Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   WIndowa 7 Funde OpenCandy.Gen im abgesichternen Modus (https://www.trojaner-board.de/184145-windowa-7-funde-opencandy-gen-abgesichternen-modus.html)

Mineko 28.01.2017 12:45
WIndowa 7 Funde OpenCandy.Gen im abgesichternen Modus
 
Hallo,
da Avira sich nicht mehr starten und updaten ließ, habe ich einen Scan im abgesicherten Modus durchgeführt, mit 2 aktuellen Funden OpenCandy.Gen.
Danach habe ich, dank Eurer tollen Anleitung http://www.trojaner-board.de/147258-...entfernen.html das Problem beseitigen wollen. Allerdings hat der ESET OnlineCLeaner immer noch was gefunden:
Code:
C:\AdwCleaner\quarantine\files\ggoppqrpfeabtekltzlalztmxkjtjgqk\DVDVideoSoftTB.exe        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
C:\Program Files\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe        Variante von Win32/Hao123.A eventuell unerwünschte Anwendung
C:\Users\Kornelia\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.05\agent\stub_data\stubinst_pkg_de.cab        Variante von Win32/RealNetworks.A eventuell unerwünschte Anwendung
C:\Users\Kornelia\AppData\Roaming\uTorrent\updates\3.3.1_30017.exe        Variante von Win32/AdkDLLWrapper.A eventuell unerwünschte Anwendung
C:\Users\Kornelia\Downloads\Format_Factory260DE.exe        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
C:\Users\Kornelia\Downloads\freeyoutubetomp3converter31126.exe.vir        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
E:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\860C184Ed01        Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
E:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\C1F9F939d01        Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
I:\Program Files\Common Files\DVDVideoSoft\TB\DVDVideoSoftTB.exe        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
I:\Program Files\Conduit\Community Alerts\Alert.dll        Win32/Toolbar.Conduit.Y eventuell unerwünschte Anwendung
I:\Users\Kornelia\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx        Variante von Win32/Toolbar.Conduit.AL eventuell unerwünschte Anwendung
I:\Users\Kornelia\AppData\Local\uTorrentBar_DE\ldrtbuTor.dll        Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung
I:\Users\Kornelia\AppData\Local\uTorrentBar_DE\tbuTor.dll        Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung
I:\Users\Kornelia\Downloads\Format_Factory260DE.exe        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
I:\Users\Kornelia\Downloads\Heidi\FreeYouTubeToMP3Converter31126.exe        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 137.zip        Variante von Win32/Hao123.A eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 3.zip        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 4.zip        Win32/Toolbar.Conduit.Y eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 42.zip        Variante von Win32/Toolbar.Conduit.AL eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 49.zip        Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 50.zip        Variante von Win32/AdkDLLWrapper.A eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 52.zip        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 53.zip        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 7.zip        Variante von Win32/Hao123.A eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2016-10-24 123618\Backup Files 2016-10-24 123618\Backup files 4.zip        Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\SICHERUNG VON EXTERN\DATENSICHERUNG HANDY\Handykarte 20161612\Wechseldatenträger\rerware\MyBackup\AllAppsBackups\AppsMedia_2014_02_19\Apps\zsj.android.uninstall_328.apk        Variante von Android/AdDisplay.AppFlood.A eventuell unerwünschte Anwendung
M:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\860C184Ed01        Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
M:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\C1F9F939d01        Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
Vielen Dank für die Hilfe
Lieben Gruß Konni

M-K-D-B 28.01.2017 12:49
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort als Administrator zu starten!
  • Einige Programme, die wir hier verwenden, können unter Umständen von deinem Antiviren- oder Anti-Malwareprogramm fälschlicherweise als Bedrohung eingestuft werden. Die Sicherheitsprogramme können aufgrund eines bestimmten Programmverhaltens nicht zwischen "gut" oder "böse" unterscheiden und schlagen Alarm. Dabei handelt es sich um Fehlalarme, welche du getrost ignorieren kannst. Gegebenenfalls musst du deine Sicherheitssoftware vor der Ausführung eines Programms deaktivieren, damit unsere Bereinigungsvorgänge nicht beeinträchtigt werden.



Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!





Zu Beginn erst mal folgendes:
Zitat:
E:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\860C184Ed01 Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
E:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\C1F9F939d01 Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
I:\Program Files\Common Files\DVDVideoSoft\TB\DVDVideoSoftTB.exe Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
I:\Program Files\Conduit\Community Alerts\Alert.dll Win32/Toolbar.Conduit.Y eventuell unerwünschte Anwendung
I:\Users\Kornelia\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx Variante von Win32/Toolbar.Conduit.AL eventuell unerwünschte Anwendung
I:\Users\Kornelia\AppData\Local\uTorrentBar_DE\ldrtbuTor.dll Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung
I:\Users\Kornelia\AppData\Local\uTorrentBar_DE\tbuTor.dll Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung
I:\Users\Kornelia\Downloads\Format_Factory260DE.exe Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
I:\Users\Kornelia\Downloads\Heidi\FreeYouTubeToMP3Converter31126.exe Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 137.zip Variante von Win32/Hao123.A eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 3.zip Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 4.zip Win32/Toolbar.Conduit.Y eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 42.zip Variante von Win32/Toolbar.Conduit.AL eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 49.zip Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 50.zip Variante von Win32/AdkDLLWrapper.A eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 52.zip Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 53.zip Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 7.zip Variante von Win32/Hao123.A eventuell unerwünschte Anwendung
M:\KORNELIA-PC\Backup Set 2016-10-24 123618\Backup Files 2016-10-24 123618\Backup files 4.zip Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung
M:\SICHERUNG VON EXTERN\DATENSICHERUNG HANDY\Handykarte 20161612\Wechseldatenträger\rerware\MyBackup\AllAppsBackups\AppsMedia_2014_02_19\Apps\zsj.android.uninstall_328.apk Variante von Android/AdDisplay.AppFlood.A eventuell unerwünschte Anwendung
M:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\860C184Ed01 Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
M:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\C1F9F939d01 Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung
Diese Dateien bzw. Ordner befinden sich auf externen Datenträgern. Diese kannst du entweder manuell per Hand entfernen oder nochmal ESET ausführen und von ESET entfernen lassen.











Bitte die Logdateien von AdwCleaner und MBAM posten.


Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:


Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)






Schritt 2
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.







Bitte poste mit deiner nächsten Antwort
  • die Logdateien von AdwCleaner und MBAM mit den Funden,
  • die Logdatei von TDSS-Killer,
  • die beiden neuen Logdateien von FRST.

Mineko 28.01.2017 14:12
Hallo Matthias,
vielen Dank für Deine Hilfe. Nach dem Scan-Marathon war ich müde und hab wohl nicht korrekt gelesen ... Was auf M liegt werde ich einfach nur komplett löschen.
FSRT.txt
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2017 01
durchgeführt von Kornelia (Administrator) auf KORNELIA-PC (28-01-2017 13:04:42)
Gestartet von C:\Users\Kornelia\Desktop\Neuer Ordner (2)
Geladene Profile: Kornelia &  (Verfügbare Profile: Kornelia & Tabea & Konni)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.VpnService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Program Files\dvd43\DVD43_Tray.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intenium) C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe
(Google) C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
() C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4702208 2007-10-01] (Realtek Semiconductor)
HKLM\...\Run: [dvd43] => C:\Program Files\dvd43\dvd43_tray.exe [827904 2009-10-23] ()
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AgentMonitor] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [391040 2013-06-20] ()
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [286992 2015-11-28] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25744 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup Tray] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [160936 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM Group Policy restriction on software: C:\Program Files\Common Files\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122828520\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122828520\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122828520\...\MountPoints2: {663fc844-a6e0-11e0-b32f-806e6f6e6963} - D:\Autorun.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122831952\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122831952\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk [2013-01-10]
ShortcutTarget: Google Calendar Sync.lnk -> C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-11-28]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-10-02]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
Startup: C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-28]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-03-04]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-28]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-28]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
GroupPolicy: Beschränkung ? <======= ACHTUNG
GroupPolicy\User: Beschränkung ? <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-1736235967-2657770174-236075978-1002\User: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23F9AFAB-2021-4A7D-9477-EBCFE8F59F7E}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9AD09A44-51EC-4D6E-9E93-74F49F171E7E}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-11-04] (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122828520 -> Kein Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  Keine Datei
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122828520 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Keine Datei
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default [2017-01-28]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\20811wxw.default ->
FF Homepage: Mozilla\Firefox\Profiles\20811wxw.default -> about:home
FF Session Restore: Mozilla\Firefox\Profiles\20811wxw.default -> ist aktiviert.
FF NetworkProxy: Mozilla\Firefox\Profiles\20811wxw.default -> type", 1
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com [2017-01-26]
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com.xpi [2017-01-08]
FF Extension: (FacebookBlocker) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\facebookBlocker@webgraph.com [2014-02-16] [ist nicht signiert]
FF Extension: (NO Google Analytics) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-JcGokIiQyjoBAQ@jetpack.xpi [2016-06-09]
FF Extension: (Official My JDownloader AddOn) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2017-01-07]
FF Extension: (Test Pilot) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\testpilot@labs.mozilla.com.xpi [2016-09-01]
FF Extension: (NoScript) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-01-20]
FF Extension: (Adblock Plus) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-16]
FF Extension: (Torbutton) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}.xpi [2012-10-11] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-07-05] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: (Mehr Leistung und Videoformate für dein HTML5 &video&) - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-12-27] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll [2012-07-05] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-11-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2010-02-04] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-11-28] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2014-04-27] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2014-04-27] (RealPlayer Cloud)

Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll => Keine Datei
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\pdf.dll => Keine Datei
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default [2017-01-27]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-16]
CHR Extension: (RealDownloader) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-11-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-07]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-15]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files\Avira\VPN\Avira.VpnService.exe [300344 2017-01-18] (Avira Operations GmbH & Co. KG)
S3 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S2 gupdate1cacc58a1955820; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-02] (Google Inc.)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-12-06] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888 2017-01-20] (Malwarebytes)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-11-04] ()
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1095976 2015-11-28] (RealNetworks, Inc.)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [35304 2017-01-11] (Avira Operations GmbH & Co. KG)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ACEDRV05; C:\Windows\system32\drivers\ACEDRV05.sys [97792 2010-03-10] (Protect Software GmbH) [Datei ist nicht signiert]
R2 ACEDRV08; C:\Windows\system32\drivers\ACEDRV08.sys [108768 2010-12-28] (Protect Software GmbH)
R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2010-04-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119208 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140840 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [30672 2016-12-16] (Avira Operations GmbH & Co. KG)
R3 dvd43llh; C:\Windows\System32\DRIVERS\dvd43llh.sys [18816 2010-06-09] (RIF) [Datei ist nicht signiert]
S3 eapihdrv; C:\Users\Kornelia\AppData\Local\Temp\ehdrv.sys [135760 2017-01-27] (ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59976 2017-01-20] ()
S3 HCW713x; C:\Windows\System32\DRIVERS\HCW713x.sys [827776 2007-03-26] (Hauppauge Computer Works inc.)
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2008-02-14] (Paragon Software Group)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2010-04-05] ()
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
S3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [152512 2017-01-27] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [94656 2017-01-28] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-28] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [219584 2017-01-28] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [63264 2017-01-28] (Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2007-02-27] ()
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36624 2007-01-28] (Sonic Solutions) [Datei ist nicht signiert]
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2012-10-25] (Realtek Semiconductor Corporation                          )
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-10-22] (Duplex Secure Ltd.)
R2 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [Datei ist nicht signiert]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-28 01:39 - 2017-01-28 01:39 - 00263328 _____ C:\Users\Kornelia\Desktop\malwarebytes.txt
2017-01-27 23:56 - 2017-01-28 13:04 - 00000000 ____D C:\FRST
2017-01-27 16:27 - 2017-01-27 16:27 - 02870984 _____ (ESET) C:\Users\Kornelia\Desktop\esetsmartinstaller_deu.exe
2017-01-27 16:20 - 2017-01-27 16:20 - 00001898 _____ C:\Users\Kornelia\Desktop\sc-cleaner.txt
2017-01-27 16:12 - 2017-01-27 16:12 - 00015596 _____ C:\Users\Kornelia\Desktop\JRT.txt
2017-01-27 15:27 - 2017-01-27 15:41 - 00000000 ____D C:\AdwCleaner
2017-01-27 14:42 - 2017-01-27 14:42 - 00000000 ____D C:\Users\Kornelia\AppData\Local\AviraSpeedup
2017-01-27 14:35 - 2017-01-27 14:35 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Avira
2017-01-27 13:56 - 2017-01-28 12:39 - 00063264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-27 13:56 - 2017-01-28 12:30 - 00094656 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-27 13:56 - 2017-01-27 13:56 - 00152512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-27 13:55 - 2017-01-28 12:30 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-27 13:55 - 2017-01-28 12:28 - 00219584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-27 13:55 - 2017-01-27 13:55 - 00002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-27 13:55 - 2017-01-27 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-27 13:55 - 2017-01-20 07:47 - 00059976 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-27 00:03 - 2017-01-27 00:04 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2017-01-26 22:47 - 2017-01-26 22:47 - 00001134 _____ C:\Users\Kornelia\Desktop\Avira Antivirus starten.lnk
2017-01-26 21:06 - 2017-01-26 21:06 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_588a51b66deb0__ws.exe
2017-01-26 19:57 - 2017-01-26 19:57 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Avira
2017-01-26 17:28 - 2017-01-26 17:28 - 00000000 ____D C:\Users\Kornelia\Downloads\Notfall DVD 7.0 Free
2017-01-26 16:35 - 2017-01-26 17:04 - 1276319704 _____ C:\Users\Kornelia\Downloads\Notfall_DVD_7.0_Free.zip
2017-01-26 13:57 - 2017-01-26 13:57 - 00001101 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk
2017-01-26 13:57 - 2017-01-26 13:57 - 00000998 _____ C:\Users\Public\Desktop\Avira Phantom VPN.lnk
2017-01-26 13:56 - 2017-01-28 12:33 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-01-26 13:52 - 2017-01-26 13:52 - 00001166 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-01-26 13:43 - 2017-01-26 13:49 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_5889ec8b9e38c__ws.exe
2017-01-24 23:24 - 2017-01-24 23:24 - 00000936 _____ C:\Users\Kornelia\Desktop\duplicate.txt
2017-01-19 19:22 - 2017-01-19 21:20 - 00000000 ____D C:\Users\Kornelia\Desktop\Rekla Herd
2017-01-12 23:57 - 2017-01-12 23:58 - 00000000 ____D C:\Users\Kornelia\Desktop\SCHULE
2017-01-11 13:22 - 2017-01-05 18:46 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 13:22 - 2017-01-05 18:46 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 13:22 - 2017-01-05 18:43 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 13:22 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 13:22 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 13:22 - 2017-01-05 18:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-10 16:32 - 2017-01-25 00:18 - 00040346 _____ C:\Users\Kornelia\Desktop\Dateiliste.xlsx
2017-01-08 21:33 - 2017-01-08 21:33 - 00000000 ____D C:\Users\Kornelia\AppData\Local\CEF
2017-01-07 22:31 - 2017-01-07 22:31 - 00002075 _____ C:\Users\Kornelia\Desktop\JDownloader 2.lnk
2017-01-07 22:31 - 2017-01-07 22:31 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-01-07 22:27 - 2017-01-27 15:13 - 00000000 ____D C:\Users\Kornelia\AppData\Local\JDownloader 2.0
2017-01-07 22:23 - 2017-01-07 22:23 - 00076504 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\WebInstaller.exe
2017-01-07 19:32 - 2017-01-28 13:03 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Mozilla
2017-01-07 19:20 - 2017-01-07 19:20 - 00243720 _____ C:\Users\Kornelia\Downloads\Firefox Setup Stub 50.1.0.exe
2017-01-07 17:29 - 2017-01-24 23:13 - 00000000 ____D C:\Users\Kornelia\Downloads\Downloader
2017-01-07 17:21 - 2017-01-07 17:23 - 26539720 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\JDownloaderSetup.exe
2017-01-07 16:50 - 2017-01-07 16:50 - 00000000 ____D C:\Users\Kornelia\Downloads\Info

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-28 13:04 - 2015-09-16 17:12 - 00000000 ____D C:\Users\Kornelia\Desktop\Neuer Ordner (2)
2017-01-28 12:55 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-28 12:55 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-28 12:43 - 2010-03-26 02:57 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-01-28 12:32 - 2013-03-01 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-28 12:28 - 2011-07-05 09:31 - 00000000 ____D C:\Users\Kornelia
2017-01-28 12:28 - 2010-03-25 21:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-01-28 12:27 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-28 01:23 - 2013-06-11 21:18 - 00000940 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job
2017-01-27 22:23 - 2013-06-11 21:18 - 00000918 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job
2017-01-27 15:43 - 2016-03-27 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-27 15:43 - 2012-04-30 09:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-27 15:40 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-01-27 15:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2017-01-27 15:13 - 2011-11-01 11:13 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Vidalia
2017-01-27 15:13 - 2011-07-05 10:25 - 00000000 ____D C:\Windows\Panther
2017-01-27 15:13 - 2011-04-13 13:21 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\skypePM
2017-01-27 15:12 - 2010-10-31 18:18 - 00000000 ___RD C:\Users\Kornelia\Desktop\Tabea Spiele
2017-01-27 15:12 - 2007-10-12 08:47 - 00000000 ____D C:\Program Files\DivX
2017-01-27 14:43 - 2011-07-05 10:27 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-27 14:43 - 2009-07-14 09:47 - 00702942 _____ C:\Windows\system32\perfh007.dat
2017-01-27 14:43 - 2009-07-14 09:47 - 00150582 _____ C:\Windows\system32\perfc007.dat
2017-01-27 14:43 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-01-27 00:05 - 2010-12-16 14:57 - 00000000 ____D C:\Program Files\GMX
2017-01-26 23:52 - 2011-09-30 10:13 - 00000000 ____D C:\Users\Public\Documents\Tivola_prefs
2017-01-26 23:52 - 2011-02-23 18:14 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\Program Files\Amazon
2017-01-26 23:52 - 2010-03-10 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tivola
2017-01-26 23:48 - 2011-03-09 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:41 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\DVDVideoSoft
2017-01-26 23:43 - 2016-10-23 15:39 - 00150152 _____ C:\Windows\ntbtlog.txt
2017-01-26 17:26 - 2016-10-24 10:00 - 00120432 _____ C:\Users\Kornelia\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-26 16:28 - 2016-10-21 23:01 - 00428280 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-26 13:57 - 2016-10-21 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-01-26 13:57 - 2012-12-22 20:23 - 00000000 ____D C:\Program Files\Avira
2017-01-26 13:57 - 2012-05-20 11:07 - 00000000 ____D C:\ProgramData\Avira
2017-01-26 13:52 - 2015-11-28 11:45 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 13:30 - 2011-04-05 15:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-01-25 13:21 - 2012-02-26 18:45 - 00000000 ____D C:\Users\Kornelia\Downloads\Heidi
2017-01-24 23:47 - 2011-04-05 14:45 - 00000000 ____D C:\ProgramData\Norton
2017-01-23 15:51 - 2012-01-17 15:04 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Microsoft Help
2017-01-23 12:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-22 00:11 - 2016-08-14 14:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 21:19 - 2010-04-01 21:23 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\COREL
2017-01-19 21:13 - 2010-04-29 21:48 - 00000000 ____D C:\Users\Kornelia\Documents\My PSP Files
2017-01-19 21:13 - 2010-04-22 22:31 - 00001786 ___SH C:\Windows\system32\KGyGaAvL.sys
2017-01-11 23:30 - 2013-09-01 10:47 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 23:19 - 2011-08-09 13:50 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 19:31 - 2012-05-27 00:08 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-10 19:31 - 2011-09-06 09:10 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-10 19:31 - 2010-03-13 11:32 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-08 21:33 - 2010-03-12 09:41 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Adobe
2017-01-07 19:31 - 2011-10-05 01:27 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-07 19:31 - 2010-03-06 17:48 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-29 23:30 - 2013-09-30 16:38 - 00000000 ____D C:\Users\Kornelia\Documents\Calibre-Bibliothek

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2010-06-02 05:21 - 2010-06-02 05:21 - 1347354 _____ () C:\Program Files\Apr2005_d3dx9_25_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1078962 _____ () C:\Program Files\Apr2005_d3dx9_25_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1397830 _____ () C:\Program Files\Apr2006_d3dx9_30_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1115221 _____ () C:\Program Files\Apr2006_d3dx9_30_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0916430 _____ () C:\Program Files\Apr2006_MDX1_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 4162630 _____ () C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0179133 _____ () C:\Program Files\Apr2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0133103 _____ () C:\Program Files\Apr2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087101 _____ () C:\Program Files\Apr2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046010 _____ () C:\Program Files\Apr2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0698612 _____ () C:\Program Files\APR2007_d3dx10_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0695865 _____ () C:\Program Files\APR2007_d3dx10_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1607358 _____ () C:\Program Files\APR2007_d3dx9_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1606039 _____ () C:\Program Files\APR2007_d3dx9_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0195766 _____ () C:\Program Files\APR2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0151225 _____ () C:\Program Files\APR2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0096817 _____ () C:\Program Files\APR2007_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0053302 _____ () C:\Program Files\APR2007_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1350542 _____ () C:\Program Files\Aug2005_d3dx9_27_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1077644 _____ () C:\Program Files\Aug2005_d3dx9_27_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0182903 _____ () C:\Program Files\AUG2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0137235 _____ () C:\Program Files\AUG2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087142 _____ () C:\Program Files\AUG2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046058 _____ () C:\Program Files\AUG2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0852286 _____ () C:\Program Files\AUG2007_d3dx10_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0796867 _____ () C:\Program Files\AUG2007_d3dx10_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1800160 _____ () C:\Program Files\AUG2007_d3dx9_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1708152 _____ () C:\Program Files\AUG2007_d3dx9_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0198096 _____ () C:\Program Files\AUG2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0153012 _____ () C:\Program Files\AUG2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0867612 _____ () C:\Program Files\Aug2008_d3dx10_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0849167 _____ () C:\Program Files\Aug2008_d3dx10_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1794084 _____ () C:\Program Files\Aug2008_d3dx9_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1464672 _____ () C:\Program Files\Aug2008_d3dx9_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0121772 _____ () C:\Program Files\Aug2008_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0092996 _____ () C:\Program Files\Aug2008_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271412 _____ () C:\Program Files\Aug2008_XAudio_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271038 _____ () C:\Program Files\Aug2008_XAudio_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0919044 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0900598 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3112111 _____ () C:\Program Files\Aug2009_d3dcsx_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3319740 _____ () C:\Program Files\Aug2009_d3dcsx_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0232635 _____ () C:\Program Files\Aug2009_d3dx10_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0192131 _____ () C:\Program Files\Aug2009_d3dx10_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0136301 _____ () C:\Program Files\Aug2009_d3dx11_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0105044 _____ () C:\Program Files\Aug2009_d3dx11_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0930116 _____ () C:\Program Files\Aug2009_d3dx9_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0728456 _____ () C:\Program Files\Aug2009_d3dx9_42_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122408 _____ () C:\Program Files\Aug2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093106 _____ () C:\Program Files\Aug2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273264 _____ () C:\Program Files\Aug2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272642 _____ () C:\Program Files\Aug2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1357976 _____ () C:\Program Files\Dec2005_d3dx9_28_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1079456 _____ () C:\Program Files\Dec2005_d3dx9_28_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0212807 _____ () C:\Program Files\DEC2006_d3dx10_00_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0191720 _____ () C:\Program Files\DEC2006_d3dx10_00_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1571154 _____ () C:\Program Files\DEC2006_d3dx9_32_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1574376 _____ () C:\Program Files\DEC2006_d3dx9_32_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0192475 _____ () C:\Program Files\DEC2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0145599 _____ () C:\Program Files\DEC2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0089944 _____ (Microsoft Corporation) C:\Program Files\DSETUP.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 1801048 _____ () C:\Program Files\dsetup32.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 0042410 _____ () C:\Program Files\dxdllreg_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0537432 _____ () C:\Program Files\DXSETUP.exe
2010-06-02 05:22 - 2010-06-02 05:22 - 0094011 _____ () C:\Program Files\dxupdate.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1247499 _____ () C:\Program Files\Feb2005_d3dx9_24_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1013225 _____ () C:\Program Files\Feb2005_d3dx9_24_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1362796 _____ () C:\Program Files\Feb2006_d3dx9_29_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1084720 _____ () C:\Program Files\Feb2006_d3dx9_29_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0178359 _____ () C:\Program Files\Feb2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0132409 _____ () C:\Program Files\Feb2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0194675 _____ () C:\Program Files\FEB2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0147983 _____ () C:\Program Files\FEB2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054678 _____ () C:\Program Files\Feb2010_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0020713 _____ () C:\Program Files\Feb2010_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122446 _____ () C:\Program Files\Feb2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093180 _____ () C:\Program Files\Feb2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0276960 _____ () C:\Program Files\Feb2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277191 _____ () C:\Program Files\Feb2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1336002 _____ () C:\Program Files\Jun2005_d3dx9_26_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1064925 _____ () C:\Program Files\Jun2005_d3dx9_26_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0180785 _____ () C:\Program Files\JUN2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0133671 _____ () C:\Program Files\JUN2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0699044 _____ () C:\Program Files\JUN2007_d3dx10_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0698472 _____ () C:\Program Files\JUN2007_d3dx10_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607774 _____ () C:\Program Files\JUN2007_d3dx9_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607286 _____ () C:\Program Files\JUN2007_d3dx9_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197122 _____ () C:\Program Files\JUN2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0152909 _____ () C:\Program Files\JUN2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0867828 _____ () C:\Program Files\JUN2008_d3dx10_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0849919 _____ () C:\Program Files\JUN2008_d3dx10_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1792608 _____ () C:\Program Files\JUN2008_d3dx9_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1463878 _____ () C:\Program Files\JUN2008_d3dx9_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055154 _____ () C:\Program Files\JUN2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021905 _____ () C:\Program Files\JUN2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121054 _____ () C:\Program Files\JUN2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093128 _____ () C:\Program Files\JUN2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269628 _____ () C:\Program Files\JUN2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269024 _____ () C:\Program Files\JUN2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0944460 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0931471 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0752783 _____ () C:\Program Files\Jun2010_d3dcsx_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0762188 _____ () C:\Program Files\Jun2010_d3dcsx_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0235955 _____ () C:\Program Files\Jun2010_d3dx10_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197283 _____ () C:\Program Files\Jun2010_d3dx10_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138205 _____ () C:\Program Files\Jun2010_d3dx11_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0109445 _____ () C:\Program Files\Jun2010_d3dx11_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0937246 _____ () C:\Program Files\Jun2010_d3dx9_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0768036 _____ () C:\Program Files\Jun2010_d3dx9_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0124596 _____ () C:\Program Files\Jun2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093686 _____ () C:\Program Files\Jun2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277338 _____ () C:\Program Files\Jun2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0278060 _____ () C:\Program Files\Jun2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0844884 _____ () C:\Program Files\Mar2008_d3dx10_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0818260 _____ () C:\Program Files\Mar2008_d3dx10_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1769862 _____ () C:\Program Files\Mar2008_d3dx9_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1443282 _____ () C:\Program Files\Mar2008_d3dx9_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055058 _____ () C:\Program Files\Mar2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021867 _____ () C:\Program Files\Mar2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122336 _____ () C:\Program Files\Mar2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093734 _____ () C:\Program Files\Mar2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0251194 _____ () C:\Program Files\Mar2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0226250 _____ () C:\Program Files\Mar2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1067160 _____ () C:\Program Files\Mar2009_d3dx10_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1040745 _____ () C:\Program Files\Mar2009_d3dx10_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1973702 _____ () C:\Program Files\Mar2009_d3dx9_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1612446 _____ () C:\Program Files\Mar2009_d3dx9_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054600 _____ () C:\Program Files\Mar2009_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021298 _____ () C:\Program Files\Mar2009_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121506 _____ () C:\Program Files\Mar2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092740 _____ () C:\Program Files\Mar2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0275044 _____ () C:\Program Files\Mar2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273018 _____ () C:\Program Files\Mar2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0864600 _____ () C:\Program Files\Nov2007_d3dx10_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0803884 _____ () C:\Program Files\Nov2007_d3dx10_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1802058 _____ () C:\Program Files\Nov2007_d3dx9_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1709360 _____ () C:\Program Files\Nov2007_d3dx9_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0046144 _____ () C:\Program Files\NOV2007_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0018496 _____ () C:\Program Files\NOV2007_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0196762 _____ () C:\Program Files\NOV2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0148264 _____ () C:\Program Files\NOV2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0994154 _____ () C:\Program Files\Nov2008_d3dx10_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0965421 _____ () C:\Program Files\Nov2008_d3dx10_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1906878 _____ () C:\Program Files\Nov2008_d3dx9_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1550796 _____ () C:\Program Files\Nov2008_d3dx9_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054522 _____ () C:\Program Files\Nov2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021851 _____ () C:\Program Files\Nov2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121794 _____ () C:\Program Files\Nov2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092684 _____ () C:\Program Files\Nov2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273960 _____ () C:\Program Files\Nov2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272611 _____ () C:\Program Files\Nov2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0086037 _____ () C:\Program Files\Oct2005_xinput_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0045359 _____ () C:\Program Files\Oct2005_xinput_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1412902 _____ () C:\Program Files\OCT2006_d3dx9_31_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1127217 _____ () C:\Program Files\OCT2006_d3dx9_31_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0182361 _____ () C:\Program Files\OCT2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138017 _____ () C:\Program Files\OCT2006_XACT_x86.cab
2010-10-22 14:05 - 2010-10-22 14:46 - 0000388 _____ () C:\Users\Kornelia\AppData\Roaming\burnaware.ini
2013-12-18 23:02 - 2013-12-19 00:05 - 0000679 _____ () C:\Users\Kornelia\AppData\Local\cookies.ini
2011-08-17 17:39 - 2015-07-28 17:08 - 0008192 _____ () C:\Users\Kornelia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-26 18:23 - 2011-07-26 18:23 - 0000000 _____ () C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2011-07-05 09:26

==================== Ende vom FRST.txt ============================
Addition.txt
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 28-01-2017 01
durchgeführt von Kornelia (28-01-2017 13:08:23)
Gestartet von C:\Users\Kornelia\Desktop\Neuer Ordner (2)
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2011-07-05 09:33:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1736235967-2657770174-236075978-500 - Administrator - Disabled)
Gast (S-1-5-21-1736235967-2657770174-236075978-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1736235967-2657770174-236075978-1005 - Limited - Enabled)
Konni (S-1-5-21-1736235967-2657770174-236075978-1003 - Administrator - Enabled) => C:\Users\Konni
Kornelia (S-1-5-21-1736235967-2657770174-236075978-1001 - Administrator - Enabled) => C:\Users\Kornelia
Tabea (S-1-5-21-1736235967-2657770174-236075978-1002 - Limited - Enabled) => C:\Users\Tabea

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 4.65 (HKLM\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Aladins Wunderlampe (HKLM\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM\...\Alamandi) (Version: 0.0.0.0 - INTENIUM GmbH)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Annabel (HKLM\...\Annabel) (Version: 1.0.0.0 - INTENIUM GmbH)
ATI Catalyst Install Manager (HKLM\...\{CC516453-9703-ABF9-201F-58A5EC567292}) (Version: 3.0.642.0 - ATI Technologies, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG)
Avira Connect (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM\...\Avira Phantom VPN) (Version: 2.4.3.30556 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 3.1.1.4250 - Avira Operations GmbH & Co. KG)
Azada ™: Ancient Magic (HKLM\...\BFG-Azada - Ancient Magic) (Version:  - )
Azada: In Libro (HKLM\...\BFG-Azada - In Libro) (Version:  - )
Azteca (HKLM\...\Azteca) (Version: 1.0.0.0 - INTENIUM GmbH)
Beetle Ju 2 (HKLM\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Bengal (HKLM\...\Bengal) (Version: 1.0.1.0 - INTENIUM GmbH)
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 2.0.0.28 - )
Botanica - Reise ins Unbekannte (HKLM\...\BFG-Botanica - Reise ins Unbekannte) (Version:  - )
calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)
ccc-core-static (Version: 2007.0821.2146.36991 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Chinese Checkers (HKLM\...\40-com.novelgames.flashgames.checkers) (Version: 1.8.0 - Novel Games Limited)
Chinese Checkers (Version: 1.8.0 - Novel Games Limited) Hidden
Corel Paint Shop Pro Photo XI (HKLM\...\{E1C7EF5E-3A7B-4ED4-A48B-F70F1B36EAB4}) (Version: 11.20.0000 - Corel Corporation)
Corel Snapfire DVD Maker (HKLM\...\{17E14D89-3A9F-4706-9F9B-C2DFC7ABE94B}) (Version: 1.20.0000 - Corel Corporation)
Corel Snapfire Plus (HKLM\...\{7ADE3A47-B425-45E9-8FF6-11BE2B775645}) (Version: 1.201.0000 - Corel Corporation)
CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Da Vincis Perlen Puzzle (HKLM\...\Da Vincis Perlen Puzzle) (Version:  - )
Das Reich des Drachen (HKLM\...\Das Reich des Drachen) (Version: 1.0.0.0 - INTENIUM GmbH)
Das Vermächtnis - Der Baum des Lebens (1.00) (HKLM\...\Das Vermächtnis - Der Baum des Lebens_is1) (Version:  - City Interactive)
Der Perfekte Weihnachtsbaum (HKLM\...\Der Perfekte Weihnachtsbaum) (Version: 1.0.0.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.2010.6.23 - INTENIUM GmbH)
Diamantenfee 2 (HKLM\...\Diamantenfee 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Diamond Drop 2 (HKLM\...\Diamond Drop 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DIE GEHEIMNISSE DER SPIDERWICKS (HKLM\...\{DFA723CE-22B4-4E6B-92CF-176256ECF2DE}) (Version: 1.00.0000 - Sierra Entertainment)
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Die Kluge Eule) (Version:  - )
Die Wiege Olympias 2 (HKLM\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.3 - DivX, LLC)
Drawn: &reg; Flucht aus der Dunkelheit (HKLM\...\BFG-Drawn - Flucht aus der Dunkelheit) (Version:  - )
Drawn: Der Turm ™ (HKLM\...\BFG-Drawn - Der Turm) (Version:  - )
Dream Chronicles (HKLM\...\Dream Chronicles) (Version:  - PlayFirst, Inc.)
Dream Chronicles ™ 2: The Eternal Maze (HKLM\...\BFG-Dream Chronicles 2 - The Eternal Maze) (Version:  - )
DVD43 v4.6.0 (HKLM\...\DVD43_is1) (Version:  - )
DVS Video Downloader Addon for Mozilla Firefox version 4.3.4.17 (HKLM\...\DVS Video Downloader Addon for Mozilla Firefox_is1) (Version: 4.3.4.17 - DVDVideoSoft Ltd.)
Emil und Pauline Auf dem Land (remove only) (HKLM\...\Emil und Pauline Auf dem Land) (Version:  - )
Emil und Pauline In der Stadt (remove only) (HKLM\...\Emil und Pauline In der Stadt) (Version:  - )
Enigmatis - Vermisst in Maple Creek (HKLM\...\Enigmatis - Vermisst in Maple Creek_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Ewige Reise - Das neue Atlantis (HKLM\...\Ewige Reise - Das neue Atlantis) (Version:  - )
Fabled Legends: Die Ruckkehr des Rattenfangers (HKLM\...\BFG-Fabled Legends - Die Rueckkehr des Rattenfaengers) (Version:  - )
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FarmFrenzy (HKLM\...\FarmFrenzy) (Version:  - )
Finstere Liebschaft - Immortal Lovers (HKLM\...\Finstere Liebschaft - Immortal Lovers) (Version:  - )
foobar2000 v1.0.3 (HKLM\...\foobar2000) (Version: 1.0.3 - Peter Pawlowski)
Forest Legends - Der Ruf der Liebe (HKLM\...\Forest Legends - Der Ruf der Liebe) (Version:  - )
FormatFactory 3.5.0.0 (HKLM\...\FormatFactory) (Version: 3.5.0.0 - Format Factory)
Free Studio version 2013 (HKLM\...\Free Studio_is1) (Version: 6.1.0.320 - DVDVideoSoft Ltd.)
Galileo Family Quiz - Spezial II (HKLM\...\Galileo Family Quiz - Spezial II) (Version:  - SevenOne Intermedia)
Geheimakte 2 - Puritas Cordis (HKLM\...\{BE7347AD-2D93-4A74-8DBF-C1B073DAE509}) (Version: 1.00.0000 - Deep Silver)
Geheime Fälle: Die gestohlene Venus (HKLM\...\Geheime Fälle: Die gestohlene Venus) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 2.7.2.6 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 2.7.2 - 1 und 1 Internet AG) Hidden
Google Calendar Sync (HKLM\...\Google Calendar Sync) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
Gravely Silent: Haus des Schreckens (HKLM\...\BFG-Gravely Silent - Haus des Schreckens) (Version:  - )
Haunted Manor: Der Herr der Spiegel (HKLM\...\BFG-Haunted Manor - Der Herr der Spiegel) (Version:  - )
Hauppauge MCE XP/Vista Software Encoder (2.0.25102) (HKLM\...\Hauppauge MCE2005 Software Encoder) (Version: 2.0.25102 - Hauppauge Computer Works, Inc.)
Heroes of Hellas (HKLM\...\{C0906D83-1FE0-4176-A940-45A348080987}) (Version: 1.00.0000 - Purplehills)
Hexentanz und Firlefanz (HKLM\...\Hexentanz und Firlefanz) (Version:  - )
Hidden Expedition &reg; : Bermudadreieck (HKLM\...\BFG-Hidden Expedition - Bermudadreieck) (Version:  - )
Hidden Mysteries Salem Secrets (HKLM\...\Hidden Mysteries Salem Secrets) (Version: 1.0 - astrogon Software)
Hidden Mysteries Vampire Secrets (HKLM\...\Hidden Mysteries Vampire Secrets) (Version: 1.0 - astragon Software)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBee FREE 5.1.2 (build 456) (HKLM\...\JetBee_is1) (Version:  - )
Jewel Puzzle (HKLM\...\Jewel Puzzle) (Version: 1.0.0.0 - INTENIUM GmbH)
Kleiner Eisbär 2 (HKLM\...\Kleiner Eisbär 2) (Version:  - )
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Lauras Stern (HKLM\...\Lauras Stern) (Version:  - )
Letstrade (HKLM\...\{E0091C29-DEE8-4B24-BF65-8C35B5940D77}) (Version: 1.00.0000 - Buhl Data Service)
LightScribe System Software  1.17.90.1 (HKLM\...\{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}) (Version: 1.17.90.1 - LightScribe)
Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Manic Digger (HKLM\...\{119E2FCB-5CDD-4C24-BCB2-56A824E2BF0A}_is1) (Version:  - )
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Midnight Mysteries Salem Witch Trials (HKLM\...\Midnight Mysteries Salem Witch Trials) (Version: 1.1.0.0 - MumboJumbo)
Mozilla Firefox 51.0.1 (x86 de) (HKLM\...\Mozilla Firefox 51.0.1 (x86 de)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
Mozilla Thunderbird 45.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 45.6.0 (x86 de)) (Version: 45.6.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Case Files&reg;: Dire Grove™ (HKLM\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst Handbuch ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst Handbuch) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst) (Version:  - )
Mystery Case Files: Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Ravenhearst) (Version:  - )
Mystery of Cleopatra (HKLM\...\Mystery of Cleopatra 1.0) (Version: 1.0 - Rondo Media)
Mystery Places - Das Geheimnis der Geistervilla (HKLM\...\Mystery Places - Das Geheimnis der Geistervilla_is1) (Version:  - )
Mystery Tales - Insel der Träume (HKLM\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Trackers: Raincliff (HKLM\...\BFG-Mystery Trackers - Raincliff) (Version:  - )
Natalie Brooks (HKLM\...\Natalie Brooks) (Version:  - )
Nero 7 Essentials (HKLM\...\{0DE739CA-9487-4E3E-8511-92EAF01F1031}) (Version: 7.03.0274 - Nero AG)
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Pahelika: Secret Legends (HKLM\...\Pahelika: Secret Legends) (Version:  - The Games Company Worldwide GmbH)
Paragon Hard Disk Manager 2008 Professional (HKLM\...\{E9E4BB29-FA98-401B-9EDE-9906906E33DE}) (Version:  - Paragon Software Group)
PixiePack Codec Pack (HKLM\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polipo 1.0.4.1 (HKLM\...\Polipo) (Version:  - )
Prinzessin Isabella (HKLM\...\Prinzessin Isabella) (Version: 1.0.0.0 - INTENIUM GmbH)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProtectDisc Helper Driver 10 (HKLM\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
Radiotracker (HKLM\...\{1E863F44-2D2D-4BD7-B25B-EDA9FF622267}) (Version: 6.2.13700.0 - RapidSolution Software AG)
ratDVD 0.78.1444 (HKLM\...\ratDVD) (Version: 0.78.1444 - ratDVD)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
RealDownloader (Version: 18.1.2.176 - RealNetworks, Inc.) Hidden
RealDownloader (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.2 - RealNetworks)
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rooms - Die Villa 1.0d  (HKLM\...\Rooms - Die Villa) (Version: 1.0d - Halycon Media)
Samantha Swift and the Mystery From Atlantis (HKLM\...\Samantha Swift and the Mystery From Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Sandra Fleming Chronicles – Crystal Skulls (HKLM\...\Sandra Fleming Chronicles – Crystal Skulls) (Version: 1.0.0.0 - INTENIUM GmbH)
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Simajo (HKLM\...\Simajo) (Version:  - )
Skins (Version: 2007.0821.2146.36991 - ATI) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spirits of Mystery: Dunkler Fluch (HKLM\...\BFG-Spirits of Mystery - Dunkler Fluch) (Version:  - )
Spur der Träume (HKLM\...\Spur der Träume) (Version: 1.0.0.0 - INTENIUM GmbH)
Sweet Home 3D version 3.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Enchanted Kingdom: Elisa’s Adventure (HKLM\...\The Enchanted Kingdom: Elisa’s Adventure) (Version: 1.0.0.0 - INTENIUM GmbH)
The Fall Trilogy (HKLM\...\The Fall Trilogy_is1) (Version:  - Morphicon)
The Fall Trilogy Chapter 2 (HKLM\...\The Fall Trilogy Chapter 2_is1) (Version:  - Morphicon)
The Night of the Rabbit (HKLM\...\The Night of the Rabbit) (Version: 1.0 - Daedalic Entertainment)
The Sultans Labyrinth: Das Opfer des K&ouml;nigs (HKLM\...\BFG-The Sultans Labyrinth - Das Opfer des Koenigs) (Version:  - ) <==== ACHTUNG
Tor 0.2.2.35 (HKLM\...\Tor) (Version:  - )
TP-LINK 300Mbps Wireless USB Adapter Treiber (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trödelschätze (HKLM\...\{AC368309-A247-42C0-9AAF-ABB2E067B79C}) (Version: 1.00.0000 - Valusoft)
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Try Corel Snapfire muvee autoProducer add on (Version: 1.00.0000 - Ihr Firmenname) Hidden
Turtix (HKLM\...\Turtix) (Version:  - )
Turtix 2 (HKLM\...\Turtix 2) (Version:  - )
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vernaeht und zugeflixt! Was stimmt denn hier nicht? (HKLM\...\Vernaeht und zugeflixt! Was stimmt denn hier nicht?) (Version:  - )
Vidalia 0.2.15 (HKLM\...\Vidalia) (Version:  - )
Video Downloader (Version: 1.2.0 - RealNetworks) Hidden
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.6.4 - Shark007)
VTech Download Agent Library (Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM\...\VTechDownloadManager) (Version:  - VTech)
Wieso? Weshalb? Warum? - Unser Körper (HKLM\...\com.rd.www.desktop.DesktopBody) (Version: 1.0.0 - Ravensburger Digital GmbH)
Wieso? Weshalb? Warum? - Unser Körper (Version: 1.0.0 - Ravensburger Digital GmbH) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WordPerfect Office X3 (HKLM\...\_{54DB13F1-0CE0-4BAB-BD5F-7DE150C043C8}) (Version:  - Corel Corporation)
WordPerfect Office X3 (Version: 13.3 - Corel Corporation) Hidden
World Voyage (HKLM\...\World Voyage) (Version: 1.0.0.0 - INTENIUM GmbH)
XMedia Recode 2.3.0.4 (HKLM\...\XMedia Recode) (Version: 2.3.0.4 - Sebastian Dörfler)
XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.)
Zuma's Revenge! (HKLM\...\Zuma's Revenge!1.0) (Version: 1.0 - AllSmartGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> kein Dateipfad

