Trojaner-Board
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   PCKeeper und Spacekace auf W7 Prof gefunden. (https://www.trojaner-board.de/182511-pckeeper-spacekace-w7-prof-gefunden.html)

cosinus 26.10.2016 21:12
Logs bitte richtig posten

Markusli 27.10.2016 07:30
Welche sind falsch gepostet?
 
Sorry..welche Logs sind denn nun nicht korrekt gepostet? Soll ich die Anleitung nochmals von Neu abarbeiten und die Logs nochmals posten???:wtf:

cosinus 27.10.2016 08:36
Es geht immer noch im MBAR :kaffee:

Markusli 27.10.2016 09:34
MBAR Log
 
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.10.27.03
  rootkit: v2016.09.26.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.18499
Computername :: XXXXXXXX [administrator]

27.10.2016 09:47:50
mbar-log-2016-10-27 (09-47-50).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 430761
Time elapsed: 39 minute(s), 44 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 27.10.2016 09:40
Hast du MBAR jetzt das erste mal erst ausgeführt? Denn das Datum im Log ist von heute.

Markusli 27.10.2016 09:42
Ja...
 
hatte vorher das falsche Tool "Malwarebytes Anti-Malware". Daher. Wieso?

cosinus 27.10.2016 09:46
Weil ich sichergehen will, dass du alle Infos und Logs postest.


JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


Markusli 27.10.2016 11:33
JRT Log
 
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Professional x86
Ran by XXXXX (Administrator) on 27.10.2016 at 12:03:19.37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 2

Successfully deleted: C:\Users\Markusli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YZAFB5S5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YZAFB5S5 (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.10.2016 at 12:08:17.22
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus 27.10.2016 13:21
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

Markusli 27.10.2016 13:39
FRST-Log
 
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 26-10-2016
durchgeführt von Muster (Administrator) auf MusterW (27-10-2016 14:25:41)
Gestartet von C:\Users\Muster\Downloads\Tools\ScannerTools
Geladene Profile: Muster (Verfügbare Profile: Muster & brigitta & Administrator)
Platform: Microsoft Windows 7 Professional  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Adobe Systems, Incorporated) C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(DATA BECKER GmbH & Co KG) C:\Program Files\Common Files\DATA BECKER Shared\DBService.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Garmin Ltd. or its subsidiaries) C:\Program Files\Garmin\Device Interaction Service\GarminService.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Acronis) C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\avpui.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [TrueImageMonitor.exe] => C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [5970024 2011-08-21] (Acronis)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [2303256 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Program Files\UltimateOutsider\GWX Control Panel\GWX_control_panel.exe [4596296 2016-04-02] (UltimateOutsider)
HKLM\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-18] (Adobe Systems Incorporated)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2014-03-25] (Logitech, Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Run: [EPSON BX300F Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEJE.EXE [188928 2008-01-22] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Run: [Spybot-S&D Cleaning] => C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3713032 2012-11-13] (Safer-Networking Ltd.)
HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6868696 2016-08-26] (Piriform Ltd)
HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Run: [Dropbox Update] => C:\Users\Muster\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)
HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Run: [CodeTwo Email Signatures] => C:\Users\Muster\AppData\Local\Programs\CodeTwo\Email Signatures Client App\EmailSignatures.Client.exe [513256 2015-02-10] (CodeTwo)
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [1403304 2016-01-28] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-18] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-18] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll [2016-10-18] ()
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Muster\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Muster\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Muster\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll [2016-10-24] (Dropbox, Inc.)
Startup: C:\Users\brigitta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2016-07-10]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\brigitta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2010-05-16]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Keine Datei)
Startup: C:\Users\Muster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2016-10-11]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Muster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2016-10-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\Muster\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7DFDA5D0-939A-46B8-A757-2A7B993185E3}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-95033592-1126372089-4278029988-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ww7.autotask.net/
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\IEExt\ie_plugin.dll [2015-02-28] (Kaspersky Lab ZAO)
BHO: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-10-18] (Microsoft Corporation)
BHO: Kein Name -> {53707962-6F74-2D53-2644-206D7942484F} -> Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
BHO: AcroIEToolbarHelper Class -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-10-03] (Microsoft Corporation)
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\IEExt\ie_plugin.dll [2015-02-28] (Kaspersky Lab ZAO)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-10-03] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\IEExt\ie_plugin.dll [2015-02-28] (Kaspersky Lab ZAO)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02] (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-27] (Google Inc.)
Toolbar: HKU\S-1-5-21-95033592-1126372089-4278029988-1000 -> Kein Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  Keine Datei
Toolbar: HKU\S-1-5-21-95033592-1126372089-4278029988-1000 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15] ()
DPF: {2685176A-3502-47BB-B91D-BD28CA2A06A0} hxxps://www.autotask.net/Public/BrowserDetect/AT_ActiveX_Test.CAB
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540002} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540003} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-03] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-03] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-03] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-03] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21] (Microsoft Corporation)
Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)
Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2016-04-25] (Citrix Systems, Inc.)

FireFox:
========
FF DefaultProfile: d4zn4vbf.default-1392138883385
FF ProfilePath: C:\Users\Muster\AppData\Roaming\Mozilla\Firefox\Profiles\d4zn4vbf.default-1392138883385 [2016-10-27]
FF Extension: (IE Tab +) - C:\Users\Muster\AppData\Roaming\Mozilla\Firefox\Profiles\d4zn4vbf.default-1392138883385\Extensions\coralietab@mozdev.org [2016-04-28]
FF Extension: (Google Analytics Debugger) - C:\Users\Muster\AppData\Roaming\Mozilla\Firefox\Profiles\d4zn4vbf.default-1392138883385\Extensions\gadebugger@browserextensions.keithclark.co.uk.xpi [2016-08-18]
FF Extension: (Modul zur Link-Untersuchung) - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2016-10-06] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2016-10-06] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2016-10-06] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2016-10-06] [ist nicht signiert]
FF Extension: (Skype Click to Call) - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru => nicht gefunden
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-10-27] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: (Dangerous Websites Blocker) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-28] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: (Virtual Keyboard) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-28] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-20] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2009-11-06] (Adobe Systems, Inc.)
FF Plugin: @Citrix.com/npican -> C:\Program Files\Citrix\ICA Client\npicaN.dll [2016-04-25] (Citrix Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\FFExt\content_blocker@kaspersky.com [2015-02-28] ()
FF Plugin: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-02-28] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-10-03] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-03] (Microsoft Corporation)
FF Plugin: @protectdisc.com/NPPDLicenseHelper -> C:\Program Files\ProtectDisc\License Helper\NPPDLicenseHelper.dll [2008-02-22] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-18] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPPDLicenseHelper.dll [2008-02-22] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-07-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-07-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-07-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-07-01] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-07-01] (Apple Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.ch/
CHR StartupUrls: Default -> "hxxp://www.googlewatchblog.de/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADRA_de
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\54.0.2840.71\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\54.0.2840.71\pdf.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\54.0.2840.71\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll => Keine Datei
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll => Keine Datei
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\plugin/npVKPlugin.dll => Keine Datei
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\plugin/npUrlAdvisor.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll => Keine Datei
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL => Keine Datei
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Protect Disc License Acquisition Plugin) - C:\Program Files\Mozilla Firefox\plugins\NPPDLicenseHelper.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll => Keine Datei
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll => Keine Datei
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Users\Muster\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Profile: C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default [2016-10-27]
CHR Extension: (All Java Sources) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleifhehdjlljnlbaplopcbnbgifpphg [2015-05-12]
CHR Extension: (YouTube) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (CallVia3CX) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhghpchainbpodkpnhppcoefnbjaonj [2016-10-18]
CHR Extension: (Google-Suche) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Kaspersky Protection) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-03-02]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-05-12]
CHR Extension: (Stylish) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2016-04-05]
CHR Extension: (Page Analytics (by Google)) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnbdnhhicmebfgdgglcdacdapkcihcoh [2016-06-14]
CHR Extension: (Balsamiq Mockups 3 (FREE TRIAL)) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\iedapplgopkgngalkbailjoikghljkki [2016-10-11]
CHR Extension: (WhatFont) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2016-06-16]
CHR Extension: (Tag Assistant (by Google)) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2016-07-08]
CHR Extension: (Skype) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-10-21]
CHR Extension: (Google Maps) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-09-19]
CHR Extension: (Simple Bookmarks) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafmgkhgdblkabfjfegmafagpccaobfg [2016-08-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Audio Converter) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojfphighcpfimfhblaigjckljcoeipga [2016-07-10]
CHR Extension: (Long Tail Keyword Tool Pro) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\omgaibbfggpdeokldjpldejliojjedep [2015-05-12]
CHR Extension: (Google Mail) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-30]
CHR Extension: (Chrome Media Router) - C:\Users\Muster\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-26]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ChromeExt\ab.crx <nicht gefunden>

