Windows 10 volle Auslastung (CPU und Festplatte)

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 11.11.2018
durchgeführt von User (Administrator) auf USER-PC (13-11-2018 13:38:20)
Gestartet von E:\Users\User\Downloads
Geladene Profile: User (Verfügbare Profile: User)
Platform: Windows 10 Pro Version 1803 17134.345 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER2012\MSSQL\Binn\sqlservr.exe
(The OpenVPN Project) D:\Program Files\OpenVPN\bin\openvpnserv.exe
(Palo Alto Networks) D:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\TimeMgmtDaemon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(TeamViewer GmbH) D:\Programme\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Apache Software Foundation) E:\wamp64\bin\apache\apache2.4.27\bin\httpd.exe
() E:\wamp64\bin\mysql\mysql5.7.19\bin\mysqld.exe
(Intel Corporation) D:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Apache Software Foundation) E:\wamp64\bin\apache\apache2.4.27\bin\httpd.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fsorsp64.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fshoster64.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fsulprothoster.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Gigabyte Technology CO., LTD.) C:\Program Files (x86)\Gigabyte\Smart TimeLock\AlarmClock.exe
(TeamViewer GmbH) D:\Programme\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) D:\Programme\TeamViewer\tv_w32.exe
(TeamViewer GmbH) D:\Programme\TeamViewer\tv_x64.exe
(F-Secure Corporation) C:\Program Files (x86)\F-Secure\fshoster32.exe
() C:\Program Files (x86)\Gigabyte\AppCenter\ApCent.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Palo Alto Networks) D:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe
() D:\Program Files (x86)\eXtra Buttons\xb.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
() D:\Program Files\OpenVPN\bin\openvpn-gui.exe
(Mozilla Corporation) D:\Programme\Mozilla Thunderbird\thunderbird.exe
(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
() D:\Program Files (x86)\SpeedFan\speedfan.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe
(Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSATray.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\Plugins\WD Sync\App\WDSyncService.exe
(Aestan Software) E:\wamp64\wampmanager.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) D:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.16610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Oracle Corporation) D:\Program Files\NetBeans 8.2\bin\netbeans64.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
() C:\Program Files\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\OneDrive\18.172.0826.0010\FileCoAuth.exe
(Emsisoft Ltd) C:\EEK\bin64\a2emergencykit.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [GlobalProtect] => D:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe [2475848 2017-05-18] (Palo Alto Networks)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9228800 2017-06-29] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => D:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321096 2017-06-20] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1174816 2015-02-25] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-23] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21888 2017-10-04] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5564784 2015-02-12] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [126712 2018-09-26] (Intel)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe [8192 2013-04-29] ()
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\Run: [RoboForm] => D:\Programme\Roboform\RoboTaskBarIcon.exe [111320 2014-09-29] (Siber Systems)
HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\Run: [eXtra Buttons] => D:\Program Files (x86)\eXtra Buttons\xb.exe [2800128 2013-07-08] ()
HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\Run: [CCleaner Monitoring] => D:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-10] (Piriform Ltd)
HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46459080 2018-10-04] ()
HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\Run: [OpenVPN-GUI] => d:\Program Files\OpenVPN\bin\openvpn-gui.exe [665216 2018-03-01] ()
HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [49803328 2018-09-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\MountPoints2: {0ba56afa-a5e4-11e8-89cb-74d435f898e1} - "H:\HiSuiteDownLoader.exe" 
IFEO\Hello.cs: [VerifierDlls] vrfcore.dll vfbasics.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Biet-O-Matic.lnk [2016-11-18]
ShortcutTarget: Biet-O-Matic.lnk -> D:\Program Files (x86)\Biet-O-Matic\Biet-O-Matic.exe (www.bid-o-matic.org)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleDriveMarseo.vbs [2018-03-23] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleDrivePrivat.vbs [2018-03-23] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Thunderbird.lnk [2016-11-18]