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {032A98DE-A547-4FB1-97B4-777E85FCE80F} - System32\Tasks\{51ECF608-A47D-464B-892E-9A3067C4CA0E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {04338029-ABEF-4DB2-A56D-FF0641970A7A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {08FA19ED-87A2-4BE4-B4F6-1170192766D0} - System32\Tasks\{1D76B916-65CA-47A7-9DD1-C614C8F74E56} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {0922A476-D472-4C6B-AF0D-283C447FF4F0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {248BA49A-31FC-4CBC-AC12-0AD50B3730CD} - System32\Tasks\{2D2CF1E0-A39F-4435-B084-62C323AD4F56} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {262EF14E-2D04-4238-8DD2-2B9AFBBAEC1F} - System32\Tasks\{D62DA859-B3A5-4A8C-8643-BC908C434082} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {2B93871E-90A6-4BD6-B5B2-2B2CCE5A5740} - System32\Tasks\{C791566E-54A6-4DAF-8C0F-0153AA08A504} => pcalua.exe -a D:\Software\Nero\setupx.exe -d D:\Software\Nero
Task: {2D4FEC81-5640-445A-97C1-A780D1FD2CD8} - System32\Tasks\{3D22388D-753E-494E-8F61-D351F8E67C68} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {34B169BF-29C1-4D9E-ABAD-DD33D6A48488} - System32\Tasks\{AA3E9FEA-EE1C-4BD0-A6EE-0AB550AE278F} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {3C30CE7A-A21F-4478-8DFD-AB4484B05538} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {3F4F5314-363F-4D5F-AD46-3C6D3EAA7DDA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] ()
Task: {40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} - System32\Tasks\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => Firefox.exe
Task: {474C30BF-0A7E-4DC2-9E6B-369B154E8229} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {49897270-27FE-4B7E-A4F9-1B4F8AE27E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {49E28B95-9408-4715-97DA-1AB7339805C6} - System32\Tasks\{EA4F2F72-7C23-4AB9-8184-245B49DE749F} => C:\Program Files\DEUTSCHLAND SPIELT\BeetleJu2 VollVersion\BeetleJu2_og.exe [2010-11-23] (INTENIUM GmbH)
Task: {4C08C992-D45F-4D07-9702-9FF2FB1E7DA0} - System32\Tasks\{7D0AE273-2305-48F1-AF5C-46BFD622F47E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4E016ADD-5044-4D20-841E-C43FFE2861BD} - System32\Tasks\{F4A27F14-3152-470D-9565-039442275C50} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4EC8D6F7-19A4-43EB-A744-BF2A0A15F56E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {50748F55-16EA-4C55-8547-7EC1D0947037} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {5AC92F98-B42E-4F21-9AA0-01AD0439642E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {5B3F853B-FE70-4847-8631-186551D7012C} - System32\Tasks\{07CBC734-EBA5-454A-913B-EC737132222F} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {66D53617-940A-4E05-871F-28B9007E2CC3} - System32\Tasks\{9BFE3ECE-693E-45CE-A00E-7DC315188CEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {6B725544-E42B-4580-B4AE-E272703AF399} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {6C42F0C8-5E73-4DE6-A971-9CE99159C71D} - System32\Tasks\{71507EB2-BF35-48B0-8135-FCBC7D54BAEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {77D92D5C-1736-4593-BC70-36551C747A1A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {78201B2F-5E80-4168-B233-7212E7A89D0D} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {7DD6E2A0-C6F1-4EFD-92B0-4A0D547C24C5} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {893B18BE-C091-4B27-9D76-82F0BCA99813} - System32\Tasks\{84074564-9C97-48A0-BBB3-89DAB27B7C9B} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9240E8E9-1D41-40BA-B4DE-32542C7145DB} - System32\Tasks\{97E672C4-E6D1-4ED6-99D8-B122A1F86FC0} => pcalua.exe -a D:\DVPP\Setup.exe -d D:\DVPP
Task: {979D3F17-6619-45C5-B404-606838B44253} - System32\Tasks\{E4546B87-1D17-4B95-A0A5-37522F5D05EF} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9C2F05E8-F861-43CF-987B-095EF430F405} - System32\Tasks\{F3AEE607-769D-4C8B-824B-88BEB035F102} => pcalua.exe -a C:\Spiele\Lillifee\setup.exe -d D:
Task: {B0993B05-978C-4A15-AA87-B18AB9A99EFD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {B37A6E42-727E-4E31-A77C-04022A464880} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2015-11-04] (RealNetworks, Inc.)
Task: {BFD53BF4-19B8-4502-92DD-7D926FFA8CA6} - System32\Tasks\{EC680A57-E7BC-4A66-8FBB-20A511FDFA89} => pcalua.exe -a D:\bin\EasyInst.exe -d D:\
Task: {C8250CB2-F11F-4A98-95BB-BA5E812E6A7E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {DAAAE172-7743-4C96-B232-DCC0F5FC7607} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {DBF5DE37-8E99-4B07-813D-41126EA90DB3} - System32\Tasks\{81430713-60CA-4B71-8FBB-D14DA0751514} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F0E42A33-0E8E-4BB2-80F9-8418E2340E57} - System32\Tasks\{287D07D5-E1D7-4882-9C98-35680FC50E9A} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {F20691E7-0B1D-438A-ABD0-2D94FF823CEA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {F526EC9D-6127-42C8-A3B4-E081029D3F7D} - System32\Tasks\{3DEE68DB-465B-46BB-87CD-D6BEE805EFD1} => C:\Program Files\Daedalic Entertainment\The Night of the Rabbit\rabbit.exe [2013-04-28] (Daedalic Entertainment GmbH)
Task: {FB0BD155-6754-4ECC-9711-162FE2741D51} - System32\Tasks\Amazon Music Helper => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-12-08] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2006-11-02 11:40 - 2006-11-02 11:40 - 00174656 _____ () C:\Windows\system32\PSIService.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00033088 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00037720 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2015-11-04 15:19 - 2015-11-04 15:19 - 00039768 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-11-04 15:20 - 2015-11-04 15:20 - 00037728 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll
2017-01-27 13:54 - 2017-01-20 07:47 - 01732896 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 02097616 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 01719760 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2015-01-17 15:57 - 2014-12-08 07:27 - 06277952 _____ () C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
2010-06-09 18:10 - 2009-10-23 18:34 - 00827904 _____ () C:\Program Files\dvd43\DVD43_Tray.exe
2011-07-29 00:08 - 2011-07-29 00:08 - 01259376 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2011-07-29 00:09 - 2011-07-29 00:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-06-24 09:54 - 2013-06-20 08:58 - 00391040 _____ () C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
2013-06-24 09:54 - 2010-06-24 02:16 - 02150400 _____ () C:\Program Files\VTech\DownloadManager\System\QtCore4.dll
2013-06-24 09:54 - 2010-07-13 14:07 - 07826432 _____ () C:\Program Files\VTech\DownloadManager\System\QtGui4.dll
2013-06-24 09:54 - 2010-06-02 03:29 - 00934912 _____ () C:\Program Files\VTech\DownloadManager\System\QtNetwork4.dll
2013-06-24 09:54 - 2010-06-02 03:28 - 00335360 _____ () C:\Program Files\VTech\DownloadManager\System\QtXml4.dll
2013-06-24 09:54 - 2012-08-06 10:54 - 09843640 _____ () C:\Program Files\VTech\DownloadManager\System\QtWebKit4.dll
2013-06-24 09:54 - 2010-06-02 03:56 - 00232960 _____ () C:\Program Files\VTech\DownloadManager\System\phonon4.dll
2013-06-24 09:54 - 2010-06-02 03:54 - 02530816 _____ () C:\Program Files\VTech\DownloadManager\System\QtXmlPatterns4.dll
2013-06-24 09:54 - 2010-07-05 10:19 - 00116736 _____ () C:\Program Files\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2013-06-24 09:54 - 2010-11-11 10:24 - 00028160 _____ () C:\Program Files\VTech\DownloadManager\System\DACommCenter.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00025600 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qgif4.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00119808 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qjpeg4.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00714992 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
2016-07-05 17:13 - 2016-07-05 17:13 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00653608 _____ () c:\program files\real\realplayer\RPDS\Lib\r1api.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00077552 _____ () C:\Program Files\RealNetworks\RealDownloader\dtvhooks.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00022312 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\mediautil.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 01520936 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avformat-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 04274984 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avcodec-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00322856 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avutil-52.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00846848 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
2015-10-02 18:33 - 2012-10-25 15:19 - 01401344 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\nicLan.dll
2015-10-02 18:33 - 2012-12-04 15:22 - 00193024 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\DC_WFF.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00293376 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\WJRtl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:24FECE50 [398]
AlternateDataStreams: C:\ProgramData\TEMP:260575F1 [422]
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4 [368]
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6 [183]
AlternateDataStreams: C:\ProgramData\TEMP:574F975B [184]
AlternateDataStreams: C:\ProgramData\TEMP:9BB8C675 [171]
AlternateDataStreams: C:\ProgramData\TEMP:A3B8F70C [128]
AlternateDataStreams: C:\ProgramData\TEMP:A4AF8D0D [169]
AlternateDataStreams: C:\ProgramData\TEMP:ADF211B1 [100]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [173]
AlternateDataStreams: C:\ProgramData\TEMP:B8791731 [170]
AlternateDataStreams: C:\ProgramData\TEMP:BEE39E9B [190]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\ProgramData\TEMP:E51234A9 [154]
AlternateDataStreams: C:\ProgramData\TEMP:FAB64002 [164]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.exe:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.scr:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.bat:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.com:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.cmd:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.reg:  =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2006-11-02 03:23 - 2006-09-18 14:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost
::1            localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122828520\Control Panel\Desktop\\Wallpaper -> C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1003-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01282017122831952\Control Panel\Desktop\\Wallpaper -> C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AOButler.exe - Verknüpfung.lnk => C:\Windows\pss\AOButler.exe - Verknüpfung.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Kornelia^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^AOButler.lnk => C:\Windows\pss\AOButler.lnk.Startup
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Spiele Post => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{771781D7-42F2-4719-BCFC-468823CD634A}] => C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F8F60273-BD4C-4058-B246-6F633BD6A891}] => LPort=1900
FirewallRules: [{20D276B1-3C90-4929-8A32-E4ACCBECC2C8}] => LPort=2869
FirewallRules: [{3355F104-DC9F-42F3-8E9D-3BF5DBF8FEB3}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{0BEA84F4-2656-475A-AE06-59E81719D75F}] => svchost.exe
FirewallRules: [{2BFBBFCF-8C85-480D-A055-0DB5677BDCDE}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{5B4D0C77-79AF-4923-BDC1-B51891E48444}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [UDP Query User{BC460BB0-BD68-48F3-BEB2-47578A7623D9}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{2339DF44-A7DD-4E22-A32A-32DCC95DC337}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{A59E1834-01D3-478B-90C5-6E1D4924AFDB}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{AEB0C184-B9E4-434C-B087-A14CA1DF867B}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{08572AF5-8353-4B61-B8C0-24C618870A9E}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{670FA4AF-6DA8-487A-91EE-B07143EB2170}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BD40ABE-22B5-4230-B66B-47D3BD3D0390}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{55D99CB2-C725-42FC-847A-5909C961EAE8}] => C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{85FDB52D-7A01-43A8-9009-6A168010138A}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8758F947-09B2-41DF-88EC-579BC9CA03E7}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{459568E9-83FC-4C8A-9663-91C2C9B6026F}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{92605963-E425-410C-BB6E-8F4EDEA0C349}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D48E3507-9052-45D0-9E44-24AC955777AA}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4ED3AA0F-7E02-449A-BAA4-34B72C42BF3C}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{A8E2B43C-F558-48C1-A629-118843C42FE8}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [{84839E9D-9BF0-4CCD-A922-70507EA96606}] => c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{175EF583-D4BB-4455-BF80-3778A39EAEAC}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{189936DE-97ED-4FCF-AFD9-FA1ABFB6C531}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D0577CA9-F454-408A-ACDF-7F280302E7BD}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{95DF96B5-51A5-4BAD-8FE7-4BC3CF9AF3DF}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D81DFAC4-5EE4-4BF8-A94D-84503C9C6E7F}] => C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{88496792-6A83-4826-9392-C3A2DBF731BE}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{08F10482-4231-4238-9029-5220201C0B87}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{3199F9F6-FD40-4F4E-B578-F886A82D57DA}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [UDP Query User{AE639368-64F0-4A58-B6CA-0EE42A599710}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe

==================== Wiederherstellungspunkte =========================

24-01-2017 15:04:25 Windows Update
27-01-2017 15:11:14 Avira System Speedup Optimierung
27-01-2017 16:04:18 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: atksgt
Description: atksgt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: atksgt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: sptd
Description: sptd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: sptd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/28/2017 12:27:43 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/28/2017 12:27:43 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/27/2017 09:26:54 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x454
Startzeit der fehlerhaften Anwendung: 0x01d278d9252d8e4f
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: f0f65b0e-e4ce-11e6-bba0-001d607b2853

Error: (01/27/2017 09:08:25 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/27/2017 09:08:25 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/27/2017 04:39:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x14a4
Startzeit der fehlerhaften Anwendung: 0x01d278b24e22efa7
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: d9a6174c-e4a6-11e6-bba0-001d607b2853

Error: (01/27/2017 04:29:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x12a0
Startzeit der fehlerhaften Anwendung: 0x01d278b112aa6646
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 75a2489e-e4a5-11e6-bba0-001d607b2853

Error: (01/27/2017 04:21:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x970
Startzeit der fehlerhaften Anwendung: 0x01d278ac80c5d4e3
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 37ec139c-e4a4-11e6-bba0-001d607b2853

Error: (01/27/2017 03:39:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0xf28
Startzeit der fehlerhaften Anwendung: 0x01d278a2e66a420d
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 5c048713-e49e-11e6-b3bf-001d607b2853

Error: (01/27/2017 03:11:09 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
  Generatordaten werden gesammelt

Kontext:
  Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
  Generatorname: System Writer
  Generatorinstanz-ID: {7e7a3d57-a2e5-4fe8-bbfd-51f5f0b8abcf}


Systemfehler:
=============
Error: (01/28/2017 01:13:27 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:13:20 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:13:12 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:13:05 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:12:57 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:12:48 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:12:42 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:12:33 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:12:26 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/28/2017 01:12:19 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


==================== Memory info ===========================

Processor: AMD Athlon(tm) X2 Dual Core Processor BE-2300
Prozentuale Nutzung des RAM: 53%
Installierter physikalischer RAM: 1918.49 MB
Verfügbarer physikalischer RAM: 896.95 MB
Summe virtueller Speicher: 3836.98 MB
Verfügbarer virtueller Speicher: 1987.94 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:242.77 GB) (Free:94.16 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive e: () (Fixed) (Total:207.36 GB) (Free:35.49 GB) NTFS
Drive g: (Black) (Fixed) (Total:465.76 GB) (Free:413.34 GB) NTFS
Drive i: (EXTERN 2 -Spiegel-) (Fixed) (Total:242.77 GB) (Free:143.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive m: (EXTERN 1 -DATEN-) (Fixed) (Total:1255.2 GB) (Free:437.65 GB) NTFS
Drive n: (EXTERN 3) (Fixed) (Total:100 GB) (Free:99.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C76EBDA3)
Partition 1: (Active) - (Size=242.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15.6 GB) - (Type=27)
Partition 3: (Not Active) - (Size=207.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5C921633)
Partition 1: (Not Active) - (Size=1255.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=507.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 256E7802)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================