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [809224 2011-08-21] (Acronis)
S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [68096 2010-02-22] () [Datei ist nicht signiert]
R2 AdobeUpdateService; C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-18] (Adobe Systems Incorporated)
S3 AdobeVersionCue; C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe [61440 2003-10-13] (Adobe Sytems) [Datei ist nicht signiert]
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3446736 2011-12-13] (Acronis)
R2 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 AVP15.0.1; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S4 Bdahstsvcrvp; C:\Windows\system32\drivers\acedrv11.sys [277544 2009-01-19] (Protect Software GmbH)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2115840 2016-10-03] (Microsoft Corporation)
R2 DBService; C:\Program Files\Common Files\DATA BECKER Shared\DBService.exe [187456 2009-01-08] (DATA BECKER GmbH & Co KG) [Datei ist nicht signiert]
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-02-05] (Teruten) [Datei ist nicht signiert]
R2 Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [803856 2016-01-28] (Garmin Ltd. or its subsidiaries)
S3 Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [68096 2010-02-15] () [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Datei ist nicht signiert]
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [503080 2010-05-04] (Nero AG)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
R2 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [5787584 2011-09-19] (Acronis)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [7500048 2016-09-20] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [277544 2009-01-19] (Protect Software GmbH)
S3 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [327368 2010-07-09] (BitDefender)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [189136 2013-01-14] (Kaspersky Lab UK Ltd)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-02-05] () [Datei ist nicht signiert]
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [143968 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [36928 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [119816 2015-02-28] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [36536 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [673976 2015-03-12] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [24672 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44992 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [64200 2015-02-28] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [146240 2014-07-09] (Kaspersky Lab ZAO)
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2009-08-23] (Atheros Communications, Inc.)
R3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [35776 2011-05-17] (hxxp://libusb-win32.sourceforge.net)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-10-27] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)
S3 MonitorFunction; C:\Windows\System32\DRIVERS\TVMonitor.sys [13304 2012-11-28] (TeamViewer GmbH)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R0 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [766208 2011-12-13] (Acronis)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [902432 2010-02-13] (Acronis)
S3 teamviewervpn; C:\Windows\System32\DRIVERS\teamviewervpn.sys [25088 2013-10-17] (TeamViewer GmbH)
R2 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [253072 2010-07-27] (BitDefender S.R.L.) [Datei ist nicht signiert]
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [41984 2010-09-28] (Apple, Inc.) [Datei ist nicht signiert]
R0 vididr; C:\Windows\System32\DRIVERS\vididr.sys [126112 2011-12-13] (Acronis)
R0 vidsflt58; C:\Windows\System32\DRIVERS\vsflt58.sys [84512 2011-12-13] (Acronis)
S3 bdselfpr; \??\C:\Users\WYSSMA~1\AppData\Local\Temp\RarSFX0\bdselfpr.sys [X]
S1 MoboroboAssDriver; SysWOW64\drivers\MoboroboAssDriver64.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-10-27 09:46 - 2016-10-27 10:29 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-10-27 09:44 - 2016-10-27 10:29 - 00000000 ____D C:\Users\Muster\Desktop\mbar
2016-10-27 09:44 - 2016-10-27 09:44 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Muster\Downloads\mbar-1.09.3.1001.exe
2016-10-27 08:23 - 2016-10-27 08:23 - 00000000 ____D C:\Users\Muster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-10-26 11:42 - 2016-10-27 08:17 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\70344843.sys
2016-10-25 17:18 - 2016-10-25 17:23 - 00228432 _____ C:\TDSSKiller.3.1.0.11_25.10.2016_17.18.47_log.txt
2016-10-25 17:18 - 2016-10-25 17:18 - 00004746 _____ C:\TDSSKiller.3.1.0.11_25.10.2016_17.18.20_log.txt
2016-10-25 17:14 - 2016-10-25 17:17 - 00228432 _____ C:\TDSSKiller.3.1.0.11_25.10.2016_17.14.17_log.txt
2016-10-25 16:51 - 2016-10-25 16:52 - 101077848 _____ (Kaspersky Lab ZAO) C:\Users\Muster\Downloads\KVRT.exe
2016-10-25 12:30 - 2016-10-25 14:25 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\5AA21EDB.sys
2016-10-25 12:14 - 2016-10-27 14:25 - 00000000 ____D C:\FRST
2016-10-25 09:42 - 2016-10-27 12:08 - 00000894 _____ C:\Users\Muster\Desktop\JRT.txt
2016-10-25 08:54 - 2016-10-27 13:39 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-10-25 08:53 - 2016-10-27 09:46 - 00094936 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-10-25 08:53 - 2016-10-25 08:53 - 00001060 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-10-25 08:53 - 2016-10-25 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-10-25 08:53 - 2016-10-25 08:53 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-25 08:53 - 2016-10-25 08:53 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-10-25 08:53 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-10-25 08:53 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-10-25 08:34 - 2016-10-25 09:44 - 00000000 ____D C:\AdwCleaner
2016-10-24 20:55 - 2016-09-15 16:51 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2016-10-24 20:55 - 2016-09-13 17:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-10-24 20:55 - 2016-09-09 20:00 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-10-24 20:55 - 2016-08-21 15:05 - 00935424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-10-24 20:05 - 2016-10-24 20:05 - 00000000 ____D C:\KVRT_Data
2016-10-24 20:04 - 2016-10-24 20:04 - 100788056 _____ (Kaspersky Lab ZAO) C:\Users\brigitta\Downloads\KVRT.exe
2016-10-23 10:36 - 2016-10-23 10:36 - 02137477 _____ C:\Users\Muster\Desktop\CARTEC-WheelDoctor.pdf
2016-10-21 13:42 - 2016-10-21 13:42 - 00176226 _____ C:\Users\Muster\Downloads\Nutzungsbestimmungen_Valiant_DE (1).pdf
2016-10-21 13:40 - 2016-10-21 13:40 - 00152260 _____ C:\Users\Muster\Downloads\Brief_D.pdf
2016-10-21 13:37 - 2016-10-21 13:37 - 00001119 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-10-21 13:37 - 2016-10-21 13:37 - 00001107 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2016-10-20 15:27 - 2016-10-20 15:27 - 00106295 _____ C:\Users\Muster\Downloads\Ausstellungsflyer.pdf
2016-10-20 15:27 - 2016-10-20 15:27 - 00106295 _____ C:\Users\Muster\Downloads\Ausstellungsflyer (1).pdf
2016-10-20 15:01 - 2016-10-20 15:01 - 00008406 _____ C:\Users\Muster\Downloads\test3.pdf
2016-10-20 15:01 - 2016-10-20 15:01 - 00008406 _____ C:\Users\Muster\Downloads\test3 (1).pdf
2016-10-20 10:57 - 2016-10-20 10:57 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign84fa37de6054094e
2016-10-20 10:57 - 2016-10-20 10:57 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign508c0fe5c3bb4564
2016-10-19 23:09 - 2016-10-19 23:09 - 00000000 ____D C:\Windows\system32\Neuer Ordner
2016-10-18 14:45 - 2016-10-18 14:45 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign70553ae5ee3b2b52
2016-10-18 13:42 - 2016-10-18 13:42 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-10-15 19:18 - 2016-10-15 19:18 - 00200430 _____ C:\Users\brigitta\Downloads\Fachfrau_mann Gesundheit EFZ_60-100%.pdf
2016-10-15 18:51 - 2016-10-15 18:51 - 00000000 ____D C:\Users\brigitta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-10-14 15:25 - 2016-10-14 15:25 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsigna1790ed0c5442326
2016-10-14 15:25 - 2016-10-14 15:25 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign4eb7d306786be687
2016-10-14 09:50 - 2016-10-14 09:50 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign915d0e6b59da9f94
2016-10-14 09:49 - 2016-10-14 09:49 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign72fb5a96292f0196
2016-10-14 09:49 - 2016-10-14 09:49 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign588ea06d0e35c97b
2016-10-14 09:12 - 2016-09-12 22:54 - 00067816 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-10-14 09:12 - 2016-09-12 22:49 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-10-14 09:12 - 2016-09-09 17:53 - 01406976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-10-14 09:12 - 2016-09-09 17:53 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-10-14 09:12 - 2016-09-09 17:53 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-10-14 09:12 - 2016-09-09 17:53 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-10-14 09:12 - 2016-09-09 17:53 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-10-14 09:12 - 2016-09-09 17:53 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-10-14 09:12 - 2016-09-09 17:53 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-10-14 09:12 - 2016-08-29 17:12 - 12880384 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-10-14 09:12 - 2016-08-29 17:12 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-10-14 09:12 - 2016-08-29 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-10-14 09:12 - 2016-08-29 16:55 - 02972672 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-10-14 09:12 - 2016-08-16 22:27 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2016-10-14 09:12 - 2016-08-16 22:27 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2016-10-14 09:12 - 2016-08-16 22:26 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2016-10-14 09:12 - 2016-08-16 22:26 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-10-14 09:12 - 2016-08-16 22:26 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2016-10-14 09:12 - 2016-08-16 22:26 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2016-10-14 09:12 - 2016-08-16 22:26 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2016-10-13 18:05 - 2016-10-13 18:05 - 00000000 ____D C:\Users\Muster\Downloads\specimen_files
2016-10-13 17:40 - 2016-10-13 17:41 - 00000000 ____D C:\Users\Muster\Downloads\FFFago
2016-10-13 15:27 - 2016-10-13 15:27 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsignb406a27479eb4f9e
2016-10-13 15:25 - 2016-10-13 15:25 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsignfea8baf83151965b
2016-10-13 15:25 - 2016-10-13 15:25 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign4c7e5a0eec404810
2016-10-13 10:55 - 2016-10-13 10:55 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign80de9a5bb2d5caf2
2016-10-13 10:53 - 2016-10-13 10:53 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign8f3c3eb662157b9e
2016-10-13 10:53 - 2016-10-13 10:53 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign21e7572e9ef18e36
2016-10-13 08:16 - 2016-10-13 08:16 - 00000393 _____ C:\Users\Muster\Downloads\EmailFormData_13_10_2016_UID_1.xml
2016-10-13 08:15 - 2016-10-13 08:15 - 00001274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.5 (32 Bit).lnk
2016-10-12 09:56 - 2016-10-12 09:56 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign7b2adde925eb3daf
2016-10-12 09:55 - 2016-10-12 09:55 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign784ce3f43dda2c9a
2016-10-12 09:55 - 2016-10-12 09:55 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign3b8aeab48aaba224
2016-10-12 09:46 - 2016-09-30 21:28 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-10-12 09:46 - 2016-09-30 17:20 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-10-12 09:46 - 2016-09-30 17:20 - 03944680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-10-12 09:46 - 2016-09-30 07:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-10-12 09:46 - 2016-09-30 07:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-10-12 09:46 - 2016-09-30 07:47 - 20306944 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-10-12 09:46 - 2016-09-30 07:42 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-10-12 09:46 - 2016-09-30 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-10-12 09:46 - 2016-09-30 07:42 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-10-12 09:46 - 2016-09-30 07:42 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-10-12 09:46 - 2016-09-30 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-10-12 09:46 - 2016-09-30 07:38 - 02286592 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-10-12 09:46 - 2016-09-30 07:36 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-10-12 09:46 - 2016-09-30 07:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-10-12 09:46 - 2016-09-30 07:33 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-10-12 09:46 - 2016-09-30 07:32 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-10-12 09:46 - 2016-09-30 07:32 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-10-12 09:46 - 2016-09-30 07:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-10-12 09:46 - 2016-09-30 07:32 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-10-12 09:46 - 2016-09-30 07:27 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-10-12 09:46 - 2016-09-30 07:24 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-10-12 09:46 - 2016-09-30 07:19 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-10-12 09:46 - 2016-09-30 07:19 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-10-12 09:46 - 2016-09-30 07:17 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-10-12 09:46 - 2016-09-30 07:15 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-10-12 09:46 - 2016-09-30 07:14 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-10-12 09:46 - 2016-09-30 07:13 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-10-12 09:46 - 2016-09-30 07:12 - 04608512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-10-12 09:46 - 2016-09-30 07:07 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-10-12 09:46 - 2016-09-30 07:05 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-10-12 09:46 - 2016-09-30 07:05 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-10-12 09:46 - 2016-09-30 07:05 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-10-12 09:46 - 2016-09-30 07:05 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-10-12 09:46 - 2016-09-30 07:03 - 13653504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-10-12 09:46 - 2016-09-30 06:46 - 02444288 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-10-12 09:46 - 2016-09-30 06:43 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-10-12 09:46 - 2016-09-30 06:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-10-12 09:46 - 2016-09-15 17:15 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-10-12 09:46 - 2016-09-15 17:15 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2016-10-12 09:46 - 2016-09-12 22:53 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-10-12 09:46 - 2016-09-12 22:53 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-10-12 09:46 - 2016-09-12 22:49 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-10-12 09:46 - 2016-09-12 22:49 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-10-12 09:46 - 2016-09-12 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-10-12 09:46 - 2016-09-12 22:28 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-10-12 09:46 - 2016-09-12 22:26 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-10-12 09:46 - 2016-09-12 22:26 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-10-12 09:46 - 2016-09-12 22:26 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-10-12 09:46 - 2016-09-12 22:25 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-10-12 09:46 - 2016-09-12 22:25 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-10-12 09:46 - 2016-09-12 22:25 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-10-12 09:46 - 2016-09-12 21:08 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2016-10-12 09:46 - 2016-09-12 21:08 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2016-10-12 09:46 - 2016-09-10 17:53 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-10-12 09:46 - 2016-09-09 20:01 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-10-12 09:46 - 2016-09-09 20:00 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-10-12 09:46 - 2016-09-09 20:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-10-12 09:46 - 2016-09-09 19:59 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-10-12 09:46 - 2016-09-09 19:59 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-10-12 09:46 - 2016-09-09 19:59 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-10-12 09:46 - 2016-09-09 19:59 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-10-12 09:46 - 2016-09-09 19:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-10-12 09:46 - 2016-09-09 19:42 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-10-12 09:46 - 2016-09-09 19:42 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-10-12 09:46 - 2016-09-09 19:42 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-10-12 09:46 - 2016-09-09 19:42 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-10-12 09:46 - 2016-09-09 19:39 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-10-12 09:46 - 2016-09-09 19:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-10-12 09:46 - 2016-09-08 22:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2016-10-12 09:46 - 2016-09-08 22:34 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2016-10-12 09:46 - 2016-09-08 16:49 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-10-12 09:46 - 2016-09-08 16:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2016-10-12 09:46 - 2016-08-12 18:47 - 12574208 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2016-10-12 09:46 - 2016-08-12 18:47 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-10-12 09:46 - 2016-08-12 18:31 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2016-10-12 09:46 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2016-10-12 09:46 - 2016-08-12 18:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2016-10-12 09:46 - 2016-08-12 18:21 - 00437248 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2016-10-12 09:46 - 2016-08-06 17:15 - 01178112 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2016-10-12 09:46 - 2016-08-06 17:15 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2016-10-12 09:46 - 2016-08-06 17:15 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2016-10-12 09:46 - 2016-08-06 17:15 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2016-10-12 09:46 - 2016-08-06 17:15 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\WsmRes.dll
2016-10-12 09:46 - 2016-08-06 16:53 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2016-10-12 09:46 - 2016-08-06 16:53 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wsmprovhost.exe
2016-10-12 09:46 - 2016-08-06 16:53 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2016-10-12 09:46 - 2016-07-22 16:51 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-10-12 09:46 - 2016-06-14 17:25 - 00078568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2016-10-12 09:46 - 2016-06-14 17:21 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 01176064 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00474624 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00195072 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2016-10-12 09:46 - 2016-06-14 17:21 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2016-10-12 09:46 - 2016-06-14 17:17 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2016-10-12 09:46 - 2016-06-14 17:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2016-10-12 09:46 - 2016-06-14 17:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2016-10-12 09:46 - 2016-06-14 17:05 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2016-10-12 09:46 - 2016-06-14 17:00 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2016-10-12 09:46 - 2016-06-14 16:55 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2016-10-12 09:46 - 2016-06-14 16:55 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2016-10-12 09:46 - 2016-06-14 16:54 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2016-10-11 17:27 - 2016-10-11 17:27 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsignb54e5819f0913fcd
2016-10-11 17:27 - 2016-10-11 17:27 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign13d3e7dbd8ea765e
2016-10-11 17:27 - 2016-10-11 17:27 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign1246b9e1debc113a
2016-10-11 17:00 - 2016-10-11 17:00 - 02525243 _____ C:\Users\Muster\Downloads\tcs-winterreifentest-2016-resultate.pdf
2016-10-11 17:00 - 2016-10-11 17:00 - 01587000 _____ C:\Users\Muster\Downloads\dimension-wr-2016-225-45-R17-91H-de (2).pdf
2016-10-11 16:42 - 2016-10-11 16:42 - 00159808 _____ C:\Users\Muster\Downloads\Invoice no. 60172138.pdf
2016-10-11 11:05 - 2016-10-11 11:05 - 00000000 ____D C:\Users\Muster\.cnlab
2016-10-11 11:04 - 2016-10-11 11:04 - 00002067 _____ C:\Users\Muster\Desktop\cnlabSpeedTest.lnk
2016-10-11 11:04 - 2016-10-11 11:04 - 00000000 ____D C:\Users\Muster\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\cnlab AG
2016-10-11 11:04 - 2016-10-11 11:04 - 00000000 ____D C:\Users\Muster\AppData\Local\cnlabSpeedTest
2016-10-11 11:04 - 2016-10-11 11:04 - 00000000 ____D C:\Users\Muster\.oracle_jre_usage
2016-10-09 20:20 - 2016-10-09 20:25 - 01598396 _____ C:\Users\Muster\Desktop\RechnungSTRaphael010.pdf
2016-10-09 20:16 - 2016-10-09 20:16 - 00348099 _____ C:\Users\Muster\Desktop\RechnungDyson009.pdf
2016-10-09 14:11 - 2016-10-09 14:11 - 00092992 _____ C:\Users\brigitta\Downloads\2016_09_29-1-Einzelanzeige.pdf
2016-10-07 09:33 - 2016-10-27 08:33 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-10-06 18:36 - 2016-10-09 11:25 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-10-04 09:17 - 2016-10-04 09:17 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsignef81189e91c568da
2016-10-04 09:16 - 2016-10-04 09:16 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsigne071913efe331e88
2016-10-04 09:16 - 2016-10-04 09:16 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign6064faa39ebcbcc6
2016-10-04 08:47 - 2016-10-04 08:47 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsignc5b0fb80461fef43
2016-10-04 08:47 - 2016-10-04 08:47 - 00000000 ____D C:\Users\Muster\AppData\Local\Tempzxpsign1d8f09451e3d1bd7
2016-10-04 08:40 - 2016-10-09 20:14 - 00116903 _____ C:\Users\Muster\Desktop\RechnungTierarzt008.pdf
2016-09-30 11:05 - 2016-09-30 11:05 - 01587000 _____ C:\Users\Muster\Downloads\dimension-wr-2016-225-45-R17-91H-de (1).pdf
2016-09-30 11:03 - 2016-09-30 11:03 - 01587000 _____ C:\Users\Muster\Downloads\dimension-wr-2016-225-45-R17-91H-de.pdf
2016-09-30 10:35 - 2016-09-30 10:35 - 00176226 _____ C:\Users\Muster\Downloads\Nutzungsbestimmungen_Valiant_DE.pdf
2016-09-28 11:08 - 2016-09-28 11:09 - 00208226 _____ C:\Users\Administrator\Documents\cc_20160928_110850.reg

