017-09-09 21:59 - 003972696 _____ () C:\Program Files\Opera\47.0.2631.80\libglesv2.dll
2017-09-09 22:00 - 2017-09-09 21:59 - 000100440 _____ () C:\Program Files\Opera\47.0.2631.80\libegl.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 003481728 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClient.exe
2017-09-21 22:43 - 2017-09-15 12:20 - 001705088 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUx.exe
2017-09-21 22:43 - 2017-09-15 12:20 - 001705088 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\LeagueClientUxRender.exe
2015-10-22 13:22 - 2017-07-15 13:53 - 000176408 _____ () C:\Users\User\AppData\Local\TeamSpeak 3 Client\quazip.dll
2017-01-11 22:52 - 2017-03-20 22:13 - 000020248 _____ () C:\Users\User\AppData\Local\TeamSpeak 3 Client\libEGL.DLL
2017-01-11 22:52 - 2017-03-20 22:13 - 001975064 _____ () C:\Users\User\AppData\Local\TeamSpeak 3 Client\libGLESv2.dll
2015-10-22 13:21 - 2017-07-15 13:53 - 000107288 _____ () C:\Users\User\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2015-10-22 13:21 - 2017-07-15 13:53 - 000128280 _____ () C:\Users\User\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2017-07-26 23:08 - 2017-07-26 23:08 - 000102912 _____ () C:\Users\User\AppData\Roaming\TS3Client\plugins\TS3MassMover_win64.dll
2017-08-24 21:52 - 2017-08-24 21:52 - 001246208 _____ () C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}\4C44C175-FBEF-76DE-A2EC-D8B530283C4E.exe
2017-09-09 22:14 - 2017-09-09 22:14 - 001378816 _____ () C:\Program Files (x86)\Google\Chrome\Application\WINHTTP.dll
2017-09-17 19:47 - 2017-09-23 09:22 - 000014336 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\WTSAPI32.dll
2017-08-29 02:14 - 2017-08-23 10:48 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll
2017-08-29 02:14 - 2017-08-23 10:48 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll
2017-09-09 22:14 - 2017-09-09 22:14 - 000781312 _____ () c:\users\user\appdata\local\adservice\adservice.dll
2017-09-11 15:45 - 2017-09-11 15:45 - 000161200 _____ () C:\Program Files (x86)\Hotspot Shield\bin\CrashRpt1403.dll
2017-09-18 07:41 - 2017-09-18 07:41 - 002137600 _____ () C:\Program Files (x86)\YkUBYysd0K\kl.dll
2017-09-17 19:46 - 2017-09-17 19:46 - 000720153 _____ () C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\libevent-2-0-5.dll
2017-09-17 19:46 - 2017-09-17 19:46 - 000093535 _____ () C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\libssp-0.dll
2017-09-17 19:46 - 2017-09-17 19:46 - 000524198 _____ () C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\libgcc_s_sjlj-1.dll
2017-09-17 19:46 - 2017-09-17 19:46 - 000107520 _____ () C:\Users\User\AppData\Local\Temp\csrss\proxy\Tor\zlib1.dll
2017-09-13 03:56 - 2017-09-13 03:56 - 000172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\af090eae04eb9e9104769a5c03783afc\IsdiInterop.ni.dll
2017-08-08 14:32 - 2012-02-01 16:25 - 000059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-06-30 21:04 - 2011-12-16 10:39 - 001198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 000108672 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\zlib.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 000128640 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\yaml.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 001386624 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-patcher\rcp-be-patcher.dll
2017-09-21 22:43 - 2017-08-09 15:10 - 000669824 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-rso-auth\rcp-be-rso-auth.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 001009792 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-login\rcp-be-lol-login.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000525440 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-platform-config\rcp-be-lol-platform-config.dll
2017-09-21 22:43 - 2017-08-23 23:57 - 000563840 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-riot-messaging-service\rcp-be-riot-messaging-service.dll
2017-09-21 22:43 - 2017-09-21 22:43 - 000673920 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-summoner\rcp-be-lol-summoner.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000571008 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-ranked-stats\rcp-be-lol-ranked-stats.dll
2017-09-21 22:43 - 2017-08-09 15:10 - 000495744 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-maps\rcp-be-lol-maps.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000632448 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-game-queues\rcp-be-lol-game-queues.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000539264 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-player-preferences\rcp-be-lol-player-preferences.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000625792 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-game-settings\rcp-be-lol-game-settings.dll
2017-09-21 22:43 - 2017-08-09 15:10 - 000582272 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-settings\rcp-be-lol-settings.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000787072 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-gameflow\rcp-be-lol-gameflow.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000483456 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-pre-end-of-game\rcp-be-lol-pre-end-of-game.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000566400 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-sanitizer\rcp-be-sanitizer.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000444544 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-riot-messaging-service\rcp-be-lol-riot-messaging-service.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000537216 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-acs\rcp-be-lol-acs.dll
2017-09-21 22:43 - 2017-07-15 19:11 - 000544896 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-player-notifications\rcp-be-player-notifications.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000496768 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-loyalty\rcp-be-lol-loyalty.dll
2017-09-21 22:43 - 2017-08-23 23:57 - 000899712 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-collections\rcp-be-lol-collections.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000690816 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-champions\rcp-be-lol-champions.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000496768 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-kr-shutdown-law\rcp-be-lol-kr-shutdown-law.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000569984 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-loadouts\rcp-be-lol-loadouts.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000903296 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-lobby-team-builder\rcp-be-lol-lobby-team-builder.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000580736 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-queue-eligibility\rcp-be-lol-queue-eligibility.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000690816 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-matchmaking\rcp-be-lol-matchmaking.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000518272 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-spectator\rcp-be-lol-spectator.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 001608832 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-chat\rcp-be-lol-chat.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 001467008 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-lobby\rcp-be-lol-lobby.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000776320 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-champ-select-legacy\rcp-be-lol-champ-select-legacy.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000577152 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-champ-select\rcp-be-lol-champ-select.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000493696 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-heartbeat\rcp-be-lol-heartbeat.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000518272 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-shutdown\rcp-be-lol-shutdown.dll
2017-09-21 22:43 - 2017-08-09 15:10 - 000920704 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-loot\rcp-be-lol-loot.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000472704 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-kickout\rcp-be-lol-kickout.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000477312 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-license-agreement\rcp-be-lol-license-agreement.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000479360 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-kr-playtime-reminder\rcp-be-lol-kr-playtime-reminder.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000492160 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-game-client-chat\rcp-be-lol-game-client-chat.dll
2017-09-21 22:43 - 2017-07-15 19:11 - 000536192 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-team-boosts\rcp-be-lol-team-boosts.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000723072 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-end-of-game\rcp-be-lol-end-of-game.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000522368 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-active-boosts\rcp-be-lol-active-boosts.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000435328 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-parties\rcp-be-lol-parties.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000808576 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-leagues\rcp-be-lol-leagues.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000599168 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-pft\rcp-be-lol-pft.dll
2017-09-21 22:43 - 2017-08-09 15:10 - 000624256 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-player-behavior\rcp-be-lol-player-behavior.dll
2017-09-21 22:43 - 2017-08-23 23:57 - 000600704 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-suggested-players\rcp-be-lol-suggested-players.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000530560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-service-status\rcp-be-lol-service-status.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000558720 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-leaver-buster\rcp-be-lol-leaver-buster.dll
2017-09-21 22:43 - 2017-08-23 23:57 - 000662656 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-match-history\rcp-be-lol-match-history.dll
2017-09-21 22:43 - 2017-08-23 23:57 - 000715392 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-recofriender\rcp-be-recofriender.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000785536 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-clubs\rcp-be-lol-clubs.dll
2017-09-21 22:43 - 2017-07-29 21:53 - 000530560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-clubs-public\rcp-be-lol-clubs-public.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000577152 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-esport-stream-notifications\rcp-be-lol-esport-stream-notifications.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000690816 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-replays\rcp-be-lol-replays.dll
2017-09-21 22:43 - 2017-08-23 23:57 - 000738944 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-store\rcp-be-lol-store.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000504960 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-player-level-up\rcp-be-lol-player-level-up.dll
2017-09-21 22:43 - 2017-07-15 19:11 - 000487040 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-tencent-qt\rcp-be-lol-tencent-qt.dll
2017-09-21 22:43 - 2017-08-23 23:57 - 000526976 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-beta-opt-in\rcp-be-lol-beta-opt-in.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000546432 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-player-messaging\rcp-be-lol-player-messaging.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 000586368 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-personalized-offers\rcp-be-lol-personalized-offers.dll
2017-09-21 22:43 - 2017-07-15 19:11 - 000471680 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-user-experience\rcp-be-lol-user-experience.dll
2017-09-21 22:43 - 2017-07-29 21:54 - 000541824 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-simple-dialog-messages\rcp-be-lol-simple-dialog-messages.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000610944 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-highlights\rcp-be-lol-highlights.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000648832 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-honor-v2\rcp-be-lol-honor-v2.dll
2017-09-21 22:43 - 2017-07-15 19:11 - 000489088 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-network-testing\rcp-be-network-testing.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000539264 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-entitlements\rcp-be-entitlements.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000659584 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-missions\rcp-be-lol-missions.dll
2017-09-21 22:43 - 2017-09-14 23:10 - 000584832 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-item-sets\rcp-be-lol-item-sets.dll
2017-09-21 22:43 - 2017-07-15 19:10 - 000466560 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-las-toxicity\rcp-be-lol-las-toxicity.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000516224 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-geoinfo\rcp-be-lol-geoinfo.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 001090688 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-clash\rcp-be-lol-clash.dll
2017-09-21 22:43 - 2017-09-14 23:09 - 000486528 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\Plugins\rcp-be-lol-banners\rcp-be-lol-banners.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 055775872 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\libcef.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 001801344 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\libglesv2.dll
2017-09-21 22:43 - 2017-09-15 12:20 - 000022144 _____ () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.97\deploy\libegl.dll
2017-08-17 16:51 - 2017-08-17 16:51 - 001993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2017-09-23 22:13 - 2017-09-23 22:13 - 000016384 _____ () C:\Users\User\AppData\Local\Temp\nsa5232.tmp\Registry.dll
2017-08-14 18:05 - 2017-08-14 18:05 - 000073384 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2017-09-23 22:14 - 2017-09-23 22:14 - 000008704 _____ () C:\Users\User\AppData\Local\Temp\nsa5232.tmp\newadvsplash.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:05E9FFE5 [122]
AlternateDataStreams: C:\ProgramData\TEMP:373E1720 [126]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SecureAssist => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <==== ACHTUNG
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\Software\Classes\exefile: "%1" %* <==== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\aeriagames.com -> hxxps://aeriagames.com
IE trusted site: HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\...\aeriagames.com -> hxxp://aeriagames.com