ShortcutTarget: Mozilla Thunderbird.lnk -> D:\Programme\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.bat [2016-10-26] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\StartControlBackups.vbs [2017-10-18] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wampserver64.vbs [2017-10-18] ()
GroupPolicy: Beschränkung ? <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: 127.0.0.1	localhost
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{e4f29a6d-0bd3-4ba2-b1de-9ff4f6a24855}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1828759274-4149907929-1054847307-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.de/search?q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2018-02-13] (Microsoft Corporation)
BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\F-Secure\apps\Ultralight\nif\1537173264\browser\install\fs_ie_https\fs_ie_https64.dll [2018-09-17] (F-Secure Corporation)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> D:\Programme\Roboform\RoboForm-x64.dll [2014-09-29] (Siber Systems Inc.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2018-03-13] (Microsoft Corporation)
BHO-x32: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\F-Secure\apps\Ultralight\nif\1537173264\browser\install\fs_ie_https\fs_ie_https.dll [2018-09-17] (F-Secure Corporation)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> D:\Programme\Roboform\roboform.dll [2014-09-29] (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-06-13] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-13] (Oracle Corporation)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Programme\Roboform\RoboForm-x64.dll [2014-09-29] (Siber Systems Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Toolbar: HKLM-x32 - Zend Studio - {95188727-288F-4581-A48D-EAB3BD027314} - D:\Programme\Zend\ZendStudio-5.5.0\bin\ZendIEToolbar.dll [2006-11-29] ()
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - D:\Programme\Roboform\roboform.dll [2014-09-29] (Siber Systems Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Toolbar: HKU\S-1-5-21-1828759274-4149907929-1054847307-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-27] (Google Inc.)
Toolbar: HKU\S-1-5-21-1828759274-4149907929-1054847307-1000 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - D:\Programme\Roboform\RoboForm-x64.dll [2014-09-29] (Siber Systems Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Pencil\Profiles\4zswzllr.default [2014-12-27]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\djio55am.default-1480781014500 [2018-11-13]
FF Homepage: Mozilla\Firefox\Profiles\djio55am.default-1480781014500 -> hxxp://www.google.de/
FF Extension: (Telemetry coverage) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\djio55am.default-1480781014500\features\{893fc12e-ecab-44a5-b837-b4a0ccbe67a1}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-10-23] [Legacy]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\djio55am.default-1480781014500\searchplugins\Google_1.xml [2017-10-16]
FF HKLM\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files (x86)\F-Secure\apps\Ultralight\nif\1537173264\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF Extension: (Browsing Protection by F-Secure) - C:\Program Files (x86)\F-Secure\apps\Ultralight\nif\1537173264\browser\install\fs_firefox_https\fs_firefox_https.xpi [2018-09-17]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - D:\Programme\Roboform\Firefox
FF Extension: (RoboForm Toolbar for Firefox) - D:\Programme\Roboform\Firefox [2016-10-18] [Legacy] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [ols@f-secure.com] - C:\Program Files (x86)\F-Secure\apps\Ultralight\nif\1537173264\browser\install\fs_firefox_https\fs_firefox_https.xpi
FF HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - D:\Programme\Roboform\Firefox
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_31_0_0_122.dll [2018-10-10] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_122.dll [2018-10-10] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-13] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-10-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation)
FF Plugin-x32: @siber.com/RoboForm -> D:\Programme\Roboform\chrome\plugin\np-rf-plugin.dll [2014-09-29] (Siber Systems Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)
StartMenuInternet: FIREFOX.EXE - D:\Programme\Firefox\firefox.exe

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2018-11-13]
CHR Extension: (Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Always on Top) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\amclpcgcmdkdaichklckjepcjjdcmcii [2018-05-01]
CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-18]