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-10-27 14:14 - 2015-06-19 11:04 - 00001248 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1000UA.job
2016-10-27 14:02 - 2015-06-20 17:04 - 00001236 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1005UA.job
2016-10-27 13:59 - 2012-08-30 16:30 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-27 12:07 - 2013-05-28 09:41 - 00000000 ____D C:\Program Files\Opera
2016-10-27 12:07 - 2009-07-14 06:34 - 00025744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-27 12:07 - 2009-07-14 06:34 - 00025744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-27 12:01 - 2016-06-16 15:48 - 00000000 ___RD C:\Users\Muster\Creative Cloud Files
2016-10-27 12:01 - 2016-06-16 15:48 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-10-27 12:01 - 2010-02-11 17:33 - 00000000 ____D C:\Users\Muster\AppData\Local\Adobe
2016-10-27 11:58 - 2012-08-30 16:30 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-27 11:58 - 2012-04-14 16:46 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-10-27 11:57 - 2010-02-15 16:24 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2016-10-27 11:56 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-10-27 09:41 - 2012-04-13 09:22 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-10-27 09:41 - 2011-05-17 17:49 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-10-27 09:41 - 2010-02-11 17:29 - 00000000 ____D C:\Windows\system32\Macromed
2016-10-27 08:23 - 2011-12-27 18:16 - 00000000 ____D C:\Users\Muster\AppData\Roaming\Dropbox
2016-10-25 18:02 - 2013-09-04 11:50 - 00002133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-10-25 17:02 - 2015-06-20 17:04 - 00001184 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1005Core.job
2016-10-25 15:46 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2016-10-25 09:53 - 2010-02-14 11:21 - 00000000 ____D C:\Users\Administrator
2016-10-25 09:53 - 2010-02-13 21:14 - 00000000 ____D C:\Users\brigitta
2016-10-25 09:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\SchCache
2016-10-25 09:23 - 2014-02-11 16:18 - 00000000 ____D C:\Program Files\Enigma Software Group
2016-10-25 08:33 - 2016-03-10 09:50 - 00000000 ____D C:\Users\Muster\Downloads\Tools
2016-10-25 08:33 - 2013-05-27 16:34 - 00000000 ____D C:\Users\Muster\AppData\Local\Citrix
2016-10-25 08:14 - 2015-06-19 11:04 - 00001196 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1000Core.job
2016-10-24 20:45 - 2009-07-14 06:46 - 00001515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-10-22 17:54 - 2010-02-11 17:05 - 00000000 ____D C:\Users\Muster
2016-10-22 09:03 - 2009-07-14 06:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-10-21 15:10 - 2010-02-11 17:33 - 00000000 ____D C:\Users\Muster\AppData\Roaming\Adobe
2016-10-21 14:18 - 2010-02-11 17:28 - 00000000 ____D C:\ProgramData\Adobe
2016-10-21 13:36 - 2010-02-11 17:34 - 00000000 ____D C:\Program Files\Adobe
2016-10-21 13:36 - 2010-02-11 17:28 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-10-20 11:23 - 2016-03-10 14:24 - 00001456 _____ C:\Users\Muster\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-10-20 11:16 - 2010-07-09 10:42 - 00000000 ____D C:\Users\Muster\AppData\Roaming\TeamViewer
2016-10-20 08:00 - 2011-05-23 10:11 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-10-19 23:11 - 2010-03-11 17:06 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Adobe
2016-10-19 23:09 - 2010-04-07 13:36 - 00000000 ____D C:\Users\Administrator\AppData\Local\Adobe
2016-10-18 18:46 - 2012-07-12 09:46 - 00000000 ____D C:\Program Files\TeamViewer
2016-10-18 13:46 - 2013-05-07 10:22 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-10-18 13:42 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-10-18 13:37 - 2010-02-11 17:09 - 00000000 ____D C:\Program Files\Microsoft Office
2016-10-15 18:52 - 2012-01-07 12:58 - 00000000 ____D C:\Users\brigitta\AppData\Roaming\Dropbox
2016-10-14 10:40 - 2014-12-12 10:33 - 00000000 ____D C:\Windows\system32\appraiser
2016-10-14 10:40 - 2014-05-06 11:09 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-10-14 10:11 - 2013-06-26 19:47 - 00000000 ____D C:\Users\Muster\Documents\MastermindGmbh
2016-10-14 10:01 - 2016-06-03 15:35 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-10-14 09:24 - 2010-02-11 17:07 - 01629212 _____ C:\Windows\system32\PerfStringBackup.INI
2016-10-14 09:24 - 2009-07-14 10:47 - 00702926 _____ C:\Windows\system32\perfh007.dat
2016-10-14 09:24 - 2009-07-14 10:47 - 00150566 _____ C:\Windows\system32\perfc007.dat
2016-10-14 09:24 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2016-10-13 08:15 - 2016-07-07 12:10 - 00000000 ____D C:\Users\Muster\Documents\Adobe
2016-10-13 07:47 - 2009-07-14 06:33 - 00483512 _____ C:\Windows\system32\FNTCACHE.DAT
2016-10-13 07:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\Dism
2016-10-12 10:53 - 2013-08-15 18:10 - 00000000 ____D C:\Windows\system32\MRT
2016-10-12 10:35 - 2010-02-11 17:28 - 141042968 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-10-12 10:34 - 2010-06-04 12:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-10-12 10:34 - 2010-02-11 17:28 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-10-11 16:52 - 2016-06-23 16:24 - 00000000 ____D C:\Users\Muster\AppData\Roaming\PleasantKeePass
2016-10-11 14:14 - 2016-07-29 19:30 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2016-10-11 14:14 - 2012-06-12 10:06 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-10-06 07:57 - 2012-05-10 10:46 - 00000000 ____D C:\Users\Muster\AppData\Local\Deployment
2016-10-06 07:55 - 2016-07-12 14:25 - 00000000 ____D C:\Users\Muster\AppData\Roaming\3CXPhone for Windows
2016-10-04 15:21 - 2016-02-23 08:40 - 00000929 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2016-10-04 15:21 - 2016-02-23 08:40 - 00000917 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2016-10-04 08:19 - 2015-06-19 11:04 - 00000000 ____D C:\Users\Muster\AppData\Local\Dropbox
2016-09-28 11:10 - 2012-01-07 13:01 - 00000000 ___RD C:\Users\brigitta\Dropbox
2016-09-28 11:09 - 2015-06-20 17:04 - 00000000 ____D C:\Users\brigitta\AppData\Local\Dropbox
2016-09-28 11:08 - 2010-02-11 14:58 - 00000000 ____D C:\Windows\Panther