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2017-08-04 23:53 - 000014417 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 plugpackdownload.net
127.0.0.1 dscdn.pw
127.0.0.1 wemsofts.com
127.0.0.1 bongadoom.com
127.0.0.1 wepcmainsystem.com
127.0.0.1 internalcampaigntargets.com
127.0.0.1 bongadoom.com
127.0.0.1 getthefilenow.com
127.0.0.1 bigpicturepop.com
127.0.0.1 wizzcaster.com
127.0.0.1 bestoffersfortoday.com
127.0.0.1 wepcmainsystem.com
127.0.0.1 agent.wizztrakys.com
127.0.0.1 csdimonetize.com
127.0.0.1 dl.azalee.site
127.0.0.1 titiaredh.com
127.0.0.1 wepcdisplaysystem.com
127.0.0.1 wepcanalyticsystem.com
127.0.0.1 healthydownload.com
127.0.0.1 leading2download.com
127.0.0.1 dwl0.wizzlabs.com
127.0.0.1 dwl1.wizzlabs.com
127.0.0.1 installpixel.com
127.0.0.1 burningcube.ru
127.0.0.1 mess1.wizzmonetize.com
127.0.0.1 dl.azalee.site
127.0.0.1 dl.smashdl.com
127.0.0.1 downloadmyhost.com
127.0.0.1 lapapahoster.com
127.0.0.1	gf.tools.avast.com

Da befinden sich 361 zusätzliche Einträge.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-2783078182-1204926350-1955954555-1003\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 82.163.143.176 - 82.163.142.178
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: ) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: hshld => 2
MSCONFIG\Services: HssTrayService => 3
MSCONFIG\Services: HssWd => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^cloudnet.lnk => C:\Windows\pss\cloudnet.lnk.Startup
MSCONFIG\startupreg: Avira SystrayStartTrigger => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
MSCONFIG\startupreg: ccleaner => "C:\Program Files\CCleaner\CCleaner64.exe" /AUTO
MSCONFIG\startupreg: cloudnet => "C:\Users\User\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe"
MSCONFIG\startupreg: f2M3JOK.exe => C:\ProgramData\1ce2ef437c454166932efa6c15d47683\f2M3JOK.exe 
MSCONFIG\startupreg: G0E4I3TRPNGZVBJ => "C:\Program Files\4QGAN98CFS\4QGAN98CF.exe"
MSCONFIG\startupreg: gplyra => C:\Users\User\AppData\Roaming\gplyra\gplyra.exe
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
MSCONFIG\startupreg: LManager => C:\Program Files (x86)\Launch Manager\LManager.exe
MSCONFIG\startupreg: msiql => C:\Users\User\AppData\Local\Temp\00025742\msiql.exe /RUNNING
MSCONFIG\startupreg: OMEWPRODUCT_1G1GL => "C:\Program Files (x86)\rm1qyecl0dh\CJ4S1CQNW2XDIPZ.exe"
MSCONFIG\startupreg: P81Y5XBLOQ04W3N => "C:\Program Files\T96K3B5QWZ\T96K3B5QW.exe"
MSCONFIG\startupreg: ProudNight => "C:\Users\User\AppData\Roaming\ProudNight\proudnight.exe" -startup
MSCONFIG\startupreg: SC7OZLU646QF900 => "C:\Program Files\LXB8JLADK3\LXB8JLADK.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: USER-PC => C:\Windows\Temp\gB999.tmp.exe
MSCONFIG\startupreg: ZIX3WK8XVSNBG1Z => "C:\Program Files\GLQXT3GWZS\H2VRKB2ZO.exe"
MSCONFIG\startupreg: zkjxvbeydi => explorer "hxxp://granena.ru/?utm_source=uoua03n&utm_content=e739009bccd5f1e6d71a91bff5994529&utm_term=D8FCEA74B404414E941AC587DBA1A4C5&utm_d=20160903"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{952A9F5A-17A3-4DBB-8EBE-B295F1868941}] => (Allow) C:\Windows\system32\rundll32.exe
FirewallRules: [TCP Query User{C4BB9345-9507-4797-B712-6473E19C662A}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{5DBC7CDF-E582-47E8-89E6-96364E35D965}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{2CABC255-F556-4FC7-9A54-F06BF774316A}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{F3EBCE9C-4BA6-4B7D-B41C-66E786F198AD}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{82C01C9C-D1E2-46A8-8BD7-90D5F8EC9667}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{1DD46EF8-490E-43AC-AF6C-9F85BAA621AB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{D61BA85E-0D75-4EC0-8233-E21D189737CF}] => (Allow) C:\Program Files\Opera\47.0.2631.71\opera.exe
FirewallRules: [{70422524-B49E-4273-A40A-456C1AED08B6}] => (Allow) C:\Program Files\Opera\47.0.2631.80\opera.exe
FirewallRules: [{5F7D8164-3ED5-41E4-914C-07CA5CD9864D}] => (Allow) C:\Windows\system32\rundll32.exe
FirewallRules: [{ACAC4355-EFAF-4C02-BCA9-6D29583DBA06}] => (Allow) LPort=8318
FirewallRules: [{A60B23F1-15DB-4648-8E35-804EE268218F}] => (Allow) C:\Windows\rss\csrss.exe
FirewallRules: [{C1363C68-E23C-4562-93F5-3981B7B44604}] => (Allow) C:\Users\User\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe
StandardProfile\AuthorizedApplications: [C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe] => Enabled:Windows Messanger
StandardProfile\AuthorizedApplications: [C:\Users\User\AppData\Roaming\DDos.exe] => Enabled:Windows Messanger
StandardProfile\AuthorizedApplications: [C:\Nexon\Combat Arms EU\CombatArms.exe] => :*Enabled:CombatArms.exe
StandardProfile\AuthorizedApplications: [C:\Nexon\Combat Arms EU\Engine.exe] => :*Enabled:Engine.exe