Mineko 28.01.2017 14:54
Code:
13:24:30.0613 0x1f3c  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01
13:24:45.0855 0x1f3c  ============================================================
13:24:45.0855 0x1f3c  Current date / time: 2017/01/28 13:24:45.0855
13:24:45.0855 0x1f3c  SystemInfo:
13:24:45.0855 0x1f3c 
13:24:45.0855 0x1f3c  OS Version: 6.1.7601 ServicePack: 1.0
13:24:45.0855 0x1f3c  Product type: Workstation
13:24:45.0855 0x1f3c  ComputerName: KORNELIA-PC
13:24:45.0855 0x1f3c  UserName: Kornelia
13:24:45.0855 0x1f3c  Windows directory: C:\Windows
13:24:45.0855 0x1f3c  System windows directory: C:\Windows
13:24:45.0855 0x1f3c  Processor architecture: Intel x86
13:24:45.0855 0x1f3c  Number of processors: 2
13:24:45.0855 0x1f3c  Page size: 0x1000
13:24:45.0855 0x1f3c  Boot type: Normal boot
13:24:45.0855 0x1f3c  CodeIntegrityOptions = 0x00000000
13:24:45.0855 0x1f3c  ============================================================
13:24:50.0301 0x1f3c  KLMD registered as C:\Windows\system32\drivers\21416082.sys
13:24:50.0301 0x1f3c  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23572, osProperties = 0x0
13:24:52.0079 0x1f3c  System UUID: {36C9054F-E0BF-D255-A28C-08252F4122C0}
13:24:54.0247 0x1f3c  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
13:24:54.0263 0x1f3c  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 ( 1863.02 Gb ), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
13:24:54.0263 0x1f3c  Drive \Device\Harddisk2\DR2 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
13:24:54.0294 0x1f3c  ============================================================
13:24:54.0294 0x1f3c  \Device\Harddisk0\DR0:
13:24:54.0294 0x1f3c  MBR partitions:
13:24:54.0294 0x1f3c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1E58BC8D
13:24:54.0294 0x1f3c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1E58BCCC, BlocksNum 0x19EB7D7D
13:24:54.0294 0x1f3c  \Device\Harddisk1\DR1:
13:24:54.0294 0x1f3c  MBR partitions:
13:24:54.0294 0x1f3c  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x9CE67800
13:24:54.0294 0x1f3c  \Device\Harddisk1\DR1\Partition2: MBR, Type 0x7, StartLBA 0x9CE68000, BlocksNum 0xC7FF800
13:24:54.0294 0x1f3c  \Device\Harddisk1\DR1\Partition3: MBR, Type 0x7, StartLBA 0xA9668000, BlocksNum 0x3F79F800
13:24:54.0294 0x1f3c  \Device\Harddisk2\DR2:
13:24:54.0294 0x1f3c  MBR partitions:
13:24:54.0294 0x1f3c  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A384C02
13:24:54.0294 0x1f3c  ============================================================
13:24:54.0372 0x1f3c  C: <-> \Device\Harddisk0\DR0\Partition1
13:24:54.0419 0x1f3c  E: <-> \Device\Harddisk0\DR0\Partition2
13:24:54.0715 0x1f3c  G: <-> \Device\Harddisk2\DR2\Partition1
13:24:54.0731 0x1f3c  M: <-> \Device\Harddisk1\DR1\Partition1
13:24:54.0793 0x1f3c  I: <-> \Device\Harddisk1\DR1\Partition3
13:24:54.0809 0x1f3c  N: <-> \Device\Harddisk1\DR1\Partition2
13:24:54.0825 0x1f3c  ============================================================
13:24:54.0825 0x1f3c  Initialize success
13:24:54.0825 0x1f3c  ============================================================
13:26:44.0181 0x166c  ============================================================
13:26:44.0181 0x166c  Scan started
13:26:44.0181 0x166c  Mode: Manual; SigCheck; TDLFS;
13:26:44.0181 0x166c  ============================================================
13:26:44.0181 0x166c  KSN ping started
13:26:56.0411 0x166c  KSN ping finished: true
13:27:00.0701 0x166c  ================ Scan system memory ========================
13:27:00.0701 0x166c  System memory - ok
13:27:00.0717 0x166c  ================ Scan services =============================
13:27:01.0216 0x166c  [ 1B133875B8AA8AC48969BD3458AFE9F5, 01753BDD47F3F9BC0E0D23A069B9C56D4AE6A6B6295BC19B95AE245D25B12744 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
13:27:01.0715 0x166c  1394ohci - ok
13:27:01.0778 0x166c  [ 0A1E97197609F92D2425B67DA0BB0A7F, 818FD957C6EA1869ED13EA8C0681D2850141E22A68A2D982E4AEEA2736F50555 ] ACEDRV05        C:\Windows\system32\drivers\ACEDRV05.sys
13:27:01.0856 0x166c  ACEDRV05 - detected UnsignedFile.Multi.Generic ( 1 )
13:27:02.0823 0x166c  Detect skipped due to KSN trusted
13:27:02.0823 0x166c  ACEDRV05 - ok
13:27:02.0870 0x166c  [ DA06D89CDFDD0D24DE75165CF6D4270B, 39C2B53E7BAF15A5B536E70B834B32D1D0E50617E697DB318816C828825E61C1 ] ACEDRV08        C:\Windows\system32\drivers\ACEDRV08.sys
13:27:02.0979 0x166c  ACEDRV08 - ok
13:27:03.0057 0x166c  [ 553BA53445795CBC0D4F9FA37EB855A6, 28925A0A8A8953179BE07C1DC2E1D5B99AAE6C2AFE71F41851DDE4B558BE4600 ] acedrv10        C:\Windows\system32\drivers\acedrv10.sys
13:27:03.0135 0x166c  acedrv10 - ok
13:27:03.0228 0x166c  [ E6F53D6C0DEA3D375362265E175CA638, 6C0C25DF28DB250BE3CD3A672AED26C3383F16E91D6FD3D964D15CD80208A8B6 ] acedrv11        C:\Windows\system32\drivers\acedrv11.sys
13:27:03.0322 0x166c  acedrv11 - ok
13:27:03.0369 0x166c  [ 8CE00B6A46962A1808B19CD1DAE5170C, C889B2DA86A5F144386CB7763920C02A58C4E4B4F9CB0FAB8F4185EE3995C436 ] acehlp10        C:\Windows\system32\drivers\acehlp10.sys
13:27:03.0416 0x166c  acehlp10 - ok
13:27:03.0494 0x166c  [ CEA80C80BED809AA0DA6FEBC04733349, AE69C142DC2210A4AE657C23CEA4A6E7CB32C4F4EBA039414123CAC52157509B ] ACPI            C:\Windows\system32\drivers\ACPI.sys
13:27:03.0587 0x166c  ACPI - ok
13:27:03.0665 0x166c  [ 1EFBC664ABFF416D1D07DB115DCB264F, BF94D069D692140B792DBF4FD3CB0127D27C26CC5BFB6B0C28A8B6346767EE58 ] AcpiPmi        C:\Windows\system32\drivers\acpipmi.sys
13:27:03.0774 0x166c  AcpiPmi - ok
13:27:04.0055 0x166c  [ B932E0EE190778D840F1442DFC0F9612, 8780963F14D57279FDD585BE945ED40F24590D32676C7A9EF94002D38B8BA643 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
13:27:04.0133 0x166c  AdobeARMservice - ok
13:27:04.0367 0x166c  [ CA363F172E1978FD155764F2840B0BE8, CB14E2C94ABB8C8809F4E96472F6D1A9A3A0860217631F592E0F62F043165575 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
13:27:04.0414 0x166c  AdobeFlashPlayerUpdateSvc - ok
13:27:04.0508 0x166c  [ 21E785EBD7DC90A06391141AAC7892FB, A2D3D764C5E6DC0AD5AAF48485FFB8B121D2A40DC08ECF2D2CB92278A1002B25 ] adp94xx        C:\Windows\system32\DRIVERS\adp94xx.sys
13:27:04.0601 0x166c  adp94xx - ok
13:27:04.0632 0x166c  [ 0C676BC278D5B59FF5ABD57BBE9123F2, 339E8A433D186BAAB6FCB44C82CC9FB6FCD63C87981449494CBEB2072CB6B7BB ] adpahci        C:\Windows\system32\DRIVERS\adpahci.sys
13:27:04.0695 0x166c  adpahci - ok
13:27:04.0742 0x166c  [ 7C7B5EE4B7B822EC85321FE23A27DB33, A934AFB71D439555E6376DA9B34F82E8D39A300A4547BE9AC9311F6A3C36270C ] adpu320        C:\Windows\system32\DRIVERS\adpu320.sys
13:27:04.0773 0x166c  adpu320 - ok
13:27:04.0820 0x166c  [ 39AEAECE9F42407F176FE130D790BFBE, 19010DF87BDC1884268098CC04B4B15ECB710C94054A57157C0F9B7A795BDB28 ] AeLookupSvc    C:\Windows\System32\aelupsvc.dll
13:27:04.0913 0x166c  AeLookupSvc - ok
13:27:04.0991 0x166c  [ 93B49FA857F7036A4EFF32371F6E7391, B9B2867D9A80E7F028E9D7C6ABCB9EC5198ACE28CEE101C5A846666B356B2843 ] AFD            C:\Windows\system32\drivers\afd.sys
13:27:05.0147 0x166c  AFD - ok
13:27:05.0194 0x166c  [ 507812C3054C21CEF746B6EE3D04DD6E, D7E59350AC338AD229E3D10C76E32AE16D120311B263714A9CD94AB538633B0E ] agp440          C:\Windows\system32\drivers\agp440.sys
13:27:05.0256 0x166c  agp440 - ok
13:27:05.0303 0x166c  [ 8B30250D573A8F6B4BD23195160D8707, 64EC289AFCD63D84EAFD9D81C50D0A77BCC79A1EFF32C50B2776BB0C0151757D ] aic78xx        C:\Windows\system32\DRIVERS\djsvs.sys
13:27:05.0334 0x166c  aic78xx - ok
13:27:05.0397 0x166c  [ 18A54E132947CD98FEA9ACCC57F98F13, 9D39AF972785E49F0DD12C4BAEF39A79CD69F098886BF152AF1B7CCE2E902115 ] ALG            C:\Windows\System32\alg.exe
13:27:05.0537 0x166c  ALG - ok
13:27:05.0568 0x166c  [ 0D40BCF52EA90FC7DF2AEAB6503DEA44, 1D1AA8F50935D976C29DE7A84708CADBBBDD936F0DD2C059E820F0D21367B3B6 ] aliide          C:\Windows\system32\drivers\aliide.sys
13:27:05.0631 0x166c  aliide - ok
13:27:05.0662 0x166c  [ 3C6600A0696E90A463771C7422E23AB5, 370B33DC1C25B981628A318BAE434A78A5F0A0DA93C2896DC7A3D7B87AE1A5E7 ] amdagp          C:\Windows\system32\drivers\amdagp.sys
13:27:05.0709 0x166c  amdagp - ok
13:27:05.0724 0x166c  [ CD5914170297126B6266860198D1D4F0, 2239FCBD1A7EC27CE4F10DA36AE6BD6CCB87E5128C82CA71B84BFE5AF5602A60 ] amdide          C:\Windows\system32\drivers\amdide.sys
13:27:05.0771 0x166c  amdide - ok
13:27:05.0834 0x166c  [ 00DDA200D71BAC534BF56A9DB5DFD666, CA316B1FFD85BA1CF8664B3229DA1F238A5341E016059F7ED89702324CFD124B ] AmdK8          C:\Windows\system32\DRIVERS\amdk8.sys
13:27:05.0943 0x166c  AmdK8 - ok
13:27:06.0005 0x166c  [ 3CBF30F5370FDA40DD3E87DF38EA53B6, 7EACF1743367BE805357B6FD10F8F99E9B1C301FE3782D77719347B13DFA65EC ] AmdPPM          C:\Windows\system32\DRIVERS\amdppm.sys
13:27:06.0083 0x166c  AmdPPM - ok
13:27:06.0130 0x166c  [ D320BF87125326F996D4904FE24300FC, F767D8C5C58D57202905D829F7AE1B1FF33937F407FDCE4C90E32A6638F27416 ] amdsata        C:\Windows\system32\drivers\amdsata.sys
13:27:06.0161 0x166c  amdsata - ok
13:27:06.0192 0x166c  [ EA43AF0C423FF267355F74E7A53BDABA, 3F1335909AB0281A2FBDD7AD90E18309E091656CD32B48894B992789D8C61DB4 ] amdsbs          C:\Windows\system32\DRIVERS\amdsbs.sys
13:27:06.0239 0x166c  amdsbs - ok
13:27:06.0270 0x166c  [ 46387FB17B086D16DEA267D5BE23A2F2, 8B8AC61B91F154B4EB5CC6DECB5FCCEBA8B42EFE94859947136AD06681EA8ED0 ] amdxata        C:\Windows\system32\drivers\amdxata.sys
13:27:06.0317 0x166c  amdxata - ok
13:27:06.0614 0x166c  [ 98D7647EF729503A60EF870DA5C21D0D, 7E36E8E3D9D0BD940DC225E1DB7EFD90F76F7BE8DCAD9782255556C31D6FD476 ] AntiVirMailService C:\Program Files\Avira\Antivirus\avmailc7.exe
13:27:06.0723 0x166c  AntiVirMailService - ok
13:27:06.0879 0x166c  [ 229E752A26B53E155524D6530B95CDD4, B4D3DEA52860143D16A57EBA31CD3394B8B4FEA642EB3A736C8388447AB7E0E9 ] AntiVirSchedulerService C:\Program Files\Avira\Antivirus\sched.exe
13:27:07.0004 0x166c  AntiVirSchedulerService - ok
13:27:07.0191 0x166c  [ 229E752A26B53E155524D6530B95CDD4, B4D3DEA52860143D16A57EBA31CD3394B8B4FEA642EB3A736C8388447AB7E0E9 ] AntiVirService  C:\Program Files\Avira\Antivirus\avguard.exe
13:27:07.0253 0x166c  AntiVirService - ok
13:27:07.0409 0x166c  [ F2B26CD2305E917B1EA1BF49E0C59E31, 8CCE64C68B80D56C7604DB6ABD187F66C624462328F4886C607F0A46D8E9DE92 ] AntiVirWebService C:\Program Files\Avira\Antivirus\avwebg7.exe
13:27:07.0518 0x166c  AntiVirWebService - ok
13:27:07.0612 0x166c  [ 873F0162D10893E3DF34FA2AC604E6EA, 79655CDB125DBA14DDA01E45A2F8E185788081A3DF8D9E7A6A167C9F0D5C3F62 ] AppID          C:\Windows\system32\drivers\appid.sys
13:27:07.0815 0x166c  AppID - ok
13:27:07.0893 0x166c  [ E10F22695EAC1689DED6A9A45D6C352A, 15B10D2E4AB88DE729905E9E4DD24E812163AD45806713E3883E701723D44E3A ] AppIDSvc        C:\Windows\System32\appidsvc.dll
13:27:07.0955 0x166c  AppIDSvc - ok
13:27:08.0033 0x166c  [ 5EDA6BA186D1B05D5EF4E96F81F3F3EF, B815998ED90E4AC8F4394992082E1F05076CA07C868A15E616C291DCAAF8A000 ] Appinfo        C:\Windows\System32\appinfo.dll
13:27:08.0127 0x166c  Appinfo - ok
13:27:08.0174 0x166c  [ 2932004F49677BD84DBC72EDB754FFB3, 73F84582244AC53994A2F4499A119B4A84A6BF7FD3046C29A8080C763DE540B8 ] arc            C:\Windows\system32\DRIVERS\arc.sys
13:27:08.0220 0x166c  arc - ok
13:27:08.0236 0x166c  [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7, F7C9C3B4F2C816F57A43B2921672858C291054220BADE291044343778216F6BA ] arcsas          C:\Windows\system32\DRIVERS\arcsas.sys
13:27:08.0283 0x166c  arcsas - ok
13:27:08.0564 0x166c  [ C5BBC8487D89FC1C5D819BB1344F2845, 2265560C9D1DD544C17808F4F2D625B926014EFD5DFE2770BFACF89AB26B54AF ] aspnet_state    C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
13:27:08.0735 0x166c  aspnet_state - ok
13:27:08.0782 0x166c  [ ADD2ADE1C2B285AB8378D2DAAF991481, 7965A705F37924C0EC7A934E64E89C5DF4069816E2EEA3509E0AC90F78910519 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
13:27:08.0876 0x166c  AsyncMac - ok
13:27:08.0922 0x166c  [ 338C86357871C167A96AB976519BF59E, F28CC534523D1701B0552F5D7E18E88369C4218BDB1F69110C3E31D395884AD6 ] atapi          C:\Windows\system32\drivers\atapi.sys
13:27:08.0969 0x166c  atapi - ok
13:27:09.0344 0x166c  [ 712D8A95E45B070114C5309ADA7358FF, 1F0285CFB9982637186531489743798511BA75B612B202231E9BC1CF5372C0BB ] atikmdag        C:\Windows\system32\drivers\atikmdag.sys
13:27:09.0656 0x166c  atikmdag - ok
13:27:09.0734 0x166c  [ 4AA1EB65481C392955939E735D27118B, 167F91B0F48C13FA4B976EAB2DC0B29C31A2A98E276B2BF80323E051D54934CB ] AtiPcie        C:\Windows\system32\DRIVERS\AtiPcie.sys
13:27:09.0827 0x166c  AtiPcie - ok
13:27:09.0936 0x166c  [ 3C4B9850A2631C2263507400D029057B, A3DFF043B92C2F8C533BA609FB9FB20CF132E9D516449877CC2EDD75F1D6BC5C ] atksgt          C:\Windows\system32\DRIVERS\atksgt.sys
13:27:09.0999 0x166c  atksgt - ok
13:27:10.0108 0x166c  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
13:27:10.0311 0x166c  AudioEndpointBuilder - ok
13:27:10.0342 0x166c  [ 4F1E405154D2E68E6ACC3FE07DE02E93, 83FAB4E92B87E8C46BF39DD7556D2F7DCE0AD1E4C9C09ED12C428B82FAD03BDE ] Audiosrv        C:\Windows\System32\Audiosrv.dll
13:27:10.0389 0x166c  Audiosrv - ok
13:27:10.0482 0x166c  [ AC848E99627AE02493D57A3117756610, 1609DE8F58C028DC40086C424CBCA78D1B3BD6D8204065C687259A12391A19A4 ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
13:27:10.0545 0x166c  avgntflt - ok
13:27:10.0670 0x166c  [ ED91715AAE2BBBF539519CC75AC1872A, 0DA7D30E57DB19127546B612733870E0A8CE4E6B72228C56A86D7710B6F66479 ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
13:27:10.0701 0x166c  avipbb - ok
13:27:10.0872 0x166c  [ 2AEE4D1D7E668F1CCF97EDE93509B0EE, B082B3BBB27D3C8B26A754508C3B98BA803FEA707898FF18A120D6A2679098DF ] Avira.ServiceHost C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
13:27:10.0935 0x166c  Avira.ServiceHost - ok
13:27:11.0153 0x166c  [ C47395674E62626DDDC0E7C0E5D73F71, 4DBAC4E7E116D645F4BC030C3FA2A5076989425EE9AD4CE57D9093CDD46CA5C0 ] AviraPhantomVPN C:\Program Files\Avira\VPN\Avira.VpnService.exe
13:27:11.0216 0x166c  AviraPhantomVPN - ok
13:27:11.0247 0x166c  [ F80F5DCA8A5D9D93CC5BE933D20CAF05, 2AFBB2D62127FACBCABBB3E78F3568A6BA016ED4A97A1490BAA29A1EFB7A4408 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
13:27:11.0325 0x166c  avkmgr - ok
13:27:11.0356 0x166c  [ 9A7AE0B9D18749A79B3E523A97CA104A, 3678C5EB8A649D22E9B4E2A912C2A957D39312FB72675CB4C4E3790DBF7D0355 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
13:27:11.0403 0x166c  avnetflt - ok
13:27:11.0450 0x166c  [ 0CA918E542B7F627A0F114EF8703C8EC, EF90321CFC2ACCB171A174EDBB6C27E3F16B139E3D87D4043279BB7416614D4E ] avusbflt        C:\Windows\system32\Drivers\avusbflt.sys
13:27:11.0496 0x166c  avusbflt - ok
13:27:11.0590 0x166c  [ 6E30D02AAC9CAC84F421622E3A2F6178, 229DC527C1D6C778BCA2C855A2A6F6D2C4B0F4F6DE56C886B3AAD26E3347952C ] AxInstSV        C:\Windows\System32\AxInstSV.dll
13:27:11.0730 0x166c  AxInstSV - ok
13:27:11.0808 0x166c  [ 1A231ABEC60FD316EC54C66715543CEC, 09E2897BA80737997A286EA5408C03DD3CC0EBACD24CB391C2455B6D4BE7D67E ] b06bdrv        C:\Windows\system32\DRIVERS\bxvbdx.sys
13:27:11.0949 0x166c  b06bdrv - ok
13:27:12.0027 0x166c  [ BD8869EB9CDE6BBE4508D869929869EE, F4363A12EBFDBB89C69FD59B22F9EE05BADA07D477A1DF2DE01F59D6EE496543 ] b57nd60x        C:\Windows\system32\DRIVERS\b57nd60x.sys
13:27:12.0089 0x166c  b57nd60x - ok
13:27:12.0152 0x166c  [ EE1E9C3BB8228AE423DD38DB69128E71, ED54FD9795F3A4D32F02BED6052AD9404409A05644CDBEBFF19C662D104DA95A ] BDESVC          C:\Windows\System32\bdesvc.dll
13:27:12.0339 0x166c  BDESVC - ok
13:27:12.0370 0x166c  [ 505506526A9D467307B3C393DEDAF858, 8AD6F1492E357F57CF42261497BA29122045D4FC0DCC9669AA5AC9B2A4BABFA4 ] Beep            C:\Windows\system32\drivers\Beep.sys
13:27:12.0432 0x166c  Beep - ok
13:27:12.0557 0x166c  [ 1E2BAC209D184BB851E1A187D8A29136, 53933C938DA5126986FFF2918C1F522ABE93ABAB460AE32E4453161C2F7B68DF ] BFE            C:\Windows\System32\bfe.dll
13:27:12.0682 0x166c  BFE - ok
13:27:12.0838 0x166c  [ E585445D5021971FAE10393F0F1C3961, 178C008A9A0A6BFDA65EB0B98C510271360AD4474F22F13594F5EB60AA4E1CF5 ] BITS            C:\Windows\System32\qmgr.dll
13:27:13.0056 0x166c  BITS - ok
13:27:13.0088 0x166c  [ 2287078ED48FCFC477B05B20CF38F36F, 55BCA6174E6034A8D61CBE4126B2F1989F6052BFA624BEA9C0A0A664AEC74521 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
13:27:13.0134 0x166c  blbdrive - ok
13:27:13.0197 0x166c  [ 28AF7D4427868B7CE4C00CAB1864C7F6, AAE5303878AF0F7AA18069A8FCD99639EBC34622B456AF86C5E4F27858196E06 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
13:27:13.0259 0x166c  bowser - ok
13:27:13.0322 0x166c  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\DRIVERS\BrFiltLo.sys
13:27:13.0400 0x166c  BrFiltLo - ok
13:27:13.0431 0x166c  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\DRIVERS\BrFiltUp.sys
13:27:13.0493 0x166c  BrFiltUp - ok
13:27:13.0571 0x166c  [ 3DAA727B5B0A45039B0E1C9A211B8400, 903B51E75F0C503A0E255120F53BF51B047B219FEC1E15F2F1D02DDD562FC73B ] Browser        C:\Windows\System32\browser.dll
13:27:13.0634 0x166c  Browser - ok
13:27:13.0696 0x166c  [ 845B8CE732E67F3B4133164868C666EA, 9309B094CD9B5EBC46295A5EB806BED472C3CEDE3B5F6F497EBDABA496A2A27F ] Brserid        C:\Windows\System32\Drivers\Brserid.sys
13:27:13.0836 0x166c  Brserid - ok
13:27:13.0868 0x166c  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
13:27:13.0930 0x166c  BrSerWdm - ok
13:27:13.0961 0x166c  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
13:27:14.0039 0x166c  BrUsbMdm - ok
13:27:14.0070 0x166c  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
13:27:14.0133 0x166c  BrUsbSer - ok
13:27:14.0164 0x166c  [ ED3DF7C56CE0084EB2034432FC56565A, B5B75E002E7BC0209582C635CCCA26DB569BDB23C33A126634E00C6434BF941B ] BTHMODEM        C:\Windows\system32\DRIVERS\bthmodem.sys
13:27:14.0211 0x166c  BTHMODEM - ok
13:27:14.0304 0x166c  [ 1DF19C96EEF6C29D1C3E1A8678E07190, 1F4BB161FF3A1C5B1465BB52F3520FEDB7ACB1FAA132466F07D16DB8E394AEA5 ] bthserv        C:\Windows\system32\bthserv.dll
13:27:14.0398 0x166c  bthserv - ok
13:27:14.0429 0x166c  [ 77EA11B065E0A8AB902D78145CA51E10, 160EB3BBE9E5F3CC4A02584E6F2576A812C7565B940D74838B983F1EE51FA73A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
13:27:14.0507 0x166c  cdfs - ok
13:27:14.0570 0x166c  [ BE167ED0FDB9C1FA1133953C18D5A6C9, E26A851CA13E7300F977E5B20FA5D25FD0E1442AB6AD5DB58BBDB2DAAD87027C ] cdrom          C:\Windows\system32\DRIVERS\cdrom.sys
13:27:14.0648 0x166c  cdrom - ok
13:27:14.0726 0x166c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] CertPropSvc    C:\Windows\System32\certprop.dll
13:27:14.0804 0x166c  CertPropSvc - ok
13:27:15.0038 0x166c  [ 213B6EC3DE19E35373A1906397588429, C72B74D4840946DC6952B9F6C4A568DA702DD2D6E211AA5BB7F82EF481F449C6 ] CGVPNCliSrvc    C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe
13:27:15.0209 0x166c  CGVPNCliSrvc - ok
13:27:15.0272 0x166c  [ 3FE3FE94A34DF6FB06E6418D0F6A0060, 6B3A2A26609A75B690D4C0B3059E40822F3B3DB08943F58EC496BABDA7D0A735 ] circlass        C:\Windows\system32\DRIVERS\circlass.sys
13:27:15.0365 0x166c  circlass - ok
13:27:15.0428 0x166c  [ 1136E4A71849BCFCB057140AD03AAEE6, 9A9615F33E475039382E452052040C21EFA9C6669FB4E95D466C014FCAEF4D74 ] CLFS            C:\Windows\system32\CLFS.sys
13:27:15.0490 0x166c  CLFS - ok
13:27:15.0630 0x166c  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:27:15.0677 0x166c  clr_optimization_v2.0.50727_32 - ok
13:27:15.0724 0x166c  [ 5BAF4F1296D4D91FC28560CDB4C37C4B, ACA4BC57ED1F8432F18F0F215EC7FF956BAEF6E02760779E264E4008A979E9DD ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
13:27:15.0896 0x166c  clr_optimization_v4.0.30319_32 - ok
13:27:15.0942 0x166c  [ DEA805815E587DAD1DD2C502220B5616, 2D6A7668C95352B818F5EC59FF462894935833D34190257DA9CAC7E67FD3631C ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
13:27:16.0005 0x166c  CmBatt - ok
13:27:16.0036 0x166c  [ C537B1DB64D495B9B4717B4D6D9EDBF2, 400EEFE662DE117C9CC956E4CBD5E98F28F962E7447CD93E8A78FDD8CA39EB4B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
13:27:16.0067 0x166c  cmdide - ok
13:27:16.0130 0x166c  [ 7F7D4B16389CEF932950F6B2604D2601, E7C32734DAA75A00866A0F961C945BF7CC7A29D3A9806041D0046BC9FD3ACC5A ] CNG            C:\Windows\system32\Drivers\cng.sys
13:27:16.0192 0x166c  CNG - ok
13:27:16.0223 0x166c  [ A6023D3823C37043986713F118A89BEE, FAC239A7FA6251C7EDFFA34B4BAE3910B8BC0BD4A3574B6DB6931A8D691E207B ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
13:27:16.0254 0x166c  Compbatt - ok
13:27:16.0317 0x166c  [ CBE8C58A8579CFE5FCCF809E6F114E89, AC083A1C649EBA18C59FCC1772D0784B10E2B8C63094E3C14388E147DBC3F6DF ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
13:27:16.0395 0x166c  CompositeBus - ok
13:27:16.0442 0x166c  COMSysApp - ok
13:27:16.0457 0x166c  [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1, 6FC323217D82EF661BA0E3F949B61B05BB5235D1A69C81D24876C2153FAECEF6 ] crcdisk        C:\Windows\system32\DRIVERS\crcdisk.sys
13:27:16.0488 0x166c  crcdisk - ok
13:27:16.0551 0x166c  [ 348B3A4DD922F590EB39DB231F7AEE4D, 62341BBB263E8E72436FE008E2645692712C2143964D67CE38D58F47F5DEA8B1 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
13:27:16.0598 0x166c  CryptSvc - ok
13:27:16.0722 0x166c  [ 1F54F58D7FA2B3442084E32CDE5E309E, F0D8124E7C9ADC88BD8C53646F2499CDB3D2105DA7C4D28F3D26F313859B3D32 ] DcomLaunch      C:\Windows\system32\rpcss.dll
13:27:16.0832 0x166c  DcomLaunch - ok
13:27:16.0878 0x166c  [ 8D6E10A2D9A5EED59562D9B82CF804E1, 888F9650F4E872BA8F4E0C27E38A6672A561042B17EBA40E306A22357965B0AD ] defragsvc      C:\Windows\System32\defragsvc.dll
13:27:16.0956 0x166c  defragsvc - ok
13:27:17.0003 0x166c  [ EA9DBD76CE9254C77BAAB4339DD4C4FB, ECEE6EB8CFE1BD20BC7B6ED29A1624DDC3E22A37A56BA43B9B14E37D4003B72D ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
13:27:17.0097 0x166c  DfsC - ok
13:27:17.0175 0x166c  [ E9E01EB683C132F7FA27CD607B8A2B63, 4D9037B458C522874619143A4176BCED42472C68933E6E83D37B67242706F3C4 ] Dhcp            C:\Windows\system32\dhcpcore.dll
13:27:17.0284 0x166c  Dhcp - ok
13:27:17.0424 0x166c  [ 58F9BFBAE3C25D1A349DF0C6ECE8F9DF, FF1CFC9B323BCE2CFC06F9B2A98A29396832134FD61A570C1971A7240899E526 ] DiagTrack      C:\Windows\system32\diagtrack.dll
13:27:17.0596 0x166c  DiagTrack - ok
13:27:17.0643 0x166c  [ 1A050B0274BFB3890703D490F330C0DA, 79D74F4679A2EE040FAAF4D0392A9311239A10A5F8A5CCB48656C6F89B6D62FB ] discache        C:\Windows\system32\drivers\discache.sys
13:27:17.0721 0x166c  discache - ok
13:27:17.0799 0x166c  [ B7B470F163002A0D0E381EE45834BF6B, 5B5E204341A6B1689C3F8717C41782B1A077A026F8B19DA3DE08CA44AB1D95B2 ] Disk            C:\Windows\system32\drivers\disk.sys
13:27:17.0846 0x166c  Disk - ok
13:27:17.0892 0x166c  [ 33EF4861F19A0736B11314AAD9AE28D0, 4C4B84365D85758E3263B88F157D8B086B392C6F1EA5F0F3DB6BF87EF90248EC ] Dnscache        C:\Windows\System32\dnsrslvr.dll
13:27:18.0017 0x166c  Dnscache - ok
13:27:18.0095 0x166c  [ 366BA8FB4B7BB7435E3B9EACB3843F67, 65B7C61ACF34F1F0149045AA9E09A3F917A927963237A385A914D0B80551DC31 ] dot3svc        C:\Windows\System32\dot3svc.dll
13:27:18.0189 0x166c  dot3svc - ok
13:27:18.0314 0x166c  [ 8EC04CA86F1D68DA9E11952EB85973D6, 2E3FBC2D683D1274E8BC45EEEA87D43B77EDDCAAF0D453296D9FDA6B9D717071 ] DPS            C:\Windows\system32\dps.dll
13:27:18.0407 0x166c  DPS - ok
13:27:18.0470 0x166c  [ A3F684B866A7D89AE396276CE7AFD416, 1E4C034B7B106FA403B13842A199D88A33B492A577B58CDDAE0B4706266B9565 ] drmkaud        C:\Windows\system32\drivers\drmkaud.sys
13:27:18.0548 0x166c  drmkaud - ok
13:27:18.0594 0x166c  [ 1FC1EED3EA0C3A0ECF8A95B97E1B4831, 162CA60AFEEB45C45BA986D21660F23CF2432645993D4FAB8C8AE27CE40DA9AF ] dvd43llh        C:\Windows\system32\DRIVERS\dvd43llh.sys
13:27:18.0626 0x166c  dvd43llh - detected UnsignedFile.Multi.Generic ( 1 )
13:27:19.0577 0x166c  Detect skipped due to KSN trusted
13:27:19.0577 0x166c  dvd43llh - ok
13:27:19.0733 0x166c  [ 4B21D102E49E9D44C478D6766A7FCBE5, 7CEEBCF81EE23876F039ED1222020D6F45FE6B3A5CE3BB93DDA3B8BBEAA15E47 ] DXGKrnl        C:\Windows\System32\drivers\dxgkrnl.sys
13:27:19.0858 0x166c  DXGKrnl - ok
13:27:19.0920 0x166c  [ 8600142FA91C1B96367D3300AD0F3F3A, 5713625E27DF11FAAFDA7AC79899A6AD813166E167088FA990EC5DE87DBE83DF ] EapHost        C:\Windows\System32\eapsvc.dll
13:27:20.0014 0x166c  EapHost - ok
13:27:20.0326 0x166c  [ 560EDC0912BDB68290930E2542823A24, CB9578A19F717FBD388F2BE8179CF2D4755DF11AD246E13AF1D43E25CA026386 ] eapihdrv        C:\Users\Kornelia\AppData\Local\Temp\ehdrv.sys
13:27:20.0732 0x166c  eapihdrv - ok
13:27:21.0075 0x166c  [ 024E1B5CAC09731E4D868E64DBFB4AB0, AB0826A74BBEE5B7A1B035861B665C79BC98305CFC7D82BEF420558FBD3EE994 ] ebdrv          C:\Windows\system32\DRIVERS\evbdx.sys
13:27:21.0324 0x166c  ebdrv - ok
13:27:21.0371 0x166c  [ 4E568DBE3FFF1A0025EB432DC929B78F, 26F36CA31A1B977685F8DF5F8436848B7D4143B47EC0DAE68F8382C1B52A6C71 ] EFS            C:\Windows\System32\lsass.exe
13:27:21.0465 0x166c  EFS - ok
13:27:21.0605 0x166c  [ A8C362018EFC87BEB013EE28F29C0863, 07971C681FBD391C0BA0172618AF8AD77520182207F1C57F134B34D6A113857F ] ehRecvr        C:\Windows\ehome\ehRecvr.exe
13:27:21.0761 0x166c  ehRecvr - ok
13:27:21.0808 0x166c  [ D389BFF34F80CAEDE417BF9D1507996A, 12859B9925D7A4631DE61A820922F43F56ED23C2AF014CBF36322685E5CF641E ] ehSched        C:\Windows\ehome\ehsched.exe
13:27:21.0902 0x166c  ehSched - ok
13:27:22.0058 0x166c  [ 0ED67910C8C326796FAA00B2BF6D9D3C, 97FAA7627A162B0AEC15545E0165D13355D535B4157604BB87F8EEB72ECD24A8 ] elxstor        C:\Windows\system32\DRIVERS\elxstor.sys
13:27:22.0151 0x166c  elxstor - ok
13:27:22.0182 0x166c  [ 8FC3208352DD3912C94367A206AB3F11, 69B65C12BDADD4B730508674B1B77C5496612B4ACCC447DB9AFE49ADEA8CBF02 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
13:27:22.0292 0x166c  ErrDev - ok
13:27:22.0370 0x166c  [ 47DF8A068BA5666A14848C242BF5002B, 7D48FBDB497B07414397008FD5D4021AC8F39131E097EF12B94974409461F65C ] ESProtectionDriver C:\Windows\system32\drivers\mbae.sys
13:27:22.0417 0x166c  ESProtectionDriver - ok
13:27:22.0526 0x166c  [ F6916EFC29D9953D5D0DF06882AE8E16, ED41893960018D5EC2F7829B1DE4B6967D9FD074D60B11B9EB854E3E0948EC24 ] EventSystem    C:\Windows\system32\es.dll
13:27:22.0619 0x166c  EventSystem - ok
13:27:22.0651 0x166c  [ 2DC9108D74081149CC8B651D3A26207F, 75CB47923A867DDAC512701CE71DFCFC340FC3A2E27F4255D0836A1FBC463176 ] exfat          C:\Windows\system32\drivers\exfat.sys
13:27:22.0729 0x166c  exfat - ok
13:27:22.0760 0x166c  [ 7E0AB74553476622FB6AE36F73D97D35, 41463A255FDA1D550B3385EC7C73ABC343B1BBBE9CEE4DF9F2A8B3E7338C4947 ] fastfat        C:\Windows\system32\drivers\fastfat.sys
13:27:22.0838 0x166c  fastfat - ok
13:27:22.0931 0x166c  [ 967EA5B213E9984CBE270205DF37755B, 43153E23210B03FAE16897D62D55B8742F834EDC695F8401EAB5DE307F62602D ] Fax            C:\Windows\system32\fxssvc.exe
13:27:23.0072 0x166c  Fax - ok
13:27:23.0134 0x166c  [ E817A017F82DF2A1F8CFDBDA29388B29, 4CC9320A21E6FEA2D16C48D6BEA14391B695BD541A3C5FDDAEEE086A414FC837 ] fdc            C:\Windows\system32\DRIVERS\fdc.sys
13:27:23.0212 0x166c  fdc - ok
13:27:23.0243 0x166c  [ F3222C893BD2F5821A0179E5C71E88FB, A85B947249DBB986358CCD4B158DD58A9301F074F3C6CCCDEF2D01F432E59D1B ] fdPHost        C:\Windows\system32\fdPHost.dll
13:27:23.0337 0x166c  fdPHost - ok
13:27:23.0368 0x166c  [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B, 0E76C29D2A974A3F2FBFCB63D066D4136B78E02F6B1F579B1865CA7A76193987 ] FDResPub        C:\Windows\system32\fdrespub.dll
13:27:23.0431 0x166c  FDResPub - ok
13:27:23.0462 0x166c  [ 6CF00369C97F3CF563BE99BE983D13D8, F65F35324A2FB9DFB533B1C4D089D990CC242218FE83414329D07B786D8EFF33 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
13:27:23.0509 0x166c  FileInfo - ok
13:27:23.0540 0x166c  [ 42C51DC94C91DA21CB9196EB64C45DB9, 388C68D12ECC8FFE3116FEAAF4DB7B80CF4A3F97E935788DD21C6ADE2369F635 ] Filetrace      C:\Windows\system32\drivers\filetrace.sys
13:27:23.0618 0x166c  Filetrace - ok
13:27:23.0649 0x166c  [ 87907AA70CB3C56600F1C2FB8841579B, CA1CD82A1CD453617CE5EA431A1836997F14E3580554E8A516D9FE1E9926D979 ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys
13:27:23.0711 0x166c  flpydisk - ok
13:27:23.0774 0x166c  [ 7520EC808E0C35E0EE6F841294316653, 6EC65511B4838A7172A8F89E35C2F9DF4F0BFCE3BE12EDA790F3EB567102FF67 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
13:27:23.0867 0x166c  FltMgr - ok
13:27:24.0008 0x166c  [ DF15E8426D02C15422EBFF28BA83F03A, 51BEB315B0E5114906684FB3F460FA7BEA326C1B589C5C35D29795A7C13AB4FB ] FontCache      C:\Windows\system32\FntCache.dll
13:27:24.0179 0x166c  FontCache - ok
13:27:24.0304 0x166c  [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F, DBED26852B99B362152DA9CD4F31A1883EF6F9B496F3CF3772A197BA72DB61DA ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
13:27:24.0382 0x166c  FontCache3.0.0.0 - ok
13:27:24.0413 0x166c  [ 1A16B57943853E598CFF37FE2B8CBF1D, 87609F46F3B8123552141FD70866E895220B1BBD92BC2B580CAF49201AA0197E ] FsDepends      C:\Windows\system32\drivers\FsDepends.sys
13:27:24.0445 0x166c  FsDepends - ok
13:27:24.0507 0x166c  [ 7DAE5EBCC80E45D3253F4923DC424D05, 8A2C4D5591509B0B0A44583520617A9AE34F32BB6E68A012A7D7870ED24F703A ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
13:27:24.0554 0x166c  Fs_Rec - ok
13:27:24.0694 0x166c  [ E306A24D9694C724FA2491278BF50FDB, 1D246B9C28550640EACBF8CF9DC980FD75106B92832D392FEBEF0C7012353091 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
13:27:24.0772 0x166c  fvevol - ok
13:27:24.0819 0x166c  [ 65EE0C7A58B65E74AE05637418153938, 0E1A398ADD8411AF4CCC3344D67BE1B261320C58328BD5C5855A357476FAEBEF ] gagp30kx        C:\Windows\system32\DRIVERS\gagp30kx.sys
13:27:24.0850 0x166c  gagp30kx - ok
13:27:24.0897 0x166c  [ 5DC17164F66380CBFEFD895C18467773, E1174E0F95E9F343528162EFF5D4BA60C68477353FC6BDA61C19134687F50906 ] GearAspiWDM    C:\Windows\system32\drivers\GEARAspiWDM.sys
13:27:24.0959 0x166c  GearAspiWDM - ok
13:27:24.0991 0x166c  [ 93CA4D9A0433BE0EDD0B9F2F26D5E54C, ACD6BBB639CAF092809927F84F5693B7BA11080684A4993029D713ACF67D4C79 ] ggflt          C:\Windows\system32\DRIVERS\ggflt.sys
13:27:25.0037 0x166c  ggflt - ok
13:27:25.0115 0x166c  [ 17E678AAB82CCDFB80E7614504933895, 43935C8C5C30DA415957B789DC9FA10721C240C603DC8733D9B791A2F58BE1BD ] ggsemc          C:\Windows\system32\DRIVERS\ggsemc.sys
13:27:25.0178 0x166c  ggsemc - ok
13:27:25.0349 0x166c  [ 8DA745095F6B73BB5B8266BF773DA1FA, 3EA614A9B8D4F61704A8754B014C8F6AC60551435BC4D9F2E761955905DA89F3 ] gpsvc          C:\Windows\System32\gpsvc.dll
13:27:25.0537 0x166c  gpsvc - ok
13:27:25.0802 0x166c  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdate1cacc58a1955820 C:\Program Files\Google\Update\GoogleUpdate.exe
13:27:25.0864 0x166c  gupdate1cacc58a1955820 - ok
13:27:25.0864 0x166c  [ 053EEEE1ABAE53F044F1E386E22AE525, 195C8B78C0CF68F3DC1C08E58CE2A7146764F9273C39EF369194A366FA8EE1AD ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
13:27:25.0911 0x166c  gupdatem - ok
13:27:26.0036 0x166c  [ 8C518456A971B2C89D184DF8AD0018C9, 3142AD3BD6C9FC3D2A9465A688A6BD19E1B74F7BC1B9C5D8560C0974154C509F ] HCW713x        C:\Windows\system32\DRIVERS\HCW713x.sys
13:27:26.0161 0x166c  HCW713x - ok
13:27:26.0192 0x166c  [ C44E3C2BAB6837DB337DDEE7544736DB, 88A24FF7D2FECCEAFFD421B2039A0FB623DA47A6B220B80EF1E52DD26D9E222D ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
13:27:26.0301 0x166c  hcw85cir - ok
13:27:26.0363 0x166c  [ A5EF29D5315111C80A5C1ABAD14C8972, A181DA72E946F121C3F4A19438C547B0BFD15138AB1DB5465945EC89DF1F6B0A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
13:27:26.0441 0x166c  HdAudAddService - ok
13:27:26.0535 0x166c  [ 9036377B8A6C15DC2EEC53E489D159B5, 1E56D2ACFE92E6DF96D755B05C63D580EED82C210F075C8623E138BEE6BCD41B ] HDAudBus        C:\Windows\system32\drivers\HDAudBus.sys
13:27:26.0613 0x166c  HDAudBus - ok
13:27:26.0660 0x166c  [ 1D58A7F3E11A9731D0EAAAA8405ACC36, 7056FA18B86FBD52C4A6092D80476C02553EA053D6A0BEDB01A2FA5E152D5215 ] HidBatt        C:\Windows\system32\DRIVERS\HidBatt.sys
13:27:26.0738 0x166c  HidBatt - ok
13:27:26.0769 0x166c  [ 89448F40E6DF260C206A193A4683BA78, 71E0FCC32AE6FF8DFF420DB0383D6A200E1EAE14BD2E32453F92CE18B31C1F3C ] HidBth          C:\Windows\system32\DRIVERS\hidbth.sys
13:27:26.0831 0x166c  HidBth - ok
13:27:26.0863 0x166c  [ CF50B4CF4A4F229B9F3C08351F99CA5E, B97843620AF80FF0EC8F2C438255C0A42A756C6314FAF3DEF415DE16E14C108F ] HidIr          C:\Windows\system32\DRIVERS\hidir.sys
13:27:26.0925 0x166c  HidIr - ok
13:27:26.0972 0x166c  [ 2BC6F6A1992B3A77F5F41432CA6B3B6B, 2AF3312F1C8C8923C0A29AA5DAE57CE269417E53DEA2F0CCCC8DB57029698FE1 ] hidserv        C:\Windows\system32\hidserv.dll
13:27:27.0034 0x166c  hidserv - ok
13:27:27.0128 0x166c  [ 10C19F8290891AF023EAEC0832E1EB4D, E208553029488A6EE2F5216CC9FE5F93E9931A94C0D0625253BB159E30642853 ] HidUsb          C:\Windows\system32\drivers\hidusb.sys
13:27:27.0284 0x166c  HidUsb - ok
13:27:27.0331 0x166c  [ 196B4E3F4CCCC24AF836CE58FACBB699, 7A2E1F603A073421FA0987EFB96647F1F0F2D4E0C82AA62EBC041585DA811DAF ] hkmsvc          C:\Windows\system32\kmsvc.dll
13:27:27.0471 0x166c  hkmsvc - ok
13:27:27.0533 0x166c  [ 6658F4404DE03D75FE3BA09F7ABA6A30, E51D9C1580A283EB862F09B73AAE1B647DD683A53F3DD99834222F12DD15E40F ] HomeGroupListener C:\Windows\system32\ListSvc.dll
13:27:27.0689 0x166c  HomeGroupListener - ok
13:27:27.0767 0x166c  [ DBC02D918FFF1CAD628ACBE0C0EAA8E8, 02121800D9062692C102475876AE8143EBE46D855E8328B8CDCFE6A2F0D19696 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
13:27:27.0861 0x166c  HomeGroupProvider - ok
13:27:27.0908 0x166c  [ C9E1A4DB0BC9BC82AD7C2F5310EEB90C, 4D8EA4923F40BDD9C93823FBAFFA3A56CB4E212D9A00073E16203E584F61B6D6 ] hotcore3        C:\Windows\system32\drivers\hotcore3.sys
13:27:27.0955 0x166c  hotcore3 - ok
13:27:28.0017 0x166c  [ 295FDC419039090EB8B49FFDBB374549, 670E8015FD374640C6570F56F7FE8DE4D8F92E7A8072F5D1B2B95D0BD699CEF7 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
13:27:28.0064 0x166c  HpSAMD - ok
13:27:28.0267 0x166c  [ 487569E5DA56A5A432FF8AF6D3599CF9, 7C974D8379C60B4F69A20B01876C49181B0A63AC318C4BD0A21DABFF27A15C9D ] HTTP            C:\Windows\system32\drivers\HTTP.sys
13:27:28.0438 0x166c  HTTP - ok
13:27:28.0469 0x166c  [ 0C4E035C7F105F1299258C90886C64C5, CFB4FBE7B28058E6D3E6E508CF3C1645F6AAE0AFEB4C5364835B9C42311DF0D4 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
13:27:28.0532 0x166c  hwpolicy - ok
13:27:28.0657 0x166c  [ F151F0BDC47F4A28B1B20A0818EA36D6, 84B24B5796D9F70A8C37773F5484A4606CC7908370CCD942627ACBEDC4952D79 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
13:27:28.0797 0x166c  i8042prt - ok
13:27:28.0859 0x166c  [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E, 72870092A80C6DAE0105025B0ED8B607E98BA81E59298364A7FE4C9C56C68FF0 ] iaStorV        C:\Windows\system32\drivers\iaStorV.sys
13:27:28.0922 0x166c  iaStorV - ok
13:27:29.0031 0x166c  [ 3E9213A2A050BF429E91898C90F8B4E3, D80ABE5691087661B19F01927B631CB8C5291120B814B6F863F046E0D643E9E4 ] idsvc          C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
13:27:29.0109 0x166c  idsvc - ok
13:27:29.0171 0x166c  IEEtwCollectorService - ok
13:27:29.0234 0x166c  [ 4173FF5708F3236CF25195FECD742915, 0A9C0701DF6EAC6602BE342FC13C7950EF04BB5BDF7D96C2C5DABBD2A29AA55D ] iirsp          C:\Windows\system32\DRIVERS\iirsp.sys
13:27:29.0296 0x166c  iirsp - ok
13:27:29.0515 0x166c  [ B9C54120F46392100478F58F374E5709, A28EE8B0988F580D5984E815FC78DF41B169260814234AA0E453375542D0957B ] IKEEXT          C:\Windows\System32\ikeext.dll