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-10 14:24 - 2016-10-20 11:23 - 0001456 _____ () C:\Users\Muster\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2014-09-04 11:33 - 2014-09-04 11:33 - 0003584 _____ () C:\Users\Muster\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-08-17 10:11 - 2010-08-17 10:11 - 0004096 ____H () C:\Users\Muster\AppData\Local\keyfile3.drm
2012-04-19 09:38 - 2015-06-19 11:27 - 0007610 _____ () C:\Users\Muster\AppData\Local\Resmon.ResmonCfg
2012-04-14 16:48 - 2012-04-14 16:48 - 0017408 _____ () C:\Users\Muster\AppData\Local\WebpageIcons.db
2011-03-28 09:46 - 2012-04-14 10:42 - 1037014 _____ () C:\ProgramData\bdinstall.bin
2010-08-31 10:29 - 2010-08-31 10:29 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2012-03-29 12:10 - 2012-04-04 11:16 - 0000151 _____ () C:\ProgramData\search_result.xml

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Muster\Silverlight.exe


Einige Dateien in TEMP:
====================
C:\Users\brigitta\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpqdq7wz.dll
C:\Users\Muster\AppData\Local\Temp\libeay32.dll
C:\Users\Muster\AppData\Local\Temp\msvcr120.dll
C:\Users\Muster\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-10-25 15:39

==================== Ende vom FRST.txt ============================

Markusli 27.10.2016 13:41
Addition-Log
 
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 26-10-2016
durchgeführt von Muster M (27-10-2016 14:27:00)
Gestartet von C:\Users\Muster M\Downloads\Tools\ScannerTools
Microsoft Windows 7 Professional  Service Pack 1 (X86) (2010-02-11 15:05:33)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-95033592-1126372089-4278029988-500 - Administrator - Enabled) => C:\Users\Administrator
Berthold (S-1-5-21-95033592-1126372089-4278029988-1005 - Limited - Enabled) => C:\Users\Berthold
Gast (S-1-5-21-95033592-1126372089-4278029988-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-95033592-1126372089-4278029988-1002 - Limited - Enabled)
Muster M (S-1-5-21-95033592-1126372089-4278029988-1000 - Administrator - Enabled) => C:\Users\Muster M