==================== Wiederherstellungspunkte =========================

04-07-2017 03:31:40 Windows Update
07-07-2017 15:24:59 Windows Update
12-07-2017 03:00:46 Windows Update
18-07-2017 03:17:36 Windows Update
25-07-2017 03:31:32 Geplanter Prüfpunkt
25-07-2017 03:51:37 Windows Update
26-07-2017 02:53:31 paint.net v4.0.17
27-07-2017 03:00:30 Windows Update
30-07-2017 00:19:37 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215
01-08-2017 03:52:52 Windows Update
01-08-2017 23:01:10 Entfernt Arc
02-08-2017 12:22:35 Removed Microsoft Silverlight
02-08-2017 12:39:53 Removed Microsoft Silverlight
02-08-2017 12:41:53 Removed Online Application
02-08-2017 12:43:43 Removed Online Application
07-08-2017 17:58:17 Removed Node.js
08-08-2017 01:56:52 Installed Intel(R) Manageability Engine Firmware Recovery Agent
08-08-2017 14:39:35 Installiert Qualcomm Atheros WiFi Driver Installation
08-08-2017 22:58:32 Windows Update
17-08-2017 20:55:09 Windows Update
17-08-2017 21:06:48 Windows Defender Checkpoint
22-08-2017 05:22:48 Windows Update
25-08-2017 03:44:42 Installed Oracle VM VirtualBox 5.1.26
25-08-2017 04:00:21 Installed LogMeIn Hamachi
25-08-2017 13:52:03 Removed WinZip 21.0
25-08-2017 13:59:00 Installed PuTTY release 0.70 (64-bit)
25-08-2017 13:59:42 Installed PuTTY release 0.70 (64-bit)
25-08-2017 16:14:25 Windows Update
03-09-2017 21:13:09 Windows Update
08-09-2017 02:28:57 Windows Update
12-09-2017 05:09:05 Windows Update
13-09-2017 03:00:22 Windows Update
15-09-2017 21:24:11 Camtasia 9
17-09-2017 20:21:37 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
18-09-2017 03:00:15 Windows Update
19-09-2017 03:00:18 Windows Update
23-09-2017 11:31:53 15.05.2017

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: ucdrv
Description: ucdrv
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: ucdrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/23/2017 11:41:33 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Während der Installation ist ein Fehler aufgetreten. Starten Sie die Reparatur.

Error: (09/23/2017 11:39:25 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Während der Installation ist ein Fehler aufgetreten. Starten Sie die Reparatur.

Error: (09/23/2017 11:39:08 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Während der Installation ist ein Fehler aufgetreten. Starten Sie die Reparatur.

Error: (09/23/2017 11:38:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/23/2017 11:12:07 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Während der Installation ist ein Fehler aufgetreten. Starten Sie die Reparatur.

Error: (09/23/2017 11:10:26 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Während der Installation ist ein Fehler aufgetreten. Starten Sie die Reparatur.

Error: (09/23/2017 11:09:48 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Während der Installation ist ein Fehler aufgetreten. Starten Sie die Reparatur.

Error: (09/23/2017 11:09:47 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/23/2017 10:58:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: EXPLORERFRAME.dll, Version: 6.1.7601.23893, Zeitstempel: 0x599313fc
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000307ca
ID des fehlerhaften Prozesses: 0x74c
Startzeit der fehlerhaften Anwendung: 0x01d334494bbf8842
Pfad der fehlerhaften Anwendung: C:\Windows\Explorer.EXE
Pfad des fehlerhaften Moduls: C:\Windows\system32\EXPLORERFRAME.dll
Berichtskennung: 6d0b3dd5-a03d-11e7-a2fb-20898473e532

Error: (09/23/2017 10:56:15 AM) (Source: Avira Service Host) (EventID: 0) (User: )
Description: Während der Installation ist ein Fehler aufgetreten. Starten Sie die Reparatur.


Systemfehler:
=============
Error: (09/23/2017 11:41:36 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (09/23/2017 11:39:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/23/2017 11:39:15 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
ucdrv

Error: (09/23/2017 11:39:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/23/2017 11:37:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Adobe Genuine Software Integrity Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (09/23/2017 11:37:47 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AdobeUpdateService" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (09/23/2017 11:36:13 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/23/2017 11:12:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (09/23/2017 11:11:53 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/23/2017 11:11:53 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: )
Description: Dienst "WMPNetworkSvc" konnte nicht ordnungsgemäß gestartet werden, da ein Fehler "0x80004005" in "CoCreateInstance(CLSID_UPnPDeviceFinder)" aufgetreten ist. Überprüfen Sie, ob der Dienst "UPnPHost" ausgeführt wird und ob die Windows-Komponente "UPnPHost" richtig installiert ist.


CodeIntegrity:
===================================
  Date: 2017-09-23 11:41:33.541
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\Winmon.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2017-09-23 11:41:33.409
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\Winmon.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-09-03 15:46:44.257
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-09-03 15:46:44.162
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-09-03 15:46:38.982
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-09-03 15:45:27.146
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-09-03 15:45:27.051
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-09-03 15:45:26.148
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-09-03 15:45:26.050
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-09-03 15:45:15.802
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Celeron(R) CPU 1005M @ 1.90GHz
Prozentuale Nutzung des RAM: 78%
Installierter physikalischer RAM: 3914.36 MB
Verfügbarer physikalischer RAM: 845.95 MB
Summe virtueller Speicher: 7826.89 MB
Verfügbarer virtueller Speicher: 2997.06 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:465.72 GB) (Free:153.33 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: E82F3DEF)
Partition 1: (Active) - (Size=40 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

@Cosinus, ich habe die FRST ausversehn zwei mal geschickt tut mir leid.