13:27:29.0608 0x166c  IKEEXT - ok
13:27:29.0967 0x166c  [ 34B8B4A442046E3D5FDD0B17926CF3F1, 28FCE9A09D8016D56EBC04192FD01FD9CD212E5AB7D91BB74823C5B777325578 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
13:27:30.0092 0x166c  IntcAzAudAddService - ok
13:27:30.0154 0x166c  [ A0F12F2C9BA6C72F3987CE780E77C130, 5F53DF8BE1621AA7DFB655CFD9C95E0AFA1AD3CE2E290E19D7B7FB3C6E380034 ] intelide        C:\Windows\system32\drivers\intelide.sys
13:27:30.0201 0x166c  intelide - ok
13:27:30.0232 0x166c  [ 3B514D27BFC4ACCB4037BC6685F766E0, F12D7AC62F8550E6F33B28AD751D8413AB7FFEF963242D99FFA76CE8A48B027A ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
13:27:30.0295 0x166c  intelppm - ok
13:27:30.0341 0x166c  [ ACB364B9075A45C0736E5C47BE5CAE19, 202F77C659103D2D0E787B8CB0A23BE32EA5AA2E6B3B0A0F0A8DFA906AB3C0C0 ] IPBusEnum      C:\Windows\system32\ipbusenum.dll
13:27:30.0451 0x166c  IPBusEnum - ok
13:27:30.0482 0x166c  [ 709D1761D3B19A932FF0238EA6D50200, 0A9D2C3A6E91CA45540555B40CB4E2DF3EBE98C1D164C4EECEE20C86782F5823 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:27:30.0575 0x166c  IpFilterDriver - ok
13:27:30.0700 0x166c  [ 58F67245D041FBE7AF88F4EAF79DF0FA, 67468D6A46FF4D87AD321BFEA42F2FC843D09AA292A119C76D4D795D06028F96 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
13:27:30.0841 0x166c  iphlpsvc - ok
13:27:30.0887 0x166c  [ 4BD7134618C1D2A27466A099062547BF, 20284ABEF4433A59E2981F4143CAEC67DC990864FE0B9E3DC70EE0B88539E964 ] IPMIDRV        C:\Windows\system32\drivers\IPMIDrv.sys
13:27:30.0934 0x166c  IPMIDRV - ok
13:27:30.0965 0x166c  [ A5FA468D67ABCDAA36264E463A7BB0CD, EDB828D596E43372F97DAE1AADA46428C4C45FB80646DDC64FAD5F25C826CF63 ] IPNAT          C:\Windows\system32\drivers\ipnat.sys
13:27:31.0075 0x166c  IPNAT - ok
13:27:31.0106 0x166c  [ 42996CFF20A3084A56017B7902307E9F, 688176DAB91BE569280E4822E4C5BDE755794D293591C53F8047AD59C441751D ] IRENUM          C:\Windows\system32\drivers\irenum.sys
13:27:31.0215 0x166c  IRENUM - ok
13:27:31.0246 0x166c  [ 1F32BB6B38F62F7DF1A7AB7292638A35, 86522358680FBB1CEBC56B4D139290689BB0F71A3EC78CE883E4D75D0B37586F ] isapnp          C:\Windows\system32\drivers\isapnp.sys
13:27:31.0293 0x166c  isapnp - ok
13:27:31.0324 0x166c  [ EB34CE31FABD4DC4343FD2AD16D2CAF9, D21C91227A15DA89ECF522345D0AB80B3B7FC24A230596DABDB8BD3B7554CE8C ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
13:27:31.0371 0x166c  iScsiPrt - ok
13:27:31.0402 0x166c  [ ADEF52CA1AEAE82B50DF86B56413107E, A3AE1E96B04AC81665ABBD3CB267DFB3F78376DAE18FB0DBD447908DDAAA22D2 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
13:27:31.0449 0x166c  kbdclass - ok
13:27:31.0511 0x166c  [ 9E3CED91863E6EE98C24794D05E27A71, 90CF59F20E14E4A5A793266805E82BF7AE1F0CF4C7BAB1FD2EEF3B53C5DF770F ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
13:27:31.0574 0x166c  kbdhid - ok
13:27:31.0605 0x166c  [ 4E568DBE3FFF1A0025EB432DC929B78F, 26F36CA31A1B977685F8DF5F8436848B7D4143B47EC0DAE68F8382C1B52A6C71 ] KeyIso          C:\Windows\system32\lsass.exe
13:27:31.0667 0x166c  KeyIso - ok
13:27:31.0714 0x166c  [ EF7A3616C7902A232FEDAAB886AA07C2, B739EA5840E09E32AEF23A414F1E74B33785189BC0F43E156F6321CC0FA5BC35 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
13:27:31.0761 0x166c  KSecDD - ok
13:27:31.0792 0x166c  [ 78EF4037997534DD08545416EF4438E2, ABB739F1BA59A1D88F94C0F6569E92DBCFA73109A4AD7678C2CAB14AEEDEDDCD ] KSecPkg        C:\Windows\system32\Drivers\ksecpkg.sys
13:27:31.0839 0x166c  KSecPkg - ok
13:27:31.0901 0x166c  [ 89A7B9CC98D0D80C6F31B91C0A310FCD, 4583CAEEE0D50C0C7CE955E533FDA063CDC37B69033D41EF22EF1BA242E4C747 ] KtmRm          C:\Windows\system32\msdtckrm.dll
13:27:32.0042 0x166c  KtmRm - ok
13:27:32.0104 0x166c  [ D64AF876D53ECA3668BB97B51B4E70AB, D5C07C019BFEAFBEDC29AB5060356A3B07449712B21B50E03378BEF04AF180F9 ] LanmanServer    C:\Windows\system32\srvsvc.dll
13:27:32.0182 0x166c  LanmanServer - ok
13:27:32.0260 0x166c  [ 58405E4F68BA8E4057C6E914F326ABA2, C3E6519A1A38F1B3597D4391E42ABFE8F1F5E86256C4B3BD876CDAD9BB68B0A6 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
13:27:32.0338 0x166c  LanmanWorkstation - ok
13:27:32.0494 0x166c  [ FAAB52B7766409D702B99FE5553DC34F, 6856F3ACAD0A232C66DFB56237E05D7B8D51BE8B62C083C99607B33179BE5F8B ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
13:27:32.0525 0x166c  LightScribeService - detected UnsignedFile.Multi.Generic ( 1 )
13:27:33.0430 0x166c  Detect skipped due to KSN trusted
13:27:33.0430 0x166c  LightScribeService - ok
13:27:33.0477 0x166c  [ 4127E8B6DDB4090E815C1F8852C277D3, A5BC1F65FA6D8952CDDA08320ADDF0E4394E10AE4780017C8C86AC5E68DF83F8 ] lirsgt          C:\Windows\system32\DRIVERS\lirsgt.sys
13:27:33.0508 0x166c  lirsgt - ok
13:27:33.0555 0x166c  [ F7611EC07349979DA9B0AE1F18CCC7A6, 879AA7A391966F00761CA039C25EBC62F6712DD5461694911EEC673E12DE103E ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
13:27:33.0617 0x166c  lltdio - ok
13:27:33.0664 0x166c  [ 5700673E13A2117FA3B9020C852C01E2, 6684A2905EE8C438F2A64BE47E51A54D287B08DEFB8E0AE7FC2809D845EE3C5F ] lltdsvc        C:\Windows\System32\lltdsvc.dll
13:27:33.0742 0x166c  lltdsvc - ok
13:27:33.0758 0x166c  [ 55CA01BA19D0006C8F2639B6C045E08B, 4DBBDC820C514DB18CC13F8EE178F8C4E39C295C6E3C255416C235553CE7BDC1 ] lmhosts        C:\Windows\System32\lmhsvc.dll
13:27:33.0836 0x166c  lmhosts - ok
13:27:33.0867 0x166c  [ EB119A53CCF2ACC000AC71B065B78FEF, 1FD60735C4945AE565C223F0B47EAF9602D8777E3D15600914C1A9D761215AF9 ] LSI_FC          C:\Windows\system32\DRIVERS\lsi_fc.sys
13:27:33.0929 0x166c  LSI_FC - ok
13:27:33.0961 0x166c  [ 8ADE1C877256A22E49B75D1CC9161F9C, 3D64F233DC866537E50549A7C1A2B40A954055B22F0BDA39825B04C38C607CB7 ] LSI_SAS        C:\Windows\system32\DRIVERS\lsi_sas.sys
13:27:34.0007 0x166c  LSI_SAS - ok
13:27:34.0039 0x166c  [ DC9DC3D3DAA0E276FD2EC262E38B11E9, A264990857CBC74036799E17A087130626C0A09BE19879019BAF2D761C62AECC ] LSI_SAS2        C:\Windows\system32\DRIVERS\lsi_sas2.sys
13:27:34.0085 0x166c  LSI_SAS2 - ok
13:27:34.0132 0x166c  [ 0A036C7D7CAB643A7F07135AC47E0524, 2F662D07FCB74B8D493156DB555EAA90A47E93CF14C7B30039D2FE47EB8682B8 ] LSI_SCSI        C:\Windows\system32\DRIVERS\lsi_scsi.sys
13:27:34.0179 0x166c  LSI_SCSI - ok
13:27:34.0210 0x166c  [ 6703E366CC18D3B6E534F5CF7DF39CEE, 7396B9AF938284D99EC51206A7B2FA4A0DC10A493DCE6707818B03A7473782C4 ] luafv          C:\Windows\system32\drivers\luafv.sys
13:27:34.0273 0x166c  luafv - ok
13:27:34.0351 0x166c  [ 1A7DB7A00A4B0D8DA24CD691A4547291, 604E29E827841EA06313172D9063FD946CE592BF844CEA8D10173CAA397704F8 ] LVPr2Mon        C:\Windows\system32\DRIVERS\LVPr2Mon.sys
13:27:34.0444 0x166c  LVPr2Mon - ok
13:27:34.0585 0x166c  [ 0DDFDCAA92C7F553328DB06BA599BEA9, DB779E38B1CF1CAD69193857043F8ED8BBEB603E97363CD798F6699431D94A41 ] LVPrcSrv        C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
13:27:34.0631 0x166c  LVPrcSrv - ok
13:27:34.0756 0x166c  [ B895839B8743E400D7C7DAE156F74E7E, 52E13C6260F7E6718C782DF0B43D838FB4939B314695A7A9CB2012D8B224066B ] LVRS            C:\Windows\system32\DRIVERS\lvrs.sys
13:27:34.0834 0x166c  LVRS - ok
13:27:34.0897 0x166c  [ 23F8EF78BB9553E465A476F3CEE5CA18, 22E19B9F16EC555CCA091841711C8D1938F7EBCD8C6AC82E77375AE5EA96610C ] LVUSBSta        C:\Windows\system32\drivers\LVUSBSta.sys
13:27:34.0943 0x166c  LVUSBSta - ok
13:27:35.0068 0x166c  [ EBEE7C1D4A0DBCCE5449252F2F2DDCB4, A039190A4EF3C94781F1EE573D8D0BC447B6362F601B4B0CD6545E97C35C6860 ] MBAMChameleon  C:\Windows\system32\drivers\MBAMChameleon.sys
13:27:35.0162 0x166c  MBAMChameleon - ok
13:27:35.0240 0x166c  [ 1243CF7FC8E0E019CBC0FD5397F703BD, 6711DF4951AD1677B95E19D2BC4D2C1B4514BA4FD62A46E134268983336EAFCC ] MBAMFarflt      C:\Windows\system32\drivers\farflt.sys
13:27:35.0318 0x166c  MBAMFarflt - ok
13:27:35.0380 0x166c  [ D9351F554ED0784764DB0564186906AE, C7DC59A8D528A9A2FCF592D20C20B40D4315B1C09E82A4C1D0B5C6807E8E7338 ] MBAMProtection  C:\Windows\system32\drivers\mbam.sys
13:27:35.0458 0x166c  MBAMProtection - ok
13:27:36.0207 0x166c  [ ADED0E73F165B8353690F8055A51154D, BEED269D09723FE13A27A494E5CA9A0555142AE7647C97EB3E2C7AA111633A20 ] MBAMService    C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
13:27:36.0379 0x166c  MBAMService - ok
13:27:36.0425 0x166c  [ 6FE70B9DCAD66449119E733C276F83E8, C1C030D975527A4EF38E6E376153C8FCF1C4B1398217A045062D187DF5D8097A ] MBAMSwissArmy  C:\Windows\system32\drivers\MBAMSwissArmy.sys
13:27:36.0472 0x166c  MBAMSwissArmy - ok
13:27:36.0535 0x166c  [ 47EDF3E9AF296D7836A50179AC0F3749, F15D463E9D2B567963E6AEDF1F26440D9A02680F3322BD5D3CA2605EDFFEFA09 ] MBAMWebProtection C:\Windows\system32\drivers\mwac.sys
13:27:36.0566 0x166c  MBAMWebProtection - ok
13:27:36.0597 0x166c  [ BFB9EE8EE977EFE85D1A3105ABEF6DD1, D2A84EBF0C0B7A14AD432FD2EF43CC12300027AEA3FA4075659FB088AB62B588 ] Mcx2Svc        C:\Windows\system32\Mcx2Svc.dll
13:27:36.0737 0x166c  Mcx2Svc - ok
13:27:36.0784 0x166c  [ 0FFF5B045293002AB38EB1FD1FC2FB74, 49071B565FD5B2DE43EC00D8518C3BE70843F38919E82F13104B8C1FAFB20374 ] megasas        C:\Windows\system32\DRIVERS\megasas.sys
13:27:36.0815 0x166c  megasas - ok
13:27:36.0847 0x166c  [ DCBAB2920C75F390CAF1D29F675D03D6, 85C3A7A010BEA5E3C6179161B295F2CB900A6A214833A5F87A4327392880E2BB ] MegaSR          C:\Windows\system32\DRIVERS\MegaSR.sys
13:27:36.0909 0x166c  MegaSR - ok
13:27:37.0096 0x166c  [ 123271BD5237AB991DC5C21FDF8835EB, 004F8F9228EE291A0E36CE33078D572D61733516F9AA5CFC832AF204C6869E89 ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
13:27:37.0143 0x166c  Microsoft Office Groove Audit Service - ok
13:27:37.0190 0x166c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] MMCSS          C:\Windows\system32\mmcss.dll
13:27:37.0268 0x166c  MMCSS - ok
13:27:37.0283 0x166c  [ F001861E5700EE84E2D4E52C712F4964, F4DC5AEED6F34D76CCEF360862CC47EF71097BE0813C8CE04EE5F0DB387DFFAE ] Modem          C:\Windows\system32\drivers\modem.sys
13:27:37.0361 0x166c  Modem - ok
13:27:37.0393 0x166c  [ 79D10964DE86B292320E9DFE02282A23, 52714827B7EEDACA55326A4E4F6158D4942DFAA3BACDE303A2F569BF3F4FAA72 ] monitor        C:\Windows\system32\DRIVERS\monitor.sys
13:27:37.0486 0x166c  monitor - ok
13:27:37.0533 0x166c  [ FB18CC1D4C2E716B6B903B0AC0CC0609, F10CCA63493782B16DE6B96B94A27078DBE68AECEF34FDF840CFF86D2C6E3C5E ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
13:27:37.0564 0x166c  mouclass - ok
13:27:37.0595 0x166c  [ 2C388D2CD01C9042596CF3C8F3C7B24D, B2FB72272BB01AEDA4047B57C943B7E9BD8A6497854F8CC34672AAA592D0A703 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
13:27:37.0673 0x166c  mouhid - ok
13:27:37.0720 0x166c  [ D1BDF813C9FE5ED53134EDF360927735, 0FC422513A9C98C32A90C7C5B2635DA6104C6425A2E2A8746B110A07AFB1B539 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
13:27:37.0783 0x166c  mountmgr - ok
13:27:37.0954 0x166c  [ ADF79A49E942C91D1FC9863CBFDD6B58, C2B2A792C4717133DCAE6297EE3F5D985B11D3C1E68A8DC23985AC6B78ACDE98 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
13:27:38.0032 0x166c  MozillaMaintenance - ok
13:27:38.0079 0x166c  [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0, D3D903EEA465D77345AAC9B9F02CDEADF4831212EA2DE4FCA33BEE26EBB47420 ] mpio            C:\Windows\system32\drivers\mpio.sys
13:27:38.0126 0x166c  mpio - ok
13:27:38.0173 0x166c  [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0, 1D6DCFA0E56C3E55B6AED819176E751502F863BA0FCF4F0B3253A81D208141A2 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
13:27:38.0266 0x166c  mpsdrv - ok
13:27:38.0375 0x166c  [ 9835584E999D25004E1EE8E5F3E3B881, 71798B0CBE9AE69F1F29B845319019C69EC7F415CBABB3B87DDE92C360675021 ] MpsSvc          C:\Windows\system32\mpssvc.dll
13:27:38.0453 0x166c  MpsSvc - ok
13:27:38.0516 0x166c  [ 06AC0310138E4B2C35AF7344D18BC686, FCDB6CC851EC47F92FFF764717A44FF5D5D0E179C215B3C6E77FB9BEA4DE1908 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
13:27:38.0656 0x166c  MRxDAV - ok
13:27:38.0703 0x166c  [ 6284D46BAA301BEDB9AB7FA7672B2410, F998D17FEE497491CC3CF4711FB37E507D1A5B2E9B2E4D6001152EDB968A2D98 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
13:27:38.0765 0x166c  mrxsmb - ok
13:27:38.0828 0x166c  [ 78AD95493F015FA9941869A009C00286, EC075C44FE78249CA58B338EBC3905A020762571A27DBEDF32A41B2A84FDEAFC ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:27:38.0906 0x166c  mrxsmb10 - ok
13:27:38.0968 0x166c  [ D7C3ED1FD46FAC7083473D9B1718255E, BC4BFFDB4B044205A4A658701B7F0E9680C139A6A0141E333BE6D590F99D9D65 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:27:39.0031 0x166c  mrxsmb20 - ok
13:27:39.0077 0x166c  [ 012C5F4E9349E711E11E0F19A8589F0A, 208B92DFCF7AD43202660FBBC9FF5E03AEDBEE38178FF3628EB74CB6CD37C584 ] msahci          C:\Windows\system32\drivers\msahci.sys
13:27:39.0109 0x166c  msahci - ok
13:27:39.0171 0x166c  [ 55055F8AD8BE27A64C831322A780A228, C2C9FD1F61302997117B1CD0835E8234405BB80084065ED05363B77868397304 ] msdsm          C:\Windows\system32\drivers\msdsm.sys
13:27:39.0202 0x166c  msdsm - ok
13:27:39.0249 0x166c  [ E1BCE74A3BD9902B72599C0192A07E27, 5162EB623FE64E9DFEAC6CA2410EFA1314E62EC13207FFBFED2D61AA887603C4 ] MSDTC          C:\Windows\System32\msdtc.exe
13:27:39.0327 0x166c  MSDTC - ok
13:27:39.0374 0x166c  [ DAEFB28E3AF5A76ABCC2C3078C07327F, 6EB558532400B489763BAE7203538DE5F196282A8CB46A1B31D59120FC5AFCEF ] Msfs            C:\Windows\system32\drivers\Msfs.sys
13:27:39.0467 0x166c  Msfs - ok
13:27:39.0483 0x166c  [ 3E1E5767043C5AF9367F0056295E9F84, B2EDFECD3C14E4FE1BA87D9A86334043A9BD696A554EBD186DA7EAEB2EBD4F70 ] mshidkmdf      C:\Windows\System32\drivers\mshidkmdf.sys
13:27:39.0561 0x166c  mshidkmdf - ok
13:27:39.0592 0x166c  [ 0A4E5757AE09FA9622E3158CC1AEF114, ED574E420E57374E328C7C526504ECA569C164287966F06019EC207CB17F2C54 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
13:27:39.0639 0x166c  msisadrv - ok
13:27:39.0717 0x166c  [ 90F7D9E6B6F27E1A707D4A297F077828, BEFC220EAA7307849600748842ACB9254A6A91158812D9B23EFAF912C498BA7F ] MSiSCSI        C:\Windows\system32\iscsiexe.dll
13:27:39.0795 0x166c  MSiSCSI - ok
13:27:39.0811 0x166c  msiserver - ok
13:27:39.0842 0x166c  [ 8C0860D6366AAFFB6C5BB9DF9448E631, 949C5A14E57F2D7385543C17C3485E7ADE36EA2016F6E0A1866571D2EDE90A77 ] MSKSSRV        C:\Windows\system32\drivers\MSKSSRV.sys
13:27:39.0920 0x166c  MSKSSRV - ok
13:27:39.0951 0x166c  [ 3EA8B949F963562CEDBB549EAC0C11CE, 1B0B2F16A1790282504F3C548D47C3281EFB440D5D9711A1EF76D6371B768D2D ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
13:27:40.0029 0x166c  MSPCLOCK - ok
13:27:40.0045 0x166c  [ F456E973590D663B1073E9C463B40932, 48BA6D5580EE7B6A4C06E04772FD35B51779553FC0DD6C5C30DD8B5DEEB25B11 ] MSPQM          C:\Windows\system32\drivers\MSPQM.sys
13:27:40.0138 0x166c  MSPQM - ok
13:27:40.0185 0x166c  [ 0E008FC4819D238C51D7C93E7B41E560, 141FCEBDD05874407EAEC35A9DCD3BB16F2A428F23E55487D6A5DBFCADBF10D2 ] MsRPC          C:\Windows\system32\drivers\MsRPC.sys
13:27:40.0247 0x166c  MsRPC - ok
13:27:40.0263 0x166c  [ FC6B9FF600CC585EA38B12589BD4E246, F05DB01AE1955D2468CE6B51E51998B111CA3B0BDEED090EE6B99B625CBA564A ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
13:27:40.0325 0x166c  mssmbios - ok
13:27:40.0341 0x166c  [ B42C6B921F61A6E55159B8BE6CD54A36, 6BB0A7BE005B8F281E551D1B8046CE4202372BC7AE0161881C858BFAC675FE1C ] MSTEE          C:\Windows\system32\drivers\MSTEE.sys
13:27:40.0403 0x166c  MSTEE - ok
13:27:40.0435 0x166c  [ 33599130F44E1F34631CEA241DE8AC84, E15B31D1AFDC8DC6D2B21D4215796A99ECC69EEDBB06CEED01AECC3C99A44C8B ] MTConfig        C:\Windows\system32\DRIVERS\MTConfig.sys
13:27:40.0466 0x166c  MTConfig - ok
13:27:40.0513 0x166c  [ DCDAAB8697A47894A554050CE18D0B56, 32F08D9B2890DD01B56043CAB74B4D948E09E5A92B15C4F99160416B1CBEC3A0 ] MTsensor        C:\Windows\system32\DRIVERS\ASACPI.sys
13:27:40.0591 0x166c  MTsensor - ok
13:27:40.0591 0x166c  [ 159FAD02F64E6381758C990F753BCC80, E55AB01DCFA95ECAB24A2A9656E28FF9D064BA08B3D82DC8AA42F5991BA09598 ] Mup            C:\Windows\system32\Drivers\mup.sys
13:27:40.0653 0x166c  Mup - ok
13:27:40.0809 0x166c  [ 61D57A5D7C6D9AFE10E77DAE6E1B445E, D252248532142E9E2332DA693BC51B795102CA938B568FF04981E98B19BFBC5C ] napagent        C:\Windows\system32\qagentRT.dll
13:27:40.0918 0x166c  napagent - ok
13:27:41.0027 0x166c  [ 26384429FCD85D83746F63E798AB1480, 957C115C263A4B4DC854558B43ECE632D8E2BCCB744E23A01EBA7476BA2E7FFB ] NativeWifiP    C:\Windows\system32\DRIVERS\nwifi.sys
13:27:41.0105 0x166c  NativeWifiP - ok
13:27:41.0277 0x166c  [ 6D8FCDD5BB3B676EF58FA234073492C6, 07A69DD00E45C59CBB6FABFBD62FE897655970BE2D09997CF29D20241ED9AF13 ] NBService      C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
13:27:41.0355 0x166c  NBService - ok
13:27:41.0464 0x166c  [ 9804FB2E46077F2977552347DFCA7E05, A34B703462C6998AB2B3EA6389F4B89616CDC257D44C400C92663E6FB4A8F196 ] NDIS            C:\Windows\system32\drivers\ndis.sys
13:27:41.0542 0x166c  NDIS - ok
13:27:41.0573 0x166c  [ 0E1787AA6C9191D3D319E8BAFE86F80C, F535022747355B2C66424BDA892D7DCB820C2EB8EE05BAE5BC6D1B1D65186278 ] NdisCap        C:\Windows\system32\DRIVERS\ndiscap.sys
13:27:41.0667 0x166c  NdisCap - ok
13:27:41.0761 0x166c  [ E4A8AEC125A2E43A9E32AFEEA7C9C888, 6EA181117126FC70B3C1DD1AC73CC26D1603A2CF49E47F66623E2C9489C49B55 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
13:27:41.0839 0x166c  NdisTapi - ok
13:27:41.0901 0x166c  [ D8A65DAFB3EB41CBB622745676FCD072, 874D3C3D247C4A309DA813DB1D2EDB0037D3C489824BD5FE95B0C20699764EF7 ] Ndisuio        C:\Windows\system32\DRIVERS\ndisuio.sys
13:27:42.0057 0x166c  Ndisuio - ok
13:27:42.0119 0x166c  [ 38FBE267E7E6983311179230FACB1017, CFD1CBCA59650795C030DB30E5795B37C11C736E14003AE1DAB081BA5C0C9B14 ] NdisWan        C:\Windows\system32\DRIVERS\ndiswan.sys
13:27:42.0197 0x166c  NdisWan - ok
13:27:42.0229 0x166c  [ A4BDC541E69674FBFF1A8FF00BE913F2, 18CCFD063E9870B8B6958715BC0414C4D920AE63528EA1E9D7E30F7138918FFA ] NDProxy        C:\Windows\system32\drivers\NDProxy.sys
13:27:42.0338 0x166c  NDProxy - ok
13:27:42.0385 0x166c  [ 80B275B1CE3B0E79909DB7B39AF74D51, 75B406B0D9D28239D4EB2A298419A5F78A58237D88C5FD688EF1DFFAFACCF796 ] NetBIOS        C:\Windows\system32\DRIVERS\netbios.sys
13:27:42.0463 0x166c  NetBIOS - ok
13:27:42.0525 0x166c  [ A00996C9BFEF29A93B9F21DBE1DC502D, A97982CBBC2E240B0CD884ED3ED5D11B207DA8E7BEF73DCEA44E16E1CD84222F ] NetBT          C:\Windows\system32\DRIVERS\netbt.sys
13:27:42.0697 0x166c  NetBT - ok
13:27:42.0728 0x166c  [ 4E568DBE3FFF1A0025EB432DC929B78F, 26F36CA31A1B977685F8DF5F8436848B7D4143B47EC0DAE68F8382C1B52A6C71 ] Netlogon        C:\Windows\system32\lsass.exe
13:27:42.0790 0x166c  Netlogon - ok
13:27:42.0868 0x166c  [ 7CCCFCA7510684768DA22092D1FA4DB2, BB9E4F8FABBF596D888E6D303CB54A336D9DFF95B36AEA9369D2ED787DDC4B5D ] Netman          C:\Windows\System32\netman.dll
13:27:42.0962 0x166c  Netman - ok
13:27:43.0165 0x166c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
13:27:43.0258 0x166c  NetMsmqActivator - ok
13:27:43.0321 0x166c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
13:27:43.0367 0x166c  NetPipeActivator - ok
13:27:43.0414 0x166c  [ 8C338238C16777A802D6A9211EB2BA50, 0D08A47CD403EDA5E8CAD7409BBBBCDC29A9861D2DC41D42B68B22B1AA1EBDD6 ] netprofm        C:\Windows\System32\netprofm.dll
13:27:43.0508 0x166c  netprofm - ok
13:27:43.0523 0x166c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
13:27:43.0601 0x166c  NetTcpActivator - ok
13:27:43.0633 0x166c  [ 0BEF1F19F32C9F3DBE9A503F2E66CC22, 4F4812CDDB675C5D655B5B90375F188A3A5AA52A2BC2CED383B03449CF8210C8 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
13:27:43.0711 0x166c  NetTcpPortSharing - ok
13:27:43.0789 0x166c  [ 1D85C4B390B0EE09C7A46B91EFB2C097, 6A8850B151E88EE371F3CC543A946302DDF9494908D684B8B0C706A42CC54348 ] nfrd960        C:\Windows\system32\DRIVERS\nfrd960.sys
13:27:43.0835 0x166c  nfrd960 - ok
13:27:43.0960 0x166c  [ F115C5CD29E512F18BD7138A094B77E5, 90C2CE8B256EE9AABF674ADDE7F85E91DAF48EA368452D03C187A4AE027D4E39 ] NlaSvc          C:\Windows\System32\nlasvc.dll
13:27:44.0101 0x166c  NlaSvc - ok
13:27:44.0257 0x166c  [ 060DAF68493AD7ADF104413E5A62AFA8, DE88D31EE3628FB8BCD9F3314395F295151EEA5DA8E1839652119DB08B7AE9E8 ] NMIndexingService C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
13:27:44.0381 0x166c  NMIndexingService - ok
13:27:44.0397 0x166c  [ 1DB262A9F8C087E8153D89BEF3D2235F, A51EE5D5AD3CD76B74BEA9C66C462608BF3B50C53DAA4110A75DB10495A8C101 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
13:27:44.0506 0x166c  Npfs - ok
13:27:44.0537 0x166c  [ BA387E955E890C8A88306D9B8D06BF17, 3477BD9686C5777A93251C154512671AAA7533B18C536DF51F7B1D6D28E7F8A5 ] nsi            C:\Windows\system32\nsisvc.dll
13:27:44.0615 0x166c  nsi - ok
13:27:44.0647 0x166c  [ E9A0A4D07E53D8FEA2BB8387A3293C58, 690CAD6C4E35ECC1172A2E1FD3933DF73158B3BF42CB21244269612A53DE4D7A ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
13:27:44.0725 0x166c  nsiproxy - ok
13:27:44.0849 0x166c  [ 978E7A2E4BF4E8E70D0776EF0D9E97FB, B6C82BB9B3025FD2D37B6AB6FA9C2944F8B3020CD4588BE464CE73A992B7FF00 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
13:27:44.0959 0x166c  Ntfs - ok
13:27:44.0990 0x166c  [ F9756A98D69098DCA8945D62858A812C, 572ADBFCFDE2030B34A013AADC14DBC144EB3F34D06991E2464A3EA9605BC045 ] Null            C:\Windows\system32\drivers\Null.sys
13:27:45.0130 0x166c  Null - ok
13:27:45.0193 0x166c  [ B3E25EE28883877076E0E1FF877D02E0, 402B6FED6FBBF645190396DC141141EF52DD059DABD01F8AC9CF01D23664070C ] nvraid          C:\Windows\system32\drivers\nvraid.sys
13:27:45.0239 0x166c  nvraid - ok
13:27:45.0302 0x166c  [ 4380E59A170D88C4F1022EFF6719A8A4, 93EDB3F4CDBF53C9C1970DD29AB146E390695C568180847BA8903F5FBEABCFF2 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
13:27:45.0364 0x166c  nvstor - ok
13:27:45.0427 0x166c  [ 5A0983915F02BAE73267CC2A041F717D, D83461D74597BF2BE042FEFCC27FCD18BF63CB8135B0666D731D50951C3468A8 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
13:27:45.0473 0x166c  nv_agp - ok
13:27:45.0598 0x166c  [ 785F487A64950F3CB8E9F16253BA3B7B, 02445344BD214370A6D48B1CA04921D8EFCB13E676B5648266DD0E076C0822B6 ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
13:27:45.0661 0x166c  odserv - ok
13:27:45.0739 0x166c  [ 08A70A1F2CDDE9BB49B885CB817A66EB, 0BB98123B544124B144F3E95D77E01E973D060B8B2302503FF24ABBBE803EB63 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
13:27:45.0785 0x166c  ohci1394 - ok
13:27:45.0848 0x166c  [ 5A432A042DAE460ABE7199B758E8606C, 6E5D1F477D290905BE27CEBF9572BAC6B05FFEF2FAD901D3C8E11F665F8B9A71 ] ose            C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:27:45.0895 0x166c  ose - ok
13:27:45.0988 0x166c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
13:27:46.0129 0x166c  p2pimsvc - ok
13:27:46.0269 0x166c  [ 59C3DDD501E39E006DAC31BF55150D91, E02B63AB7F34CF6FF3F644AF354D10004E6F50014E03172D80BD78934EF71EF1 ] p2psvc          C:\Windows\system32\p2psvc.dll
13:27:46.0347 0x166c  p2psvc - ok
13:27:46.0394 0x166c  [ 2EA877ED5DD9713C5AC74E8EA7348D14, 14BA3722CE5F8FF07F2D97DCDD6558EB49C9B02E5E6FAD6D9F18D354733EFECE ] Parport        C:\Windows\system32\DRIVERS\parport.sys
13:27:46.0472 0x166c  Parport - ok
13:27:46.0534 0x166c  [ 3F34A1B4C5F6475F320C275E63AFCE9B, 31295D5121C0C3F2085E0EEBA260EEE4CA003993C026E2F81986D19158036E6B ] partmgr        C:\Windows\system32\drivers\partmgr.sys
13:27:46.0581 0x166c  partmgr - ok
13:27:46.0612 0x166c  [ EB0A59F29C19B86479D36B35983DAADC, AC09AFE7F13BE4079D01383BAC44091997E1AAF6512C9673A42B9E3780EB08A8 ] Parvdm          C:\Windows\system32\DRIVERS\parvdm.sys
13:27:46.0659 0x166c  Parvdm - ok
13:27:46.0753 0x166c  [ 84752B402BF64CCDDF11816FEDF12DB4, 184DDFCEEE8C5B492415270FC640B8D584B3D79E7BADCE4DE7CDD74CC8C60130 ] PcaSvc          C:\Windows\System32\pcasvc.dll
13:27:46.0846 0x166c  PcaSvc - ok
13:27:46.0909 0x166c  [ 673E55C3498EB970088E812EA820AA8F, 1F81315664B8CBFDD569416C0ECCE4C6251F34577313A0858AB46609781303B5 ] pci            C:\Windows\system32\drivers\pci.sys
13:27:47.0002 0x166c  pci - ok
13:27:47.0049 0x166c  [ AFE86F419014DB4E5593F69FFE26CE0A, CAF36E61BE7B511D3A03A65FF5A3017CEE4D2F53005B410F2D4A2AAE9FED4C00 ] pciide          C:\Windows\system32\drivers\pciide.sys
13:27:47.0096 0x166c  pciide - ok
13:27:47.0111 0x166c  [ F396431B31693E71E8A80687EF523506, BC614FC21E029E2497F1CCE3131BBD295B827F2310762B47D5BBC7703D80554B ] pcmcia          C:\Windows\system32\DRIVERS\pcmcia.sys
13:27:47.0158 0x166c  pcmcia - ok
13:27:47.0174 0x166c  [ 250F6B43D2B613172035C6747AEEB19F, A91F15B133F2619912CF750E6F3662E011CD0FA4B9477CE532CE3196D23307D9 ] pcw            C:\Windows\system32\drivers\pcw.sys
13:27:47.0221 0x166c  pcw - ok
13:27:47.0299 0x166c  [ 0C941A3F148B4228867908F98F394461, 6D5F575F2E796C5EA8F9F3F96F9ACD935E274210A105C9365102B448E9AE2031 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
13:27:47.0408 0x166c  PEAUTH - ok
13:27:47.0470 0x166c  [ A05F0D7419CF4680EEDD5736E6549E7B, D8B32DE00A317593D61016E4823370B073618F9760A785FF7DA0F26DD5E4FCAB ] pepifilter      C:\Windows\system32\DRIVERS\lv302af.sys
13:27:47.0548 0x166c  pepifilter - ok
13:27:47.0860 0x166c  [ 8B7AEC0ABA77DE5D2FEAC1824C15A3FA, 1185ED98FD157B5C4C858FFEB273F5782CDEAD9B2A571E3969706B2084F4AD6B ] Ph3xIB32        C:\Windows\system32\DRIVERS\Ph3xIB32.sys
13:27:47.0985 0x166c  Ph3xIB32 - ok
13:27:48.0391 0x166c  [ DD184D9ADFE2A8A21741DBDFE9E22F5C, 0C22966973246248FD15A6C192AA1B731D018B4FDF1BD97FE9AA67A746C9440C ] PID_PEPI        C:\Windows\system32\DRIVERS\LV302V32.SYS
13:27:48.0562 0x166c  PID_PEPI - ok
13:27:48.0890 0x166c  [ 414BBA67A3DED1D28437EB66AEB8A720, D6DF254E2615FA402044824DCD9004F579FC0DF74B90E44C99D5F0253CF8AD88 ] pla            C:\Windows\system32\pla.dll
13:27:49.0046 0x166c  pla - ok
13:27:49.0217 0x166c  [ EC7BC28D207DA09E79B3E9FAF8B232CA, A42F8F69C3CD753D787A5D558659DEA2CC306C896D75B8C82549219CF654504F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
13:27:49.0327 0x166c  PlugPlay - ok
13:27:49.0373 0x166c  [ 63FF8572611249931EB16BB8EED6AFC8, 9732CCBCB93A7A4BEC88812B952C20244479E9BD781240C195E57F09E619EA33 ] PNRPAutoReg    C:\Windows\system32\pnrpauto.dll
13:27:49.0467 0x166c  PNRPAutoReg - ok
13:27:49.0529 0x166c  [ 82A8521DDC60710C3D3D3E7325209BEC, C4E34571EDD57C7FBB3D736B5FE8BD154624705B5C8EA2EC898F19F75B9A5942 ] PNRPsvc        C:\Windows\system32\pnrpsvc.dll
13:27:49.0592 0x166c  PNRPsvc - ok
13:27:49.0701 0x166c  [ A2FEA7E16D8D056D2FF1EE93F9C73FB1, 6BC8C1B37274B50573F3DAC043DBD9B29B93F527290392842CD94910014D0C74 ] PolicyAgent    C:\Windows\System32\ipsecsvc.dll
13:27:49.0841 0x166c  PolicyAgent - ok
13:27:49.0888 0x166c  [ F87D30E72E03D579A5199CCB3831D6EA, B09328E89954584F97908FA5946376BA990B8C650DABCBF3CA3B08719937C694 ] Power          C:\Windows\system32\umpo.dll
13:27:49.0966 0x166c  Power - ok
13:27:50.0044 0x166c  [ 631E3E205AD6D86F2AED6A4A8E69F2DB, 1D3BF0CFC37D91A3A56246920B9CF1084E78A055D56E85A773417809C58C8065 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
13:27:50.0138 0x166c  PptpMiniport - ok
13:27:50.0185 0x166c  [ 85B1E3A0C7585BC4AAE6899EC6FCF011, 1E067113C146D6842D7FB04007F363D6FB7783C6BC7C9AB6614E44075C4F86C3 ] Processor      C:\Windows\system32\DRIVERS\processr.sys
13:27:50.0309 0x166c  Processor - ok
13:27:50.0387 0x166c  [ FD9692A3D31E021207D3C2A9DDDC2BE3, 5295EFAD9BD4B59996935A41825392C12A4C968D161BEEA37797F90AF8E54229 ] ProfSvc        C:\Windows\system32\profsvc.dll
13:27:50.0497 0x166c  ProfSvc - ok
13:27:50.0528 0x166c  [ 4E568DBE3FFF1A0025EB432DC929B78F, 26F36CA31A1B977685F8DF5F8436848B7D4143B47EC0DAE68F8382C1B52A6C71 ] ProtectedStorage C:\Windows\system32\lsass.exe
13:27:50.0590 0x166c  ProtectedStorage - ok
13:27:50.0653 0x166c  [ 64E413BA0C529AA40C3924BBCC4153DB, 9E0EB02078EE250AC618D4A4537D54BACDD7E2B67349162CA61F35EAF91601EE ] ProtexisLicensing C:\Windows\system32\PSIService.exe
13:27:50.0715 0x166c  ProtexisLicensing - detected UnsignedFile.Multi.Generic ( 1 )
13:27:51.0573 0x166c  Detect skipped due to KSN trusted
13:27:51.0573 0x166c  ProtexisLicensing - ok
13:27:51.0651 0x166c  [ 6270CCAE2A86DE6D146529FE55B3246A, 463209CBAF1B0E269DC8FC6FBDEE5BB7E5ADB5D3F024930BFD0B97E0A9678883 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
13:27:51.0776 0x166c  Psched - ok
13:27:51.0807 0x166c  [ E70BF61FF293370B58909FC9727C8187, 75A9087D08A9D986F36B272D920FC11FBF73F888F939AB6D9A7CD0EB3D51DA62 ] PxHelp20        C:\Windows\system32\Drivers\PxHelp20.sys
13:27:51.0823 0x166c  PxHelp20 - detected UnsignedFile.Multi.Generic ( 1 )
13:27:52.0587 0x166c  Detect skipped due to KSN trusted
13:27:52.0587 0x166c  PxHelp20 - ok
13:27:52.0805 0x166c  [ AB95ECF1F6659A60DDC166D8315B0751, 0ED6D3460D28978BADF31B930DBB3298A6A10EFF8883763EABA0E36A21A0E83D ] ql2300          C:\Windows\system32\DRIVERS\ql2300.sys
13:27:52.0915 0x166c  ql2300 - ok
13:27:52.0961 0x166c  [ B4DD51DD25182244B86737DC51AF2270, 7E62B04F054A6330B7F9968222523BDE8F3EE47A11D17E6C0E2D5ACDC07B9E6B ] ql40xx          C:\Windows\system32\DRIVERS\ql40xx.sys
13:27:53.0008 0x166c  ql40xx - ok
13:27:53.0055 0x166c  [ 31AC809E7707EB580B2BDB760390765A, A8481FD19A0F778F5591B7676F591F664ADC68B6867E663C0F9564173F4AC909 ] QWAVE          C:\Windows\system32\qwave.dll
13:27:53.0149 0x166c  QWAVE - ok
13:27:53.0180 0x166c  [ 584078CA1B95CA72DF2A27C336F9719D, 836F115C92D343463C14A9DE39648C1EFA7C7EE4720F5C692EE0F68B84830121 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
13:27:53.0258 0x166c  QWAVEdrv - ok
13:27:53.0273 0x166c  [ 30A81B53C766D0133BB86D234E5556AB, 726C6B83B5ACAA84CAB1689B6DD6DDAE3199D61A57B5D7B5B5A0F62FCF838090 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
13:27:53.0351 0x166c  RasAcd - ok
13:27:53.0429 0x166c  [ 57EC4AEF73660166074D8F7F31C0D4FD, C66B425EC4DB5E7FD289AE631C9B019EB16717C55E80FAE964BB22203E4AACEF ] RasAgileVpn    C:\Windows\system32\DRIVERS\AgileVpn.sys
13:27:53.0523 0x166c  RasAgileVpn - ok
13:27:53.0539 0x166c  [ A60F1839849C0C00739787FD5EC03F13, B210DFA5A843CF1DA73635F168E2EA5052CBED15C664F8523CDFB34CA165D0E0 ] RasAuto        C:\Windows\System32\rasauto.dll
13:27:53.0648 0x166c  RasAuto - ok
13:27:53.0695 0x166c  [ D9F91EAFEC2815365CBE6D167E4E332A, 8350457A39D141C13807E7DB5A8D4113197C4016F7744B9993391F4AEA0C4A5C ] Rasl2tp        C:\Windows\system32\DRIVERS\rasl2tp.sys
13:27:53.0788 0x166c  Rasl2tp - ok
13:27:53.0882 0x166c  [ CB9E04DC05EACF5B9A36CA276D475006, 4D8C0AEF1D4F84F375AD2BAF786C9F6C52316A3E655B913449E71AD7C0FCA56E ] RasMan          C:\Windows\System32\rasmans.dll
13:27:53.0975 0x166c  RasMan - ok
13:27:54.0022 0x166c  [ 0FE8B15916307A6AC12BFB6A63E45507, 64119474DE7499E6E8B82E78BBD50074B3AA70B3E8329089FAE9B7F29919004E ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
13:27:54.0178 0x166c  RasPppoe - ok
13:27:54.0225 0x166c  [ 44101F495A83EA6401D886E7FD70096B, 56A0CE5C89870752B9B2AB795C1A248CA28209E049B2F20CCA0308CBE2488A0A ] RasSstp        C:\Windows\system32\DRIVERS\rassstp.sys
13:27:54.0334 0x166c  RasSstp - ok
13:27:54.0428 0x166c  [ D528BC58A489409BA40334EBF96A311B, C71E9A4B101DB6C3183B9F97B9098D73D6FE1B12C05C2EB3CE8A8041BEE6BA61 ] rdbss          C:\Windows\system32\DRIVERS\rdbss.sys
13:27:54.0568 0x166c  rdbss - ok
13:27:54.0584 0x166c  [ 0D8F05481CB76E70E1DA06EE9F0DA9DF, 2AFCBE3237D27AFBF095F91F1FCCA63E6890F34A9E4F00E5C34C92394CDA89FB ] rdpbus          C:\Windows\system32\DRIVERS\rdpbus.sys
13:27:54.0677 0x166c  rdpbus - ok
13:27:54.0740 0x166c  [ 23DAE03F29D253AE74C44F99E515F9A1, 8FED93D10B2062F0526FE3508101F8FCF8F72DEB90AFB472EB7CBAE83A0EC430 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
13:27:54.0802 0x166c  RDPCDD - ok
13:27:54.0865 0x166c  [ 5A53CA1598DD4156D44196D200C94B8A, 8112FE14FEC94C67B1C5BDE4171E37584F1D0098D2C557C9E4BDD3E0291E25E4 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
13:27:54.0958 0x166c  RDPENCDD - ok
13:27:54.0974 0x166c  [ 44B0A53CD4F27D50ED461DAE0C0B4E1F, CDA80B08E67AD034081C0C920CD66147689F1844403CBC552F65005E7C011A91 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
13:27:55.0052 0x166c  RDPREFMP - ok
13:27:55.0130 0x166c  [ CD9214A6AE17D188D17C3CF8CB9CC693, 2E16FF1F7446F0600D6519010FD05A30B94D97167C16B3E7FC396A97D8139D60 ] RDPWD          C:\Windows\system32\drivers\RDPWD.sys
13:27:55.0301 0x166c  RDPWD - ok
13:27:55.0395 0x166c  [ 518395321DC96FE2C9F0E96AC743B656, 5F6A0880B4F3EE7196259EA362DA9554B0687B0236F9A8E5CF7A4A77F01F1776 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
13:27:55.0426 0x166c  rdyboost - ok
13:27:55.0723 0x166c  [ 3394FAEF5FE401B076FD5DEC295C7919, 7674E6A36ADE653195BD240D7613C5E711940DF65A947ABA4D2546AF410A07C7 ] RealPlayerUpdateSvc C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
13:27:55.0801 0x166c  RealPlayerUpdateSvc - ok
13:27:56.0378 0x166c  [ 435685429F72AC4D43BF3A2658F13104, DBED552FE555C0E0BFDE046BDE5ED87C194CD84EBBF69A95C5B0E706941946E8 ] RealTimes Desktop Service c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
13:27:56.0456 0x166c  RealTimes Desktop Service - ok
13:27:56.0534 0x166c  [ 7B5E1419717FAC363A31CC302895217A, 048B96B127CC20833948DAE53C59886D5C725ECA7A744424A01339447D2DDC32 ] RemoteAccess    C:\Windows\System32\mprdim.dll
13:27:56.0643 0x166c  RemoteAccess - ok
13:27:56.0705 0x166c  [ CB9A8683F4EF2BF99E123D79950D7935, B9FA3E7E91E76D975CF40BFA37909E50F29CC13AB1399007884710651827E9AA ] RemoteRegistry  C:\Windows\system32\regsvc.dll
13:27:56.0830 0x166c  RemoteRegistry - ok
13:27:57.0033 0x166c  [ 78D072F35BC45D9E4E1B61895C152234, 80C924EE1156B4E3172E83DCB9C60817E87885FB9377647E0BF90153E415B1CA ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
13:27:57.0173 0x166c  RpcEptMapper - ok
13:27:57.0267 0x166c  [ 94D36C0E44677DD26981D2BFEEF2A29D, D77A93AC60536F3706E8A0154C0C2199E888B7748C84DB7437254FF175F4DF55 ] RpcLocator      C:\Windows\system32\locator.exe
13:27:57.0392 0x166c  RpcLocator - ok
13:27:57.0657 0x166c  [ 1F54F58D7FA2B3442084E32CDE5E309E, F0D8124E7C9ADC88BD8C53646F2499CDB3D2105DA7C4D28F3D26F313859B3D32 ] RpcSs          C:\Windows\system32\rpcss.dll
13:27:57.0766 0x166c  RpcSs - ok
13:27:57.0938 0x166c  [ 032B0D36AD92B582D869879F5AF5B928, 0F8F18A6A0A689957B886D9368015889091094EDA18BE532093F06A70A7CE184 ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
13:27:58.0078 0x166c  rspndr - ok
13:27:58.0250 0x166c  [ 9A929308A64183D3D9DCCBB6DF4BADAE, 6FB37676B64F3658B794E97CB5B98CC5B012D8C853A90C7B145BDB8F2FA49B3C ] RTL8169        C:\Windows\system32\DRIVERS\Rtlh86.sys
13:27:58.0593 0x166c  RTL8169 - ok
13:27:59.0092 0x166c  [ A77E6087129E463CDAB8080F5B846888, 677E1731578EAC1320EB3C6A7B8EBD6C6F68DEE770B50B0C9C11DE34EF587168 ] RTL8192cu      C:\Windows\system32\DRIVERS\RTL8192cu.sys
13:27:59.0186 0x166c  RTL8192cu - ok
13:27:59.0233 0x166c  [ 4E568DBE3FFF1A0025EB432DC929B78F, 26F36CA31A1B977685F8DF5F8436848B7D4143B47EC0DAE68F8382C1B52A6C71 ] SamSs          C:\Windows\system32\lsass.exe
13:27:59.0295 0x166c  SamSs - ok
13:27:59.0404 0x166c  [ 05D860DA1040F111503AC416CCEF2BCA, DAE2F37D09A5A42F945BC8E27E4EA2303521081783A80CEE7FEE7C5A1C2CFC5E ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
13:27:59.0467 0x166c  sbp2port - ok
13:27:59.0623 0x166c  [ 8FC518FFE9519C2631D37515A68009C4, 21E10585470CF9FC3BD1977F8A426686CD2FA6BD2094B9E3594B21C7C4541D25 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
13:27:59.0732 0x166c  SCardSvr - ok
13:27:59.0810 0x166c  [ 0693B5EC673E34DC147E195779A4DCF6, AF1B56FBF3ADABF94CD9DBA67586B8746DE135151F6B3D1B0EE315BC1E2DB670 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
13:27:59.0950 0x166c  scfilter - ok
13:28:00.0371 0x166c  [ 9060B8D5BCD5F2B019249F85E3D811F3, 7FB32AB7FE118462988321B9230074DAA960B587417EB463187539C3215445AE ] Schedule        C:\Windows\system32\schedsvc.dll