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Anti-Virus (Enabled - Up to date) {B41C7598-35F6-4D89-7D0E-7ADE69B4047B}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {0F7D947C-13CC-4207-47BE-41AC12334EC6}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3CX MyPhone (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\1677492129.46.14.216.122) (Version:  - 46.14.216.122)
3CX MyPhone (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\3640423864.213.213.168.34) (Version:  - 213.213.168.34)
3CXPhone for Windows (HKLM\...\3CXPhone for Windows 15.0.56008) (Version: 15.0.56008 - 3CX)
3CXPhone for Windows (Version: 15.0.56008 - 3CX) Hidden
ABBYY FineReader 6.0 Sprint (HKLM\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1395.4512 - ABBYY Software House)
AbleBits.com Duplicate Remover for Microsoft Excel (HKLM\...\{355908AF-5D8F-40D6-B31C-07B5FA6A60A9}) (Version: 2.6.12 - Add-in Express Ltd.)
Acronis Sync Agent (HKLM\...\{7EFA9A78-797E-4567-A49C-D9E5F26E9AB4}) (Version: 15.0.5583 - Acronis)
Acronis*True*Image*Home 2012 (HKLM\...\{47A0C382-35D7-4A3A-B9AF-B2D38827A8A7}Visible) (Version: 15.0.5545 - Acronis)
Acronis*True*Image*Home 2012 (Version: 15.0.5545 - Acronis) Hidden
Adobe Acrobat 6.0 Professional (HKLM\...\{AC76BA86-1033-0000-7760-000000000001}) (Version: 006.000.000 - Adobe Systems)
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20039 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 19.0.0.241 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM\...\Adobe Creative Cloud) (Version: 3.9.0.334 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Flash Player 23 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 23.0.0.205 - Adobe Systems Incorporated)
Adobe GoLive CS (ENG) (HKLM\...\{D3E4251D-8364-4698-B0E0-A7C799384403}) (Version: CS - Adobe Systems, Inc.)
Adobe Illustrator CS (HKLM\...\{91A4AD99-69CE-4745-97B7-0E0DFBECFDE5}) (Version: 11 - Adobe Systems, Inc.)
Adobe InDesign CS (HKLM\...\{416DFEDD-9F1B-4EFC-AF70-FCA891AE0251}) (Version: CS - Adobe Systems Incorporated)
Adobe Photoshop CC 2015.5 (32 Bit) (HKLM\...\PHSP_17_0_1_32) (Version: 17.0.1 - Adobe Systems Incorporated)
Adobe Photoshop CS (HKLM\...\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}) (Version: CS - Adobe Systems, Inc.)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.2.602 - Adobe Systems, Inc.)
Adobe SVG Viewer 3.0 (HKLM\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)
Adobe Version Cue (HKLM\...\{01958032-9877-4118-B87F-9EFA74B3F15F}) (Version: 1.0 - Adobe Systems, Inc.)
ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (32-Bit) (HKLM\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5CFFD58D-A8EB-439C-B3FD-A8862C886C55}) (Version: 10.0.0.18 - Apple Inc.)
Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Artisteer 3 (HKLM\...\Artisteer 3) (Version: 3.0 - Extensoft)
Autotask MS Outlook Extension (HKLM\...\{EC85AAAB-1AB9-4C0D-BAFC-13D8151E7839}) (Version: 3.2.1 - Autotask Corporation)
Balsamiq Mockups 3 (HKLM\...\BalsamiqMockups3.EDE15CF69E11F7F7D45B5430C7D37CC6C3545E3C.1) (Version: 3.2.2 - Balsamiq SRL)
Balsamiq Mockups 3 (Version: 3.2.2 - Balsamiq SRL) Hidden
Beyond Compare Version 2.5 (HKLM\...\BC2_is1) (Version:  - Scooter Software)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
Citrix Receiver (HKLM\...\CitrixOnlinePluginPackWeb) (Version: 14.4.1000.16 - Citrix Systems, Inc.)
cnlabSpeedTest (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\{fxApplication}}_is1) (Version: 1.4.1 - cnlab AG)
CodeTwo Email Signatures Client App (HKLM\...\{D54A42C7-3929-4739-B3C0-D6D6A7AB05F5}) (Version: 1.5.0.45 - CodeTwo)
CTX blue office (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Mastermindhqs-a9867bdc@@dvrds01.CTX blue office) (Version: 1.0 - Delivered by Citrix)
CTX Explorer (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Mastermindhqs-a9867bdc@@dvrds01.CTX Explorer) (Version: 1.0 - Delivered by Citrix)
CTX TimeInfo MA (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Mastermindhqs-a9867bdc@@dvrds01.CTX TimeInfo MA) (Version: 1.0 - Delivered by Citrix)
DATA BECKER Tipp Top 7 (HKLM\...\Tipp Top 7_is1) (Version: 7.0 - DATA BECKER GmbH & Co. KG)
Dropbox (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\Dropbox) (Version: 13.4.21 - Dropbox, Inc.)
Elevated Installer (Version: 4.1.16.0 - Garmin Ltd or its subsidiaries) Hidden
EPSON BX300F Series Printer Uninstall (HKLM\...\EPSON BX300F Series) (Version:  - SEIKO EPSON Corporation)
Epson Easy Photo Print 2 (HKLM\...\{DEDB47A3-C988-4A43-A645-E2CEA571E680}) (Version: 2.0.0.0 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - )
EPSON Stylus Office BX300F_TX300F Handbuch (HKLM\...\EPSON Stylus Office BX300F_TX300F Benutzerhandbuch) (Version:  - )
Extended Asian Language font pack for Adobe Reader XI (HKLM\...\{AC76BA86-7AD7-2530-0000-A00000000049}) (Version: 11.0.09 - Adobe Systems Incorporated)
Free Mobile Converter 2.0.1 (HKLM\...\Free Mobile Converter) (Version: 2.0.1 - 1Freeware)
FreeFileSync v4.5 (HKLM\...\FreeFileSync) (Version: 4.5 - ZenJu)
FTP Voyager 16.1.0 (HKLM\...\FTP Voyager_is1) (Version: 16.1.0.0 - SolarWinds Worldwide LLC)
Garmin Express (HKLM\...\{0733d53f-b41d-47cc-b336-d95751c4b2cb}) (Version: 4.1.16.0 - Garmin Ltd or its subsidiaries)
Garmin Express (Version: 4.1.16.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (Version: 4.1.16.0 - Garmin Ltd or its subsidiaries) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 54.0.2840.71 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7619.1252 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
GWX Control Panel (HKLM\...\UltimateOutsider_GwxControlPanel) (Version:  - UltimateOutsider)
HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation)
Hotfix für Microsoft Visual Web Developer 2010 Express - DEU (KB2548139) (HKLM\...\{638AA518-6A32-33CC-B88F-BCD20B2DCF2E}.KB2548139) (Version: 1 - Microsoft Corporation)
Hotfix für Microsoft Visual Web Developer 2010 Express - DEU (KB2635973) (HKLM\...\{638AA518-6A32-33CC-B88F-BCD20B2DCF2E}.KB2635973) (Version: 1 - Microsoft Corporation)
iCloud (HKLM\...\{61D7B517-5914-41D4-BD27-927163631227}) (Version: 5.2.2.87 - Apple Inc.)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
iTunes (HKLM\...\{C27F2813-083D-4E6C-A565-17E22D1F7FC8}) (Version: 12.5.1.21 - Apple Inc.)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Kaspersky Anti-Virus (HKLM\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Anti-Virus (Version: 15.0.1.415 - Kaspersky Lab) Hidden
KeePass for Pleasant Password Server (HKLM\...\{26ae3288-f8ca-4fb9-bdab-b8bf2764a4e4}) (Version: 7.3.1.0 - Pleasant Solutions Inc.)
KeePass for Pleasant Password Server (Version: 7.3.1.0 - Pleasant Solutions Inc.) Hidden
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
Macromedia Dreamweaver MX 2004 (HKLM\...\{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}) (Version: 7.0 - Macromedia)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Media Add-on für Acronis True Image Home 2012 (HKLM\...\{EAE5EDA9-F70E-4A70-B7BF-F764557E7BA7}) (Version: 15.0.5545 - Acronis)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 - DEU (HKLM\...\{E4E9CBC9-1CF5-48E3-AF6F-1AB44A856346}) (Version: 2.0.50331.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 - VWD Express 2010 Tools - DEU (HKLM\...\{2CE77981-14DE-4773-8106-27C9C964720C}) (Version: 2.0.50331.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 - VWD Express 2010 Tools (HKLM\...\{5BDFAB82-060E-438B-AB4F-A2331B2294C0}) (Version: 2.0.50217.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 (HKLM\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.6965.2092 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\OneDriveSetup.exe) (Version: 17.3.5951.0827 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft Silverlight 3 SDK - Deutsch (HKLM\...\{91F54E1D-804A-46D8-A56C-53EA9C4B3177}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK - Deutsch (HKLM\...\{803910CC-3A39-45E3-A594-0D5512A60A86}) (Version: 4.0.50826.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (HKLM\...\Microsoft SQL Server 10 Release) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{5157F185-CA5F-4952-94E2-EF5C8EC83E45}) (Version: 10.2.4064.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Policies (HKLM\...\{695E67B6-8B95-4160-9650-92974980CDC1}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Setup Support Files  (HKLM\...\{2AF7B7D7-C4E9-4A0C-BBA1-B2B3633D1CBC}) (Version: 10.2.4064.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 (Deutsch) (HKLM\...\{FA440BE8-EC2F-4478-A01A-077DA0606501}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1-Abfragetools (Deutsch) (HKLM\...\{0DD2DCC6-21AE-4678-8629-1084B17BE077}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Runtime - 10.0.40219 (HKLM\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Web Developer 2010 Express - DEU (HKLM\...\Microsoft Visual Web Developer 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
MozBackup 1.4.10 (HKLM\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 49.0.1 (x86 de) (HKLM\...\Mozilla Firefox 49.0.1 (x86 de)) (Version: 49.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 49.0.1.6109 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 de) (HKLM\...\Mozilla Thunderbird 45.4.0 (x86 de)) (Version: 45.4.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.7 - F.J. Wechselberger)
Nero BurnLite 10 (HKLM\...\{842BEE12-CCCB-43F4-ABAF-CBA6DFE2583D}) (Version: 10.0.10500 - Nero AG)
Nero BurnLite 10 (HKLM\...\{AB627AF2-9C7E-4DBD-816B-3B2646B81E89}) (Version: 10.0.10100.1.100 - Nero AG)
Nero Update (HKLM\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 1.0.0018 - Nero AG)
Notepad++ (HKLM\...\Notepad++) (Version: 6.6.4 - Notepad++ Team)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.6965.2092 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6965.2092 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.6965.2092 - Microsoft Corporation) Hidden
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Online Plug-in (Version: 14.4.1000.16 - Citrix Systems, Inc.) Hidden
Opera Stable 41.0.2353.46 (HKLM\...\Opera 41.0.2353.46) (Version: 41.0.2353.46 - Opera Software)
PIF DESIGNER (HKLM\...\{B90450DF-E781-46FD-B1F1-0C86DA40E443}) (Version:  - )
Protect Disc License Helper 1.0.118 (HKLM\...\Protect Disc License Helper) (Version: 1.0.118 - Protect Disc)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.12 - ProtectDisc Software GmbH)
QuickTime 7 (HKLM\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Kies3 (HKLM\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (Version: 3.2.16011.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
Self-Service Plug-in (Version: 4.4.1000.13058 - Citrix Systems, Inc.) Hidden
Service Pack 3 für SQL Server 2008 (KB2546951) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation)
Skype Click to Call (HKLM\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.1.15383.6004 - Microsoft Corporation)
Skype for Business 2016 - de-de (HKLM\...\SkypeforBusinessRetail - de-de) (Version: 16.0.6965.2092 - Microsoft Corporation)
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smart Switch (HKLM\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.16032.18 - Samsung Electronics Co., Ltd.)
Smart Switch (Version: 4.1.16032.18 - Samsung Electronics Co., Ltd.) Hidden
Softwarenetz Rechnung4 (HKLM\...\Rechnung4) (Version:  - Softwarenetz)
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.0.12 - Safer-Networking Ltd.)
TeamViewer 11 (HKLM\...\TeamViewer) (Version: 11.0.66695 - TeamViewer)
WCF RIA Services V1.0 SP1 (HKLM\...\{D9E6001A-5DC3-4620-AF7A-80B6CD48645D}) (Version: 4.1.60114.0 - Microsoft Corporation)
Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation)
Webocton - Scriptly 0.8.95.6.COM (HKLM\...\Webocton - Scriptly_is1) (Version: 0.8.95.6 - Webocton)
Windows Live ID-Anmelde-Assistent (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{904CCF62-818D-4675-BC76-D37EB399F917}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter: Treiberupdate (HKLM\...\{E7044E25-3038-4A76-9064-344AC038043E}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
Xenu's Link Sleuth (HKLM\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Berthold\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\Muster M\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\Muster M\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{4F8ABD16-E446-43C3-A154-484F507060B4}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Add-in Express\Duplicate Remover for Microsoft Excel\adxloader.dll ()
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{584482F3-1EFA-48A5-AA4A-DA2E06B0A54C}\localserver32 -> C:\Users\Muster M\AppData\Roaming\Add-in Express\Duplicate Remover for Microsoft Excel\AblebitsLoader.exe (Add-in Express Ltd.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\Muster M\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\Muster M\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\Muster M\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\Muster M\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{E7A37920-253C-4FF1-B169-298A7CE6CAA9}\localserver32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Muster M\AppData\Roaming\Dropbox\bin\DropboxExt.1.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-95033592-1126372089-4278029988-1000_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\Muster M\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {05FE78FD-D4DD-429C-A0BB-14D8E64E54E3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe [2012-11-13] (Safer-Networking Ltd.)
Task: {07B8A434-ECE3-422D-8C7A-A94BACC75B6C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {101974F2-6EF6-461A-962B-F8349C3A7688} - System32\Tasks\{E5A5B4B9-2209-4728-B0CC-D493C03D3973} => pcalua.exe -a "L:\downloads\tools\FTP Voyager\FTPVSetup.exe" -d "L:\downloads\tools\FTP Voyager"
Task: {1E1C8897-A6A9-40FC-A077-5225BAB6743B} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1000UA => C:\Users\Muster M\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {1F678D57-86FC-4B26-8DA2-1CC6D01377CB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {2ED97E4E-21A7-4A2F-B76E-A255D8B3BFA5} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-10-04] (Microsoft Corporation)
Task: {3E472F76-29CD-4AD7-856C-BADF12B3803C} - System32\Tasks\Opera scheduled Autoupdate 1374583353 => C:\Program Files\Opera\launcher.exe [2016-10-24] (Opera Software)
Task: {44109411-B04A-4854-AF31-B735E3B09067} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {4BA508EF-388C-427F-8EF9-72CD8C8DDA66} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1005Core => C:\Users\Berthold\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-20] (Dropbox, Inc.)
Task: {55D9F8F9-EDE5-40AE-A983-EC0CFC44C392} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2016-01-28] ()
Task: {575E15A1-D3BB-43B5-9C91-FB57B89A5433} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5BB8AD89-0F73-42AB-8CDA-F1BF70F52FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {6376CB00-21D8-4F4C-941A-533AB668CF97} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {680C6D27-0106-4DEA-83FC-22AA0344CDBF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {6B4CF6F0-0553-477A-9857-24E514F2A2F2} - System32\Tasks\{5E5A9D3B-550E-4EB2-98ED-9713708A0AA4} => pcalua.exe -a K:\Downloads\Bitdefender\2011\Patchs\bdfsfltr_2.exe -d K:\Downloads\Bitdefender\2011\Patchs
Task: {7AA93DBD-43EC-49FA-AD4F-FFAF2BEFB679} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {7E669539-0E7D-45DC-8E10-87B1D6F051C4} - System32\Tasks\{F89078DD-99FB-4DAC-8BFB-EFB9FAFC3012} => pcalua.exe -a K:\Downloads\Bitdefender\2011\Patchs\bdfsfltr_1.exe -d K:\Downloads\Bitdefender\2011\Patchs
Task: {8681CD97-7F70-45E7-A938-E88B46154265} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-03] (Microsoft Corporation)
Task: {8E74F489-2F75-4B5F-99F0-A6B9E397D025} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {960C2FC0-FC61-42F1-AC1C-C00567AC2B07} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe [2012-11-13] (Safer-Networking Ltd.)
Task: {9BB3226B-EE7E-4D6B-82DE-1D7B06866BF7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {A1207353-FC48-4EB5-AB56-BA3D520F5650} - System32\Tasks\{54D113E6-CBD3-4414-8F1D-D96D15011972} => pcalua.exe -a E:\LaCie.exe -d E:\
Task: {A917B18B-8719-4EC3-907E-7EB4FC1B8CB1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-10-04] (Microsoft Corporation)
Task: {BA83C72E-AE4D-4E07-8CF5-6DECF4F79FEB} - System32\Tasks\{32C9F5DB-70CC-46F6-A6A4-39266758C052} => C:\Program Files\Skype\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {C12F68A4-6D19-470C-9CF4-FB8D0FE2E462} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {D9FAAE5C-1119-4A98-854A-21B4A6F1227E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-26] (Piriform Ltd)
Task: {DB9E3454-B5D0-4439-B6DC-981FF8675E5F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {E7563B40-5ECC-40A7-AFA2-D491FC0E9856} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1000Core => C:\Users\Muster M\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {F3D4F068-8986-4723-8865-FCF670B784F6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-10-04] (Microsoft Corporation)
Task: {F550D866-91C0-4314-B610-73CB26C412BB} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1005UA => C:\Users\Berthold\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-20] (Dropbox, Inc.)
Task: {F683EC2C-CFE3-4910-9CAC-B4B5CDED51AB} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe [2012-11-13] (Safer-Networking Ltd.)
Task: {F7C0EAF8-FF3F-47A4-A671-BC70EE65E01D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-03] (Microsoft Corporation)
Task: {FC1AD44A-C482-43FA-A1E2-A04D44B9B990} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-09-16] (Adobe Systems Incorporated)
Task: {FF0645A8-F4CD-404B-920D-3CF3E53DD4AA} - System32\Tasks\AdobeAAMUpdater-1.0-MUSTERW-Muster M => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1000Core.job => C:\Users\Muster M\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1000UA.job => C:\Users\Muster M\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1005Core.job => C:\Users\Berthold\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-95033592-1126372089-4278029988-1005UA.job => C:\Users\Berthold\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Muster M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Long Tail Keyword Tool Pro.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=omgaibbfggpdeokldjpldejliojjedep