Gruß,
DasTutWeh

cosinus · 24.09.2017, 12:26

Da muss erstmal Schrott runter, tw. extrem veraltet:

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Adobe Reader X (10.1.11) - Deutsch

Avira Connect

CCleaner

Java 7 Update 60

Java 8 Update 101 (64-bit)

Java 8 Update 66

Java SE Development Kit 8 Update 101 (64-bit)

Java(TM) 6 Update 25

WinZip 21.5
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

DasTutWeh · 24.09.2017, 13:31

Erledigt! Was nun?

cosinus · 24.09.2017, 16:42

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

DasTutWeh · 25.09.2017, 14:19

1 MBAR-LOG / 22:01Uhr /24.09.17

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2014.11.18.05
  rootkit: v2014.11.12.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18792
User :: USER-PC [administrator]

24.09.2017 22:01:58
mbar-log-2017-09-24 (22-01-58).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 0
Time elapsed: 2 minute(s), 15 second(s) [aborted]

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

2 MBAR-LOG / 22:31Uhr /24.09.17

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2014.11.18.05
  rootkit: v2014.11.12.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18792
User :: USER-PC [administrator]

24.09.2017 22:31:08
mbar-log-2017-09-24 (22-31-08).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 408446
Time elapsed: 38 minute(s), 20 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\VB AND VBA PROGRAM SETTINGS\SrvID (Malware.Trace) -> Delete on reboot. [a796c9741d5f6acc8fa1f8f6798a8779]

Registry Values Detected: 1
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|ProudNight (Trojan.Agent) -> Data: "C:\Windows\rss\csrss.exe" -> Delete on reboot. [62dbe9543745ea4cb9c5296513f0669a]

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 1
C:\ProgramData\56757186 (Rogue.Multiple) -> Delete on reboot. [cc7147f696e685b154e740b738ca6c94]

Files Detected: 2
C:\Windows\rss\csrss.exe (Trojan.Agent) -> Delete on reboot. [62dbe9543745ea4cb9c5296513f0669a]
C:\ProgramData\56757186\65944c82.dll (Rogue.Multiple) -> Delete on reboot. [cc7147f696e685b154e740b738ca6c94]

Physical Sectors Detected: 0
(No malicious items detected)

(end)

3 MBAR-LOG / 23:43Uhr /24.09.17

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2014.11.18.05
  rootkit: v2014.11.12.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18792
User :: USER-PC [administrator]

24.09.2017 23:43:57
mbar-log-2017-09-24 (23-43-57).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 408586
Time elapsed: 35 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Das sind die Logs mit Datum und Uhrzeit mit der richtigen Reihenfolge von oben nach Unten, was nun? @cosinus

cosinus · 25.09.2017, 14:36

Zitat:

Database version:
main: v2014.11.18.05
rootkit: v2014.11.12.01

Anleitung mal richtig lesen und umsetzen?

DasTutWeh · 25.09.2017, 17:18

MBAR-LOG (Datenbank Updated)

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2017.09.25.03
  rootkit: v2017.09.13.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18792
User :: USER-PC [administrator]

25.09.2017 16:06:25
mbar-log-2017-09-25 (16-06-25).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 371516
Time elapsed: 1 hour(s), 38 minute(s), 32 second(s)

Memory Processes Detected: 7
C:\Users\User\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe (Trojan.BitCoinMiner) -> 4564 -> Delete on reboot. [41561f99cbdeb87e29ecc30f05fc9070]
C:\Windows\rss\csrss.exe (Adware.Agent) -> 5824 -> Delete on reboot. [3d5a9325e0c980b6322eeaf816eb5fa1]
C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}\4C44C175-FBEF-76DE-A2EC-D8B530283C4E.exe (Adware.Agent.Generic) -> 5052 -> Delete on reboot. [395eefc983266cca0350e057d32d03fd]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\c3d8233c239a6acfccde5b9075837ab7.exe (Adware.Social2Search.EncJob) -> 1872 -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\ProgramData\Logic Cramble\set.exe (Adware.Linkury) -> 1316 -> Delete on reboot. [2d6ad7e1a108fa3c1aad94aaf50c05fb]
C:\ProgramData\PrefsSecure\Nettrans.exe (Adware.Linkury) -> 2364 -> Delete on reboot. [edaa78400a9ff541a3ff40b94ab6817f]
C:\Windows\windefender.exe (Trojan.Agent) -> 3040 -> Delete on reboot. [158201b78722072fda023d4a1ae6956b]

Memory Modules Detected: 3
C:\Users\User\AppData\Local\AdService\AdService.dll (Trojan.PasswordStealer) -> Delete on reboot. [6433eeca31787cba4956807cd828b34d]
C:\Program Files (x86)\YkUBYysd0K\kl.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\ProgramData\Logic Cramble\X86\SQLite.Interop.dll (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]