CHR Extension: (ColorZilla) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2017-12-04]
CHR Extension: (Tab Resize - split screen layouts) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkpenclhmiealbebdopglffmfdiilejc [2017-09-27]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-02]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2015-12-24]
CHR Extension: (Adblock Plus) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-10-31]
CHR Extension: (Google-Suche) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Bad Pixel Test) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddnfendahkppjmoaalbpfgnmkihfjlbi [2015-08-04]
CHR Extension: (Add to Wunderlist) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmnddeddcgdllibmaodanoonljfdmooc [2017-01-09]
CHR Extension: (Adobe Acrobat) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-06]
CHR Extension: (Full Page Screen Capture) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2018-09-16]
CHR Extension: (Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (User-Agent Switcher for Google Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffhkkpnppgnfaobgihpdblnhmmbodake [2018-06-07]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-18]
CHR Extension: (Eye Dropper) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmdcmlfkchdmnmnmheododdhjedfccka [2017-09-11]
CHR Extension: (WAVE Evaluation Tool) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbbplnpkjmmeebjpijfedlgcdilocofh [2018-06-20]
CHR Extension: (Page Ruler) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlpkojjdgbllmedoapgfodplfhcbnbpn [2018-07-04]
CHR Extension: (Browsing Protection by F-Secure) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2018-02-09]
CHR Extension: (ChromeVox) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgejglhpjiefppelpmljglcjbhoiplfn [2018-06-20]
CHR Extension: (Pix: Pixel Mixer) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbjiacdnbellpbhocabghholhnlboibg [2015-08-04]
CHR Extension: (PaymoApp) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lenbfhcjnclnoepkkahpnibbekkekihp [2016-10-18]
CHR Extension: (axe) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhdoppojpmngadmnindnejefpokejbdd [2018-11-07]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-10-18]
CHR Extension: (BrowserStack Local) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfiddfehmfdojjfdpfngagldgaaafcfo [2017-01-06]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Simple Vimeo Downloader) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocaallccmjamifmbnammngacjphelonn [2018-07-04]
CHR Extension: (Toggl Button: Productivity & Time Tracker) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oejgccbfbmkkpaidnkphaiaecficdnfn [2018-10-25]
CHR Extension: (SpeakIt) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohpcoflekopkahpgomnabhkclbedepll [2017-10-26]
CHR Extension: (Immer auf der Oberseite zusätzliche App) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oppldakpkfhiglmfehedjgideggjhcle [2018-05-01]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-15]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-31]
CHR Extension: (RSS Feed Reader) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp [2018-10-23]
CHR Extension: (RoboForm Password Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2018-10-26]
CHR Extension: (MeasureIt) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pokhcahijjfkdccinalifdifljglhclm [2016-02-12]
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\System Profile [2018-02-27]
CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1828759274-4149907929-1054847307-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ocbnpbkmjpgbdcgiflkgkpnkinifpgpj] - C:\Users\User\ChromeExtensions\ocbnpbkmjpgbdcgiflkgkpnkinifpgpj\amazon-icon-2.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - D:\Programme\Roboform\Chrome\rf-chrome.crx [2016-07-28]

Opera: 
=======
OPR Session Restore: -> ist aktiviert.
OPR Extension: (RoboForm) - D:\Programme\Roboform\Opera [2016-11-01]
StartMenuInternet: (HKLM) OperaStable - D:\Programme\Opera\Launcher.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-10-19] (Adobe Systems) [Datei ist nicht signiert]
S3 AppleChargerSrv; C:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [454512 2018-10-30] (AOMEI Tech Co., Ltd.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058392 2017-12-12] (Microsoft Corporation)
R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [23800 2018-09-26] (Intel)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2014-09-25] (Macrovision Europe Ltd.) [Datei ist nicht signiert]
R2 fshoster; C:\Program Files (x86)\F-Secure\fshoster32.exe [213472 2018-05-08] (F-Secure Corporation)
R2 fsnethoster; C:\Program Files (x86)\F-Secure\fshoster32.exe [213472 2018-05-08] (F-Secure Corporation)