13:28:00.0590 0x166c  Schedule - ok
13:28:00.0699 0x166c  [ 319C6B309773D063541D01DF8AC6F55F, 182F392FE839499D159A30A3CD04B5D0C87219930BFB1A7456880B7DA75B9820 ] SCPolicySvc    C:\Windows\System32\certprop.dll
13:28:00.0808 0x166c  SCPolicySvc - ok
13:28:00.0839 0x166c  [ 08236C4BCE5EDD0A0318A438AF28E0F7, 77727F963F63C4CEC11E7AAD5FB3836179701D512CA9436C3170B9E6A4E5F888 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
13:28:00.0964 0x166c  SDRSVC - ok
13:28:01.0042 0x166c  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
13:28:01.0136 0x166c  secdrv - ok
13:28:01.0183 0x166c  [ 38CBFFED5FC39CDFE6B4014401ED2629, 7BA730E2EDB8387190E45DA2F475BFE42AB3B12319DE088BD8E9F59227EDA4DD ] seclogon        C:\Windows\system32\seclogon.dll
13:28:01.0432 0x166c  seclogon - ok
13:28:01.0510 0x166c  [ DCB7FCDCC97F87360F75D77425B81737, F8289AF2C458C167038EEFE613EE5E3D6D5B3308B8784168374BC81C47891CE5 ] SENS            C:\Windows\System32\sens.dll
13:28:01.0666 0x166c  SENS - ok
13:28:01.0807 0x166c  [ 50087FE1EE447009C9CC2997B90DE53F, B5E6CF1D991F87C29C5E28198E0962E31FFB499A46C3BD43FC20391693389959 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
13:28:02.0041 0x166c  SensrSvc - ok
13:28:02.0150 0x166c  [ 9AD8B8B515E3DF6ACD4212EF465DE2D1, E2F019BCD1446236D078D46065DD151DD068778F33BE2F1E8A0CC1EA2F954E86 ] Serenum        C:\Windows\system32\DRIVERS\serenum.sys
13:28:02.0353 0x166c  Serenum - ok
13:28:02.0415 0x166c  [ 5FB7FCEA0490D821F26F39CC5EA3D1E2, A26DB2EB9F3E2509B4EBA949DB97595CC32332D9321DF68283BFC102E66D766F ] Serial          C:\Windows\system32\DRIVERS\serial.sys
13:28:02.0571 0x166c  Serial - ok
13:28:02.0618 0x166c  [ 79BFFB520327FF916A582DFEA17AA813, 7A2A9D69BE02228591186A9F4453D4B5FD98837CA422C873C48040170E8BD18C ] sermouse        C:\Windows\system32\DRIVERS\sermouse.sys
13:28:02.0711 0x166c  sermouse - ok
13:28:02.0821 0x166c  [ 4AE380F39A0032EAB7DD953030B26D28, C8F5F2DD59574E966FDF3057867BB959A554BAB6FD5DC6F1427094A6BC2B2809 ] SessionEnv      C:\Windows\system32\sessenv.dll
13:28:02.0977 0x166c  SessionEnv - ok
13:28:03.0023 0x166c  [ 9F976E1EB233DF46FCE808D9DEA3EB9C, 6A5C53F27F8BCA85CE206EE7D196176F67EC6FFA5D4830373A20792C149B5E75 ] sffdisk        C:\Windows\system32\drivers\sffdisk.sys
13:28:03.0086 0x166c  sffdisk - ok
13:28:03.0117 0x166c  [ 932A68EE27833CFD57C1639D375F2731, 11D6B98FBEEE2B9C7B06EF7091857BBD3B349077997D6261D66280668FD1B5C3 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
13:28:03.0164 0x166c  sffp_mmc - ok
13:28:03.0195 0x166c  [ 6D4CCAEDC018F1CF52866BBBAA235982, AAC41F5C97B3FE5A3DC0838457EB8CC9BB71FCA16D3EDBB67D603F0A9D46C131 ] sffp_sd        C:\Windows\system32\drivers\sffp_sd.sys
13:28:03.0289 0x166c  sffp_sd - ok
13:28:03.0351 0x166c  [ DB96666CC8312EBC45032F30B007A547, C3AE60FC65A36E96E0D2CC6E184481D70F91A19DC3E2E17E2873DD670A592DD7 ] sfloppy        C:\Windows\system32\DRIVERS\sfloppy.sys
13:28:03.0429 0x166c  sfloppy - ok
13:28:03.0601 0x166c  [ D1A079A0DE2EA524513B6930C24527A2, E2BC16DBCF38841EECD49C6FA1A9AC89C17F332F12606CA826F058E995E1B83D ] SharedAccess    C:\Windows\System32\ipnathlp.dll
13:28:03.0710 0x166c  SharedAccess - ok
13:28:03.0850 0x166c  [ 414DA952A35BF5D50192E28263B40577, 9C9BAFB9880DA6CC728506A142BE124E186219610DCC3460657A3CA93C865DF1 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
13:28:03.0975 0x166c  ShellHWDetection - ok
13:28:04.0053 0x166c  [ 2565CAC0DC9FE0371BDCE60832582B2E, 1A775214E86B83C2F1799F12D71077D81C89AD32734A248BA88787B7F104B79D ] sisagp          C:\Windows\system32\drivers\sisagp.sys
13:28:04.0147 0x166c  sisagp - ok
13:28:04.0193 0x166c  [ A9F0486851BECB6DDA1D89D381E71055, 7E909538AB758C18AC2CCBFFEE17BA36FA6ED2E674AA70924AA87AC61375FF35 ] SiSRaid2        C:\Windows\system32\DRIVERS\SiSRaid2.sys
13:28:04.0240 0x166c  SiSRaid2 - ok
13:28:04.0271 0x166c  [ 3727097B55738E2F554972C3BE5BC1AA, 75D52A596A298C33EC79A3B0B80F25492C08A182ABC679401502DA9597687566 ] SiSRaid4        C:\Windows\system32\DRIVERS\sisraid4.sys
13:28:04.0334 0x166c  SiSRaid4 - ok
13:28:04.0708 0x166c  [ F6EF225A23D336CA30001E5007644C24, B0A4B1256C1074F1B4F73E3BBA16FD4683D6EEA583DEEF8E11EFD29BA7541F2A ] SkypeUpdate    C:\Program Files\Skype\Updater\Updater.exe
13:28:04.0771 0x166c  SkypeUpdate - ok
13:28:04.0817 0x166c  [ 3E21C083B8A01CB70BA1F09303010FCE, 803F8F91299C387110F34A49340E7136AAE91B418E2977A36285EA8F432FF197 ] Smb            C:\Windows\system32\DRIVERS\smb.sys
13:28:04.0942 0x166c  Smb - ok
13:28:05.0098 0x166c  [ 6A984831644ECA1A33FFEAE4126F4F37, 753E23D2B33D47C52C05D892B052CFD96D93B97FB6E9FCB58EF1E4C4A125BF78 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
13:28:05.0176 0x166c  SNMPTRAP - ok
13:28:05.0551 0x166c  [ 3A4F2C0BB87A0895ABEBA341AA1E341B, 4DADEEF3C5D181502D6F4A00FBBF3B001FA626E49569FB330D7AE2955CC7DE08 ] Sony PC Companion C:\Program Files\Sony\Sony PC Companion\PCCService.exe
13:28:05.0722 0x166c  Sony PC Companion - detected UnsignedFile.Multi.Generic ( 1 )
13:28:14.0177 0x166c  Detect skipped due to KSN trusted
13:28:14.0177 0x166c  Sony PC Companion - ok
13:28:14.0864 0x166c  [ 405C76BD01A72596D9EA6476F02717F7, 993848EB47251272662906A27B5FA9E08299B3D8EC17E19E259793FF85F3058C ] SpeedupService  C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
13:28:14.0973 0x166c  SpeedupService - ok
13:28:15.0098 0x166c  [ 95CF1AE7527FB70F7816563CBC09D942, CE8BACB91A5A86CBCE82619C6C1873B4D7593B00CED3B522E41B8F7F6258CC65 ] spldr          C:\Windows\system32\drivers\spldr.sys
13:28:15.0207 0x166c  spldr - ok
13:28:15.0363 0x166c  [ 9AEA093B8F9C37CF45538382CABA2475, CC63239C412067AA72318ADB8BB80BCDF2CA60DA05D814D32753C92508BC16A8 ] Spooler        C:\Windows\System32\spoolsv.exe
13:28:15.0628 0x166c  Spooler - ok
13:28:16.0767 0x166c  [ CF87A1DE791347E75B98885214CED2B8, 7AF4E03D751C951A4E5FBA28200DABFE6B3BF055490163EEEEA84EBA4D0F368A ] sppsvc          C:\Windows\system32\sppsvc.exe
13:28:17.0126 0x166c  sppsvc - ok
13:28:17.0204 0x166c  [ B0180B20B065D89232A78A40FE56EAA6, 4D045B23AD58A8822BE9F20119744A8D47455469D54494745CEB099951DA60FF ] sppuinotify    C:\Windows\system32\sppuinotify.dll
13:28:17.0329 0x166c  sppuinotify - ok
13:28:17.0594 0x166c  [ A80CD850D69D996C832BEA37E3A6AA1E, 084231238A3E5DEC748EF67AA80485A3A5F4A9D3A13D338128BBA2BEA702B119 ] sptd            C:\Windows\system32\Drivers\sptd.sys
13:28:17.0750 0x166c  sptd - ok
13:28:17.0921 0x166c  [ D86EA722F3337AA3F0253B6E359E6796, BA4C2DF629CBECFA1C1D589FFA6AEF8C5853C427B6B007793FD432B4AA8DA593 ] srv            C:\Windows\system32\DRIVERS\srv.sys
13:28:18.0077 0x166c  srv - ok
13:28:18.0202 0x166c  [ 1931823AC05967E5F79B791E9FFC2398, 255E6278F476F1D488199B0AD2004C3860CC74971AC3C0AB4B1DB4E42B329E94 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
13:28:18.0311 0x166c  srv2 - ok
13:28:18.0405 0x166c  [ 50A2FC7B0408F15B77E056076BBB6252, 801AD15B4CDFC09EE4909B7180A5CE562D54D4F08A9C0B7D9CA067ADC42A6C9D ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
13:28:18.0530 0x166c  srvnet - ok
13:28:18.0670 0x166c  [ D887C9FD02AC9FA880F6E5027A43E118, F38BAD90EC791368C37C21090302708D2DFB83ECE9096609AD9AA667B2E5592E ] SSDPSRV        C:\Windows\System32\ssdpsrv.dll
13:28:18.0951 0x166c  SSDPSRV - ok
13:28:19.0029 0x166c  [ D318F23BE45D5E3A107469EB64815B50, D74355E6FF215AA8CE53BC9DF16AF2740F2FC2FD754939478A3608BDA8C6DDA0 ] SstpSvc        C:\Windows\system32\sstpsvc.dll
13:28:19.0279 0x166c  SstpSvc - ok
13:28:19.0622 0x166c  [ E57B778208C783D8DEBAB320C16A1B82, D9B0ACAF219D377E91737337466137F1AC78731659C1F0531BA3D9191DADC483 ] StarOpen        C:\Windows\system32\drivers\StarOpen.sys
13:28:19.0669 0x166c  StarOpen - detected UnsignedFile.Multi.Generic ( 1 )
13:28:20.0667 0x166c  Detect skipped due to KSN trusted
13:28:20.0667 0x166c  StarOpen - ok
13:28:20.0745 0x166c  [ DB32D325C192B801DF274BFD12A7E72B, F089DBA719E22BC269720A6B840B873A4AF5639745DB0C3DBC8BD2F2839A1ABA ] stexstor        C:\Windows\system32\DRIVERS\stexstor.sys
13:28:20.0807 0x166c  stexstor - ok
13:28:21.0041 0x166c  [ E1FB3706030FB4578A0D72C2FC3689E4, A62EC9AA4514CAF2A10C0A3AEF7A36F593A7E7DA370A3F130C24E1B612E19427 ] StiSvc          C:\Windows\System32\wiaservc.dll
13:28:21.0151 0x166c  StiSvc - ok
13:28:21.0182 0x166c  [ E58C78A848ADD9610A4DB6D214AF5224, 1575A90EB22A4FB066459BDA00C6CAC10198C3C8C74493721EC6D34B51F50426 ] swenum          C:\Windows\system32\drivers\swenum.sys
13:28:21.0229 0x166c  swenum - ok
13:28:21.0353 0x166c  [ A28BD92DF340E57B024BA433165D34D7, 889CC7FF143C3549982128473FF927CD80CF36485A347EF399C1271C8CE12CE4 ] swprv          C:\Windows\System32\swprv.dll
13:28:21.0478 0x166c  swprv - ok
13:28:21.0853 0x166c  [ 4EE25AC85AFC3FD67D9F57ECDF566FF2, F1BFF1FB655F31B97FA9C6A49D433EFD33D8A35F6B28B4D83E45C27A05A86228 ] SysMain        C:\Windows\system32\sysmain.dll
13:28:22.0055 0x166c  SysMain - ok
13:28:22.0149 0x166c  [ 763FECDC3D30C815FE72DD57936C6CD1, 1A62C7E63E426D56894F4121C75D9C60FC9A14469ADBD0D6F0B94B8DE48CDA3E ] TabletInputService C:\Windows\System32\TabSvc.dll
13:28:22.0258 0x166c  TabletInputService - ok
13:28:22.0321 0x166c  [ 8CF6E2AE1707D82E904ECCA68CEF8B87, 623765F0E5521B9EDDDEF3A3683C2E4A1FB6D96E80CC7CD22426066FE0D4843A ] tap0901        C:\Windows\system32\DRIVERS\tap0901.sys
13:28:22.0461 0x166c  tap0901 - ok
13:28:22.0601 0x166c  [ 613BF4820361543956909043A265C6AC, FCFF02E466D2501630B452627FB218C01E5245A0921EE3D2117E7FD63AC7E98E ] TapiSrv        C:\Windows\System32\tapisrv.dll
13:28:22.0742 0x166c  TapiSrv - ok
13:28:23.0210 0x166c  [ C7E41209132B9CF084CCEA8593F61328, 441E44C3C4803FA9304111E58AE7A2927EEB6584CEC9CBF81DC508E73A99033E ] Tcpip          C:\Windows\system32\drivers\tcpip.sys
13:28:23.0335 0x166c  Tcpip - ok
13:28:23.0444 0x166c  [ C7E41209132B9CF084CCEA8593F61328, 441E44C3C4803FA9304111E58AE7A2927EEB6584CEC9CBF81DC508E73A99033E ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
13:28:23.0537 0x166c  TCPIP6 - ok
13:28:23.0662 0x166c  [ A4BF8BE9D1F7D563C7868AC7B2561545, E3C2FFE53373E5255DC388E0C81CCE965E432EFAF52C85B5B3B3918815114073 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
13:28:23.0818 0x166c  tcpipreg - ok
13:28:23.0896 0x166c  [ 1CB91B2BD8F6DD367DFC2EF26FD751B2, 879E2827354BB21573AC6A7CCEB746D44214540687E6882FFCB4089546FBD954 ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
13:28:24.0021 0x166c  TDPIPE - ok
13:28:24.0068 0x166c  [ 2C2C5AFE7EE4F620D69C23C0617651A8, E828D974C3F9D7004A030C3AD448096C736FDB4C4C1707D043E567D08C845103 ] TDTCP          C:\Windows\system32\drivers\tdtcp.sys
13:28:24.0146 0x166c  TDTCP - ok
13:28:24.0193 0x166c  [ BB8817D0508DD5EA69C770C8DEF5AB67, C55671524EEF6E16BBCC92556E83FD1D6457E707EA9330FC1CDD28FB11D99B77 ] tdx            C:\Windows\system32\DRIVERS\tdx.sys
13:28:24.0286 0x166c  tdx - ok
13:28:24.0333 0x166c  [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20, 0D81B427720637882077C5024D738191F858FC734ED040697872D906351EF663 ] TermDD          C:\Windows\system32\drivers\termdd.sys
13:28:24.0380 0x166c  TermDD - ok
13:28:24.0489 0x166c  [ FCFD4F50419B4BC72E80066DA10D2E54, 7C2314A57A404525F0444986332DBAE0964A3359374671598387051D7AAE72AE ] TermService    C:\Windows\System32\termsrv.dll
13:28:24.0723 0x166c  TermService - ok
13:28:24.0801 0x166c  [ 42FB6AFD6B79D9FE07381609172E7CA4, B57C85091209A2FAD19ED490B8FA7FC98F12911F9C9CACE9AF1E540780CE6700 ] Themes          C:\Windows\system32\themeservice.dll
13:28:24.0941 0x166c  Themes - ok
13:28:25.0004 0x166c  [ 146B6F43A673379A3C670E86D89BE5EA, C4412DCF80DE6B55466F399413271364F14BC0819C224AA161EDDC31A9775440 ] THREADORDER    C:\Windows\system32\mmcss.dll
13:28:25.0082 0x166c  THREADORDER - ok
13:28:25.0207 0x166c  [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A, 532A3A812578B2DFD83001DE66FC73689D79EC729409EB572E07E6D65B281712 ] TrkWks          C:\Windows\System32\trkwks.dll
13:28:25.0285 0x166c  TrkWks - ok
13:28:25.0503 0x166c  [ ED5E4CE36C54F55E7698642E94D32EC7, 07BD324083D1784F8F716C528D530003369E6D87EFC7B79BCAA1767F80DA4FDC ] truecrypt      C:\Windows\system32\drivers\truecrypt.sys
13:28:25.0581 0x166c  truecrypt - ok
13:28:25.0784 0x166c  [ 2C49B175AEE1D4364B91B531417FE583, 6C7995E18F84E465C376D1D5F153C15ACB66CDEA86EE5BF186677F572E7E129B ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
13:28:25.0893 0x166c  TrustedInstaller - ok
13:28:25.0924 0x166c  [ 6C5139E4283249518F7743D7043775B3, 58684E8C90EBAC65459A97C905CDCFE3A915CFF7E8E96071DE1AC3489F85E67F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
13:28:26.0002 0x166c  tssecsrv - ok
13:28:26.0174 0x166c  [ FD1D6C73E6333BE727CBCC6054247654, 6F7B9AE1A5986204DB3348D13B303F30FC17624939DA74D6BD114FAEED0FB30E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
13:28:26.0299 0x166c  TsUsbFlt - ok
13:28:26.0470 0x166c  [ B2FA25D9B17A68BB93D58B0556E8C90D, 0146931B733CAB1CD87F94C35F97E110D6ED6C55EAFF03345400A29AEDE99BDE ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
13:28:26.0548 0x166c  tunnel - ok
13:28:26.0626 0x166c  [ 750FBCB269F4D7DD2E420C56B795DB6D, E1A95C59148FE463539C34336FD0E74B31A33B8AB2B8E34AA10349C3347471D7 ] uagp35          C:\Windows\system32\DRIVERS\uagp35.sys
13:28:26.0704 0x166c  uagp35 - ok
13:28:26.0767 0x166c  [ EE43346C7E4B5E63E54F927BABBB32FF, BAD6FC3BEE45E644D5A6A0A31428F5B2AEC72A0AA0C74EF8177B1FE23EEF3AA9 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
13:28:26.0845 0x166c  udfs - ok
13:28:26.0969 0x166c  [ 8344FD4FCE927880AA1AA7681D4927E5, 1B54EFA60A221E2B9FFE59BB41C7E7D8B5AC6826F1C5577456D81371D464255A ] UI0Detect      C:\Windows\system32\UI0Detect.exe
13:28:27.0063 0x166c  UI0Detect - ok
13:28:27.0141 0x166c  [ 44E8048ACE47BEFBFDC2E9BE4CBC8880, 5D96D90FDF68AE470CC92CA9DF9DA2C05A53EF455A5A109DBBF7C96F3238257C ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
13:28:27.0188 0x166c  uliagpkx - ok
13:28:27.0266 0x166c  [ D295BED4B898F0FD999FCFA9B32B071B, D4130DB4AE76EE6DC0B8E7A4FEF5CB8B26EBD822C21021F6FA78FD29C1E211C2 ] umbus          C:\Windows\system32\drivers\umbus.sys
13:28:27.0328 0x166c  umbus - ok
13:28:27.0344 0x166c  [ 7550AD0C6998BA1CB4843E920EE0FEAC, 24C001E422C3B3B920CDCF6003A3179CE464DE4284775403DD5122EF9780460D ] UmPass          C:\Windows\system32\DRIVERS\umpass.sys
13:28:27.0422 0x166c  UmPass - ok
13:28:27.0531 0x166c  [ 833FBB672460EFCE8011D262175FAD33, C0C3067A305993CBF056C229771CB0593DD60C9C7AC5130FF1CA610BCA812AB5 ] upnphost        C:\Windows\System32\upnphost.dll
13:28:27.0640 0x166c  upnphost - ok
13:28:27.0718 0x166c  [ A1977C315BF5691DA99235AA4A6907AF, 34B52FBA83F0E1C6B001D0AD1808B00152F731D18AAECC3C53B9918AA89BACEC ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
13:28:27.0827 0x166c  usbaudio - ok
13:28:27.0874 0x166c  [ 325A69967CC7B4BFB170F5636143A94A, E0341360827B9B3E244F24D0BC01D3B3C0CC97E232A361960849F799A16AD540 ] usbccgp        C:\Windows\system32\drivers\usbccgp.sys
13:28:27.0999 0x166c  usbccgp - ok
13:28:28.0139 0x166c  [ 2352AB5F9F8F097BF9D41D5A4718A041, 25BC7828C625B9B2A5110C25B230C5828CEC18EC97ECF9EC4745E8930CBF472C ] usbcir          C:\Windows\system32\drivers\usbcir.sys
13:28:28.0233 0x166c  usbcir - ok
13:28:28.0280 0x166c  [ 5D57798CAE5A0DD0B8F61C52B8E7C3D1, 5097997508E1406AD5B018C5006D82F8BFC7B157C6CAF1B4D80C7D6DB722A77A ] usbehci        C:\Windows\system32\drivers\usbehci.sys
13:28:28.0467 0x166c  usbehci - ok
13:28:28.0639 0x166c  [ 3835ECC1E928042F92D7AA1963D40523, 60237CB8C3F935544006621255FFD53C9E09C0AF4741D0C50968CB4D647336D5 ] usbhub          C:\Windows\system32\drivers\usbhub.sys
13:28:28.0717 0x166c  usbhub - ok
13:28:28.0795 0x166c  [ 81E1E90305A4C7A13BADC5DFA22ABA37, 9EF3F5CD2FCF22A5BCC668778C8340D8C80719E9B43FB6C4484BFC98280B8BD9 ] usbohci        C:\Windows\system32\drivers\usbohci.sys
13:28:28.0888 0x166c  usbohci - ok
13:28:28.0951 0x166c  [ 797D862FE0875E75C7CC4C1AD7B30252, 1BBE745E4C85F8911076F6032ACD7A35FAC048D3CB1500C64E08D8B2C70A1069 ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
13:28:29.0060 0x166c  usbprint - ok
13:28:29.0138 0x166c  [ 144DA53294922A84FFAA3D90B1453745, A8DC6B534E4526E2226CF6C9D53A4B6B251D2F23728E41737063D24024C5266F ] USBSTOR        C:\Windows\system32\DRIVERS\USBSTOR.SYS
13:28:29.0263 0x166c  USBSTOR - ok
13:28:29.0294 0x166c  [ B4A1789BE90403D9549EF9DBAD37A429, 1F590F8DE0081953B944A076FFEB5FF3BCF7E2BEE4ABD97236A29C00B9242163 ] usbuhci        C:\Windows\system32\drivers\usbuhci.sys
13:28:29.0372 0x166c  usbuhci - ok
13:28:29.0434 0x166c  [ 081E6E1C91AEC36758902A9F727CD23C, 9FDAA17A3B99067E035E5D76305427F15FFDBC5D304B2BB78AFC6463EDDE1A75 ] UxSms          C:\Windows\System32\uxsms.dll
13:28:29.0512 0x166c  UxSms - ok
13:28:29.0559 0x166c  [ 4E568DBE3FFF1A0025EB432DC929B78F, 26F36CA31A1B977685F8DF5F8436848B7D4143B47EC0DAE68F8382C1B52A6C71 ] VaultSvc        C:\Windows\system32\lsass.exe
13:28:29.0637 0x166c  VaultSvc - ok
13:28:29.0715 0x166c  [ A059C4C3EDB09E07D21A8E5C0AABD3CB, BDD3729B49DF2E2FC72FFEF9D10235B481A671DE5A721B6B9A80873B7A343F07 ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
13:28:29.0746 0x166c  vdrvroot - ok
13:28:29.0902 0x166c  [ C3CD30495687C2A2F66A65CA6FD89BE9, 582E4706C1D6A151020D14B26C7BF166F4E42BDD6E410F30EC452469270C5E9B ] vds            C:\Windows\System32\vds.exe
13:28:30.0027 0x166c  vds - ok
13:28:30.0136 0x166c  [ 17C408214EA61696CEC9C66E388B14F3, 829C0416672E2B2DFABCFE641E7F281F41E8DBB3C0EF11C7784CB9BB94F87E97 ] vga            C:\Windows\system32\DRIVERS\vgapnp.sys
13:28:30.0230 0x166c  vga - ok
13:28:30.0277 0x166c  [ 8E38096AD5C8570A6F1570A61E251561, 4DBA3C1397A2203548F45F006E66D99F837903F601ABBCE2304754F783CA8A39 ] VgaSave        C:\Windows\System32\drivers\vga.sys
13:28:30.0355 0x166c  VgaSave - ok
13:28:30.0417 0x166c  [ 5461686CCA2FDA57B024547733AB42E3, 2721D0659AA890172FCAD4EC4D926B58ACD0EE4887DA51545DC7237420D5BF84 ] vhdmp          C:\Windows\system32\drivers\vhdmp.sys
13:28:30.0464 0x166c  vhdmp - ok
13:28:30.0589 0x166c  [ C829317A37B4BEA8F39735D4B076E923, 55D1796AE750071E1E05BD7702B6C355CCFFE27B4C00E93E7044C3184732B497 ] viaagp          C:\Windows\system32\drivers\viaagp.sys
13:28:30.0682 0x166c  viaagp - ok
13:28:30.0745 0x166c  [ E02F079A6AA107F06B16549C6E5C7B74, B530DCE3EE4F285B3D5F69F7148D17E016D54F04E6F93706B829A34567748788 ] ViaC7          C:\Windows\system32\DRIVERS\viac7.sys
13:28:30.0807 0x166c  ViaC7 - ok
13:28:30.0854 0x166c  [ E43574F6A56A0EE11809B48C09E4FD3C, 3687BF638E21C00E62ABFED70D728B91ADA08F7164CA898E654F31DA196589E9 ] viaide          C:\Windows\system32\drivers\viaide.sys
13:28:30.0916 0x166c  viaide - ok
13:28:30.0947 0x166c  [ 4C63E00F2F4B5F86AB48A58CD990F212, 9796BD4B9CFEEEAF57C5E332A732EFC2770B21F9B35301A5D202F5FC52C1E035 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
13:28:30.0994 0x166c  volmgr - ok
13:28:31.0057 0x166c  [ B5BB72067DDDDBBFB04B2F89FF8C3C87, 65B9AD55F43940A5FDD88B6EC5034A7E375DF8E6F5F1AE6519A4BD6B7E992EBC ] volmgrx        C:\Windows\system32\drivers\volmgrx.sys
13:28:31.0135 0x166c  volmgrx - ok
13:28:31.0213 0x166c  [ F497F67932C6FA693D7DE2780631CFE7, DAE544ED99D2CF570DA31343BD87D2F856D0D13529656D38E1BF854C77F017F6 ] volsnap        C:\Windows\system32\drivers\volsnap.sys
13:28:31.0275 0x166c  volsnap - ok
13:28:31.0322 0x166c  [ 9DFA0CC2F8855A04816729651175B631, 37FD9E43A2A3F125E94A315FB4CD8A1B5499A5FD74806EB2D1E5DA88C070D3A3 ] vsmraid        C:\Windows\system32\DRIVERS\vsmraid.sys
13:28:31.0384 0x166c  vsmraid - ok
13:28:31.0618 0x166c  [ 209A3B1901B83AEB8527ED211CCE9E4C, 1A431F6409F8E0531F600F8F988ECECECB902DA26BBAAF1DE74A5CAC29A7CB44 ] VSS            C:\Windows\system32\vssvc.exe
13:28:31.0759 0x166c  VSS - ok
13:28:31.0790 0x166c  [ 90567B1E658001E79D7C8BBD3DDE5AA6, EFC23BEEA7F54A2DC56CB523DAD1AF0358D904C5278BF08873910E2DB3F13557 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
13:28:31.0868 0x166c  vwifibus - ok
13:28:31.0930 0x166c  [ 7090D3436EEB4E7DA3373090A23448F7, 3A130B28F2BFA7DCEC8596C4CE4E187B019F5ECF1AAC8DD1BBDE9CBD2428FEC2 ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
13:28:32.0008 0x166c  vwififlt - ok
13:28:32.0149 0x166c  [ 55187FD710E27D5095D10A472C8BAF1C, AE298E2D3BA366BCBDC092C717214C181E8843FA564A6DFB07FC3238A5A68DC3 ] W32Time        C:\Windows\system32\w32time.dll
13:28:32.0227 0x166c  W32Time - ok
13:28:32.0289 0x166c  [ DE3721E89C653AA281428C8A69745D90, 501C78056ED4295625D8A5412025FD2F0CA24077044D3A5800BA79DF3D946516 ] WacomPen        C:\Windows\system32\DRIVERS\wacompen.sys
13:28:32.0383 0x166c  WacomPen - ok
13:28:32.0461 0x166c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
13:28:32.0523 0x166c  WANARP - ok
13:28:32.0539 0x166c  [ 3C3C78515F5AB448B022BDF5B8FFDD2E, 35284174A42039C3C1FF8A3C8BC187A5E067C7782FC62D19749C2CB28C4E36C7 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
13:28:32.0617 0x166c  Wanarpv6 - ok
13:28:32.0913 0x166c  [ 691E3285E53DCA558E1A84667F13E15A, 12EDB66EF8FC100402BEA221F354D3BD5542F6DDF715B6E7D873D6BAE7E3D329 ] wbengine        C:\Windows\system32\wbengine.exe
13:28:33.0163 0x166c  wbengine - ok
13:28:33.0287 0x166c  [ 9614B5D29DC76AC3C29F6D2D3AA70E67, A2FFB92F0030B4CD771E862DA575ECCF2F3A5B4B85858C1241A0C59262C0EC88 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
13:28:33.0365 0x166c  WbioSrvc - ok
13:28:33.0459 0x166c  [ 34EEE0DFAADB4F691D6D5308A51315DC, A040A03E25A0C78B9E26F86C2DF95BCAF8E7EC90183CEB295615D3265350EBEE ] wcncsvc        C:\Windows\System32\wcncsvc.dll
13:28:33.0553 0x166c  wcncsvc - ok
13:28:33.0568 0x166c  [ 5D930B6357A6D2AF4D7653BDABBF352F, 677FF2ED14EE0B0CAA710DA81556CC16D5971DAB10E7C7432D167A87CA6F0EAA ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
13:28:33.0771 0x166c  WcsPlugInService - ok
13:28:33.0833 0x166c  [ 1112A9BADACB47B7C0BB0392E3158DFF, 1AE2AFA125973571F91E6945FE8A735F63D76EBB250A0075D98C580167FD9ED4 ] Wd              C:\Windows\system32\DRIVERS\wd.sys
13:28:33.0880 0x166c  Wd - ok
13:28:34.0067 0x166c  [ 25944D2CC49E0A6C581D02A74B7D6645, AF8FFAFEC07F1A6A3D4008E609E8E1D705A8DFCC7995C766E3946887203F7BEE ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
13:28:34.0161 0x166c  Wdf01000 - ok
13:28:34.0223 0x166c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiServiceHost  C:\Windows\system32\wdi.dll
13:28:34.0333 0x166c  WdiServiceHost - ok
13:28:34.0348 0x166c  [ DDE994E9159497D0D5AB2CDF66D1EAD6, 49BEDECA469C47E7622542D3B9BCD31ECDDAA27838495EC5C2F1338E33FEA877 ] WdiSystemHost  C:\Windows\system32\wdi.dll
13:28:34.0411 0x166c  WdiSystemHost - ok
13:28:34.0504 0x166c  [ DC54D7A40B6E18E5C7F592F836D163FF, 436AF3B94EAE6CBD2516A63235AE1D6EC4F1FCAA0F974A9672BB5AB2A846BB2C ] WebClient      C:\Windows\System32\webclnt.dll
13:28:34.0629 0x166c  WebClient - ok
13:28:34.0754 0x166c  [ 760F0AFE937A77CFF27153206534F275, A53940BA28854486FF18F16B98A3314B36322B0B6EFB54D08B921315BEB0ADD5 ] Wecsvc          C:\Windows\system32\wecsvc.dll
13:28:34.0832 0x166c  Wecsvc - ok
13:28:34.0863 0x166c  [ AC804569BB2364FB6017370258A4091B, 1856F354146A5946F3E7D0DD09726FC8A3502B0F0776FEADDF10669C81CC28E2 ] wercplsupport  C:\Windows\System32\wercplsupport.dll
13:28:34.0957 0x166c  wercplsupport - ok
13:28:35.0019 0x166c  [ 08E420D873E4FD85241EE2421B02C4A4, E1E9436EB096FF7DE9A76DA6217035257EF9FC7565DDB9016DCA3859E7F1EF0F ] WerSvc          C:\Windows\System32\WerSvc.dll
13:28:35.0159 0x166c  WerSvc - ok
13:28:35.0237 0x166c  [ 8B9A943F3B53861F2BFAF6C186168F79, 88E2F79F32AFBA17CB8377A508B83A1EC2315E9F3A365F591C87FE4525AA6713 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
13:28:35.0315 0x166c  WfpLwf - ok
13:28:35.0347 0x166c  [ 5CF95B35E59E2A38023836FFF31BE64C, CEA21302B3E855EE592810D4E0DE10E47A47A393064C435463CD54598735CD8D ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
13:28:35.0378 0x166c  WIMMount - ok
13:28:35.0487 0x166c  [ 082CF481F659FAE0DE51AD060881EB47, BB67D2AF0BB9192D4CCF66C23D80CE5A1B38715556D94E2561DBF8F805FA30A5 ] WinDefend      C:\Program Files\Windows Defender\mpsvc.dll
13:28:35.0643 0x166c  WinDefend - ok
13:28:35.0690 0x166c  WinHttpAutoProxySvc - ok
13:28:35.0799 0x166c  [ F62E510B6AD4C21EB9FE8668ED251826, FA3E5CAC3E67E49377320CFBE4646585E6B62168292768FEA81E4623F9166890 ] Winmgmt        C:\Windows\system32\wbem\WMIsvc.dll
13:28:35.0893 0x166c  Winmgmt - ok
13:28:36.0033 0x166c  [ 8949A93520F7008C3B7AD320A0EEA267, F77C6BF73B300347FEB3D02C7A1F98807546D95E10E499D385B7F00D1366CC59 ] WinRM          C:\Windows\system32\WsmSvc.dll
13:28:36.0142 0x166c  WinRM - ok
13:28:36.0283 0x166c  [ A67E5F9A400F3BD1BE3D80613B45F708, E170A8BD31A779403DC9C43ED6483DA8E186512D3EE700B87F6BA292E284E367 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
13:28:36.0345 0x166c  WinUsb - ok
13:28:36.0454 0x166c  [ 16935C98FF639D185086A3529B1F2067, E9C6B73A572A04FCE9B1B0E6815F941B10332D9A6D55B92927C2B1275F119091 ] Wlansvc        C:\Windows\System32\wlansvc.dll
13:28:36.0595 0x166c  Wlansvc - ok
13:28:36.0969 0x166c  [ FB01D4AE207B9EFDBABFC55DC95C7E31, E0EFDBBE0BAC275230C8C1A053948C21BCF20B99B92E50939E95FFB9DC87F6BA ] wlidsvc        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
13:28:37.0078 0x166c  wlidsvc - ok
13:28:37.0125 0x166c  [ 0217679B8FCA58714C3BF2726D2CA84E, 4494984B922DCF24D37BCD0E6831CEBD07D1CA49235D04E821D17ED3DF84ED2A ] WmiAcpi        C:\Windows\system32\drivers\wmiacpi.sys
13:28:37.0203 0x166c  WmiAcpi - ok
13:28:37.0297 0x166c  [ 6EB6B66517B048D87DC1856DDF1F4C3F, EBB534C4829477C70062ADBB5626236B02FE563A544C53FA255E79F3CA170FE8 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
13:28:37.0406 0x166c  wmiApSrv - ok
13:28:37.0593 0x166c  [ 3B40D3A61AA8C21B88AE57C58AB3122E, 6C67DCB007C3CDF2EB0BBF5FD89C32CD7800C20F7166872F8C387BE262C5CD21 ] WMPNetworkSvc  C:\Program Files\Windows Media Player\wmpnetwk.exe
13:28:37.0749 0x166c  WMPNetworkSvc - ok
13:28:37.0796 0x166c  [ A2F0EC770A92F2B3F9DE6D518E11409C, 6838F2148B11285E00DC449D51F8AD85AAE57694E89BA2C607B87AC1C650D845 ] WPCSvc          C:\Windows\System32\wpcsvc.dll
13:28:37.0952 0x166c  WPCSvc - ok
13:28:38.0014 0x166c  [ AA53356D60AF47EACC85BC617A4F3F66, 155CB8112AA382D841C1891750FF29EF4F1BF716CD9CDF0F2243209E2CCCAC98 ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
13:28:38.0077 0x166c  WPDBusEnum - ok
13:28:38.0108 0x166c  [ 6DB3276587B853BF886B69528FDB048C, 9972FF6DF0DF6F86D1E9BCEF4C29064748B217DA196B0633C30D3D580144951C ] ws2ifsl        C:\Windows\system32\drivers\ws2ifsl.sys
13:28:38.0217 0x166c  ws2ifsl - ok
13:28:38.0233 0x166c  [ 6F5D49EFE0E7164E03AE773A3FE25340, 15B6AFF7455538189A96F8863CC995A271E02C6FBDAC15B037D44DDA65E61339 ] wscsvc          C:\Windows\System32\wscsvc.dll
13:28:38.0342 0x166c  wscsvc - ok
13:28:38.0357 0x166c  WSearch - ok
13:28:38.0685 0x166c  [ FAC7617DD8A8CCCBBB9D36C39AFA5ABE, 64BB658523F4610B6D092BD390D24307F0A545ABA5C78B5DB50B7AA9E65C6A51 ] wuauserv        C:\Windows\system32\wuaueng.dll
13:28:38.0872 0x166c  wuauserv - ok
13:28:38.0935 0x166c  [ 06E6F32C8D0A3F66D956F57B43A2E070, 9A6BD96A28294B0372F16E13D652FD603308F64B74A56E41E0C68C5E8011F943 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
13:28:39.0013 0x166c  WudfPf - ok
13:28:39.0059 0x166c  [ 867C301E8B790040AE9CF6486E8041DF, D867D6498C987944D99508B2FAD6D6B749FA1EDFE8124B0863D4A642352F0855 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
13:28:39.0106 0x166c  WUDFRd - ok
13:28:39.0200 0x166c  [ FE47B7BC8EA320C2D9B5E5BF6E303765, 34518DBD1E9EA6E5DA62273B18613761E1D9C6B4E074A93C6D639FBAF02222EA ] wudfsvc        C:\Windows\System32\WUDFSvc.dll
13:28:39.0247 0x166c  wudfsvc - ok
13:28:39.0340 0x166c  [ 7CC38741B8F68F1E0D5D79DA6123666A, F90D2DA1C9AFB506C381CD386E1430931B5F81813FEDFD720F87FBC54E7A00DA ] WwanSvc        C:\Windows\System32\wwansvc.dll
13:28:39.0465 0x166c  WwanSvc - ok
13:28:39.0496 0x166c  ================ Scan global ===============================
13:28:39.0527 0x166c  [ 5E7C5DE85AF978495C3A9A0B720B9811, 142CDEBED78E3BAEE8D2DBF6A97CE26313932024010548EC2E570CAE480AF7C3 ] C:\Windows\system32\basesrv.dll
13:28:39.0621 0x166c  [ 090FF4D4A003291D7579A81089D06981, 2713E190F10A96E977C0BA5D38D89E8D123F7CB7D0180CFC0A4073EC42EDB2DB ] C:\Windows\system32\winsrv.dll
13:28:39.0668 0x166c  [ 090FF4D4A003291D7579A81089D06981, 2713E190F10A96E977C0BA5D38D89E8D123F7CB7D0180CFC0A4073EC42EDB2DB ] C:\Windows\system32\winsrv.dll
13:28:39.0715 0x166c  [ 364455805E64882844EE9ACB72522830, 906561DBBB33F744844CF27E456226044C85DF0FCFD26DE1FD11E09E2CFA6F8F ] C:\Windows\system32\sxssrv.dll
13:28:39.0761 0x166c  [ 0780A42DBD7D9969F9BF4A19AA4285B5, 8EA41124A4E97732C5DAA616457FBA7111CB38986F3427FA776ED00BC1407171 ] C:\Windows\system32\services.exe
13:28:39.0793 0x166c  [ Global ] - ok
13:28:39.0793 0x166c  ================ Scan MBR ==================================
13:28:39.0824 0x166c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:28:42.0881 0x166c  \Device\Harddisk0\DR0 - ok
13:28:42.0881 0x166c  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
13:28:43.0053 0x166c  \Device\Harddisk1\DR1 - ok
13:28:43.0053 0x166c  [ 8FF255184F078C9C04E6A2CE66117C5C ] \Device\Harddisk2\DR2
13:28:43.0459 0x166c  \Device\Harddisk2\DR2 - ok
13:28:43.0459 0x166c  ================ Scan VBR ==================================
13:28:43.0505 0x166c  [ 8F40C1BE89B1EA50B22AE21A5F3278D6 ] \Device\Harddisk0\DR0\Partition1
13:28:43.0599 0x166c  \Device\Harddisk0\DR0\Partition1 - ok
13:28:43.0615 0x166c  [ 51CABA2CFF31E47E7D6A3BDEC6549B4A ] \Device\Harddisk0\DR0\Partition2
13:28:43.0646 0x166c  \Device\Harddisk0\DR0\Partition2 - ok
13:28:43.0646 0x166c  [ 64704A06AD3121272366C7B5E053E631 ] \Device\Harddisk1\DR1\Partition1
13:28:43.0661 0x166c  \Device\Harddisk1\DR1\Partition1 - ok
13:28:43.0661 0x166c  [ 62D218D5E89303053A0BC518A5981980 ] \Device\Harddisk1\DR1\Partition2
13:28:43.0661 0x166c  \Device\Harddisk1\DR1\Partition2 - ok
13:28:43.0677 0x166c  [ 8F40C1BE89B1EA50B22AE21A5F3278D6 ] \Device\Harddisk1\DR1\Partition3
13:28:43.0677 0x166c  \Device\Harddisk1\DR1\Partition3 - ok
13:28:43.0693 0x166c  [ D61CA06D0E6EBBDCD074A034301B187A ] \Device\Harddisk2\DR2\Partition1
13:28:43.0708 0x166c  \Device\Harddisk2\DR2\Partition1 - ok
13:28:43.0708 0x166c  ================ Scan generic autorun ======================
13:28:44.0395 0x166c  [ A360F8AA95A086CB7F9D361B5485858F, 8340AD4042F1E5780C304A0DF12F22EB56BACC687D48387B9A1B05E4324D2A28 ] C:\Windows\RtHDVCpl.exe
13:28:44.0722 0x166c  RtHDVCpl - ok
13:28:44.0987 0x166c  [ BF0C53DDCF44B80EBDFB51D6BAA51216, A879160766F031BAE6A8C059F9B9EF5C2D9773AD0CEADE73A2835DFD0736DAE4 ] C:\Program Files\dvd43\dvd43_tray.exe
13:28:45.0065 0x166c  dvd43 - detected UnsignedFile.Multi.Generic ( 1 )
13:28:45.0923 0x166c  Detect skipped due to KSN trusted
13:28:45.0923 0x166c  dvd43 - ok
13:28:46.0251 0x166c  [ 4EB0C6C3EF4D8885CF2B5D0062F31E44, A3967758E30609D29A4856F373DD2C971B341F914825D720387ACFD7499EDC3D ] C:\Program Files\DivX\DivX Update\DivXUpdate.exe
13:28:46.0345 0x166c  DivXUpdate - ok
13:28:46.0563 0x166c  [ 0E34B7BB1FCF22BCC1E394D16F9E992B, 382CA8E6BAC301E2F277F8EDA03D263FF71272796A8EED582C36294EEE9191F9 ] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
13:28:46.0610 0x166c  GrooveMonitor - ok
13:28:46.0766 0x166c  [ 0B692C328AF648AD478A967C21DD7936, C06839FC4B748A364A710BCE1DEEB9FEE2F88979A4BEFC40B4EBBB7E0F34CC95 ] C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
13:28:46.0813 0x166c  AgentMonitor - ok
13:28:46.0922 0x166c  [ 7E99BC36A738265A20C218653A1ADFBC, EFDB13FDCFC3D7639F67E5772294492C2125A10C492BDF422D1B153294DB872E ] C:\Program Files\Real\RealPlayer\update\realsched.exe
13:28:46.0969 0x166c  TkBellExe - ok
13:28:47.0171 0x166c  [ 0CECC28CFDE7D0F323344569AF2A83AC, F7120A68F25A1542CAEF929CF916CECEFA1AFD59301FEAB31244D39742DE8AC5 ] C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
13:28:47.0234 0x166c  RealDownloader - ok
13:28:47.0312 0x166c  [ 258E2CD2C4984A977106C9EF7CA8AF69, D8F6409D5F5782CC27D159D18E914A3DB59D8644D7017CA6F84F0CF30E95174C ] C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe
13:28:47.0359 0x166c  Avira SystrayStartTrigger - ok
13:28:47.0561 0x166c  [ 1BC31F797516DC7B7446B62A849D5905, 49B35A41F1C3739800CBA2A559C2AEFE89FBC090F8305681AF3B379B639E16AA ] C:\Program Files\Avira\Antivirus\avgnt.exe
13:28:47.0655 0x166c  avgnt - ok
13:28:47.0671 0x166c  [ 18488F4890575E0AF614D722DC0B142D, A4224056DEFC1EFC282673503810688BAD776BE1F597F3E50341DA4375384ADD ] C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe
13:28:47.0717 0x166c  Avira System Speedup User Starter - ok
13:28:47.0795 0x166c  [ 2691DFA391404BE88DCCE34A601B7BF4, 5FA1DC2002726873283121A738E47A1F24EAAD09D2991BB1ED13D42ACF488190 ] C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
13:28:47.0842 0x166c  Avira System Speedup Tray - ok
13:28:48.0497 0x166c  [ A6A21A7D544675E98C040DA18904CF50, AACB578C297C7AC9FEBDAB4AD20235E5CFF6E3F260E76E6AE18D43DC57D69672 ] C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe
13:28:48.0638 0x166c  Malwarebytes TrayApp - ok
13:28:48.0809 0x166c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
13:28:48.0997 0x166c  Sidebar - ok
13:28:49.0059 0x166c  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
13:28:49.0137 0x166c  mctadmin - ok
13:28:49.0199 0x166c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\Sidebar.exe
13:28:49.0293 0x166c  Sidebar - ok
13:28:49.0309 0x166c  [ BBA1A5B86134F496B926DDAF247DB871, 636990AE49C55189B7EF69C419787440B57EC0BAD98A9C280E1028F741BB222E ] C:\Windows\System32\mctadmin.exe
13:28:49.0355 0x166c  mctadmin - ok
13:28:49.0480 0x166c  [ A7DC47DBBE3C0384BA719DC4188AFA7E, FCC8F68A8E55AE2AB9B877A6E46DFC28411B68D09AEACA4792625B5150EFDCFD ] C:\Windows\ehome\ehTray.exe
13:28:49.0543 0x166c  ehTray.exe - ok
13:28:49.0652 0x166c  [ 95F98E2B7FC538271040743C0C0943BC, 2BB07BE21BFEEA0A6208082DEDA11DF7F9FECFE48081DFB9F9AF387CE8FDEDF6 ] C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe
13:28:49.0714 0x166c  Alamandi tray notifier - ok
13:28:49.0964 0x166c  [ 2A3FB4C98F139038E23330D2439DB8A4, DE9253AD362B03FA5D3D4912662398E5C4AC76F7274B83E51C251A6921A5B838 ] C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
13:28:50.0026 0x166c  Facebook Update - ok
13:28:50.0759 0x166c  [ C7C42AC946E25EC04BC671516A347FF9, 03DCB98F1764862A0DFC1B3A6CD34BA583DA512E8E4556E891A228832C0F8DE1 ] C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
13:28:51.0056 0x166c  Amazon Music - ok
13:28:51.0212 0x166c  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files\Windows Sidebar\sidebar.exe
13:28:51.0321 0x166c  Sidebar - ok
13:28:51.0337 0x166c  Waiting for KSN requests completion. In queue: 20
13:28:52.0522 0x166c  AV detected via SS2: Avira Antivirus, C:\Program Files\Avira\Antivirus\wsctool.exe ( 15.0.24.143 ), 0x41000 ( enabled : updated )
13:28:52.0569 0x166c  AV detected via SS2: Malwarebytes, C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe ( 3.0.0.138 ), 0x61000 ( enabled : updated )
13:28:52.0631 0x166c  Win FW state via NFP2: enabled ( trusted )
13:28:53.0489 0x166c  ============================================================
13:28:53.0489 0x166c  Scan finished
13:28:53.0489 0x166c  ============================================================
13:28:53.0505 0x1484  Detected object count: 0
13:28:53.0505 0x1484  Actual detected object count: 0
Soeben duerchgeführt
Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 28.01.17
Scan-Zeit: 14:16
Protokolldatei: MWB.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.6.1469
Komponentenversion: 1.0.50
Version des Aktualisierungspakets: 1.0.1121
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Kornelia-PC\Kornelia