Registry Keys Detected: 137
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\199c1701639c1797e1a15ec841c03dcd (Adware.Wajam.Generic) -> Delete on reboot. [63344276793031059a6fc287728e659b]
HKLM\SOFTWARE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E7BF74EE-9106-4113-B216-2F980BA29141} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect.1 (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\DPBHO.DownloadProtect (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\DPBHO.DownloadProtect (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\DPBHO.DownloadProtect.1 (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\DPBHO.DownloadProtect.1 (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73} (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}\INPROCSERVER32 (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
HKLM\SOFTWARE\CLASSES\CLSID\{5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} (Adware.Elex.SHHKRST) -> Delete on reboot. [b2e512a65e4ba393e93e144a58a8fe02]
HKLM\SOFTWARE\CLASSES\CLSID\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} (Adware.NeoBar) -> Delete on reboot. [781fb0084762bc7a7ac07d5ddd24fb05]
HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} (Adware.NeoBar) -> Delete on reboot. [781fb0084762bc7a7ac07d5ddd24fb05]
HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} (Adware.NeoBar) -> Delete on reboot. [781fb0084762bc7a7ac07d5ddd24fb05]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C0D38E5A-7CF8-4105-8FE8-31B81443A114} (Adware.NeoBar) -> Delete on reboot. [781fb0084762bc7a7ac07d5ddd24fb05]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\OtherSearch (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
HKLM\SOFTWARE\CLASSES\CLSID\{5F51FFFE-7463-4220-B711-E5B9ACB8EDFE}\INPROCSERVER32 (Trojan.BitCoinMiner) -> Delete on reboot. [8413af091495d75f4a6ef5aa8878ce32]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Lace514 (Rootkit.Komodia.PUA) -> Delete on reboot. [9cfb09aff0b95cda1bd6940af60b17e9]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\01f8a84096caddd3c79baeadd404dcdf (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
HKLM\SOFTWARE\SrcAAAesom Browser Enhancer (Adware.SearchAwesome) -> Delete on reboot. [fc9bebcd5d4cd75f13d919c00bf5946c]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\03D22C9C66915D58C88912B64C1F984B8344EF09 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [a9ee2692218864d297f76b7d4db431cf]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\0F684EC1163281085C6AF20528878103ACEFCAAB (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [b7e0e8d0e3c678be806941abf60bca36]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\1667908C9E22EFBD0590E088715CC74BE4C60884 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [fd9a2494f1b8211534bb28c011f0a759]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\18DEA4EFA93B06AE997D234411F3FD72A677EECE (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [5f3897213f6ab482f08cf9f1c43d56aa]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [f7a0982008a12b0bc0794d9d966b5ba5]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\249BDA38A611CD746A132FA2AF995A2D3C941264 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [67304a6e921713239660d21817ea2fd1]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [8413af09acfd77bfa022945820e105fb]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [fc9bbafed4d51e18e32c39b3d32e827e]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3353EA609334A9F23A701B9159E30CB6C22D4C59 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [9afd9f19951489ad69784c9b4bb6867a]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [088f7840bced80b69c1623c7d32ebd43]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [2a6d3d7bbfea3204250f2dbf15ec9868]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3D496FA682E65FC122351EC29B55AB94F3BB03FC (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [8c0b8038f1b8a6906adac725e918619f]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [bcdbdbdd69403bfb9eef21c71de45ba5]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [f89f6d4b8a1ff83ebb52c3290100768a]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [e6b14870a108f541047116d57190c63a]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [20776f49b4f5b185c78dda0fdf22d828]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [3f58764284253402ad2ea446a55c7d83]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\5DD3D41810F28B2A13E9A004E6412061E28FA48D (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [187fa513f1b838fe8f09b83341c003fd]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\7457A3793086DBB58B3858D6476889E3311E550E (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [52458731faaf9e982f3cdb100af751af]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [6631c2f6278242f4700bca20b05149b7]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\775B373B33B9D15B58BC02B184704332B97C3CAF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [e6b1d9df4a5f86b0ca511bd2df226d93]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [4a4d3484aaff5cda850d79717889df21]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\88AD5DFE24126872B33175D1778687B642323ACF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [3760c0f8b6f3e05644872cbe46bb6997]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9132E8B079D080E01D52631690BE18EBC2347C1E (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [851227917534d660e9af1ece57aac43c]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [7c1b199f06a3ef476f06519b43be6b95]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [d8bf9c1c1990ca6c6bcd2fbbfc05867a]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9C43F665E690AB4D486D4717B456C5554D4BCEB5 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [26716a4eb5f472c44e49d91238c96997]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [99fe78404267df57130e08e30cf56c94]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [5c3ba414f1b85cda297fdf0d7d8434cc]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\A5341949ABE1407DD7BF7DFE75460D9608FBC309 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [03946c4c3f6adb5b140e9d4e57aae31d]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\A59CC32724DD07A6FC33F7806945481A2D13CA2F (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [286fb60290198aac2c34d3191de407f9]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [cccb199f1297b2843df85695778af40c]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\AD4C5429E10F4FF6C01840C20ABA344D7401209F (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [3e59a513decbe5512c3530bc0ff2da26]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\AD96BB64BA36379D2E354660780C2067B81DA2E0 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [5047dade555492a459683cb02dd4ce32]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [4750c5f35b4e2f0728db44a944bd02fe]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\CDC37C22FE9272D8F2610206AD397A45040326B8 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [4b4c47717b2efc3a670d05e6ec152dd3]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [3b5c09af1d8c2a0ce9c6bd2e21e0c040]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [7f18fbbdcadf82b4b61e64883fc22ad6]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\DB77E5CFEC34459146748B667C97B185619251BA (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [6136ebcd8f1af83ea8a602e8976a5fa1]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\E22240E837B52E691C71DF248F12D27F96441C00 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [afe86058f7b2092d798ffaf05aa7857b]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [682ff2c60a9ff343f5fb46a027da7f81]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\ED841A61C0F76025598421BC1B00E24189E68D54 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [21762395bceddd599f067376639ec63a]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\F83099622B4A9F72CB5081F742164AD1B8D048C9 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [16816a4e60490c2a9e3df6f51be6f60a]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [5c3bb5033d6c5ed83ed0cf1dab56fc04]
HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [2a6d4c6cfeabd264b6e3707b24dd669a]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{22E7D1E9-C8D2-4C78-AEE1-4340EF03DD20} (Adware.DNSUnlocker) -> Delete on reboot. [adea93256a3fe254b3f078f2a45ce719]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\DNSLOCKINGTON (Adware.DNSUnlocker) -> Delete on reboot. [deb92f8930795ed89f8e2c3c0af67789]
HKLM\SOFTWARE\WOW6432NODE\jawego (Adware.Jawego) -> Delete on reboot. [7f18e3d52a7fd75fa5996ff8c33e44bc]
HKLM\SOFTWARE\WOW6432NODE\SrcAAAesom Browser Enhancer (Adware.SearchAwesome) -> Delete on reboot. [395ed6e2614881b548a47b5e0cf4af51]
HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\iinglghmhcgdgjjlafobajghjamdchik (RiskWare.Extension.NFCS) -> Delete on reboot. [deb99e1aefbad363e5a62bacc938dc24]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\03D22C9C66915D58C88912B64C1F984B8344EF09 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [2d6a991f5f4a9a9cfa94faee53aec23e]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\0F684EC1163281085C6AF20528878103ACEFCAAB (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [f6a11b9d416850e6c7229c50738eff01]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\1667908C9E22EFBD0590E088715CC74BE4C60884 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [593e05b3a50440f67877eff9e71af907]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\18DEA4EFA93B06AE997D234411F3FD72A677EECE (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [23742890c5e423135b2123c72dd449b7]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [a2f5d4e44b5e82b4221786649a6712ee]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\249BDA38A611CD746A132FA2AF995A2D3C941264 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [4354c2f603a6d75f876f22c8ac557987]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [76217d3b42673006358dbb31a65be917]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [b2e562569a0ffe38858a0fdd0001847c]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3353EA609334A9F23A701B9159E30CB6C22D4C59 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [3661ac0c901970c6eff200e737cae61a]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [f6a1d3e5e0c925115d55c6249c65ac54]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [b4e33a7e1d8ce0560a2ad41899689868]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\3D496FA682E65FC122351EC29B55AB94F3BB03FC (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [2176b20602a71e185aead616639e1fe1]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [c2d5378183260c2a0c81da0ec1406c94]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [86113187ddcc290daa63f8f4c63b8779]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [286f1f99d5d4c3733342ad3e6d943bc5]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [f89f3f79cedb0d2972e28069a85929d7]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [0e893484cddc68ce43986585946d5ba5]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\5DD3D41810F28B2A13E9A004E6412061E28FA48D (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [dbbc2b8d5d4cc86e99ff13d8db26f808]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\7457A3793086DBB58B3858D6476889E3311E550E (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [1582efc9cbdeb1854f1c48a3758c2bd5]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [4a4d5761e9c069cdc2b9579359a85fa1]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\775B373B33B9D15B58BC02B184704332B97C3CAF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [8b0cf0c8d5d436005cbf4ca1857cb848]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [41568038b2f7112551417476639e827e]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\88AD5DFE24126872B33175D1778687B642323ACF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [1c7b6652a108f244b61552980cf559a7]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9132E8B079D080E01D52631690BE18EBC2347C1E (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [2b6cf9bfbaeff93de7b14f9d8c7508f8]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [5d3a08b0654415213f36c02cb24fff01]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [a5f2823654558caa83b57674847df30d]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9C43F665E690AB4D486D4717B456C5554D4BCEB5 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [e1b6d8e0b9f0f0463f585a910af75ea2]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [cec9d7e17c2d76c0928feefdfa0712ee]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [4b4cfeba3d6ceb4b06a25894c73a46ba]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\A5341949ABE1407DD7BF7DFE75460D9608FBC309 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [692ebdfbbeeb58de3ae8f1fa10f14ab6]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\A59CC32724DD07A6FC33F7806945481A2D13CA2F (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [98ff9c1c436633038dd39d4fd22f59a7]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [3a5dc9efdecb5adc14214e9d47ba33cd]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\AD4C5429E10F4FF6C01840C20ABA344D7401209F (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [cccbd1e74d5c6ec875ec9755c53c8779]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\AD96BB64BA36379D2E354660780C2067B81DA2E0 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [7c1bc2f6c2e70432ba07b13b8c756c94]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [c2d5a5133e6b8fa7ce350ae304fd45bb]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\CDC37C22FE9272D8F2610206AD397A45040326B8 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [00976e4aa009af878ce8bb3061a09f61]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [ddba496f3e6b11250ea19952669b619f]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [abec04b41d8cde58dbf958941de4ac54]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\DB77E5CFEC34459146748B667C97B185619251BA (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [6f28f4c404a536004608f5f516ebb947]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\E22240E837B52E691C71DF248F12D27F96441C00 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [088f4a6ec6e3ca6ce91f48a2808113ed]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [cccbc5f3adfc2b0b5f912db904fd5ca4]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\ED841A61C0F76025598421BC1B00E24189E68D54 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [93045b5da1081a1c5a4b14d53cc57d83]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\F83099622B4A9F72CB5081F742164AD1B8D048C9 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [9601f2c64e5b91a514c77a71c53c39c7]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [583fcaee03a6dd5940ceb03c19e850b0]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\DISALLOWED\CERTIFICATES\FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Trojan.DisabledAVSecurityCerts) -> Delete on reboot. [bdda55632485e056d5c4f1fa07fabc44]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Plusdax_RASAPI32 (Adware.Linkury.ACMB1) -> Delete on reboot. [0295a018c9e069cdcdc42a36788950b0]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Plusdax_RASMANCS (Adware.Linkury.ACMB1) -> Delete on reboot. [3d5a9a1e159467cfd0c1a6ba28d9bb45]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\Plusdax.exe (Adware.Linkury.ACMB1) -> Delete on reboot. [1c7b7d3b8128300654fa6af6c53c6a96]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\11598763487076930564 (Adware.DNSUnlocker.ACMB2) -> Delete on reboot. [5344fcbc9b0ef541345ebf06d32dae52]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AdsService (Trojan.PasswordStealer) -> Delete on reboot. [aceb06b2208960d6777e44b9d52bd32d]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BACKLH (Adware.Linkury) -> Delete on reboot. [2d6ad7e1a108fa3c1aad94aaf50c05fb]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NETTRANS (Adware.Linkury) -> Delete on reboot. [edaa78400a9ff541a3ff40b94ab6817f]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINDEFENDER (Trojan.Agent) -> Delete on reboot. [158201b78722072fda023d4a1ae6956b]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\mtPlusdax (Adware.Linkury.ACMB1) -> Delete on reboot. [b9de10a87b2e2d09bbe6c39df30e32ce]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\BIGTIME (Adware.Tuto4PC) -> Delete on reboot. [5d3a41773e6ba492aa4a6245d52cf30d]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\119 (Adware.REOptimizer) -> Delete on reboot. [a9ee72468623d75f1c53dfc9847d6997]