R2 fsulhoster; C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fshoster64.exe [582752 2018-11-08] (F-Secure Corporation)
R2 fsulorsp; C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fsorsp64.exe [100808 2018-11-08] (F-Secure Corporation)
R2 fsulprothoster; C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fsulprothoster.exe [582752 2018-11-08] (F-Secure Corporation)
R2 gadjservice; C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [16896 2015-04-14] () [Datei ist nicht signiert]
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [190784 2018-08-23] () [Datei ist nicht signiert]
S3 iaStorAfsService; C:\WINDOWS\IAStorAfsService\iaStorAfsService.exe [2413720 2017-06-20] (Intel Corporation)
R2 IAStorDataMgrSvc; D:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17992 2017-06-20] (Intel Corporation)
S3 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Datei ist nicht signiert]
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [353768 2018-09-13] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 Intel(R) PROSet Monitoring Service; C:\WINDOWS\system32\IProsetMonitor.exe [506368 2017-08-21] (Intel Corporation) [Datei ist nicht signiert]
S3 Intel(R) SUR QC SAM; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
R2 MSSQL$MSSQLSERVER2012; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER2012\MSSQL\Binn\sqlservr.exe [194240 2016-09-24] (Microsoft Corporation)
S3 OpenVPNService; d:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2018-03-01] ( ) [Datei ist nicht signiert]
R2 OpenVPNServiceInteractive; d:\Program Files\OpenVPN\bin\openvpnserv.exe [75392 2018-03-01] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; d:\Program Files\OpenVPN\bin\openvpnserv.exe [75392 2018-03-01] (The OpenVPN Project)
R2 PanGPS; D:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe [3478344 2017-05-18] (Palo Alto Networks)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SandraAgentSrv; d:\Program Files\SiSoftware\SiSoftware Sandra Lite Platinum.SP2\RpcAgentSrv.exe [135728 2017-09-11] (SiSoftware) [Datei ist nicht signiert]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4737448 2018-07-15] (Microsoft Corporation)
R2 Smart TimeLock; C:\Program Files (x86)\GIGABYTE\Smart TimeLock\TimeMgmtDaemon.exe [102400 2013-02-22] (Gigabyte Technology CO., LTD.) [Datei ist nicht signiert]
S3 SQLAgent$MSSQLSERVER2012; C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER2012\MSSQL\Binn\SQLAGENT.EXE [613056 2016-09-24] (Microsoft Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.)
R2 TeamViewer; D:\Programme\TeamViewer\TeamViewer_Service.exe [11644656 2018-09-10] (TeamViewer GmbH)
S3 VsEtwService120; D:\Programme\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
R3 wampapache64; e:\wamp64\bin\apache\apache2.4.27\bin\httpd.exe [29184 2017-07-07] (Apache Software Foundation) [Datei ist nicht signiert]
R3 wampmysqld64; e:\wamp64\bin\mysql\mysql5.7.19\bin\mysqld.exe [39496704 2017-06-22] () [Datei ist nicht signiert]
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [302968 2015-02-12] (Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1809.2-0\NisSrv.exe [3847376 2018-10-20] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1809.2-0\MsMpEng.exe [114200 2018-10-20] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2016-12-21] ()
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] ()
S3 ampa; C:\Windows\system32\ampa.sys [19568 2015-11-10] () [Datei ist nicht signiert]
S3 ampa; C:\Windows\SysWOW64\ampa.sys [19568 2015-11-10] () [Datei ist nicht signiert]
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] ()
R1 AppleCharger; C:\WINDOWS\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] ()
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2017-01-16] (Samsung Electronics Co., Ltd.)
R1 epp; C:\EEK\bin64\epp.sys [142952 2018-11-13] (Emsisoft Ltd)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2018-04-20] (Huawei Technologies Co., Ltd.)
R3 F-Secure Gatekeeper; C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fsulgk.sys [251944 2018-11-08] (F-Secure Corporation)
R1 F-Secure UL HIPS; C:\Program Files (x86)\F-Secure\apps\Ultralight\ulcore\1541671335\fshs.sys [102448 2018-11-08] (F-Secure Corporation)
R0 fsbts; C:\WINDOWS\System32\drivers\fsbts.sys [65872 2018-08-07] ()
S0 fselms; C:\WINDOWS\System32\drivers\fselms.sys [15360 2018-09-10] (F-Secure Corporation)
R3 fsni; C:\Program Files (x86)\F-Secure\apps\Ultralight\nif\1537173264\fsni64.sys [112456 2018-09-17] (F-Secure Corporation)
R1 fsvista; C:\Program Files (x86)\F-Secure\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [13352 2014-06-24] ()
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-11-03] (REALiX(tm))
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2018-08-23] (Huawei Technologies Co., Ltd.)