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-09-01 18:13 - 2016-09-01 18:13 - 00080184 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-09-01 18:13 - 2016-09-01 18:13 - 01041720 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\kpcengine.2.3.dll
2014-02-11 17:57 - 2012-11-13 15:06 - 00108960 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-02-11 17:57 - 2012-11-13 15:06 - 00416160 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2014-02-11 17:57 - 2012-11-13 15:06 - 00158624 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-02-11 17:57 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-02-11 17:57 - 2012-11-13 15:06 - 00528288 _____ () C:\Program Files\Spybot - Search & Destroy 2\JSDialogPack150.bpl
2011-08-20 21:56 - 2011-08-20 21:56 - 00435552 _____ () C:\Program Files\Acronis\TrueImageHome\Common\ulxmlrpcpp.dll
2016-10-18 14:06 - 2016-10-18 14:06 - 00407216 _____ () C:\Program Files\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x86.dll
2011-08-20 22:37 - 2011-08-20 22:37 - 00018784 _____ () C:\Program Files\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
2010-02-16 16:16 - 2010-02-10 19:10 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00260608 _____ () C:\Program Files\Notepad++\NppShell_06.dll
2016-08-26 20:25 - 2016-08-26 20:25 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-02-11 17:57 - 2012-11-13 15:06 - 00554400 _____ () C:\Program Files\Spybot - Search & Destroy 2\VirtualTreesDXE150.bpl

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:373E1720 [119]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\autotask.com -> autotask.com
IE trusted site: HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\autotask.net -> autotask.net
IE trusted site: HKU\S-1-5-21-95033592-1126372089-4278029988-1000\...\sharepoint.com -> hxxps://Mastermind-files.sharepoint.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:04 - 2016-04-26 14:16 - 00000900 ____A C:\Windows\system32\Drivers\etc\hosts

       

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-95033592-1126372089-4278029988-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Muster M\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^3CXPhone for Windows.lnk => C:\Windows\pss\3CXPhone for Windows.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acrobat Assistant.lnk => C:\Windows\pss\Acrobat Assistant.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk => C:\Windows\pss\Adobe Gamma Loader.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Muster M^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Muster M^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Citrix Receiver (1).lnk => C:\Windows\pss\Citrix Receiver (1).lnk.Startup
MSCONFIG\startupfolder: C:^Users^Muster M^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Citrix Receiver.lnk => C:\Windows\pss\Citrix Receiver.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Muster M^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: 3CX MyPhone1677492129.46.14.216.122 => C:\Users\Muster M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3CX MyPhone (2).lnk
MSCONFIG\startupreg: 3CX MyPhone3352490883.46.14.216.122 => C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3CX MyPhone.lnk
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeVersionCue => C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: ConnectionCenter => "C:\Program Files\Citrix\ICA Client\concentr.exe" /startup
MSCONFIG\startupreg: FTPVoyagerSchedulerTrayIcon => "C:\Program Files\RhinoSoft\FTP Voyager\FTP Voyager Scheduler Tray.exe"
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: iCloudServices => "C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe"
MSCONFIG\startupreg: ISW =>
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Lync => "C:\Program Files\Microsoft Office 15\root\office15\lync.exe" /fromrunkey
MSCONFIG\startupreg: Redirector => "C:\Program Files\Citrix\ICA Client\redirector.exe" /startup
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
MSCONFIG\startupreg: Windows Mobile Device Center => %windir%\WindowsMobile\wmdc.exe