Registry Values Detected: 12
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|CloudNet (Trojan.BitCoinMiner) -> Data: "C:\Users\User\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe" 31337 -> Delete on reboot. [41561f99cbdeb87e29ecc30f05fc9070]
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELLEXECUTEHOOKS\{5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} (Adware.Elex.SHHKRST) -> Data:  -> Delete on reboot. [871027913a6f3006a3846ef05ca4fc04]
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELLEXECUTEHOOKS|{5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} (Trojan.BitCoinMiner) -> Data:  -> Delete on reboot. [8413af091495d75f4a6ef5aa8878ce32]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{22E7D1E9-C8D2-4C78-AEE1-4340EF03DD20}|Path (Adware.DNSUnlocker) -> Data: \DNSLOCKINGTON -> Delete on reboot. [adea93256a3fe254b3f078f2a45ce719]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BACKLH|ImagePath (Adware.Linkury) -> Data: C:\ProgramData\Logic Cramble\set.exe -> Delete on reboot. [2d6ad7e1a108fa3c1aad94aaf50c05fb]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NETTRANS|ImagePath (Adware.Linkury) -> Data: C:\ProgramData\PrefsSecure\Nettrans.exe -> Delete on reboot. [edaa78400a9ff541a3ff40b94ab6817f]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{047B497F-8934-461B-929D-46BEA4597F10}|NameServer (Trojan.DNSChanger.ACMB2) -> Data: 82.163.143.176 82.163.142.178 -> Delete on reboot. [7e192d8b981189ade5acfdfc45bda15f]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{49F9229F-B5F5-405C-9271-A56BE420AC0B}|NameServer (Trojan.DNSChanger.ACMB2) -> Data: 82.163.143.176 82.163.142.178 -> Delete on reboot. [c1d63f7938718fa7efa20bee0ef451af]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\INTERFACES\{B08DA078-E002-4202-A2AC-5F21BC06420A}|NameServer (Trojan.DNSChanger.ACMB2) -> Data: 82.163.143.176 82.163.142.178 -> Delete on reboot. [4f488533b8f11224b2dfa6539171a25e]
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINDEFENDER|ImagePath (Trojan.Agent) -> Data: C:\Windows\windefender.exe -> Delete on reboot. [158201b78722072fda023d4a1ae6956b]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\BIGTIME|partner (Adware.Tuto4PC) -> Data: installcube -> Delete on reboot. [5d3a41773e6ba492aa4a6245d52cf30d]
HKU\S-1-5-21-2783078182-1204926350-1955954555-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\119|DisplayName (Adware.REOptimizer) -> Data: DragonBoost -> Delete on reboot. [a9ee72468623d75f1c53dfc9847d6997]

Registry Data Items Detected: 1
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|NameServer (Trojan.DNSChanger.ACMB2) -> Bad: (82.163.143.176 82.163.142.178) Good: (8.8.8.8) -> Replace on reboot. [187fe9cffdac03333196c15d04ffe11f]

Folders Detected: 17
C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E} (Adware.Agent.Generic) -> Delete on reboot. [395eefc983266cca0350e057d32d03fd]
C:\Program Files (x86)\YkUBYysd0K\SSL (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Windows\Installer\{D12C40DB-CD7D-4D86-9285-5E2FE23693E4} (Adware.AdPeak) -> Delete on reboot. [2a6d7c3c35741c1a55f877590df343bd]
C:\ProgramData\PrefsSecure (Adware.Linkury) -> Delete on reboot. [bdda10a8adfc85b12b30d02947b98080]
C:\ProgramData\Microleaves (Adware.OnlineIO) -> Delete on reboot. [6e2998207039f93daed1239422df17e9]
C:\ProgramData\Microleaves\Online Application (Adware.OnlineIO) -> Delete on reboot. [6e2998207039f93daed1239422df17e9]
C:\ProgramData\Microleaves\Online Application\updates (Adware.OnlineIO) -> Delete on reboot. [6e2998207039f93daed1239422df17e9]
C:\Users\User\AppData\Roaming\Microleaves (Adware.OnlineIO) -> Delete on reboot. [356205b30a9f979fcfb0aa0df60ba858]
C:\Users\User\AppData\Roaming\Microleaves\Online Application 2.6.0 (Adware.OnlineIO) -> Delete on reboot. [356205b30a9f979fcfb0aa0df60ba858]
C:\Users\User\AppData\Roaming\Microleaves\Online Application 2.6.0\install (Adware.OnlineIO) -> Delete on reboot. [356205b30a9f979fcfb0aa0df60ba858]
C:\Users\User\AppData\Roaming\Microleaves\Online Application 2.6.0\install\CFCBAA1 (Adware.OnlineIO) -> Delete on reboot. [356205b30a9f979fcfb0aa0df60ba858]
C:\ProgramData\Logic Cramble (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\X64 (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\X86 (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]