S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [70632 2017-06-20] (Intel Corporation)
R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_2e7fa54192fe16d0\nvlddmkm.sys [16936048 2017-11-09] (NVIDIA Corporation)
R3 PanGpd; C:\WINDOWS\system32\DRIVERS\pangpd.sys [36352 2015-09-10] (Palo Alto Networks)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R1 RsFx0201; C:\WINDOWS\System32\DRIVERS\RsFx0201.sys [337088 2014-05-15] (Microsoft Corporation)
S3 SANDRA; d:\Program Files\SiSoftware\SiSoftware Sandra Lite 2016.SP1\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [43008 2018-04-06] ()
R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [264192 2018-04-12] (Microsoft Corporation)
S3 SIVDriver; C:\WINDOWS\system32\Drivers\SIVX64.sys [181904 2017-10-14] (Ray Hinchliffe)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics Co., Ltd.)
S1 UsbCharger; C:\WINDOWS\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] ()
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46184 2018-10-20] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [352424 2018-10-20] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [60584 2018-10-20] (Microsoft Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-12-02] (Zemana Ltd.)
U4 aspnet_state; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-11-13 13:31 - 2018-11-13 13:37 - 000000000 ____D C:\FRST
2018-11-13 13:27 - 2018-11-13 13:27 - 000000355 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ussclean
2018-11-13 13:20 - 2018-11-13 13:20 - 000000000 ____D C:\ProgramData\Emsisoft
2018-11-13 13:19 - 2018-11-13 13:25 - 000000000 ____D C:\EEK
2018-11-01 16:04 - 2018-11-13 12:05 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper
2018-11-01 16:04 - 2018-11-01 16:04 - 000001140 _____ C:\Users\Public\Desktop\AOMEI Backupper Professional.lnk
2018-11-01 16:04 - 2018-11-01 16:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2018-11-01 16:04 - 2017-09-01 18:12 - 000038320 _____ C:\WINDOWS\system32\amwrtdrv.sys
2018-11-01 16:04 - 2016-12-21 22:54 - 000051120 _____ C:\WINDOWS\system32\ambakdrv.sys
2018-11-01 16:04 - 2016-12-21 22:52 - 000171952 _____ C:\WINDOWS\system32\ammntdrv.sys
2018-10-22 16:26 - 2018-10-22 16:26 - 000002016 _____ C:\Users\Public\Desktop\F-Secure.lnk
2018-10-22 16:26 - 2018-10-22 16:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\F-Secure
2018-10-17 15:18 - 2018-10-17 15:18 - 000001070 _____ C:\Users\Public\Desktop\HiSuite.lnk
2018-10-17 15:18 - 2018-10-17 15:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
2018-10-17 15:17 - 2018-10-17 15:18 - 000000000 ____D C:\Program Files (x86)\HiSuite

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2018-11-13 13:37 - 2018-06-13 00:38 - 003092755 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2018-11-13 13:28 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-11-13 12:59 - 2016-12-22 17:24 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2018-11-13 12:23 - 2018-09-03 13:16 - 000000312 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat
2018-11-13 12:23 - 2016-11-04 22:51 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2018-11-13 12:23 - 2016-11-04 22:51 - 000000000 ____D C:\ProgramData\AomeiBR
2018-11-13 12:05 - 2016-11-04 22:52 - 000001024 ____H C:\SYSTAG.BIN
2018-11-13 11:49 - 2017-06-16 11:24 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-11-13 11:49 - 2014-09-22 19:29 - 000000000 __SHD C:\Users\User\IntelGraphicsProfiles
2018-11-13 02:17 - 2016-12-01 16:04 - 000000000 ____D C:\ProgramData\NVIDIA
2018-11-12 22:31 - 2018-06-13 00:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-11-12 18:11 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-11-12 18:11 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-11-10 16:57 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-11-09 18:42 - 2018-09-28 18:37 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant
2018-11-08 16:51 - 2018-06-13 00:10 - 000003958 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1411642141
2018-11-06 12:35 - 2014-12-26 16:30 - 000007606 _____ C:\Users\User\AppData\Local\resmon.resmoncfg
2018-11-05 04:02 - 2018-06-13 00:03 - 001817992 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-11-05 04:02 - 2018-04-12 17:14 - 000778860 _____ C:\WINDOWS\system32\perfh007.dat
2018-11-05 04:02 - 2018-04-12 17:14 - 000165750 _____ C:\WINDOWS\system32\perfc007.dat
2018-11-05 04:02 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-11-05 03:56 - 2018-06-13 00:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-11-05 03:56 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-11-05 03:56 - 2015-01-06 00:01 - 000000093 _____ C:\HaxLogs.txt
2018-11-05 03:56 - 2014-09-24 15:24 - 000026192 ____N (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys
2018-11-03 00:31 - 2017-12-08 13:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2018-10-26 15:37 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2018-10-23 16:37 - 2016-11-04 05:07 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-10-23 13:19 - 2014-09-24 11:32 - 000000000 ____D C:\Program Files (x86)\F-Secure
2018-10-20 13:38 - 2018-06-13 00:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-10-20 13:38 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-10-20 13:28 - 2010-11-21 04:27 - 000559880 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2018-10-17 15:18 - 2018-08-23 02:01 - 000000000 ____D C:\Users\User\AppData\Local\HiSuite
2018-10-16 13:01 - 2018-06-13 00:10 - 000003360 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1828759274-4149907929-1054847307-1000
2018-10-16 13:01 - 2018-06-13 00:03 - 000002425 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-10-16 08:40 - 2016-10-12 19:29 - 000000000 ____D C:\Program Files\Microsoft Office 15
2018-10-15 17:19 - 2017-11-20 22:07 - 000000728 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 13.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-10-12 03:21 - 2016-10-12 03:21 - 000000028 _____ () C:\Users\User\apigen.bat
2017-07-22 13:07 - 2017-07-22 13:07 - 000000030 _____ () C:\Users\User\phpunit.cmd
2017-11-03 17:15 - 2017-09-05 02:16 - 016384000 _____ () C:\Users\User\AppData\Roaming\Sandra.mdb
2016-11-22 02:58 - 2016-11-22 02:58 - 000001655 _____ () C:\Users\User\AppData\Roaming\SvcTraceViewer.exe.settings
2012-05-03 12:12 - 2012-05-03 12:12 - 000000532 _____ () C:\Users\User\AppData\Local\datos.txt
2014-02-05 21:08 - 2014-02-05 21:08 - 000193744 _____ () C:\Users\User\AppData\Local\lateral1.bmp
2010-11-12 10:10 - 2010-11-12 10:10 - 000193744 _____ () C:\Users\User\AppData\Local\lateral2.bmp
2014-02-05 21:10 - 2014-02-05 21:10 - 000195108 _____ () C:\Users\User\AppData\Local\lateral3.bmp
2015-10-31 13:46 - 2018-09-28 15:33 - 000000600 _____ () C:\Users\User\AppData\Local\PUTTY.RND
2018-07-10 01:29 - 2018-07-10 01:29 - 000001830 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2014-12-26 16:30 - 2018-11-06 12:35 - 000007606 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg
2014-02-05 22:50 - 2014-02-05 22:50 - 000043976 _____ () C:\Users\User\AppData\Local\save_en.bmp
2014-02-05 22:49 - 2014-02-05 22:49 - 000043976 _____ () C:\Users\User\AppData\Local\save_es.bmp

Einige Dateien in TEMP:
====================
2018-06-13 00:14 - 2018-11-13 11:50 - 000192512 _____ () C:\Users\User\AppData\Local\Temp\sfamcc00001.dll
2018-09-07 21:24 - 2018-11-13 11:50 - 000158720 _____ () C:\Users\User\AppData\Local\Temp\sfareca00001.dll

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2018-06-13 00:02

==================== Ende von FRST.txt ============================