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{F82BF24A-4C06-4AF6-AEDE-BF1D6136098E}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{7D14B347-1A62-4EAB-88B1-98E1F4E3E8B6}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{83C09058-B7F3-4807-A4F5-E89EAD5C8E77}] => (Allow) %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{9AEA4AF9-DEF7-4808-8636-20C42253AEA3}] => (Allow) LPort=26675
FirewallRules: [TCP Query User{094FB060-B310-4DFF-A0EB-B069F923E2EB}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{32D694D2-EB34-4079-9AFC-F69C1F7FE9BB}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [{741F7624-41E4-40F1-B4FC-FB911C17330B}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{58738422-5684-4D52-A019-F3E52760967C}] => (Allow) C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{94733DF2-2465-4166-B68E-5C16E808D11D}] => (Allow) C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{99FED989-BEF2-4598-8AD7-9F326DC53B0C}] => (Allow) C:\Users\Muster M\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{F719BBA8-F3A3-404F-A1B8-0616D479AF32}] => (Allow) C:\Users\Muster M\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C68499A0-5038-4F41-B71A-A0780080D012}] => (Allow) C:\Users\Berthold\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{22D3F35D-5FA4-4773-8924-02766646C6D0}] => (Allow) C:\Users\Berthold\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{D36CF86A-DC54-487B-BD26-71CCD8132934}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{8EB9BE77-8DD1-494C-A4BB-4E848901C3DD}C:\program files\internet explorer\iexplore.exe] => (Block) C:\program files\internet explorer\iexplore.exe
FirewallRules: [{85FE8A84-CD60-4E18-ACA0-0F9F616B9904}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [{F45F1096-58BA-4768-832D-307735139318}] => (Allow) C:\Windows\System32\muzapp.exe
FirewallRules: [TCP Query User{075775C9-78E3-4AAB-8338-FC64914EA634}C:\program files\rhinosoft\ftp voyager\ftp voyager.exe] => (Allow) C:\program files\rhinosoft\ftp voyager\ftp voyager.exe
FirewallRules: [UDP Query User{60A75989-BB0E-438F-8C55-9EE47815340B}C:\program files\rhinosoft\ftp voyager\ftp voyager.exe] => (Allow) C:\program files\rhinosoft\ftp voyager\ftp voyager.exe
FirewallRules: [TCP Query User{048E1A4E-9DE5-4534-99DC-E8E4826D30FB}C:\program files\microsoft silverlight\sllauncher.exe] => (Allow) C:\program files\microsoft silverlight\sllauncher.exe
FirewallRules: [UDP Query User{FD286A70-D856-4AE3-B455-A821BEE6805A}C:\program files\microsoft silverlight\sllauncher.exe] => (Allow) C:\program files\microsoft silverlight\sllauncher.exe
FirewallRules: [{430C9DCC-5B2C-4A05-8066-F73055A0DF55}] => (Allow) LPort=8743
FirewallRules: [{72E39D38-BC71-49A9-83F6-2FC9C171A8C5}] => (Allow) LPort=8643
FirewallRules: [{DF80ADEB-63F8-4A65-A74F-DAA0D3DAD111}] => (Allow) LPort=7676
FirewallRules: [{76D9AF21-38B9-4290-8D29-4E3AE0C71AE4}] => (Allow) LPort=7679
FirewallRules: [{C3661200-0B7F-4E20-8A24-F3BCE1352718}] => (Allow) LPort=24234
FirewallRules: [{A1BDA1D3-8949-4822-9589-6643D9D5D6B6}] => (Allow) LPort=7900
FirewallRules: [{FA78D233-B907-4558-8CFC-E7E6944AE1D9}] => (Allow) LPort=1900
FirewallRules: [{C96740D9-F01E-42F5-A832-1D1939DFB0C7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{4B5A306E-E4AA-46E3-AF7E-83BE3DCDB017}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4F8E45FE-47A1-4AE7-A07D-FD15D845E8BC}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{075BAA5A-A05F-4AF6-846F-7D19A579233F}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{DA72F094-FEB5-41C1-BB07-CFEFBBC0ACD4}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{ED8F3FE6-5810-46CC-914D-A85E77CAE5B0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{244A3008-7A43-4D59-94DE-0AC6F57A23F9}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{73E19C3B-B226-474A-B17F-FB179ADE8F80}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{FC8CAEFF-E487-43E2-9930-2537207FD4AF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{18FC3294-26A0-4C36-BD5B-6DAD687912E6}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C9421307-3337-43DD-8E37-6C49CFFF313F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B0FA52E7-A07F-4E91-BFF4-9167E7033A72}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{62F4CF77-FE53-4173-A04C-4A02C5CA917F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{8C4EB1F8-E2FA-4A09-B924-59FC93AE1EB4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{35F29AF4-351A-4123-B831-9D55B7ACFE39}C:\users\Muster M\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\Muster M\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{49FE69DB-6205-4CEF-A94E-D5978EB56684}C:\users\Muster M\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\Muster M\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{DC177E08-955E-47DE-BF02-181A245EAE6F}C:\users\Berthold\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\Berthold\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{10F7414E-E9E9-40D2-98D8-5A27E5F2E836}C:\users\Berthold\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\Berthold\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{5917C2B6-7279-4471-8368-772F247FB7A4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{861C2053-E2FE-4410-98B6-7412E9220E55}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [TCP Query User{10AEC9F7-4219-4AF2-8908-0CD9C3A9F929}C:\program files\rhinosoft\ftp voyager\ftp voyager.exe] => (Allow) C:\program files\rhinosoft\ftp voyager\ftp voyager.exe
FirewallRules: [UDP Query User{C810D086-34F7-4AB2-B469-2745BC1EB9B2}C:\program files\rhinosoft\ftp voyager\ftp voyager.exe] => (Allow) C:\program files\rhinosoft\ftp voyager\ftp voyager.exe
FirewallRules: [{B989015E-EC65-4944-B324-98E13E30A991}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{2C05A5CE-6289-4081-A915-06D7ACF3F6E4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{6859C5DD-34C3-42CE-824C-25871DDE8540}] => (Allow) C:\ProgramData\3CXPhone for Windows\PhoneApp\3CXWin8Phone.exe
FirewallRules: [{85FCC321-6E17-41C5-9541-9903CAB6A628}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{55692377-F721-4B59-B627-A066F9A4653B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{5989E26C-C28D-45FA-A1A8-0F27B8685E97}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{676E92BA-F652-4A4C-8E7B-E1BDCCBD1064}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{10223E5B-2D77-43EB-8AA7-9743164492FD}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{1982F1D9-4A4D-47B4-9A1F-038F9AB9CB68}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{5A7E7DEA-8940-42EE-839F-50C9198B74F4}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot-S&D 2 Tray Icon
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Wiederherstellungspunkte =========================

21-10-2016 10:11:23 Windows Update
24-10-2016 20:56:08 Windows Update
24-10-2016 21:10:34 Windows Update
25-10-2016 09:37:40 JRT Pre-Junkware Removal
27-10-2016 12:03:27 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: MoboroboAssDriver
Description: MoboroboAssDriver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MoboroboAssDriver
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/27/2016 10:40:11 AM) (Source: MsiInstaller) (EventID: 11714) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1714. The older version of Skype Click to Call cannot be removed. Contact your technical support group. System Error 1612.

Error: (10/26/2016 10:40:13 AM) (Source: MsiInstaller) (EventID: 11714) (User: NT-AUTORITÄT)
Description: Product: Skype Click to Call -- Error 1714. The older version of Skype Click to Call cannot be removed. Contact your technical support group. System Error 1612.

Error: (10/25/2016 05:17:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.23537, Zeitstempel: 0x57c44cc4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x056d0fef
ID des fehlerhaften Prozesses: 0x17c4
Startzeit der fehlerhaften Anwendung: 0x01d22ebac72c7d7b
Pfad der fehlerhaften Anwendung: C:\Windows\Explorer.EXE
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 34588430-9ac6-11e6-aef7-002618cca3d8

Error: (10/25/2016 12:02:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 32776

Error: (10/25/2016 12:02:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 32776

Error: (10/25/2016 12:02:06 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/25/2016 12:02:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 31746

Error: (10/25/2016 12:02:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 31746

Error: (10/25/2016 12:02:05 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (10/25/2016 12:02:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 30670


Systemfehler:
=============
Error: (10/27/2016 11:57:25 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
MoboroboAssDriver

Error: (10/27/2016 11:56:57 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (10/27/2016 11:56:57 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/27/2016 08:21:15 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (10/27/2016 08:18:23 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.

Error: (10/27/2016 08:15:52 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
MoboroboAssDriver

Error: (10/27/2016 08:15:23 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active

Error: (10/27/2016 08:15:23 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter

Error: (10/26/2016 09:28:05 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
MoboroboAssDriver

Error: (10/26/2016 09:27:35 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active


CodeIntegrity:
===================================
  Date: 2015-03-06 09:59:29.673
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-06 09:59:29.671
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-06 09:59:29.669
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-06 09:59:29.660
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-06 09:59:29.658
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-06 09:59:29.656
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-04 18:35:02.585
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-04 18:35:02.583
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-04 18:35:02.570
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-03-04 18:35:02.541
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 15.0.1\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz
Prozentuale Nutzung des RAM: 44%
Installierter physikalischer RAM: 3583.12 MB
Verfügbarer physikalischer RAM: 1972.29 MB
Summe virtueller Speicher: 7164.56 MB
Verfügbarer virtueller Speicher: 5133.75 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:309.18 GB) (Free:158.8 GB) NTFS
Drive k: (Lange) (Fixed) (Total:286.89 GB) (Free:251.72 GB) NTFS
Drive z: () (Network) (Total:931.51 GB) (Free:845.95 GB)

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 3C8637A3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=309.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=286.9 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================

cosinus 27.10.2016 14:12
FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
BHO: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei
BHO: Kein Name -> {53707962-6F74-2D53-2644-206D7942484F} -> Keine Datei
Toolbar: HKU\S-1-5-21-95033592-1126372089-4278029988-1000 -> Kein Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  Keine Datei
DPF: {2685176A-3502-47BB-B91D-BD28CA2A06A0} https://www.autotask.net/Public/BrowserDetect/AT_ActiveX_Test.CAB
C:\Users\Muster\AppData\Local\Tempzxpsign84fa37de6054094e
C:\Users\Muster\AppData\Local\Tempzxpsign508c0fe5c3bb4564
C:\Windows\system32\Neuer Ordner
C:\Users\Muster\AppData\Local\Tempzxpsign70553ae5ee3b2b52
C:\Users\Muster\AppData\Local\Tempzxpsigna1790ed0c5442326
C:\Users\Muster\AppData\Local\Tempzxpsign4eb7d306786be687
C:\Users\Muster\AppData\Local\Tempzxpsign915d0e6b59da9f94
C:\Users\Muster\AppData\Local\Tempzxpsign72fb5a96292f0196
C:\Users\Muster\AppData\Local\Tempzxpsign588ea06d0e35c97b
C:\Users\Muster\AppData\Local\Tempzxpsignb406a27479eb4f9e
C:\Users\Muster\AppData\Local\Tempzxpsignfea8baf83151965b
C:\Users\Muster\AppData\Local\Tempzxpsign4c7e5a0eec404810
C:\Users\Muster\AppData\Local\Tempzxpsign80de9a5bb2d5caf2
C:\Users\Muster\AppData\Local\Tempzxpsign8f3c3eb662157b9e
C:\Users\Muster\AppData\Local\Tempzxpsign21e7572e9ef18e36
C:\Users\Muster\AppData\Local\Tempzxpsign7b2adde925eb3daf
C:\Users\Muster\AppData\Local\Tempzxpsign784ce3f43dda2c9a
C:\Users\Muster\AppData\Local\Tempzxpsign3b8aeab48aaba224
C:\Users\Muster\AppData\Local\Tempzxpsignb54e5819f0913fcd
C:\Users\Muster\AppData\Local\Tempzxpsign13d3e7dbd8ea765e
C:\Users\Muster\AppData\Local\Tempzxpsign1246b9e1debc113a
C:\Users\Muster\AppData\Local\Tempzxpsignef81189e91c568da
C:\Users\Muster\AppData\Local\Tempzxpsigne071913efe331e88
C:\Users\Muster\AppData\Local\Tempzxpsign6064faa39ebcbcc6
C:\Users\Muster\AppData\Local\Tempzxpsignc5b0fb80461fef43
C:\Users\Muster\AppData\Local\Tempzxpsign1d8f09451e3d1bd7
C:\Users\Muster\Silverlight.exe
Task: {44109411-B04A-4854-AF31-B735E3B09067} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {575E15A1-D3BB-43B5-9C91-FB57B89A5433} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5BB8AD89-0F73-42AB-8CDA-F1BF70F52FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {6376CB00-21D8-4F4C-941A-533AB668CF97} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {680C6D27-0106-4DEA-83FC-22AA0344CDBF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7AA93DBD-43EC-49FA-AD4F-FFAF2BEFB679} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8E74F489-2F75-4B5F-99F0-A6B9E397D025} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {C12F68A4-6D19-470C-9CF4-FB8D0FE2E462} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {DB9E3454-B5D0-4439-B6DC-981FF8675E5F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Markusli 27.10.2016 14:48
Fixlog
 