Files Detected: 102
C:\WINDOWS\SYSTEM32\drivers\Winmon.sys (Adware.Agent) -> Delete on reboot. [1dc9763edd29f9e5f36e728c4b17c0ab]
C:\Users\User\AppData\Local\AdService\AdService.dll (Trojan.PasswordStealer) -> Delete on reboot. [6433eeca31787cba4956807cd828b34d]
C:\Users\User\AppData\Roaming\EpicNet Inc\CloudNet\cloudnet.exe (Trojan.BitCoinMiner) -> Delete on reboot. [41561f99cbdeb87e29ecc30f05fc9070]
C:\Windows\rss\csrss.exe (Adware.Agent) -> Delete on reboot. [3d5a9325e0c980b6322eeaf816eb5fa1]
C:\Windows\System32\drivers\199c1701639c1797e1a15ec841c03dcd.sys (Adware.Wajam.Generic) -> Delete on reboot. [4afa1bbbe05c28f3034b03db4d593cc4]
C:\Program Files\{C068E1D2-6CD6-4AF2-AABF-827A8B1C0010}\{8E07AFE8-501E-467F-BE60-D56D353E2291}.bin (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
C:\Program Files (x86)\{5CA29C8C-A3C1-4BFB-9251-7F4E7B4C7DB0}\{5AB17B29-FFBC-4AEF-BC67-3C523A60FCEB}.bin (Adware.NETNS) -> Delete on reboot. [c5d2ae0a01a8d165a71f71ce52ae857b]
C:\Program Files (x86)\Google\Chrome\Application\winhttp.dll (Trojan.Agent) -> Delete on reboot. [296ef6c20a9f42f4d1f16a65eb16c53b]
C:\Program Files\0Q02FWWHB8\uninstaller.exe (Adware.Tuto4PC.Generic) -> Delete on reboot. [7b1cccec99100333c279981ffb06ca36]
C:\Program Files\4LFJD75V7J\uninstaller.exe (Adware.Tuto4PC.Generic) -> Delete on reboot. [30678335f7b26ccad863e2d52dd40af6]
C:\Program Files\8072UM58YR\uninstaller.exe (Adware.Tuto4PC.Generic) -> Delete on reboot. [6631d4e494158ea8ad8e783f20e126da]
C:\Program Files\Keyboard Trainer\Keyboard Trainer.dll (Trojan.Wdfload.TskLnk) -> Delete on reboot. [6a2d0badd9d09c9aae00369bce32d62a]
C:\Program Files\PremiumSoft\Navicat Premium Patch x64.exe (HackTool.FilePatch) -> Delete on reboot. [1285c7f14f5a3ef8ae457b97d82bf30d]
C:\Program Files\RKWR83FPJJ\uninstaller.exe (Adware.Tuto4PC.Generic) -> Delete on reboot. [36612f89cbde3204b487cceb629f7a86]
C:\Program Files (x86)\WeatherInspect\uninstaller.exe (Adware.Tuto4PC.Generic) -> Delete on reboot. [1e79aa0ebbee9f97ef4cedcac23ffa06]
C:\Program Files (x86)\BestCleanerW\uninstaller.exe (Adware.Tuto4PC.Generic) -> Delete on reboot. [27705266c1e8a096ba81c3f43fc2b848]
C:\Users\User\AppData\Local\Temp\is-HTI2E.tmp\7pxtBseGhI.dll (Adware.YoBrowser) -> Delete on reboot. [07906f49d7d2999d81f872a027daed13]
C:\Users\User\AppData\Local\Temp\csrss\cloudnet.exe (Trojan.BitCoinMiner) -> Delete on reboot. [a3f4eccc5257e3533adbc909ef12d32d]
C:\Users\User\AppData\Local\Temp\wz1104\Navicat_Premium 11.2(8).exe (Adware.InstallMonster) -> Delete on reboot. [9ef990287732dc5a0e741fb5c8390ff1]
C:\Users\User\AppData\Local\Temp\B533A0BE-3AC8-406A-84D9-14B32D8BE55F\s2s_install.exe (Adware.Wajam) -> Delete on reboot. [781f6c4cdccdbd7918dfec01e91824dc]
C:\Users\User\AppData\Local\Temp\618F27A0-3429-41D2-8DBC-A79E0A58C92A\Setup.exe (Trojan.PasswordStealer) -> Delete on reboot. [a3f4d6e26d3cec4aebcb547b58a9fd03]
C:\Users\User\AppData\Local\amtfat.dll (Trojan.ProxyAgent) -> Delete on reboot. [b4e39d1b13963ff70676fdd9857c7888]
C:\Users\User\AppData\Local\K-quadity.exe (Adware.Linkury) -> Delete on reboot. [46513f79bfea52e4578503b431d06b95]
C:\Users\User\AppData\Local\Microsoft\TaskPlay\caches.dat (Trojan.Agent) -> Delete on reboot. [6a2dd9df03a637ff73cfc222c73a1be5]
C:\Users\User\AppData\Local\SrvInetInfo\inetinfo.exe (Trojan.Agent.MSIL) -> Delete on reboot. [deb98f294e5b0036acf4c62fd22f3cc4]
C:\Windows\88c6c384abdf4e17f71b76946d2becfa.exe (Adware.Wajam) -> Delete on reboot. [26719721a40550e63d949e7e10f054ac]
C:\ProgramData\smp2.exe (Adware.SpeedBit) -> Delete on reboot. [1a7d3f791891310513e59d4c877a1de3]
C:\ProgramData\1ce2ef437c454166932efa6c15d47683\f2M3JOK.exe (Trojan.Agent.Generic) -> Delete on reboot. [f6a1e6d29a0fb284ebbd0d7a54ac49b7]
C:\ProgramData\WindowsErrorReporting\wvermgr.exe (Adware.Agent) -> Delete on reboot. [9ef9f5c32b7e12242dbbca0ca061f20e]
C:\Users\User\AppData\Roaming\1337\setupQW.exe (Trojan.Agent) -> Delete on reboot. [8f0810a892172412394617c057aabc44]
C:\Users\User\AppData\Roaming\xsyrky02c3p\zlalou30mpg.exe (Adware.Tuto4PC.Generic) -> Delete on reboot. [692e4375b9f0cc6a59dab103b8498878]
C:\Users\User\Desktop\Emre\Metin2\Zerlux2\Mac.dll (RiskWare.Agent.EY) -> Delete on reboot. [8d0a6f49109948ee33cf325a718f29d7]
C:\ProgramData\{94D9FD5E-2372-4AF5-6780-B0ED267E285E}\4C44C175-FBEF-76DE-A2EC-D8B530283C4E.exe (Adware.Agent.Generic) -> Delete on reboot. [395eefc983266cca0350e057d32d03fd]
C:\Windows\System32\Tasks\DNSLOCKINGTON (Adware.DNSUnlocker) -> Delete on reboot. [781fe1d7c7e2c86ed2d1f676fe02c13f]
C:\Windows\d4b81cfa58e82cb84e315f74c23947cc.ps1 (Adware.SearchAwesome.TskLnk) -> Delete on reboot. [cacd14a48623de5825554e258b7535cb]
C:\Program Files (x86)\YkUBYysd0K\SSL\OtherSearch Inc CA 2.cer (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\SSL\cert.db (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\SSL\x.db (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\SSL\xtls.db (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\SSL\xv.db (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\data.dt (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\dlog.txt (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\kl.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\kl.ecf (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\s.xml (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\slite.exe (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\uninstall.exe (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\upd.dt (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\updengine.exe (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\certutil.exe (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\mozcrt19.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\nspr4.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\nss3.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\plc4.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\plds4.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\smime3.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Program Files (x86)\YkUBYysd0K\nss\softokn3.dll (Adware.OtherSearch.TSKRST) -> Delete on reboot. [484f2692753478be2e41dba9d52b3ac6]