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 369342
Abgelaufene Zeit: 18 Min., 51 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

M-K-D-B 28.01.2017 15:46
Servus,


ich habe nicht gesagt, dass du MBAM oder AdwCleaner jetzt ausführen sollst.

Ich habe nur gemeint, dass du die Logdateien mit den Funden (wie in deinem Eingangspost geschrieben) posten sollst.

Leere Logdateien von MBAM ohne Funde helfen mir hier nicht, ich will die Logdateien sehen, in denen MBAM und AdwCleaner was gefunden haben.

Mineko 28.01.2017 17:26
Alles klar
Code:
# AdwCleaner v6.042 - Bericht erstellt am 27/01/2017 um 15:41:46
# Aktualisiert am 06/01/2017 von Malwarebytes
# Datenbank : 2017-01-27.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X86)
# Benutzername : Kornelia - KORNELIA-PC
# Gestartet von : C:\Users\Kornelia\Desktop\Neuer Ordner (2)\adwcleaner_6.042.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Users\Kornelia\AppData\Local\apn
[-] Ordner gelöscht: C:\Users\Kornelia\AppData\LocalLow\AlterGeo
[-] Ordner gelöscht: C:\Users\Kornelia\AppData\Roaming\dvdvideosoftiehelpers
[-] Ordner gelöscht: C:\Users\Kornelia\AppData\Roaming\Gutscheinmieze
[-] Ordner gelöscht: C:\Users\Tabea\AppData\LocalLow\softonic-de3
[-] Ordner gelöscht: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Smartbar
[-] Ordner gelöscht: C:\ProgramData\apn
[#] Ordner mit Neustart gelöscht: C:\ProgramData\Application Data\apn
[-] Ordner gelöscht: C:\Program Files\Common Files\DVDVideoSoft\TB
[-] Ordner gelöscht: C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_leocdeigfnkaojcapikdjcdbedcjmffc_0


***** [ Dateien ] *****

[-] Datei gelöscht: C:\Windows\system32\conduitEngine.tmp
[-] Datei gelöscht: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\invalidprefs.js


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Conduit.Engine
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\driverscanner
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\APN
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\Ask.com
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\AskToolbar
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Schlüssel gelöscht: HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\APN PIP
[-] Schlüssel gelöscht: HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Softonic
[-] Schlüssel gelöscht: HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\YahooPartnerToolbar
[-] Schlüssel gelöscht: HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\AppDataLow\Software\Conduit
[-] Schlüssel gelöscht: HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
[-] Schlüssel gelöscht: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01272017143513006\Software\AppDataLow\Software\Conduit
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\APN
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\Ask.com
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\AskToolbar
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\APN PIP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Softonic
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\YahooPartnerToolbar
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\AppDataLow\Software\Conduit
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\ApnUpdater
[-] Wert gelöscht: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
[-] Wert gelöscht: HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[#] Wert mit Neustart gelöscht: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
[#] Wert mit Neustart gelöscht: HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[#] Wert mit Neustart gelöscht: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
[#] Wert mit Neustart gelöscht: HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[-] Schlüssel gelöscht: HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp


***** [ Browser ] *****

[-] Firefox Einstellungen bereinigt: "CT2431245.components.1000080" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.1000082" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.1000234" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.129009402578469381" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.129009402593156547" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.129009402593312798" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.129009402595187825" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.129009402595656583" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.129009402596594108" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.components.129009402596594109" -  false
[-] Firefox Einstellungen bereinigt: "CT2431245.myStuffEnabled" -  true
[-] Firefox Einstellungen bereinigt: "CT2431245.myStuffPublihserMinWidth" -  400
[-] Firefox Einstellungen bereinigt: "CT2431245.myStuffServiceIntervalMM" -  1440
[-] Firefox Einstellungen bereinigt: "CT2851647.ENABALE_HISTORY" -  "{\"dataType\":\"string\",\"data\":\"true\"}"
[-] Firefox Einstellungen bereinigt: "CT2851647.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE" -  "{\"dataType\":\"string\",\"data\":\"true\"}"
[-] Firefox Einstellungen bereinigt: "CT2851647.addressBarTakeOverEnabledInHidden" -  "true"
[-] Firefox Einstellungen bereinigt: "CT2851647.autoDisableScopes" -  -1
[-] Firefox Einstellungen bereinigt: "CT2851647.cbcountry_001" -  "DE"
[-] Firefox Einstellungen bereinigt: "CT2851647.enableAlerts" -  "always"
[-] Firefox Einstellungen bereinigt: "CT2851647.fixPageNotFoundError" -  "true"
[-] Firefox Einstellungen bereinigt: "CT2851647.fixPageNotFoundErrorInHidden" -  "true"
[-] Firefox Einstellungen bereinigt: "CT2851647.fixUrls" -  true
[-] Firefox Einstellungen bereinigt: "CT2851647.isNewTabEnabled" -  true
[-] Firefox Einstellungen bereinigt: "CT2851647.isPerformedSmartBarTransition" -  "true"
[-] Firefox Einstellungen bereinigt: "CT2851647.isWelcomPage" -  "{\"dataType\":\"boolean\",\"data\":\"true\"}"
[-] Firefox Einstellungen bereinigt: "CT2851647.search.searchCount" -  "0"
[-] Firefox Einstellungen bereinigt: "CT2851647.searchInNewTabEnabledInHidden" -  "true"
[-] Firefox Einstellungen bereinigt: "CT2851647.selectToSearchBoxEnabled" -  "{\"dataType\":\"string\",\"data\":\"true\"}"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_service_login_isFirstLoginInvoked" -  "{\"dataType\":\"boolean\",\"data\":\"true\"}"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_service_login_loginCount" -  "{\"dataType\":\"number\",\"data\":\"2\"}"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_appTrackingFirstTime_lastUpdate" -  "1345371452243"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_appsMetadata_lastUpdate" -  "1345371440333"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_gottenAppsContextMenu_lastUpdate" -  "1345371439025"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_login_10.10.20.14_lastUpdate" -  "1345371446625"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_otherAppsContextMenu_lastUpdate" -  "1345371440650"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_searchAPI_lastUpdate" -  "1345371433847"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_serviceMap_lastUpdate" -  "1345371432394"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_toolbarContextMenu_lastUpdate" -  "1345371445567"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_toolbarSettings_lastUpdate" -  "1345371434940"
[-] Firefox Einstellungen bereinigt: "CT2851647.serviceLayer_services_translation_lastUpdate" -  "1345371443603"
[-] Firefox Einstellungen bereinigt: "CT2851647.settingsINI" -  true
[-] Firefox Einstellungen bereinigt: "extensions.toolbar@ask.com.install-event-fired" -  true
[-] [C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: ask.com
[-] [C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: conduit.search
[-] [C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: aaaaadgepjkdffhjbkfjgnnffnfcffbg


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [11994 Bytes] - [27/01/2017 15:41:46]
C:\AdwCleaner\AdwCleaner[S0].txt - [14900 Bytes] - [27/01/2017 15:37:33]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [12142 Bytes] ##########
Das Logfile vom MBAM ist rund 279500 Zeichen groß

M-K-D-B 29.01.2017 10:46
Servus,



dann bitte die Logdatei in ein .zip Archiv packen und als Anlage hochladen.

Mineko 29.01.2017 14:51
Hallo Matthias,
ich habe plötzlich das Problem, dass ich mich zwar normal anmelde, aber danach kommt ein Hinweis dass mein Profil nur temporär ist. Veränderte Auflösung, Outlook soll eingerichtet werden... Was ist da plötzlich los?
Lg

Ich hab die Datei über den Explorer rausgesucht, (vorhanden ist die ja) und hab mein Tablet angeschlossen zum posten. Hoffentlich war das nicht falsch.

M-K-D-B 30.01.2017 16:47
Servus,



Zitat:
Zitat von Mineko (Beitrag 1636917)
ich habe plötzlich das Problem, dass ich mich zwar normal anmelde, aber danach kommt ein Hinweis dass mein Profil nur temporär ist. Veränderte Auflösung, Outlook soll eingerichtet werden... Was ist da plötzlich los?
gute Frage, keine Ahnung. Wir haben ja noch gar nichts gemacht... :wtf:



  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.

Mineko 30.01.2017 18:26
Hallo Matthias,
wurde erledigt. Heute startete wieder mein normales Profil ... Ich habe ausser den Firefox und den Windowsexplorer nichts anderes gestartet.
Hier die Logs
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 29-01-2017
durchgeführt von Kornelia (Administrator) auf KORNELIA-PC (30-01-2017 17:53:15)
Gestartet von C:\Users\Kornelia\Desktop\Neuer Ordner (2)
Geladene Profile: Kornelia (Verfügbare Profile: Kornelia & Tabea)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.VpnService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
() C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files\dvd43\DVD43_Tray.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(Intenium) C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe
(Facebook Inc.) C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Google) C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
() C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4702208 2007-10-01] (Realtek Semiconductor)
HKLM\...\Run: [dvd43] => C:\Program Files\dvd43\dvd43_tray.exe [827904 2009-10-23] ()
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AgentMonitor] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [391040 2013-06-20] ()
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [286992 2015-11-28] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25744 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup Tray] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [160936 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM Group Policy restriction on software: C:\Program Files\Common Files\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk [2013-01-10]
ShortcutTarget: Google Calendar Sync.lnk -> C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-11-28]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-10-02]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
Startup: C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-03-04]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
GroupPolicy: Beschränkung ? <======= ACHTUNG
GroupPolicy\User: Beschränkung ? <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-1736235967-2657770174-236075978-1002\User: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23F9AFAB-2021-4A7D-9477-EBCFE8F59F7E}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9AD09A44-51EC-4D6E-9E93-74F49F171E7E}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-11-04] (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default [2017-01-28]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\20811wxw.default ->
FF Homepage: Mozilla\Firefox\Profiles\20811wxw.default -> about:home
FF Session Restore: Mozilla\Firefox\Profiles\20811wxw.default -> ist aktiviert.
FF NetworkProxy: Mozilla\Firefox\Profiles\20811wxw.default -> type", 1
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com [2017-01-26]
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com.xpi [2017-01-08]
FF Extension: (FacebookBlocker) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\facebookBlocker@webgraph.com [2014-02-16] [ist nicht signiert]
FF Extension: (NO Google Analytics) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-JcGokIiQyjoBAQ@jetpack.xpi [2016-06-09]
FF Extension: (Official My JDownloader AddOn) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2017-01-07]
FF Extension: (Test Pilot) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\testpilot@labs.mozilla.com.xpi [2016-09-01]
FF Extension: (NoScript) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-01-20]
FF Extension: (Adblock Plus) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-16]
FF Extension: (Torbutton) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}.xpi [2012-10-11] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-07-05] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: (Mehr Leistung und Videoformate für dein HTML5 &video&) - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-12-27] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll [2012-07-05] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-11-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2010-02-04] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-11-28] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2014-04-27] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2014-04-27] (RealPlayer Cloud)

Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll => Keine Datei
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\pdf.dll => Keine Datei
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default [2017-01-27]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-16]
CHR Extension: (RealDownloader) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-11-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-07]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-15]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files\Avira\VPN\Avira.VpnService.exe [300344 2017-01-18] (Avira Operations GmbH & Co. KG)
S3 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S2 gupdate1cacc58a1955820; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-02] (Google Inc.)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-12-06] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888 2017-01-20] (Malwarebytes)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-11-04] ()
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1095976 2015-11-28] (RealNetworks, Inc.)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [35304 2017-01-11] (Avira Operations GmbH & Co. KG)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ACEDRV05; C:\Windows\system32\drivers\ACEDRV05.sys [97792 2010-03-10] (Protect Software GmbH) [Datei ist nicht signiert]
R2 ACEDRV08; C:\Windows\system32\drivers\ACEDRV08.sys [108768 2010-12-28] (Protect Software GmbH)
R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2010-04-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119208 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140840 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [30672 2016-12-16] (Avira Operations GmbH & Co. KG)
R3 dvd43llh; C:\Windows\System32\DRIVERS\dvd43llh.sys [18816 2010-06-09] (RIF) [Datei ist nicht signiert]
S3 eapihdrv; C:\Users\Kornelia\AppData\Local\Temp\ehdrv.sys [135760 2017-01-27] (ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59976 2017-01-20] ()
S3 HCW713x; C:\Windows\System32\DRIVERS\HCW713x.sys [827776 2007-03-26] (Hauppauge Computer Works inc.)
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2008-02-14] (Paragon Software Group)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2010-04-05] ()
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
S3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [152512 2017-01-27] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [94656 2017-01-30] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-30] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [219584 2017-01-30] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [63264 2017-01-30] (Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2007-02-27] ()
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36624 2007-01-28] (Sonic Solutions) [Datei ist nicht signiert]
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2012-10-25] (Realtek Semiconductor Corporation                          )
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-10-22] (Duplex Secure Ltd.)
R2 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [Datei ist nicht signiert]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-29 14:14 - 2017-01-29 14:14 - 00000000 ____D C:\Users\TEMP.Kornelia-PC\AppData\Local\Real
2017-01-29 14:12 - 2017-01-29 14:15 - 00000000 ____D C:\Users\TEMP.Kornelia-PC
2017-01-28 14:43 - 2017-01-28 14:43 - 00001254 _____ C:\Users\Kornelia\Desktop\MWB.txt
2017-01-28 13:31 - 2017-01-28 13:31 - 00109596 _____ C:\Users\Kornelia\Desktop\TDSSKiller.txt
2017-01-28 13:24 - 2017-01-28 13:31 - 00219282 _____ C:\TDSSKiller.3.1.0.12_28.01.2017_13.24.30_log.txt
2017-01-28 13:22 - 2017-01-28 13:22 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Kornelia\Desktop\tdsskiller.exe
2017-01-28 01:39 - 2017-01-28 01:39 - 00263328 _____ C:\Users\Kornelia\Desktop\malwarebytes.txt
2017-01-27 23:56 - 2017-01-30 17:53 - 00000000 ____D C:\FRST
2017-01-27 16:27 - 2017-01-27 16:27 - 02870984 _____ (ESET) C:\Users\Kornelia\Desktop\esetsmartinstaller_deu.exe
2017-01-27 16:20 - 2017-01-27 16:20 - 00001898 _____ C:\Users\Kornelia\Desktop\sc-cleaner.txt
2017-01-27 16:12 - 2017-01-27 16:12 - 00015596 _____ C:\Users\Kornelia\Desktop\JRT.txt
2017-01-27 15:27 - 2017-01-27 15:41 - 00000000 ____D C:\AdwCleaner
2017-01-27 14:42 - 2017-01-27 14:42 - 00000000 ____D C:\Users\Kornelia\AppData\Local\AviraSpeedup
2017-01-27 14:35 - 2017-01-27 14:35 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Avira
2017-01-27 13:56 - 2017-01-30 17:48 - 00094656 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-27 13:56 - 2017-01-30 17:48 - 00063264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-27 13:56 - 2017-01-27 13:56 - 00152512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-27 13:55 - 2017-01-30 17:48 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-27 13:55 - 2017-01-30 17:46 - 00219584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-27 13:55 - 2017-01-27 13:55 - 00002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-27 13:55 - 2017-01-27 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-27 13:55 - 2017-01-20 07:47 - 00059976 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-27 00:03 - 2017-01-27 00:04 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2017-01-26 22:47 - 2017-01-26 22:47 - 00001134 _____ C:\Users\Kornelia\Desktop\Avira Antivirus starten.lnk
2017-01-26 21:06 - 2017-01-26 21:06 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_588a51b66deb0__ws.exe
2017-01-26 19:57 - 2017-01-26 19:57 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Avira
2017-01-26 17:28 - 2017-01-26 17:28 - 00000000 ____D C:\Users\Kornelia\Downloads\Notfall DVD 7.0 Free
2017-01-26 16:35 - 2017-01-26 17:04 - 1276319704 _____ C:\Users\Kornelia\Downloads\Notfall_DVD_7.0_Free.zip
2017-01-26 13:57 - 2017-01-26 13:57 - 00001101 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk
2017-01-26 13:57 - 2017-01-26 13:57 - 00000998 _____ C:\Users\Public\Desktop\Avira Phantom VPN.lnk
2017-01-26 13:56 - 2017-01-30 17:48 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-01-26 13:52 - 2017-01-26 13:52 - 00001166 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-01-26 13:43 - 2017-01-26 13:49 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_5889ec8b9e38c__ws.exe
2017-01-24 23:24 - 2017-01-24 23:24 - 00000936 _____ C:\Users\Kornelia\Desktop\duplicate.txt
2017-01-19 19:22 - 2017-01-19 21:20 - 00000000 ____D C:\Users\Kornelia\Desktop\Rekla Herd
2017-01-12 23:57 - 2017-01-12 23:58 - 00000000 ____D C:\Users\Kornelia\Desktop\SCHULE
2017-01-11 13:22 - 2017-01-05 18:46 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 13:22 - 2017-01-05 18:46 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 13:22 - 2017-01-05 18:43 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 13:22 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 13:22 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 13:22 - 2017-01-05 18:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-10 16:32 - 2017-01-25 00:18 - 00040346 _____ C:\Users\Kornelia\Desktop\Dateiliste.xlsx
2017-01-08 21:33 - 2017-01-08 21:33 - 00000000 ____D C:\Users\Kornelia\AppData\Local\CEF
2017-01-07 22:31 - 2017-01-07 22:31 - 00002075 _____ C:\Users\Kornelia\Desktop\JDownloader 2.lnk
2017-01-07 22:31 - 2017-01-07 22:31 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-01-07 22:27 - 2017-01-27 15:13 - 00000000 ____D C:\Users\Kornelia\AppData\Local\JDownloader 2.0
2017-01-07 22:23 - 2017-01-07 22:23 - 00076504 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\WebInstaller.exe
2017-01-07 19:32 - 2017-01-28 20:38 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Mozilla
2017-01-07 19:20 - 2017-01-07 19:20 - 00243720 _____ C:\Users\Kornelia\Downloads\Firefox Setup Stub 50.1.0.exe
2017-01-07 17:29 - 2017-01-24 23:13 - 00000000 ____D C:\Users\Kornelia\Downloads\Downloader
2017-01-07 17:21 - 2017-01-07 17:23 - 26539720 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\JDownloaderSetup.exe
2017-01-07 16:50 - 2017-01-07 16:50 - 00000000 ____D C:\Users\Kornelia\Downloads\Info