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version: 26-10-2016
durchgeführt von Muster (27-10-2016 15:29:39) Run:1
Gestartet von C:\Users\Muster\Downloads\Tools\ScannerTools
Geladene Profile: Muster (Verfügbare Profile: Muster & berthold & Administrator)
Start-Modus: Normal

==============================================

fixlist Inhalt:
*****************
BHO: Kein Name -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Keine Datei
BHO: Kein Name -> {53707962-6F74-2D53-2644-206D7942484F} -> Keine Datei
Toolbar: HKU\S-1-5-21-95033592-1126372089-4278029988-1000 -> Kein Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} -  Keine Datei
DPF: {2685176A-3502-47BB-B91D-BD28CA2A06A0} https://www.autotask.net/Public/BrowserDetect/AT_ActiveX_Test.CAB
C:\Users\Muster\AppData\Local\Tempzxpsign84fa37de6054094e
C:\Users\Muster\AppData\Local\Tempzxpsign508c0fe5c3bb4564
C:\Windows\system32\Neuer Ordner
C:\Users\Muster\AppData\Local\Tempzxpsign70553ae5ee3b2b52
C:\Users\Muster\AppData\Local\Tempzxpsigna1790ed0c5442326
C:\Users\Muster\AppData\Local\Tempzxpsign4eb7d306786be687
C:\Users\Muster\AppData\Local\Tempzxpsign915d0e6b59da9f94
C:\Users\Muster\AppData\Local\Tempzxpsign72fb5a96292f0196
C:\Users\Muster\AppData\Local\Tempzxpsign588ea06d0e35c97b
C:\Users\Muster\AppData\Local\Tempzxpsignb406a27479eb4f9e
C:\Users\Muster\AppData\Local\Tempzxpsignfea8baf83151965b
C:\Users\Muster\AppData\Local\Tempzxpsign4c7e5a0eec404810
C:\Users\Muster\AppData\Local\Tempzxpsign80de9a5bb2d5caf2
C:\Users\Muster\AppData\Local\Tempzxpsign8f3c3eb662157b9e
C:\Users\Muster\AppData\Local\Tempzxpsign21e7572e9ef18e36
C:\Users\Muster\AppData\Local\Tempzxpsign7b2adde925eb3daf
C:\Users\Muster\AppData\Local\Tempzxpsign784ce3f43dda2c9a
C:\Users\Muster\AppData\Local\Tempzxpsign3b8aeab48aaba224
C:\Users\Muster\AppData\Local\Tempzxpsignb54e5819f0913fcd
C:\Users\Muster\AppData\Local\Tempzxpsign13d3e7dbd8ea765e
C:\Users\Muster\AppData\Local\Tempzxpsign1246b9e1debc113a
C:\Users\Muster\AppData\Local\Tempzxpsignef81189e91c568da
C:\Users\Muster\AppData\Local\Tempzxpsigne071913efe331e88
C:\Users\Muster\AppData\Local\Tempzxpsign6064faa39ebcbcc6
C:\Users\Muster\AppData\Local\Tempzxpsignc5b0fb80461fef43
C:\Users\Muster\AppData\Local\Tempzxpsign1d8f09451e3d1bd7
C:\Users\Muster\Silverlight.exe
Task: {44109411-B04A-4854-AF31-B735E3B09067} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {575E15A1-D3BB-43B5-9C91-FB57B89A5433} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5BB8AD89-0F73-42AB-8CDA-F1BF70F52FCC} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {6376CB00-21D8-4F4C-941A-533AB668CF97} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {680C6D27-0106-4DEA-83FC-22AA0344CDBF} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7AA93DBD-43EC-49FA-AD4F-FFAF2BEFB679} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8E74F489-2F75-4B5F-99F0-A6B9E397D025} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {C12F68A4-6D19-470C-9CF4-FB8D0FE2E462} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {DB9E3454-B5D0-4439-B6DC-981FF8675E5F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
emptytemp:
*****************

"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{53707962-6F74-2D53-2644-206D7942484F} => Schlüssel nicht gefunden.
HKU\S-1-5-21-95033592-1126372089-4278029988-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} => Wert erfolgreich entfernt
HKCR\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2685176A-3502-47BB-B91D-BD28CA2A06A0}" => Schlüssel erfolgreich entfernt
"HKCR\CLSID\{2685176A-3502-47BB-B91D-BD28CA2A06A0}" => Schlüssel erfolgreich entfernt
"C:\Users\Muster\AppData\Local\Tempzxpsign84fa37de6054094e" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign508c0fe5c3bb4564" => nicht gefunden.
C:\Windows\system32\Neuer Ordner => erfolgreich verschoben
"C:\Users\Muster\AppData\Local\Tempzxpsign70553ae5ee3b2b52" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsigna1790ed0c5442326" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign4eb7d306786be687" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign915d0e6b59da9f94" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign72fb5a96292f0196" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign588ea06d0e35c97b" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsignb406a27479eb4f9e" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsignfea8baf83151965b" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign4c7e5a0eec404810" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign80de9a5bb2d5caf2" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign8f3c3eb662157b9e" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign21e7572e9ef18e36" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign7b2adde925eb3daf" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign784ce3f43dda2c9a" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign3b8aeab48aaba224" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsignb54e5819f0913fcd" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign13d3e7dbd8ea765e" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign1246b9e1debc113a" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsignef81189e91c568da" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsigne071913efe331e88" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign6064faa39ebcbcc6" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsignc5b0fb80461fef43" => nicht gefunden.
"C:\Users\Muster\AppData\Local\Tempzxpsign1d8f09451e3d1bd7" => nicht gefunden.
"C:\Users\Muster\Silverlight.exe" => nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{44109411-B04A-4854-AF31-B735E3B09067}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{44109411-B04A-4854-AF31-B735E3B09067}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{575E15A1-D3BB-43B5-9C91-FB57B89A5433}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{575E15A1-D3BB-43B5-9C91-FB57B89A5433}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BB8AD89-0F73-42AB-8CDA-F1BF70F52FCC}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BB8AD89-0F73-42AB-8CDA-F1BF70F52FCC}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6376CB00-21D8-4F4C-941A-533AB668CF97}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6376CB00-21D8-4F4C-941A-533AB668CF97}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{680C6D27-0106-4DEA-83FC-22AA0344CDBF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{680C6D27-0106-4DEA-83FC-22AA0344CDBF}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7AA93DBD-43EC-49FA-AD4F-FFAF2BEFB679}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AA93DBD-43EC-49FA-AD4F-FFAF2BEFB679}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8E74F489-2F75-4B5F-99F0-A6B9E397D025}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E74F489-2F75-4B5F-99F0-A6B9E397D025}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C12F68A4-6D19-470C-9CF4-FB8D0FE2E462}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C12F68A4-6D19-470C-9CF4-FB8D0FE2E462}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DB9E3454-B5D0-4439-B6DC-981FF8675E5F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB9E3454-B5D0-4439-B6DC-981FF8675E5F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => Schlüssel erfolgreich entfernt

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 17023873 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => 182359626 B
Edge => 0 B
Chrome => 394240526 B
Firefox => 9763063 B
Opera => 1828576 B

Temp, IE cache, history, cookies, recent:
Default => 66228 B
Public => 0 B
ProgramData => 0 B
systemprofile => 131621 B
LocalService => 8329614 B
NetworkService => 2657872 B
Muster => 247944669 B
berthold => 201237032 B
Administrator => 12191998 B

RecycleBin => 254754069 B
EmptyTemp: => 1.2 GB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende vom Fixlog 15:30:34 ====

cosinus 27.10.2016 14:55
Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: MBAM

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: ESET

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

Markusli 27.10.2016 19:30
MBAM-Log ESET Scan läuft noch
 
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 27.10.2016
Suchlaufzeit: 16:08
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.10.27.06
Rootkit-Datenbank: v2016.09.26.02
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Muster

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 425875
Abgelaufene Zeit: 23 Min., 15 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=66890c8dd5c42241807b8480d9f9181f
# end=init
# utc_time=2016-10-27 02:37:14
# local_time=2016-10-27 04:37:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 31215
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=66890c8dd5c42241807b8480d9f9181f
# end=updated
# utc_time=2016-10-27 02:39:03
# local_time=2016-10-27 04:39:03 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=66890c8dd5c42241807b8480d9f9181f
# engine=31215
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-10-27 06:00:21
# local_time=2016-10-27 08:00:21 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Kaspersky Anti-Virus'
# compatibility_mode=1300 16777213 100 100 15639 105162851 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 183105 229222412 0 0
# scanned=457446
# found=2
# cleaned=0
# scan_time=12077
sh=4292A77373DA79021ADBAB121740424440CDFBF4 ft=1 fh=5ce1c4d2eba9a768 vn="Variante von Win32/InstallCore.CH evtl. unerwünschte Anwendung" ac=I fn="C:\Users\berthold\Desktop\google-chrome-setup.exe"
sh=54E5BED30660149304D98AD12D0DE30B49327C9A ft=1 fh=a2e0a5bba0ad1209 vn="Win32/Toolbar.Zugo evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\tools\MIro_Podcaster\Miro_Installer.exe"
Code:
Results of screen317's Security Check version 1.009 
 Windows 7 Service Pack 1 x86 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Kaspersky Anti-Virus 
 Antivirus up to date! 
`````````Anti-malware/Other Utilities Check:`````````
 Spybot - Search & Destroy
 CCleaner   
 Java 8 Update 31 
 Java version 32-bit out of Date!
 Adobe Flash Player        19.0.0.226 
 Adobe Reader 9 
 Adobe Reader XI 
 Mozilla Firefox (49.0.1)
 Mozilla Thunderbird (45.4.0)
 Google Chrome (53.0.2785.143)
 Google Chrome (54.0.2840.71)
 Google Chrome (SetupMetrics...)
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbam.exe 
 Spybot Teatimer.exe is disabled!
 Kaspersky Lab Kaspersky Anti-Virus 15.0.1 avp.exe 
 Kaspersky Lab Kaspersky Anti-Virus 15.0.1 avpui.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:03 Uhr.
Seite 2 von 3 1 2 3
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131