C:\Windows\C_KE763.dat (Trojan.BitCoinMiner) -> Delete on reboot. [8413af091495d75f4a6ef5aa8878ce32]
C:\Users\User\AppData\Local\po.db (Adware.Linkury.Generic) -> Delete on reboot. [a4f3a018faaf79bd39eb8ab7ac5529d7]
C:\Windows\System32\drivers\Lace_wpf_x64.sys (Rootkit.Komodia.PUA) -> Delete on reboot. [1ab8b8d39eca168f8bbfc8c731ceda65]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\WBE_uninstall.dat (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\43dc6ce553a9a9dea27178cf3c348355 (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\6138fe36c338ad882aece49760c6cb4a (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\88c6c384abdf4e17f71b76946d2becfa.exe (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\94852351b5115a47a36df9885411bf93 (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\c0c306c60f48db686cf3996fb65aee35.ico (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\c3d8233c239a6acfccde5b9075837ab7.exe (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\c3d8233c239a6acfccde5b9075837ab7__0127B23C__C0000005.dmp (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\edb7f8fbb7ee1a16dbc5aa21afc295dc.exe (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\mozcrt19.dll (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\nspr4.dll (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\nss3.dll (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\plc4.dll (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\plds4.dll (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\service.dat (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\service_64.dat (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Program Files\01f8a84096caddd3c79baeadd404dcdf\softokn3.dll (Adware.Social2Search.EncJob) -> Delete on reboot. [a9eee5d3d5d4a4924c28544dbd449769]
C:\Users\User\AppData\Local\agent.dat (Adware.Linkury.Generic) -> Delete on reboot. [4057d0e8adfc47efb5bc01b79e63659b]
C:\Users\User\AppData\Local\K-quadity.tst (Adware.Linkury.Generic) -> Delete on reboot. [95028d2b3b6eb97d5fba9a1fd32e926e]
C:\Users\User\AppData\Local\md.xml (Adware.Linkury.Generic) -> Delete on reboot. [bbdc71478029a6908bc69c1d748d2ed2]
C:\Users\User\AppData\Local\uninstall_temp.ico (Adware.Linkury.Generic) -> Delete on reboot. [abec724606a3ad89aebd477243beda26]
C:\Windows\System32\drivers\wfcre.sys (PUP.Optional.ChinAd) -> Delete on reboot. [1b1cb3762441b731261c898d80a5996b]
C:\Users\Pylx\AppData\Local\Microsoft\TaskPlay\caches.dat (Adware.Agent) -> Delete on reboot. [bbdc4b6d941572c40a66a341a8597888]
C:\Users\Pylx\AppData\Local\Microsoft\TaskPlay\index.dat (Adware.Agent) -> Delete on reboot. [f89f35837b2e94a2274901e369984ab6]
C:\Users\Pylx\AppData\Local\Microsoft\TaskPlay\index64.dat (Adware.Agent) -> Delete on reboot. [5e399e1ac7e2f0463a36d90b827f38c8]
C:\Users\User\AppData\Local\Microsoft\TaskPlay\index.dat (Adware.Agent) -> Delete on reboot. [8413dcdca603191d2050db09f30e16ea]
C:\Users\User\AppData\Local\Microsoft\TaskPlay\index64.dat (Adware.Agent) -> Delete on reboot. [8e094e6a48617cba9cd45b89669b44bc]
C:\ProgramData\Logic Cramble\set.exe (Adware.Linkury) -> Delete on reboot. [2d6ad7e1a108fa3c1aad94aaf50c05fb]
C:\ProgramData\PrefsSecure\Nettrans.exe (Adware.Linkury) -> Delete on reboot. [edaa78400a9ff541a3ff40b94ab6817f]
C:\Windows\windefender.exe (Trojan.Agent) -> Delete on reboot. [158201b78722072fda023d4a1ae6956b]
C:\Windows\Installer\{D12C40DB-CD7D-4D86-9285-5E2FE23693E4}\icon64.ico (Adware.AdPeak) -> Delete on reboot. [2a6d7c3c35741c1a55f877590df343bd]
C:\ProgramData\PrefsSecure\Nettrans.exe.config (Adware.Linkury) -> Delete on reboot. [bdda10a8adfc85b12b30d02947b98080]
C:\ProgramData\PrefsSecure\prefs.xml (Adware.Linkury) -> Delete on reboot. [bdda10a8adfc85b12b30d02947b98080]
C:\Users\User\AppData\Roaming\Microleaves\Online Application 2.6.0\install\CFCBAA1\Basic Installer with memory detection Amonetize.msi (Adware.OnlineIO) -> Delete on reboot. [356205b30a9f979fcfb0aa0df60ba858]
C:\ProgramData\Logic Cramble\Config.json (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\set.exe.config (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\System.Data.SQLite.dll (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\System.Data.SQLite.Linq.dll (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\System.Data.SQLite.xml (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\X64\SQLite.Interop.dll (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\ProgramData\Logic Cramble\X86\SQLite.Interop.dll (Adware.Linkury) -> Delete on reboot. [8a0d3e7abaefd660cacb8f459b660ff1]
C:\Users\User\AppData\Local\Config.xml (Adware.Linkury.Generic) -> Delete on reboot. [732432866643dd5950cbbdfca9589b65]

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Was nun?

cosinus · 25.09.2017, 18:55

Zitat:

Was nun?

Was steht denn in der Anleitung von MBAR?

DasTutWeh · 25.09.2017, 22:09

Ich bin zu dumm, Ich habe doch wie in der Anleitung das Programm installiert darauf hin gestartet Updated danach gescant und darauf hin dir die aktuelle LOG-Datei geschickt davor CleanUp 2x.
@cosinus (Spiel mit mir nicht rum bist Pösse

)

cosinus · 25.09.2017, 22:23

Du sollst solange scannen bis es keine Funde mehr gibt.

DasTutWeh · 25.09.2017, 22:27

Ok und dann?

25.09.2017, 22:23	#14
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Antivirus-Programme werden blockiert beim Downloaden & PC wurde langsamer. Du sollst solange scannen bis es keine Funde mehr gibt. __________________ Logfiles bitte immer in CODE-Tags posten

Antivirus-Programme werden blockiert beim Downloaden & PC wurde langsamer.

Plagegeister aller Art und deren Bekämpfung: Antivirus-Programme werden blockiert beim Downloaden & PC wurde langsamer.