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-30 17:53 - 2015-09-16 17:12 - 00000000 ____D C:\Users\Kornelia\Desktop\Neuer Ordner (2)
2017-01-30 17:45 - 2011-07-05 09:31 - 00000000 ____D C:\Users\Kornelia
2017-01-30 17:45 - 2010-03-25 21:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-01-30 17:45 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-29 20:48 - 2013-06-11 21:18 - 00000940 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job
2017-01-29 20:48 - 2013-03-01 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-29 20:48 - 2010-03-26 02:57 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-01-29 14:30 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-29 14:30 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-27 22:23 - 2013-06-11 21:18 - 00000918 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job
2017-01-27 15:43 - 2016-03-27 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-27 15:43 - 2012-04-30 09:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-27 15:40 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-01-27 15:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2017-01-27 15:13 - 2011-11-01 11:13 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Vidalia
2017-01-27 15:13 - 2011-07-05 10:25 - 00000000 ____D C:\Windows\Panther
2017-01-27 15:13 - 2011-04-13 13:21 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\skypePM
2017-01-27 15:12 - 2010-10-31 18:18 - 00000000 ___RD C:\Users\Kornelia\Desktop\Tabea Spiele
2017-01-27 15:12 - 2007-10-12 08:47 - 00000000 ____D C:\Program Files\DivX
2017-01-27 14:43 - 2011-07-05 10:27 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-27 14:43 - 2009-07-14 09:47 - 00702942 _____ C:\Windows\system32\perfh007.dat
2017-01-27 14:43 - 2009-07-14 09:47 - 00150582 _____ C:\Windows\system32\perfc007.dat
2017-01-27 14:43 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-01-27 00:05 - 2010-12-16 14:57 - 00000000 ____D C:\Program Files\GMX
2017-01-26 23:52 - 2011-09-30 10:13 - 00000000 ____D C:\Users\Public\Documents\Tivola_prefs
2017-01-26 23:52 - 2011-02-23 18:14 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\Program Files\Amazon
2017-01-26 23:52 - 2010-03-10 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tivola
2017-01-26 23:48 - 2011-03-09 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:41 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\DVDVideoSoft
2017-01-26 23:43 - 2016-10-23 15:39 - 00150152 _____ C:\Windows\ntbtlog.txt
2017-01-26 17:26 - 2016-10-24 10:00 - 00120432 _____ C:\Users\Kornelia\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-26 16:28 - 2016-10-21 23:01 - 00428280 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-26 13:57 - 2016-10-21 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-01-26 13:57 - 2012-12-22 20:23 - 00000000 ____D C:\Program Files\Avira
2017-01-26 13:57 - 2012-05-20 11:07 - 00000000 ____D C:\ProgramData\Avira
2017-01-26 13:52 - 2015-11-28 11:45 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 13:30 - 2011-04-05 15:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-01-25 13:21 - 2012-02-26 18:45 - 00000000 ____D C:\Users\Kornelia\Downloads\Heidi
2017-01-24 23:47 - 2011-04-05 14:45 - 00000000 ____D C:\ProgramData\Norton
2017-01-23 15:51 - 2012-01-17 15:04 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Microsoft Help
2017-01-23 12:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-22 00:11 - 2016-08-14 14:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 21:19 - 2010-04-01 21:23 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\COREL
2017-01-19 21:13 - 2010-04-29 21:48 - 00000000 ____D C:\Users\Kornelia\Documents\My PSP Files
2017-01-19 21:13 - 2010-04-22 22:31 - 00001786 ___SH C:\Windows\system32\KGyGaAvL.sys
2017-01-11 23:30 - 2013-09-01 10:47 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 23:19 - 2011-08-09 13:50 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 19:31 - 2012-05-27 00:08 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-10 19:31 - 2011-09-06 09:10 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-10 19:31 - 2010-03-13 11:32 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-08 21:33 - 2010-03-12 09:41 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Adobe
2017-01-07 19:31 - 2011-10-05 01:27 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-07 19:31 - 2010-03-06 17:48 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2010-06-02 05:21 - 2010-06-02 05:21 - 1347354 _____ () C:\Program Files\Apr2005_d3dx9_25_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1078962 _____ () C:\Program Files\Apr2005_d3dx9_25_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1397830 _____ () C:\Program Files\Apr2006_d3dx9_30_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1115221 _____ () C:\Program Files\Apr2006_d3dx9_30_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0916430 _____ () C:\Program Files\Apr2006_MDX1_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 4162630 _____ () C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0179133 _____ () C:\Program Files\Apr2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0133103 _____ () C:\Program Files\Apr2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087101 _____ () C:\Program Files\Apr2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046010 _____ () C:\Program Files\Apr2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0698612 _____ () C:\Program Files\APR2007_d3dx10_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0695865 _____ () C:\Program Files\APR2007_d3dx10_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1607358 _____ () C:\Program Files\APR2007_d3dx9_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1606039 _____ () C:\Program Files\APR2007_d3dx9_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0195766 _____ () C:\Program Files\APR2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0151225 _____ () C:\Program Files\APR2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0096817 _____ () C:\Program Files\APR2007_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0053302 _____ () C:\Program Files\APR2007_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1350542 _____ () C:\Program Files\Aug2005_d3dx9_27_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1077644 _____ () C:\Program Files\Aug2005_d3dx9_27_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0182903 _____ () C:\Program Files\AUG2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0137235 _____ () C:\Program Files\AUG2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087142 _____ () C:\Program Files\AUG2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046058 _____ () C:\Program Files\AUG2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0852286 _____ () C:\Program Files\AUG2007_d3dx10_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0796867 _____ () C:\Program Files\AUG2007_d3dx10_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1800160 _____ () C:\Program Files\AUG2007_d3dx9_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1708152 _____ () C:\Program Files\AUG2007_d3dx9_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0198096 _____ () C:\Program Files\AUG2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0153012 _____ () C:\Program Files\AUG2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0867612 _____ () C:\Program Files\Aug2008_d3dx10_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0849167 _____ () C:\Program Files\Aug2008_d3dx10_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1794084 _____ () C:\Program Files\Aug2008_d3dx9_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1464672 _____ () C:\Program Files\Aug2008_d3dx9_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0121772 _____ () C:\Program Files\Aug2008_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0092996 _____ () C:\Program Files\Aug2008_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271412 _____ () C:\Program Files\Aug2008_XAudio_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271038 _____ () C:\Program Files\Aug2008_XAudio_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0919044 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0900598 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3112111 _____ () C:\Program Files\Aug2009_d3dcsx_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3319740 _____ () C:\Program Files\Aug2009_d3dcsx_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0232635 _____ () C:\Program Files\Aug2009_d3dx10_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0192131 _____ () C:\Program Files\Aug2009_d3dx10_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0136301 _____ () C:\Program Files\Aug2009_d3dx11_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0105044 _____ () C:\Program Files\Aug2009_d3dx11_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0930116 _____ () C:\Program Files\Aug2009_d3dx9_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0728456 _____ () C:\Program Files\Aug2009_d3dx9_42_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122408 _____ () C:\Program Files\Aug2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093106 _____ () C:\Program Files\Aug2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273264 _____ () C:\Program Files\Aug2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272642 _____ () C:\Program Files\Aug2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1357976 _____ () C:\Program Files\Dec2005_d3dx9_28_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1079456 _____ () C:\Program Files\Dec2005_d3dx9_28_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0212807 _____ () C:\Program Files\DEC2006_d3dx10_00_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0191720 _____ () C:\Program Files\DEC2006_d3dx10_00_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1571154 _____ () C:\Program Files\DEC2006_d3dx9_32_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1574376 _____ () C:\Program Files\DEC2006_d3dx9_32_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0192475 _____ () C:\Program Files\DEC2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0145599 _____ () C:\Program Files\DEC2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0089944 _____ (Microsoft Corporation) C:\Program Files\DSETUP.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 1801048 _____ () C:\Program Files\dsetup32.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 0042410 _____ () C:\Program Files\dxdllreg_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0537432 _____ () C:\Program Files\DXSETUP.exe
2010-06-02 05:22 - 2010-06-02 05:22 - 0094011 _____ () C:\Program Files\dxupdate.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1247499 _____ () C:\Program Files\Feb2005_d3dx9_24_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1013225 _____ () C:\Program Files\Feb2005_d3dx9_24_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1362796 _____ () C:\Program Files\Feb2006_d3dx9_29_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1084720 _____ () C:\Program Files\Feb2006_d3dx9_29_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0178359 _____ () C:\Program Files\Feb2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0132409 _____ () C:\Program Files\Feb2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0194675 _____ () C:\Program Files\FEB2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0147983 _____ () C:\Program Files\FEB2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054678 _____ () C:\Program Files\Feb2010_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0020713 _____ () C:\Program Files\Feb2010_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122446 _____ () C:\Program Files\Feb2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093180 _____ () C:\Program Files\Feb2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0276960 _____ () C:\Program Files\Feb2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277191 _____ () C:\Program Files\Feb2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1336002 _____ () C:\Program Files\Jun2005_d3dx9_26_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1064925 _____ () C:\Program Files\Jun2005_d3dx9_26_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0180785 _____ () C:\Program Files\JUN2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0133671 _____ () C:\Program Files\JUN2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0699044 _____ () C:\Program Files\JUN2007_d3dx10_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0698472 _____ () C:\Program Files\JUN2007_d3dx10_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607774 _____ () C:\Program Files\JUN2007_d3dx9_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607286 _____ () C:\Program Files\JUN2007_d3dx9_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197122 _____ () C:\Program Files\JUN2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0152909 _____ () C:\Program Files\JUN2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0867828 _____ () C:\Program Files\JUN2008_d3dx10_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0849919 _____ () C:\Program Files\JUN2008_d3dx10_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1792608 _____ () C:\Program Files\JUN2008_d3dx9_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1463878 _____ () C:\Program Files\JUN2008_d3dx9_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055154 _____ () C:\Program Files\JUN2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021905 _____ () C:\Program Files\JUN2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121054 _____ () C:\Program Files\JUN2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093128 _____ () C:\Program Files\JUN2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269628 _____ () C:\Program Files\JUN2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269024 _____ () C:\Program Files\JUN2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0944460 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0931471 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0752783 _____ () C:\Program Files\Jun2010_d3dcsx_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0762188 _____ () C:\Program Files\Jun2010_d3dcsx_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0235955 _____ () C:\Program Files\Jun2010_d3dx10_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197283 _____ () C:\Program Files\Jun2010_d3dx10_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138205 _____ () C:\Program Files\Jun2010_d3dx11_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0109445 _____ () C:\Program Files\Jun2010_d3dx11_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0937246 _____ () C:\Program Files\Jun2010_d3dx9_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0768036 _____ () C:\Program Files\Jun2010_d3dx9_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0124596 _____ () C:\Program Files\Jun2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093686 _____ () C:\Program Files\Jun2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277338 _____ () C:\Program Files\Jun2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0278060 _____ () C:\Program Files\Jun2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0844884 _____ () C:\Program Files\Mar2008_d3dx10_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0818260 _____ () C:\Program Files\Mar2008_d3dx10_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1769862 _____ () C:\Program Files\Mar2008_d3dx9_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1443282 _____ () C:\Program Files\Mar2008_d3dx9_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055058 _____ () C:\Program Files\Mar2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021867 _____ () C:\Program Files\Mar2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122336 _____ () C:\Program Files\Mar2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093734 _____ () C:\Program Files\Mar2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0251194 _____ () C:\Program Files\Mar2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0226250 _____ () C:\Program Files\Mar2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1067160 _____ () C:\Program Files\Mar2009_d3dx10_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1040745 _____ () C:\Program Files\Mar2009_d3dx10_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1973702 _____ () C:\Program Files\Mar2009_d3dx9_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1612446 _____ () C:\Program Files\Mar2009_d3dx9_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054600 _____ () C:\Program Files\Mar2009_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021298 _____ () C:\Program Files\Mar2009_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121506 _____ () C:\Program Files\Mar2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092740 _____ () C:\Program Files\Mar2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0275044 _____ () C:\Program Files\Mar2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273018 _____ () C:\Program Files\Mar2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0864600 _____ () C:\Program Files\Nov2007_d3dx10_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0803884 _____ () C:\Program Files\Nov2007_d3dx10_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1802058 _____ () C:\Program Files\Nov2007_d3dx9_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1709360 _____ () C:\Program Files\Nov2007_d3dx9_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0046144 _____ () C:\Program Files\NOV2007_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0018496 _____ () C:\Program Files\NOV2007_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0196762 _____ () C:\Program Files\NOV2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0148264 _____ () C:\Program Files\NOV2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0994154 _____ () C:\Program Files\Nov2008_d3dx10_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0965421 _____ () C:\Program Files\Nov2008_d3dx10_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1906878 _____ () C:\Program Files\Nov2008_d3dx9_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1550796 _____ () C:\Program Files\Nov2008_d3dx9_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054522 _____ () C:\Program Files\Nov2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021851 _____ () C:\Program Files\Nov2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121794 _____ () C:\Program Files\Nov2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092684 _____ () C:\Program Files\Nov2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273960 _____ () C:\Program Files\Nov2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272611 _____ () C:\Program Files\Nov2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0086037 _____ () C:\Program Files\Oct2005_xinput_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0045359 _____ () C:\Program Files\Oct2005_xinput_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1412902 _____ () C:\Program Files\OCT2006_d3dx9_31_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1127217 _____ () C:\Program Files\OCT2006_d3dx9_31_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0182361 _____ () C:\Program Files\OCT2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138017 _____ () C:\Program Files\OCT2006_XACT_x86.cab
2010-10-22 14:05 - 2010-10-22 14:46 - 0000388 _____ () C:\Users\Kornelia\AppData\Roaming\burnaware.ini
2013-12-18 23:02 - 2013-12-19 00:05 - 0000679 _____ () C:\Users\Kornelia\AppData\Local\cookies.ini
2011-08-17 17:39 - 2015-07-28 17:08 - 0008192 _____ () C:\Users\Kornelia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-26 18:23 - 2011-07-26 18:23 - 0000000 _____ () C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2011-07-05 09:26

==================== Ende vom FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 29-01-2017
durchgeführt von Kornelia (30-01-2017 18:00:48)
Gestartet von C:\Users\Kornelia\Desktop\Neuer Ordner (2)
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2011-07-05 09:33:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1736235967-2657770174-236075978-500 - Administrator - Disabled)
Gast (S-1-5-21-1736235967-2657770174-236075978-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1736235967-2657770174-236075978-1005 - Limited - Enabled)
Konni (S-1-5-21-1736235967-2657770174-236075978-1003 - Administrator - Enabled)
Kornelia (S-1-5-21-1736235967-2657770174-236075978-1001 - Administrator - Enabled) => C:\Users\Kornelia
Tabea (S-1-5-21-1736235967-2657770174-236075978-1002 - Limited - Enabled) => C:\Users\Tabea

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 4.65 (HKLM\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Aladins Wunderlampe (HKLM\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM\...\Alamandi) (Version: 0.0.0.0 - INTENIUM GmbH)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Annabel (HKLM\...\Annabel) (Version: 1.0.0.0 - INTENIUM GmbH)
ATI Catalyst Install Manager (HKLM\...\{CC516453-9703-ABF9-201F-58A5EC567292}) (Version: 3.0.642.0 - ATI Technologies, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG)
Avira Connect (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM\...\Avira Phantom VPN) (Version: 2.4.3.30556 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 3.1.1.4250 - Avira Operations GmbH & Co. KG)
Azada ™: Ancient Magic (HKLM\...\BFG-Azada - Ancient Magic) (Version:  - )
Azada: In Libro (HKLM\...\BFG-Azada - In Libro) (Version:  - )
Azteca (HKLM\...\Azteca) (Version: 1.0.0.0 - INTENIUM GmbH)
Beetle Ju 2 (HKLM\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Bengal (HKLM\...\Bengal) (Version: 1.0.1.0 - INTENIUM GmbH)
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 2.0.0.28 - )
Botanica - Reise ins Unbekannte (HKLM\...\BFG-Botanica - Reise ins Unbekannte) (Version:  - )
calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)
ccc-core-static (Version: 2007.0821.2146.36991 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Chinese Checkers (HKLM\...\40-com.novelgames.flashgames.checkers) (Version: 1.8.0 - Novel Games Limited)
Chinese Checkers (Version: 1.8.0 - Novel Games Limited) Hidden
Corel Paint Shop Pro Photo XI (HKLM\...\{E1C7EF5E-3A7B-4ED4-A48B-F70F1B36EAB4}) (Version: 11.20.0000 - Corel Corporation)
Corel Snapfire DVD Maker (HKLM\...\{17E14D89-3A9F-4706-9F9B-C2DFC7ABE94B}) (Version: 1.20.0000 - Corel Corporation)
Corel Snapfire Plus (HKLM\...\{7ADE3A47-B425-45E9-8FF6-11BE2B775645}) (Version: 1.201.0000 - Corel Corporation)
CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Da Vincis Perlen Puzzle (HKLM\...\Da Vincis Perlen Puzzle) (Version:  - )
Das Reich des Drachen (HKLM\...\Das Reich des Drachen) (Version: 1.0.0.0 - INTENIUM GmbH)
Das Vermächtnis - Der Baum des Lebens (1.00) (HKLM\...\Das Vermächtnis - Der Baum des Lebens_is1) (Version:  - City Interactive)
Der Perfekte Weihnachtsbaum (HKLM\...\Der Perfekte Weihnachtsbaum) (Version: 1.0.0.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.2010.6.23 - INTENIUM GmbH)
Diamantenfee 2 (HKLM\...\Diamantenfee 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Diamond Drop 2 (HKLM\...\Diamond Drop 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DIE GEHEIMNISSE DER SPIDERWICKS (HKLM\...\{DFA723CE-22B4-4E6B-92CF-176256ECF2DE}) (Version: 1.00.0000 - Sierra Entertainment)
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Die Kluge Eule) (Version:  - )
Die Wiege Olympias 2 (HKLM\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.3 - DivX, LLC)
Drawn: &reg; Flucht aus der Dunkelheit (HKLM\...\BFG-Drawn - Flucht aus der Dunkelheit) (Version:  - )
Drawn: Der Turm ™ (HKLM\...\BFG-Drawn - Der Turm) (Version:  - )
Dream Chronicles (HKLM\...\Dream Chronicles) (Version:  - PlayFirst, Inc.)
Dream Chronicles ™ 2: The Eternal Maze (HKLM\...\BFG-Dream Chronicles 2 - The Eternal Maze) (Version:  - )
DVD43 v4.6.0 (HKLM\...\DVD43_is1) (Version:  - )
DVS Video Downloader Addon for Mozilla Firefox version 4.3.4.17 (HKLM\...\DVS Video Downloader Addon for Mozilla Firefox_is1) (Version: 4.3.4.17 - DVDVideoSoft Ltd.)
Emil und Pauline Auf dem Land (remove only) (HKLM\...\Emil und Pauline Auf dem Land) (Version:  - )
Emil und Pauline In der Stadt (remove only) (HKLM\...\Emil und Pauline In der Stadt) (Version:  - )
Enigmatis - Vermisst in Maple Creek (HKLM\...\Enigmatis - Vermisst in Maple Creek_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Ewige Reise - Das neue Atlantis (HKLM\...\Ewige Reise - Das neue Atlantis) (Version:  - )
Fabled Legends: Die Ruckkehr des Rattenfangers (HKLM\...\BFG-Fabled Legends - Die Rueckkehr des Rattenfaengers) (Version:  - )
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FarmFrenzy (HKLM\...\FarmFrenzy) (Version:  - )
Finstere Liebschaft - Immortal Lovers (HKLM\...\Finstere Liebschaft - Immortal Lovers) (Version:  - )
foobar2000 v1.0.3 (HKLM\...\foobar2000) (Version: 1.0.3 - Peter Pawlowski)
Forest Legends - Der Ruf der Liebe (HKLM\...\Forest Legends - Der Ruf der Liebe) (Version:  - )
FormatFactory 3.5.0.0 (HKLM\...\FormatFactory) (Version: 3.5.0.0 - Format Factory)
Free Studio version 2013 (HKLM\...\Free Studio_is1) (Version: 6.1.0.320 - DVDVideoSoft Ltd.)
Galileo Family Quiz - Spezial II (HKLM\...\Galileo Family Quiz - Spezial II) (Version:  - SevenOne Intermedia)
Geheimakte 2 - Puritas Cordis (HKLM\...\{BE7347AD-2D93-4A74-8DBF-C1B073DAE509}) (Version: 1.00.0000 - Deep Silver)
Geheime Fälle: Die gestohlene Venus (HKLM\...\Geheime Fälle: Die gestohlene Venus) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 2.7.2.6 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 2.7.2 - 1 und 1 Internet AG) Hidden
Google Calendar Sync (HKLM\...\Google Calendar Sync) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
Gravely Silent: Haus des Schreckens (HKLM\...\BFG-Gravely Silent - Haus des Schreckens) (Version:  - )
Haunted Manor: Der Herr der Spiegel (HKLM\...\BFG-Haunted Manor - Der Herr der Spiegel) (Version:  - )
Hauppauge MCE XP/Vista Software Encoder (2.0.25102) (HKLM\...\Hauppauge MCE2005 Software Encoder) (Version: 2.0.25102 - Hauppauge Computer Works, Inc.)
Heroes of Hellas (HKLM\...\{C0906D83-1FE0-4176-A940-45A348080987}) (Version: 1.00.0000 - Purplehills)
Hexentanz und Firlefanz (HKLM\...\Hexentanz und Firlefanz) (Version:  - )
Hidden Expedition &reg; : Bermudadreieck (HKLM\...\BFG-Hidden Expedition - Bermudadreieck) (Version:  - )
Hidden Mysteries Salem Secrets (HKLM\...\Hidden Mysteries Salem Secrets) (Version: 1.0 - astrogon Software)
Hidden Mysteries Vampire Secrets (HKLM\...\Hidden Mysteries Vampire Secrets) (Version: 1.0 - astragon Software)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBee FREE 5.1.2 (build 456) (HKLM\...\JetBee_is1) (Version:  - )
Jewel Puzzle (HKLM\...\Jewel Puzzle) (Version: 1.0.0.0 - INTENIUM GmbH)
Kleiner Eisbär 2 (HKLM\...\Kleiner Eisbär 2) (Version:  - )
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Lauras Stern (HKLM\...\Lauras Stern) (Version:  - )
Letstrade (HKLM\...\{E0091C29-DEE8-4B24-BF65-8C35B5940D77}) (Version: 1.00.0000 - Buhl Data Service)
LightScribe System Software  1.17.90.1 (HKLM\...\{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}) (Version: 1.17.90.1 - LightScribe)
Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Manic Digger (HKLM\...\{119E2FCB-5CDD-4C24-BCB2-56A824E2BF0A}_is1) (Version:  - )
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Midnight Mysteries Salem Witch Trials (HKLM\...\Midnight Mysteries Salem Witch Trials) (Version: 1.1.0.0 - MumboJumbo)
Mozilla Firefox 51.0.1 (x86 de) (HKLM\...\Mozilla Firefox 51.0.1 (x86 de)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
Mozilla Thunderbird 45.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 45.6.0 (x86 de)) (Version: 45.6.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Case Files&reg;: Dire Grove™ (HKLM\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst Handbuch ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst Handbuch) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst) (Version:  - )
Mystery Case Files: Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Ravenhearst) (Version:  - )
Mystery of Cleopatra (HKLM\...\Mystery of Cleopatra 1.0) (Version: 1.0 - Rondo Media)
Mystery Places - Das Geheimnis der Geistervilla (HKLM\...\Mystery Places - Das Geheimnis der Geistervilla_is1) (Version:  - )
Mystery Tales - Insel der Träume (HKLM\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Trackers: Raincliff (HKLM\...\BFG-Mystery Trackers - Raincliff) (Version:  - )
Natalie Brooks (HKLM\...\Natalie Brooks) (Version:  - )
Nero 7 Essentials (HKLM\...\{0DE739CA-9487-4E3E-8511-92EAF01F1031}) (Version: 7.03.0274 - Nero AG)
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Pahelika: Secret Legends (HKLM\...\Pahelika: Secret Legends) (Version:  - The Games Company Worldwide GmbH)
Paragon Hard Disk Manager 2008 Professional (HKLM\...\{E9E4BB29-FA98-401B-9EDE-9906906E33DE}) (Version:  - Paragon Software Group)
PixiePack Codec Pack (HKLM\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polipo 1.0.4.1 (HKLM\...\Polipo) (Version:  - )
Prinzessin Isabella (HKLM\...\Prinzessin Isabella) (Version: 1.0.0.0 - INTENIUM GmbH)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProtectDisc Helper Driver 10 (HKLM\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
Radiotracker (HKLM\...\{1E863F44-2D2D-4BD7-B25B-EDA9FF622267}) (Version: 6.2.13700.0 - RapidSolution Software AG)
ratDVD 0.78.1444 (HKLM\...\ratDVD) (Version: 0.78.1444 - ratDVD)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
RealDownloader (Version: 18.1.2.176 - RealNetworks, Inc.) Hidden
RealDownloader (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.2 - RealNetworks)
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rooms - Die Villa 1.0d  (HKLM\...\Rooms - Die Villa) (Version: 1.0d - Halycon Media)
Samantha Swift and the Mystery From Atlantis (HKLM\...\Samantha Swift and the Mystery From Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Sandra Fleming Chronicles – Crystal Skulls (HKLM\...\Sandra Fleming Chronicles – Crystal Skulls) (Version: 1.0.0.0 - INTENIUM GmbH)
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Simajo (HKLM\...\Simajo) (Version:  - )
Skins (Version: 2007.0821.2146.36991 - ATI) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spirits of Mystery: Dunkler Fluch (HKLM\...\BFG-Spirits of Mystery - Dunkler Fluch) (Version:  - )
Spur der Träume (HKLM\...\Spur der Träume) (Version: 1.0.0.0 - INTENIUM GmbH)
Sweet Home 3D version 3.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Enchanted Kingdom: Elisa’s Adventure (HKLM\...\The Enchanted Kingdom: Elisa’s Adventure) (Version: 1.0.0.0 - INTENIUM GmbH)
The Fall Trilogy (HKLM\...\The Fall Trilogy_is1) (Version:  - Morphicon)
The Fall Trilogy Chapter 2 (HKLM\...\The Fall Trilogy Chapter 2_is1) (Version:  - Morphicon)
The Night of the Rabbit (HKLM\...\The Night of the Rabbit) (Version: 1.0 - Daedalic Entertainment)
The Sultans Labyrinth: Das Opfer des K&ouml;nigs (HKLM\...\BFG-The Sultans Labyrinth - Das Opfer des Koenigs) (Version:  - ) <==== ACHTUNG
Tor 0.2.2.35 (HKLM\...\Tor) (Version:  - )
TP-LINK 300Mbps Wireless USB Adapter Treiber (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trödelschätze (HKLM\...\{AC368309-A247-42C0-9AAF-ABB2E067B79C}) (Version: 1.00.0000 - Valusoft)
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Try Corel Snapfire muvee autoProducer add on (Version: 1.00.0000 - Ihr Firmenname) Hidden
Turtix (HKLM\...\Turtix) (Version:  - )
Turtix 2 (HKLM\...\Turtix 2) (Version:  - )
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vernaeht und zugeflixt! Was stimmt denn hier nicht? (HKLM\...\Vernaeht und zugeflixt! Was stimmt denn hier nicht?) (Version:  - )
Vidalia 0.2.15 (HKLM\...\Vidalia) (Version:  - )
Video Downloader (Version: 1.2.0 - RealNetworks) Hidden
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.6.4 - Shark007)
VTech Download Agent Library (Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM\...\VTechDownloadManager) (Version:  - VTech)
Wieso? Weshalb? Warum? - Unser Körper (HKLM\...\com.rd.www.desktop.DesktopBody) (Version: 1.0.0 - Ravensburger Digital GmbH)
Wieso? Weshalb? Warum? - Unser Körper (Version: 1.0.0 - Ravensburger Digital GmbH) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WordPerfect Office X3 (HKLM\...\_{54DB13F1-0CE0-4BAB-BD5F-7DE150C043C8}) (Version:  - Corel Corporation)
WordPerfect Office X3 (Version: 13.3 - Corel Corporation) Hidden
World Voyage (HKLM\...\World Voyage) (Version: 1.0.0.0 - INTENIUM GmbH)
XMedia Recode 2.3.0.4 (HKLM\...\XMedia Recode) (Version: 2.3.0.4 - Sebastian Dörfler)
XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.)
Zuma's Revenge! (HKLM\...\Zuma's Revenge!1.0) (Version: 1.0 - AllSmartGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> kein Dateipfad

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {032A98DE-A547-4FB1-97B4-777E85FCE80F} - System32\Tasks\{51ECF608-A47D-464B-892E-9A3067C4CA0E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {04338029-ABEF-4DB2-A56D-FF0641970A7A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {08FA19ED-87A2-4BE4-B4F6-1170192766D0} - System32\Tasks\{1D76B916-65CA-47A7-9DD1-C614C8F74E56} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {0922A476-D472-4C6B-AF0D-283C447FF4F0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {248BA49A-31FC-4CBC-AC12-0AD50B3730CD} - System32\Tasks\{2D2CF1E0-A39F-4435-B084-62C323AD4F56} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {262EF14E-2D04-4238-8DD2-2B9AFBBAEC1F} - System32\Tasks\{D62DA859-B3A5-4A8C-8643-BC908C434082} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {2B93871E-90A6-4BD6-B5B2-2B2CCE5A5740} - System32\Tasks\{C791566E-54A6-4DAF-8C0F-0153AA08A504} => pcalua.exe -a D:\Software\Nero\setupx.exe -d D:\Software\Nero
Task: {2D4FEC81-5640-445A-97C1-A780D1FD2CD8} - System32\Tasks\{3D22388D-753E-494E-8F61-D351F8E67C68} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {34B169BF-29C1-4D9E-ABAD-DD33D6A48488} - System32\Tasks\{AA3E9FEA-EE1C-4BD0-A6EE-0AB550AE278F} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {3C30CE7A-A21F-4478-8DFD-AB4484B05538} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {3F4F5314-363F-4D5F-AD46-3C6D3EAA7DDA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} - System32\Tasks\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => Firefox.exe
Task: {474C30BF-0A7E-4DC2-9E6B-369B154E8229} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {49897270-27FE-4B7E-A4F9-1B4F8AE27E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {49E28B95-9408-4715-97DA-1AB7339805C6} - System32\Tasks\{EA4F2F72-7C23-4AB9-8184-245B49DE749F} => C:\Program Files\DEUTSCHLAND SPIELT\BeetleJu2 VollVersion\BeetleJu2_og.exe [2010-11-23] (INTENIUM GmbH)
Task: {4C08C992-D45F-4D07-9702-9FF2FB1E7DA0} - System32\Tasks\{7D0AE273-2305-48F1-AF5C-46BFD622F47E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4E016ADD-5044-4D20-841E-C43FFE2861BD} - System32\Tasks\{F4A27F14-3152-470D-9565-039442275C50} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4EC8D6F7-19A4-43EB-A744-BF2A0A15F56E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {50748F55-16EA-4C55-8547-7EC1D0947037} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {5AC92F98-B42E-4F21-9AA0-01AD0439642E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {5B3F853B-FE70-4847-8631-186551D7012C} - System32\Tasks\{07CBC734-EBA5-454A-913B-EC737132222F} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {66D53617-940A-4E05-871F-28B9007E2CC3} - System32\Tasks\{9BFE3ECE-693E-45CE-A00E-7DC315188CEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {6B725544-E42B-4580-B4AE-E272703AF399} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {6C42F0C8-5E73-4DE6-A971-9CE99159C71D} - System32\Tasks\{71507EB2-BF35-48B0-8135-FCBC7D54BAEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {77D92D5C-1736-4593-BC70-36551C747A1A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {78201B2F-5E80-4168-B233-7212E7A89D0D} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {7DD6E2A0-C6F1-4EFD-92B0-4A0D547C24C5} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {893B18BE-C091-4B27-9D76-82F0BCA99813} - System32\Tasks\{84074564-9C97-48A0-BBB3-89DAB27B7C9B} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9240E8E9-1D41-40BA-B4DE-32542C7145DB} - System32\Tasks\{97E672C4-E6D1-4ED6-99D8-B122A1F86FC0} => pcalua.exe -a D:\DVPP\Setup.exe -d D:\DVPP
Task: {979D3F17-6619-45C5-B404-606838B44253} - System32\Tasks\{E4546B87-1D17-4B95-A0A5-37522F5D05EF} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9C2F05E8-F861-43CF-987B-095EF430F405} - System32\Tasks\{F3AEE607-769D-4C8B-824B-88BEB035F102} => pcalua.exe -a C:\Spiele\Lillifee\setup.exe -d D:
Task: {B0993B05-978C-4A15-AA87-B18AB9A99EFD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {B37A6E42-727E-4E31-A77C-04022A464880} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2015-11-04] (RealNetworks, Inc.)
Task: {BFD53BF4-19B8-4502-92DD-7D926FFA8CA6} - System32\Tasks\{EC680A57-E7BC-4A66-8FBB-20A511FDFA89} => pcalua.exe -a D:\bin\EasyInst.exe -d D:\
Task: {C8250CB2-F11F-4A98-95BB-BA5E812E6A7E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {DAAAE172-7743-4C96-B232-DCC0F5FC7607} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {DBF5DE37-8E99-4B07-813D-41126EA90DB3} - System32\Tasks\{81430713-60CA-4B71-8FBB-D14DA0751514} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F0E42A33-0E8E-4BB2-80F9-8418E2340E57} - System32\Tasks\{287D07D5-E1D7-4882-9C98-35680FC50E9A} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {F20691E7-0B1D-438A-ABD0-2D94FF823CEA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {F526EC9D-6127-42C8-A3B4-E081029D3F7D} - System32\Tasks\{3DEE68DB-465B-46BB-87CD-D6BEE805EFD1} => C:\Program Files\Daedalic Entertainment\The Night of the Rabbit\rabbit.exe [2013-04-28] (Daedalic Entertainment GmbH)
Task: {FB0BD155-6754-4ECC-9711-162FE2741D51} - System32\Tasks\Amazon Music Helper => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-12-08] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-01-17 15:57 - 2014-12-08 07:27 - 06277952 _____ () C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
2006-11-02 11:40 - 2006-11-02 11:40 - 00174656 _____ () C:\Windows\system32\PSIService.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00033088 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00037720 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2015-11-04 15:19 - 2015-11-04 15:19 - 00039768 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-11-04 15:20 - 2015-11-04 15:20 - 00037728 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll
2017-01-27 13:54 - 2017-01-20 07:47 - 01732896 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 01719760 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 02097616 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2010-06-09 18:10 - 2009-10-23 18:34 - 00827904 _____ () C:\Program Files\dvd43\DVD43_Tray.exe
2011-07-29 00:08 - 2011-07-29 00:08 - 01259376 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2011-07-29 00:09 - 2011-07-29 00:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-06-24 09:54 - 2013-06-20 08:58 - 00391040 _____ () C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
2013-06-24 09:54 - 2010-06-24 02:16 - 02150400 _____ () C:\Program Files\VTech\DownloadManager\System\QtCore4.dll
2013-06-24 09:54 - 2010-07-13 14:07 - 07826432 _____ () C:\Program Files\VTech\DownloadManager\System\QtGui4.dll
2013-06-24 09:54 - 2010-06-02 03:29 - 00934912 _____ () C:\Program Files\VTech\DownloadManager\System\QtNetwork4.dll
2013-06-24 09:54 - 2010-06-02 03:28 - 00335360 _____ () C:\Program Files\VTech\DownloadManager\System\QtXml4.dll
2013-06-24 09:54 - 2012-08-06 10:54 - 09843640 _____ () C:\Program Files\VTech\DownloadManager\System\QtWebKit4.dll
2013-06-24 09:54 - 2010-06-02 03:56 - 00232960 _____ () C:\Program Files\VTech\DownloadManager\System\phonon4.dll
2013-06-24 09:54 - 2010-06-02 03:54 - 02530816 _____ () C:\Program Files\VTech\DownloadManager\System\QtXmlPatterns4.dll
2013-06-24 09:54 - 2010-07-05 10:19 - 00116736 _____ () C:\Program Files\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2013-06-24 09:54 - 2010-11-11 10:24 - 00028160 _____ () C:\Program Files\VTech\DownloadManager\System\DACommCenter.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00025600 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qgif4.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00119808 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qjpeg4.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00714992 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
2016-07-05 17:13 - 2016-07-05 17:13 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00653608 _____ () c:\program files\real\realplayer\RPDS\Lib\r1api.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00022312 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\mediautil.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 01520936 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avformat-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 04274984 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avcodec-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00322856 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avutil-52.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00846848 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
2015-10-02 18:33 - 2012-10-25 15:19 - 01401344 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\nicLan.dll
2015-10-02 18:33 - 2012-12-04 15:22 - 00193024 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\DC_WFF.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00293376 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\WJRtl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:24FECE50 [398]
AlternateDataStreams: C:\ProgramData\TEMP:260575F1 [422]
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4 [368]
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6 [183]
AlternateDataStreams: C:\ProgramData\TEMP:574F975B [184]
AlternateDataStreams: C:\ProgramData\TEMP:9BB8C675 [171]
AlternateDataStreams: C:\ProgramData\TEMP:A3B8F70C [128]
AlternateDataStreams: C:\ProgramData\TEMP:A4AF8D0D [169]
AlternateDataStreams: C:\ProgramData\TEMP:ADF211B1 [100]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [173]
AlternateDataStreams: C:\ProgramData\TEMP:B8791731 [170]
AlternateDataStreams: C:\ProgramData\TEMP:BEE39E9B [190]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\ProgramData\TEMP:E51234A9 [154]
AlternateDataStreams: C:\ProgramData\TEMP:FAB64002 [164]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.exe:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.scr:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.bat:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.com:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.cmd:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.reg:  =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2006-11-02 03:23 - 2006-09-18 14:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost
::1            localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AOButler.exe - Verknüpfung.lnk => C:\Windows\pss\AOButler.exe - Verknüpfung.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Kornelia^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^AOButler.lnk => C:\Windows\pss\AOButler.lnk.Startup
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Spiele Post => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{771781D7-42F2-4719-BCFC-468823CD634A}] => C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F8F60273-BD4C-4058-B246-6F633BD6A891}] => LPort=1900
FirewallRules: [{20D276B1-3C90-4929-8A32-E4ACCBECC2C8}] => LPort=2869
FirewallRules: [{3355F104-DC9F-42F3-8E9D-3BF5DBF8FEB3}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{0BEA84F4-2656-475A-AE06-59E81719D75F}] => svchost.exe
FirewallRules: [{2BFBBFCF-8C85-480D-A055-0DB5677BDCDE}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{5B4D0C77-79AF-4923-BDC1-B51891E48444}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [UDP Query User{BC460BB0-BD68-48F3-BEB2-47578A7623D9}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{2339DF44-A7DD-4E22-A32A-32DCC95DC337}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{A59E1834-01D3-478B-90C5-6E1D4924AFDB}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{AEB0C184-B9E4-434C-B087-A14CA1DF867B}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{08572AF5-8353-4B61-B8C0-24C618870A9E}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{670FA4AF-6DA8-487A-91EE-B07143EB2170}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BD40ABE-22B5-4230-B66B-47D3BD3D0390}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{55D99CB2-C725-42FC-847A-5909C961EAE8}] => C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{85FDB52D-7A01-43A8-9009-6A168010138A}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8758F947-09B2-41DF-88EC-579BC9CA03E7}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{459568E9-83FC-4C8A-9663-91C2C9B6026F}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{92605963-E425-410C-BB6E-8F4EDEA0C349}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D48E3507-9052-45D0-9E44-24AC955777AA}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4ED3AA0F-7E02-449A-BAA4-34B72C42BF3C}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{A8E2B43C-F558-48C1-A629-118843C42FE8}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [{84839E9D-9BF0-4CCD-A922-70507EA96606}] => c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{175EF583-D4BB-4455-BF80-3778A39EAEAC}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{189936DE-97ED-4FCF-AFD9-FA1ABFB6C531}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D0577CA9-F454-408A-ACDF-7F280302E7BD}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{95DF96B5-51A5-4BAD-8FE7-4BC3CF9AF3DF}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D81DFAC4-5EE4-4BF8-A94D-84503C9C6E7F}] => C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{88496792-6A83-4826-9392-C3A2DBF731BE}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{08F10482-4231-4238-9029-5220201C0B87}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{3199F9F6-FD40-4F4E-B578-F886A82D57DA}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [UDP Query User{AE639368-64F0-4A58-B6CA-0EE42A599710}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe

==================== Wiederherstellungspunkte =========================

24-01-2017 15:04:25 Windows Update
27-01-2017 15:11:14 Avira System Speedup Optimierung
27-01-2017 16:04:18 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: atksgt
Description: atksgt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: atksgt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: sptd
Description: sptd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: sptd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 08:47:50 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 08:47:50 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 02:50:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x15a4
Startzeit der fehlerhaften Anwendung: 0x01d27a35cd75a541
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: e30ce1ad-e629-11e6-aa4c-001d607b2853

Error: (01/29/2017 02:43:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1368
Startzeit der fehlerhaften Anwendung: 0x01d27a34d2826c97
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: f5cc0ce1-e628-11e6-aa4c-001d607b2853

Error: (01/29/2017 02:36:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x15c8
Startzeit der fehlerhaften Anwendung: 0x01d27a3288bbadc4
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: f726ff1b-e627-11e6-aa4c-001d607b2853

Error: (01/29/2017 02:18:46 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: Kornelia-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (01/29/2017 02:18:46 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: Kornelia-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.

Error: (01/29/2017 02:18:46 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: Kornelia-PC)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil.

 Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.


Systemfehler:
=============
Error: (01/30/2017 05:50:30 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/30/2017 05:50:30 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/30/2017 05:50:30 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/30/2017 05:50:30 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/30/2017 05:48:02 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
sptd

Error: (01/30/2017 05:45:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdatem)" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (01/30/2017 05:45:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update-Dienst (gupdatem) erreicht.

Error: (01/30/2017 05:45:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update Service (gupdate1cacc58a1955820)" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (01/30/2017 05:45:18 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update Service (gupdate1cacc58a1955820) erreicht.

Error: (01/30/2017 05:45:15 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT-AUTORITÄT)
Description: 0x8000002a32\??\C:\Users\Kornelia\ntuser.dat


==================== Memory info ===========================

Processor: AMD Athlon(tm) X2 Dual Core Processor BE-2300
Prozentuale Nutzung des RAM: 79%
Installierter physikalischer RAM: 1918.49 MB
Verfügbarer physikalischer RAM: 396.49 MB
Summe virtueller Speicher: 3836.98 MB
Verfügbarer virtueller Speicher: 1740.49 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:242.77 GB) (Free:93.87 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive e: () (Fixed) (Total:207.36 GB) (Free:35.49 GB) NTFS
Drive g: (Black) (Fixed) (Total:465.76 GB) (Free:413.34 GB) NTFS
Drive i: (EXTERN 2 -Spiegel-) (Fixed) (Total:242.77 GB) (Free:143.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive m: (EXTERN 1 -DATEN-) (Fixed) (Total:1255.2 GB) (Free:437.65 GB) NTFS
Drive n: (EXTERN 3) (Fixed) (Total:100 GB) (Free:99.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C76EBDA3)
Partition 1: (Active) - (Size=242.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15.6 GB) - (Type=27)
Partition 3: (Not Active) - (Size=207.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5C921633)
Partition 1: (Not Active) - (Size=1255.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=507.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 256E7802)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================
Danke fürs Helfen

M-K-D-B 30.01.2017 20:59
Servus,




bitte beachten:
Zitat:
Gestartet von C:\Users\Kornelia\Desktop\Neuer Ordner (2)
Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.

Mineko 30.01.2017 21:13
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 29-01-2017
durchgeführt von Kornelia (Administrator) auf KORNELIA-PC (30-01-2017 21:06:50)
Gestartet von C:\Users\Kornelia\Desktop
Geladene Profile: Kornelia (Verfügbare Profile: Kornelia & Tabea)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.VpnService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
() C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files\dvd43\DVD43_Tray.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(Intenium) C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe
(Google) C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
() C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4702208 2007-10-01] (Realtek Semiconductor)
HKLM\...\Run: [dvd43] => C:\Program Files\dvd43\dvd43_tray.exe [827904 2009-10-23] ()
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AgentMonitor] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [391040 2013-06-20] ()
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [286992 2015-11-28] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25744 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup Tray] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [160936 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM Group Policy restriction on software: C:\Program Files\Common Files\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk [2013-01-10]
ShortcutTarget: Google Calendar Sync.lnk -> C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-11-28]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-10-02]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
Startup: C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-03-04]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-30]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
GroupPolicy: Beschränkung ? <======= ACHTUNG
GroupPolicy\User: Beschränkung ? <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-1736235967-2657770174-236075978-1002\User: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23F9AFAB-2021-4A7D-9477-EBCFE8F59F7E}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9AD09A44-51EC-4D6E-9E93-74F49F171E7E}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-11-04] (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default [2017-01-30]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\20811wxw.default ->
FF Homepage: Mozilla\Firefox\Profiles\20811wxw.default -> about:home
FF Session Restore: Mozilla\Firefox\Profiles\20811wxw.default -> ist aktiviert.
FF NetworkProxy: Mozilla\Firefox\Profiles\20811wxw.default -> type", 1
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com [2017-01-26]
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com.xpi [2017-01-08]
FF Extension: (FacebookBlocker) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\facebookBlocker@webgraph.com [2014-02-16] [ist nicht signiert]
FF Extension: (NO Google Analytics) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-JcGokIiQyjoBAQ@jetpack.xpi [2016-06-09]
FF Extension: (Official My JDownloader AddOn) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2017-01-07]
FF Extension: (Test Pilot) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\testpilot@labs.mozilla.com.xpi [2016-09-01]
FF Extension: (NoScript) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-01-20]
FF Extension: (Adblock Plus) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-16]
FF Extension: (Torbutton) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}.xpi [2012-10-11] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-07-05] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: (Mehr Leistung und Videoformate für dein HTML5 &video&) - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-12-27] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll [2012-07-05] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-11-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2010-02-04] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-11-28] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2014-04-27] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2014-04-27] (RealPlayer Cloud)

Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll => Keine Datei
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\pdf.dll => Keine Datei
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default [2017-01-27]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-16]
CHR Extension: (RealDownloader) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-11-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-07]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-15]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files\Avira\VPN\Avira.VpnService.exe [300344 2017-01-18] (Avira Operations GmbH & Co. KG)
S3 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S2 gupdate1cacc58a1955820; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-02] (Google Inc.)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-12-06] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888 2017-01-20] (Malwarebytes)
U2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-11-04] ()
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1095976 2015-11-28] (RealNetworks, Inc.)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [35304 2017-01-11] (Avira Operations GmbH & Co. KG)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ACEDRV05; C:\Windows\system32\drivers\ACEDRV05.sys [97792 2010-03-10] (Protect Software GmbH) [Datei ist nicht signiert]
R2 ACEDRV08; C:\Windows\system32\drivers\ACEDRV08.sys [108768 2010-12-28] (Protect Software GmbH)
R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2010-04-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119208 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140840 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [30672 2016-12-16] (Avira Operations GmbH & Co. KG)
R3 dvd43llh; C:\Windows\System32\DRIVERS\dvd43llh.sys [18816 2010-06-09] (RIF) [Datei ist nicht signiert]
S3 eapihdrv; C:\Users\Kornelia\AppData\Local\Temp\ehdrv.sys [135760 2017-01-27] (ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59976 2017-01-20] ()
S3 HCW713x; C:\Windows\System32\DRIVERS\HCW713x.sys [827776 2007-03-26] (Hauppauge Computer Works inc.)
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2008-02-14] (Paragon Software Group)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2010-04-05] ()
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
S3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [152512 2017-01-27] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [94656 2017-01-30] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-30] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [219584 2017-01-30] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [63264 2017-01-30] (Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2007-02-27] ()
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36624 2007-01-28] (Sonic Solutions) [Datei ist nicht signiert]
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2012-10-25] (Realtek Semiconductor Corporation                          )
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-10-22] (Duplex Secure Ltd.)
R2 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [Datei ist nicht signiert]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-30 21:06 - 2017-01-30 21:07 - 00028753 _____ C:\Users\Kornelia\Desktop\FRST.txt
2017-01-29 14:14 - 2017-01-29 14:14 - 00000000 ____D C:\Users\TEMP.Kornelia-PC\AppData\Local\Real
2017-01-29 14:12 - 2017-01-29 14:15 - 00000000 ____D C:\Users\TEMP.Kornelia-PC
2017-01-28 14:43 - 2017-01-28 14:43 - 00001254 _____ C:\Users\Kornelia\Desktop\MWB.txt
2017-01-28 13:31 - 2017-01-28 13:31 - 00109596 _____ C:\Users\Kornelia\Desktop\TDSSKiller.txt
2017-01-28 13:24 - 2017-01-28 13:31 - 00219282 _____ C:\TDSSKiller.3.1.0.12_28.01.2017_13.24.30_log.txt
2017-01-28 13:22 - 2017-01-28 13:22 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Kornelia\Desktop\tdsskiller.exe
2017-01-28 13:03 - 2017-01-30 17:52 - 01762816 _____ (Farbar) C:\Users\Kornelia\Desktop\FRST.exe
2017-01-28 01:39 - 2017-01-28 01:39 - 00263328 _____ C:\Users\Kornelia\Desktop\malwarebytes.txt
2017-01-27 23:56 - 2017-01-30 21:06 - 00000000 ____D C:\FRST
2017-01-27 16:27 - 2017-01-27 16:27 - 02870984 _____ (ESET) C:\Users\Kornelia\Desktop\esetsmartinstaller_deu.exe
2017-01-27 16:20 - 2017-01-27 16:20 - 00001898 _____ C:\Users\Kornelia\Desktop\sc-cleaner.txt
2017-01-27 16:12 - 2017-01-27 16:12 - 00015596 _____ C:\Users\Kornelia\Desktop\JRT.txt
2017-01-27 15:27 - 2017-01-27 15:41 - 00000000 ____D C:\AdwCleaner
2017-01-27 14:42 - 2017-01-27 14:42 - 00000000 ____D C:\Users\Kornelia\AppData\Local\AviraSpeedup
2017-01-27 14:35 - 2017-01-27 14:35 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Avira
2017-01-27 13:56 - 2017-01-30 21:06 - 00063264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-27 13:56 - 2017-01-30 17:48 - 00094656 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-27 13:56 - 2017-01-27 13:56 - 00152512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-27 13:55 - 2017-01-30 17:48 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-27 13:55 - 2017-01-30 17:46 - 00219584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-27 13:55 - 2017-01-27 13:55 - 00002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-27 13:55 - 2017-01-27 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-27 13:55 - 2017-01-20 07:47 - 00059976 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-27 00:03 - 2017-01-27 00:04 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2017-01-26 22:47 - 2017-01-26 22:47 - 00001134 _____ C:\Users\Kornelia\Desktop\Avira Antivirus starten.lnk
2017-01-26 21:06 - 2017-01-26 21:06 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_588a51b66deb0__ws.exe
2017-01-26 19:57 - 2017-01-26 19:57 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Avira
2017-01-26 17:28 - 2017-01-26 17:28 - 00000000 ____D C:\Users\Kornelia\Downloads\Notfall DVD 7.0 Free
2017-01-26 16:35 - 2017-01-26 17:04 - 1276319704 _____ C:\Users\Kornelia\Downloads\Notfall_DVD_7.0_Free.zip
2017-01-26 13:57 - 2017-01-26 13:57 - 00001101 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk
2017-01-26 13:57 - 2017-01-26 13:57 - 00000998 _____ C:\Users\Public\Desktop\Avira Phantom VPN.lnk
2017-01-26 13:56 - 2017-01-30 17:48 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-01-26 13:52 - 2017-01-26 13:52 - 00001166 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-01-26 13:43 - 2017-01-26 13:49 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_5889ec8b9e38c__ws.exe
2017-01-24 23:24 - 2017-01-24 23:24 - 00000936 _____ C:\Users\Kornelia\Desktop\duplicate.txt
2017-01-19 19:22 - 2017-01-19 21:20 - 00000000 ____D C:\Users\Kornelia\Desktop\Rekla Herd
2017-01-12 23:57 - 2017-01-12 23:58 - 00000000 ____D C:\Users\Kornelia\Desktop\SCHULE
2017-01-11 13:22 - 2017-01-05 18:46 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 13:22 - 2017-01-05 18:46 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 13:22 - 2017-01-05 18:43 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 13:22 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 13:22 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 13:22 - 2017-01-05 18:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-10 16:32 - 2017-01-25 00:18 - 00040346 _____ C:\Users\Kornelia\Desktop\Dateiliste.xlsx
2017-01-08 21:33 - 2017-01-08 21:33 - 00000000 ____D C:\Users\Kornelia\AppData\Local\CEF
2017-01-07 22:31 - 2017-01-07 22:31 - 00002075 _____ C:\Users\Kornelia\Desktop\JDownloader 2.lnk
2017-01-07 22:31 - 2017-01-07 22:31 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-01-07 22:27 - 2017-01-27 15:13 - 00000000 ____D C:\Users\Kornelia\AppData\Local\JDownloader 2.0
2017-01-07 22:23 - 2017-01-07 22:23 - 00076504 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\WebInstaller.exe
2017-01-07 19:32 - 2017-01-30 18:16 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Mozilla
2017-01-07 19:20 - 2017-01-07 19:20 - 00243720 _____ C:\Users\Kornelia\Downloads\Firefox Setup Stub 50.1.0.exe
2017-01-07 17:29 - 2017-01-24 23:13 - 00000000 ____D C:\Users\Kornelia\Downloads\Downloader
2017-01-07 17:21 - 2017-01-07 17:23 - 26539720 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\JDownloaderSetup.exe
2017-01-07 16:50 - 2017-01-07 16:50 - 00000000 ____D C:\Users\Kornelia\Downloads\Info

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-30 21:04 - 2015-09-16 17:12 - 00000000 ____D C:\Users\Kornelia\Desktop\Neuer Ordner (2)
2017-01-30 20:43 - 2010-03-26 02:57 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-01-30 20:31 - 2013-03-01 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-30 19:23 - 2013-06-11 21:18 - 00000940 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job
2017-01-30 18:17 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-30 18:17 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-30 17:45 - 2011-07-05 09:31 - 00000000 ____D C:\Users\Kornelia
2017-01-30 17:45 - 2010-03-25 21:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-01-30 17:45 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-27 22:23 - 2013-06-11 21:18 - 00000918 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job
2017-01-27 15:43 - 2016-03-27 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-27 15:43 - 2012-04-30 09:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-27 15:40 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-01-27 15:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2017-01-27 15:13 - 2011-11-01 11:13 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Vidalia
2017-01-27 15:13 - 2011-07-05 10:25 - 00000000 ____D C:\Windows\Panther
2017-01-27 15:13 - 2011-04-13 13:21 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\skypePM
2017-01-27 15:12 - 2010-10-31 18:18 - 00000000 ___RD C:\Users\Kornelia\Desktop\Tabea Spiele
2017-01-27 15:12 - 2007-10-12 08:47 - 00000000 ____D C:\Program Files\DivX
2017-01-27 14:43 - 2011-07-05 10:27 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-27 14:43 - 2009-07-14 09:47 - 00702942 _____ C:\Windows\system32\perfh007.dat
2017-01-27 14:43 - 2009-07-14 09:47 - 00150582 _____ C:\Windows\system32\perfc007.dat
2017-01-27 14:43 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-01-27 00:05 - 2010-12-16 14:57 - 00000000 ____D C:\Program Files\GMX
2017-01-26 23:52 - 2011-09-30 10:13 - 00000000 ____D C:\Users\Public\Documents\Tivola_prefs
2017-01-26 23:52 - 2011-02-23 18:14 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\Program Files\Amazon
2017-01-26 23:52 - 2010-03-10 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tivola
2017-01-26 23:48 - 2011-03-09 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:41 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\DVDVideoSoft
2017-01-26 23:43 - 2016-10-23 15:39 - 00150152 _____ C:\Windows\ntbtlog.txt
2017-01-26 17:26 - 2016-10-24 10:00 - 00120432 _____ C:\Users\Kornelia\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-26 16:28 - 2016-10-21 23:01 - 00428280 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-26 13:57 - 2016-10-21 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-01-26 13:57 - 2012-12-22 20:23 - 00000000 ____D C:\Program Files\Avira
2017-01-26 13:57 - 2012-05-20 11:07 - 00000000 ____D C:\ProgramData\Avira
2017-01-26 13:52 - 2015-11-28 11:45 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 13:30 - 2011-04-05 15:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-01-25 13:21 - 2012-02-26 18:45 - 00000000 ____D C:\Users\Kornelia\Downloads\Heidi
2017-01-24 23:47 - 2011-04-05 14:45 - 00000000 ____D C:\ProgramData\Norton
2017-01-23 15:51 - 2012-01-17 15:04 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Microsoft Help
2017-01-23 12:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-22 00:11 - 2016-08-14 14:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 21:19 - 2010-04-01 21:23 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\COREL
2017-01-19 21:13 - 2010-04-29 21:48 - 00000000 ____D C:\Users\Kornelia\Documents\My PSP Files
2017-01-19 21:13 - 2010-04-22 22:31 - 00001786 ___SH C:\Windows\system32\KGyGaAvL.sys
2017-01-11 23:30 - 2013-09-01 10:47 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 23:19 - 2011-08-09 13:50 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 19:31 - 2012-05-27 00:08 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-10 19:31 - 2011-09-06 09:10 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-10 19:31 - 2010-03-13 11:32 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-08 21:33 - 2010-03-12 09:41 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Adobe
2017-01-07 19:31 - 2011-10-05 01:27 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-07 19:31 - 2010-03-06 17:48 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2010-06-02 05:21 - 2010-06-02 05:21 - 1347354 _____ () C:\Program Files\Apr2005_d3dx9_25_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1078962 _____ () C:\Program Files\Apr2005_d3dx9_25_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1397830 _____ () C:\Program Files\Apr2006_d3dx9_30_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1115221 _____ () C:\Program Files\Apr2006_d3dx9_30_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0916430 _____ () C:\Program Files\Apr2006_MDX1_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 4162630 _____ () C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0179133 _____ () C:\Program Files\Apr2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0133103 _____ () C:\Program Files\Apr2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087101 _____ () C:\Program Files\Apr2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046010 _____ () C:\Program Files\Apr2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0698612 _____ () C:\Program Files\APR2007_d3dx10_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0695865 _____ () C:\Program Files\APR2007_d3dx10_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1607358 _____ () C:\Program Files\APR2007_d3dx9_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1606039 _____ () C:\Program Files\APR2007_d3dx9_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0195766 _____ () C:\Program Files\APR2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0151225 _____ () C:\Program Files\APR2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0096817 _____ () C:\Program Files\APR2007_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0053302 _____ () C:\Program Files\APR2007_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1350542 _____ () C:\Program Files\Aug2005_d3dx9_27_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1077644 _____ () C:\Program Files\Aug2005_d3dx9_27_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0182903 _____ () C:\Program Files\AUG2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0137235 _____ () C:\Program Files\AUG2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087142 _____ () C:\Program Files\AUG2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046058 _____ () C:\Program Files\AUG2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0852286 _____ () C:\Program Files\AUG2007_d3dx10_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0796867 _____ () C:\Program Files\AUG2007_d3dx10_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1800160 _____ () C:\Program Files\AUG2007_d3dx9_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1708152 _____ () C:\Program Files\AUG2007_d3dx9_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0198096 _____ () C:\Program Files\AUG2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0153012 _____ () C:\Program Files\AUG2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0867612 _____ () C:\Program Files\Aug2008_d3dx10_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0849167 _____ () C:\Program Files\Aug2008_d3dx10_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1794084 _____ () C:\Program Files\Aug2008_d3dx9_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1464672 _____ () C:\Program Files\Aug2008_d3dx9_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0121772 _____ () C:\Program Files\Aug2008_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0092996 _____ () C:\Program Files\Aug2008_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271412 _____ () C:\Program Files\Aug2008_XAudio_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271038 _____ () C:\Program Files\Aug2008_XAudio_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0919044 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0900598 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3112111 _____ () C:\Program Files\Aug2009_d3dcsx_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3319740 _____ () C:\Program Files\Aug2009_d3dcsx_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0232635 _____ () C:\Program Files\Aug2009_d3dx10_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0192131 _____ () C:\Program Files\Aug2009_d3dx10_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0136301 _____ () C:\Program Files\Aug2009_d3dx11_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0105044 _____ () C:\Program Files\Aug2009_d3dx11_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0930116 _____ () C:\Program Files\Aug2009_d3dx9_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0728456 _____ () C:\Program Files\Aug2009_d3dx9_42_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122408 _____ () C:\Program Files\Aug2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093106 _____ () C:\Program Files\Aug2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273264 _____ () C:\Program Files\Aug2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272642 _____ () C:\Program Files\Aug2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1357976 _____ () C:\Program Files\Dec2005_d3dx9_28_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1079456 _____ () C:\Program Files\Dec2005_d3dx9_28_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0212807 _____ () C:\Program Files\DEC2006_d3dx10_00_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0191720 _____ () C:\Program Files\DEC2006_d3dx10_00_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1571154 _____ () C:\Program Files\DEC2006_d3dx9_32_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1574376 _____ () C:\Program Files\DEC2006_d3dx9_32_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0192475 _____ () C:\Program Files\DEC2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0145599 _____ () C:\Program Files\DEC2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0089944 _____ (Microsoft Corporation) C:\Program Files\DSETUP.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 1801048 _____ () C:\Program Files\dsetup32.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 0042410 _____ () C:\Program Files\dxdllreg_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0537432 _____ () C:\Program Files\DXSETUP.exe
2010-06-02 05:22 - 2010-06-02 05:22 - 0094011 _____ () C:\Program Files\dxupdate.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1247499 _____ () C:\Program Files\Feb2005_d3dx9_24_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1013225 _____ () C:\Program Files\Feb2005_d3dx9_24_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1362796 _____ () C:\Program Files\Feb2006_d3dx9_29_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1084720 _____ () C:\Program Files\Feb2006_d3dx9_29_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0178359 _____ () C:\Program Files\Feb2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0132409 _____ () C:\Program Files\Feb2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0194675 _____ () C:\Program Files\FEB2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0147983 _____ () C:\Program Files\FEB2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054678 _____ () C:\Program Files\Feb2010_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0020713 _____ () C:\Program Files\Feb2010_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122446 _____ () C:\Program Files\Feb2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093180 _____ () C:\Program Files\Feb2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0276960 _____ () C:\Program Files\Feb2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277191 _____ () C:\Program Files\Feb2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1336002 _____ () C:\Program Files\Jun2005_d3dx9_26_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1064925 _____ () C:\Program Files\Jun2005_d3dx9_26_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0180785 _____ () C:\Program Files\JUN2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0133671 _____ () C:\Program Files\JUN2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0699044 _____ () C:\Program Files\JUN2007_d3dx10_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0698472 _____ () C:\Program Files\JUN2007_d3dx10_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607774 _____ () C:\Program Files\JUN2007_d3dx9_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607286 _____ () C:\Program Files\JUN2007_d3dx9_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197122 _____ () C:\Program Files\JUN2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0152909 _____ () C:\Program Files\JUN2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0867828 _____ () C:\Program Files\JUN2008_d3dx10_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0849919 _____ () C:\Program Files\JUN2008_d3dx10_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1792608 _____ () C:\Program Files\JUN2008_d3dx9_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1463878 _____ () C:\Program Files\JUN2008_d3dx9_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055154 _____ () C:\Program Files\JUN2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021905 _____ () C:\Program Files\JUN2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121054 _____ () C:\Program Files\JUN2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093128 _____ () C:\Program Files\JUN2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269628 _____ () C:\Program Files\JUN2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269024 _____ () C:\Program Files\JUN2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0944460 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0931471 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0752783 _____ () C:\Program Files\Jun2010_d3dcsx_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0762188 _____ () C:\Program Files\Jun2010_d3dcsx_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0235955 _____ () C:\Program Files\Jun2010_d3dx10_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197283 _____ () C:\Program Files\Jun2010_d3dx10_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138205 _____ () C:\Program Files\Jun2010_d3dx11_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0109445 _____ () C:\Program Files\Jun2010_d3dx11_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0937246 _____ () C:\Program Files\Jun2010_d3dx9_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0768036 _____ () C:\Program Files\Jun2010_d3dx9_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0124596 _____ () C:\Program Files\Jun2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093686 _____ () C:\Program Files\Jun2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277338 _____ () C:\Program Files\Jun2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0278060 _____ () C:\Program Files\Jun2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0844884 _____ () C:\Program Files\Mar2008_d3dx10_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0818260 _____ () C:\Program Files\Mar2008_d3dx10_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1769862 _____ () C:\Program Files\Mar2008_d3dx9_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1443282 _____ () C:\Program Files\Mar2008_d3dx9_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055058 _____ () C:\Program Files\Mar2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021867 _____ () C:\Program Files\Mar2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122336 _____ () C:\Program Files\Mar2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093734 _____ () C:\Program Files\Mar2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0251194 _____ () C:\Program Files\Mar2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0226250 _____ () C:\Program Files\Mar2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1067160 _____ () C:\Program Files\Mar2009_d3dx10_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1040745 _____ () C:\Program Files\Mar2009_d3dx10_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1973702 _____ () C:\Program Files\Mar2009_d3dx9_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1612446 _____ () C:\Program Files\Mar2009_d3dx9_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054600 _____ () C:\Program Files\Mar2009_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021298 _____ () C:\Program Files\Mar2009_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121506 _____ () C:\Program Files\Mar2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092740 _____ () C:\Program Files\Mar2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0275044 _____ () C:\Program Files\Mar2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273018 _____ () C:\Program Files\Mar2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0864600 _____ () C:\Program Files\Nov2007_d3dx10_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0803884 _____ () C:\Program Files\Nov2007_d3dx10_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1802058 _____ () C:\Program Files\Nov2007_d3dx9_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1709360 _____ () C:\Program Files\Nov2007_d3dx9_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0046144 _____ () C:\Program Files\NOV2007_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0018496 _____ () C:\Program Files\NOV2007_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0196762 _____ () C:\Program Files\NOV2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0148264 _____ () C:\Program Files\NOV2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0994154 _____ () C:\Program Files\Nov2008_d3dx10_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0965421 _____ () C:\Program Files\Nov2008_d3dx10_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1906878 _____ () C:\Program Files\Nov2008_d3dx9_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1550796 _____ () C:\Program Files\Nov2008_d3dx9_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054522 _____ () C:\Program Files\Nov2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021851 _____ () C:\Program Files\Nov2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121794 _____ () C:\Program Files\Nov2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092684 _____ () C:\Program Files\Nov2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273960 _____ () C:\Program Files\Nov2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272611 _____ () C:\Program Files\Nov2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0086037 _____ () C:\Program Files\Oct2005_xinput_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0045359 _____ () C:\Program Files\Oct2005_xinput_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1412902 _____ () C:\Program Files\OCT2006_d3dx9_31_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1127217 _____ () C:\Program Files\OCT2006_d3dx9_31_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0182361 _____ () C:\Program Files\OCT2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138017 _____ () C:\Program Files\OCT2006_XACT_x86.cab
2010-10-22 14:05 - 2010-10-22 14:46 - 0000388 _____ () C:\Users\Kornelia\AppData\Roaming\burnaware.ini
2013-12-18 23:02 - 2013-12-19 00:05 - 0000679 _____ () C:\Users\Kornelia\AppData\Local\cookies.ini
2011-08-17 17:39 - 2015-07-28 17:08 - 0008192 _____ () C:\Users\Kornelia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-26 18:23 - 2011-07-26 18:23 - 0000000 _____ () C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2011-07-05 09:26

==================== Ende vom FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 29-01-2017
durchgeführt von Kornelia (30-01-2017 21:08:48)
Gestartet von C:\Users\Kornelia\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2011-07-05 09:33:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1736235967-2657770174-236075978-500 - Administrator - Disabled)
Gast (S-1-5-21-1736235967-2657770174-236075978-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1736235967-2657770174-236075978-1005 - Limited - Enabled)
Konni (S-1-5-21-1736235967-2657770174-236075978-1003 - Administrator - Enabled)
Kornelia (S-1-5-21-1736235967-2657770174-236075978-1001 - Administrator - Enabled) => C:\Users\Kornelia
Tabea (S-1-5-21-1736235967-2657770174-236075978-1002 - Limited - Enabled) => C:\Users\Tabea

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 4.65 (HKLM\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Aladins Wunderlampe (HKLM\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM\...\Alamandi) (Version: 0.0.0.0 - INTENIUM GmbH)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Annabel (HKLM\...\Annabel) (Version: 1.0.0.0 - INTENIUM GmbH)
ATI Catalyst Install Manager (HKLM\...\{CC516453-9703-ABF9-201F-58A5EC567292}) (Version: 3.0.642.0 - ATI Technologies, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG)
Avira Connect (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM\...\Avira Phantom VPN) (Version: 2.4.3.30556 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 3.1.1.4250 - Avira Operations GmbH & Co. KG)
Azada ™: Ancient Magic (HKLM\...\BFG-Azada - Ancient Magic) (Version:  - )
Azada: In Libro (HKLM\...\BFG-Azada - In Libro) (Version:  - )
Azteca (HKLM\...\Azteca) (Version: 1.0.0.0 - INTENIUM GmbH)
Beetle Ju 2 (HKLM\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Bengal (HKLM\...\Bengal) (Version: 1.0.1.0 - INTENIUM GmbH)
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 2.0.0.28 - )
Botanica - Reise ins Unbekannte (HKLM\...\BFG-Botanica - Reise ins Unbekannte) (Version:  - )
calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)
ccc-core-static (Version: 2007.0821.2146.36991 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Chinese Checkers (HKLM\...\40-com.novelgames.flashgames.checkers) (Version: 1.8.0 - Novel Games Limited)
Chinese Checkers (Version: 1.8.0 - Novel Games Limited) Hidden
Corel Paint Shop Pro Photo XI (HKLM\...\{E1C7EF5E-3A7B-4ED4-A48B-F70F1B36EAB4}) (Version: 11.20.0000 - Corel Corporation)
Corel Snapfire DVD Maker (HKLM\...\{17E14D89-3A9F-4706-9F9B-C2DFC7ABE94B}) (Version: 1.20.0000 - Corel Corporation)
Corel Snapfire Plus (HKLM\...\{7ADE3A47-B425-45E9-8FF6-11BE2B775645}) (Version: 1.201.0000 - Corel Corporation)
CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Da Vincis Perlen Puzzle (HKLM\...\Da Vincis Perlen Puzzle) (Version:  - )
Das Reich des Drachen (HKLM\...\Das Reich des Drachen) (Version: 1.0.0.0 - INTENIUM GmbH)
Das Vermächtnis - Der Baum des Lebens (1.00) (HKLM\...\Das Vermächtnis - Der Baum des Lebens_is1) (Version:  - City Interactive)
Der Perfekte Weihnachtsbaum (HKLM\...\Der Perfekte Weihnachtsbaum) (Version: 1.0.0.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.2010.6.23 - INTENIUM GmbH)
Diamantenfee 2 (HKLM\...\Diamantenfee 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Diamond Drop 2 (HKLM\...\Diamond Drop 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DIE GEHEIMNISSE DER SPIDERWICKS (HKLM\...\{DFA723CE-22B4-4E6B-92CF-176256ECF2DE}) (Version: 1.00.0000 - Sierra Entertainment)
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Die Kluge Eule) (Version:  - )
Die Wiege Olympias 2 (HKLM\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.3 - DivX, LLC)
Drawn: &reg; Flucht aus der Dunkelheit (HKLM\...\BFG-Drawn - Flucht aus der Dunkelheit) (Version:  - )
Drawn: Der Turm ™ (HKLM\...\BFG-Drawn - Der Turm) (Version:  - )
Dream Chronicles (HKLM\...\Dream Chronicles) (Version:  - PlayFirst, Inc.)
Dream Chronicles ™ 2: The Eternal Maze (HKLM\...\BFG-Dream Chronicles 2 - The Eternal Maze) (Version:  - )
DVD43 v4.6.0 (HKLM\...\DVD43_is1) (Version:  - )
DVS Video Downloader Addon for Mozilla Firefox version 4.3.4.17 (HKLM\...\DVS Video Downloader Addon for Mozilla Firefox_is1) (Version: 4.3.4.17 - DVDVideoSoft Ltd.)
Emil und Pauline Auf dem Land (remove only) (HKLM\...\Emil und Pauline Auf dem Land) (Version:  - )
Emil und Pauline In der Stadt (remove only) (HKLM\...\Emil und Pauline In der Stadt) (Version:  - )
Enigmatis - Vermisst in Maple Creek (HKLM\...\Enigmatis - Vermisst in Maple Creek_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Ewige Reise - Das neue Atlantis (HKLM\...\Ewige Reise - Das neue Atlantis) (Version:  - )
Fabled Legends: Die Ruckkehr des Rattenfangers (HKLM\...\BFG-Fabled Legends - Die Rueckkehr des Rattenfaengers) (Version:  - )
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FarmFrenzy (HKLM\...\FarmFrenzy) (Version:  - )
Finstere Liebschaft - Immortal Lovers (HKLM\...\Finstere Liebschaft - Immortal Lovers) (Version:  - )
foobar2000 v1.0.3 (HKLM\...\foobar2000) (Version: 1.0.3 - Peter Pawlowski)
Forest Legends - Der Ruf der Liebe (HKLM\...\Forest Legends - Der Ruf der Liebe) (Version:  - )
FormatFactory 3.5.0.0 (HKLM\...\FormatFactory) (Version: 3.5.0.0 - Format Factory)
Free Studio version 2013 (HKLM\...\Free Studio_is1) (Version: 6.1.0.320 - DVDVideoSoft Ltd.)
Galileo Family Quiz - Spezial II (HKLM\...\Galileo Family Quiz - Spezial II) (Version:  - SevenOne Intermedia)
Geheimakte 2 - Puritas Cordis (HKLM\...\{BE7347AD-2D93-4A74-8DBF-C1B073DAE509}) (Version: 1.00.0000 - Deep Silver)
Geheime Fälle: Die gestohlene Venus (HKLM\...\Geheime Fälle: Die gestohlene Venus) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 2.7.2.6 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 2.7.2 - 1 und 1 Internet AG) Hidden
Google Calendar Sync (HKLM\...\Google Calendar Sync) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
Gravely Silent: Haus des Schreckens (HKLM\...\BFG-Gravely Silent - Haus des Schreckens) (Version:  - )
Haunted Manor: Der Herr der Spiegel (HKLM\...\BFG-Haunted Manor - Der Herr der Spiegel) (Version:  - )
Hauppauge MCE XP/Vista Software Encoder (2.0.25102) (HKLM\...\Hauppauge MCE2005 Software Encoder) (Version: 2.0.25102 - Hauppauge Computer Works, Inc.)
Heroes of Hellas (HKLM\...\{C0906D83-1FE0-4176-A940-45A348080987}) (Version: 1.00.0000 - Purplehills)
Hexentanz und Firlefanz (HKLM\...\Hexentanz und Firlefanz) (Version:  - )
Hidden Expedition &reg; : Bermudadreieck (HKLM\...\BFG-Hidden Expedition - Bermudadreieck) (Version:  - )
Hidden Mysteries Salem Secrets (HKLM\...\Hidden Mysteries Salem Secrets) (Version: 1.0 - astrogon Software)
Hidden Mysteries Vampire Secrets (HKLM\...\Hidden Mysteries Vampire Secrets) (Version: 1.0 - astragon Software)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBee FREE 5.1.2 (build 456) (HKLM\...\JetBee_is1) (Version:  - )
Jewel Puzzle (HKLM\...\Jewel Puzzle) (Version: 1.0.0.0 - INTENIUM GmbH)
Kleiner Eisbär 2 (HKLM\...\Kleiner Eisbär 2) (Version:  - )
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Lauras Stern (HKLM\...\Lauras Stern) (Version:  - )
Letstrade (HKLM\...\{E0091C29-DEE8-4B24-BF65-8C35B5940D77}) (Version: 1.00.0000 - Buhl Data Service)
LightScribe System Software  1.17.90.1 (HKLM\...\{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}) (Version: 1.17.90.1 - LightScribe)
Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Manic Digger (HKLM\...\{119E2FCB-5CDD-4C24-BCB2-56A824E2BF0A}_is1) (Version:  - )
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Midnight Mysteries Salem Witch Trials (HKLM\...\Midnight Mysteries Salem Witch Trials) (Version: 1.1.0.0 - MumboJumbo)
Mozilla Firefox 51.0.1 (x86 de) (HKLM\...\Mozilla Firefox 51.0.1 (x86 de)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
Mozilla Thunderbird 45.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 45.6.0 (x86 de)) (Version: 45.6.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Case Files&reg;: Dire Grove™ (HKLM\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst Handbuch ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst Handbuch) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst) (Version:  - )
Mystery Case Files: Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Ravenhearst) (Version:  - )
Mystery of Cleopatra (HKLM\...\Mystery of Cleopatra 1.0) (Version: 1.0 - Rondo Media)
Mystery Places - Das Geheimnis der Geistervilla (HKLM\...\Mystery Places - Das Geheimnis der Geistervilla_is1) (Version:  - )
Mystery Tales - Insel der Träume (HKLM\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Trackers: Raincliff (HKLM\...\BFG-Mystery Trackers - Raincliff) (Version:  - )
Natalie Brooks (HKLM\...\Natalie Brooks) (Version:  - )
Nero 7 Essentials (HKLM\...\{0DE739CA-9487-4E3E-8511-92EAF01F1031}) (Version: 7.03.0274 - Nero AG)
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Pahelika: Secret Legends (HKLM\...\Pahelika: Secret Legends) (Version:  - The Games Company Worldwide GmbH)
Paragon Hard Disk Manager 2008 Professional (HKLM\...\{E9E4BB29-FA98-401B-9EDE-9906906E33DE}) (Version:  - Paragon Software Group)
PixiePack Codec Pack (HKLM\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polipo 1.0.4.1 (HKLM\...\Polipo) (Version:  - )
Prinzessin Isabella (HKLM\...\Prinzessin Isabella) (Version: 1.0.0.0 - INTENIUM GmbH)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProtectDisc Helper Driver 10 (HKLM\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
Radiotracker (HKLM\...\{1E863F44-2D2D-4BD7-B25B-EDA9FF622267}) (Version: 6.2.13700.0 - RapidSolution Software AG)
ratDVD 0.78.1444 (HKLM\...\ratDVD) (Version: 0.78.1444 - ratDVD)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
RealDownloader (Version: 18.1.2.176 - RealNetworks, Inc.) Hidden
RealDownloader (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.2 - RealNetworks)
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rooms - Die Villa 1.0d  (HKLM\...\Rooms - Die Villa) (Version: 1.0d - Halycon Media)
Samantha Swift and the Mystery From Atlantis (HKLM\...\Samantha Swift and the Mystery From Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Sandra Fleming Chronicles – Crystal Skulls (HKLM\...\Sandra Fleming Chronicles – Crystal Skulls) (Version: 1.0.0.0 - INTENIUM GmbH)
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Simajo (HKLM\...\Simajo) (Version:  - )
Skins (Version: 2007.0821.2146.36991 - ATI) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spirits of Mystery: Dunkler Fluch (HKLM\...\BFG-Spirits of Mystery - Dunkler Fluch) (Version:  - )
Spur der Träume (HKLM\...\Spur der Träume) (Version: 1.0.0.0 - INTENIUM GmbH)
Sweet Home 3D version 3.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Enchanted Kingdom: Elisa’s Adventure (HKLM\...\The Enchanted Kingdom: Elisa’s Adventure) (Version: 1.0.0.0 - INTENIUM GmbH)
The Fall Trilogy (HKLM\...\The Fall Trilogy_is1) (Version:  - Morphicon)
The Fall Trilogy Chapter 2 (HKLM\...\The Fall Trilogy Chapter 2_is1) (Version:  - Morphicon)
The Night of the Rabbit (HKLM\...\The Night of the Rabbit) (Version: 1.0 - Daedalic Entertainment)
The Sultans Labyrinth: Das Opfer des K&ouml;nigs (HKLM\...\BFG-The Sultans Labyrinth - Das Opfer des Koenigs) (Version:  - ) <==== ACHTUNG
Tor 0.2.2.35 (HKLM\...\Tor) (Version:  - )
TP-LINK 300Mbps Wireless USB Adapter Treiber (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trödelschätze (HKLM\...\{AC368309-A247-42C0-9AAF-ABB2E067B79C}) (Version: 1.00.0000 - Valusoft)
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Try Corel Snapfire muvee autoProducer add on (Version: 1.00.0000 - Ihr Firmenname) Hidden
Turtix (HKLM\...\Turtix) (Version:  - )
Turtix 2 (HKLM\...\Turtix 2) (Version:  - )
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vernaeht und zugeflixt! Was stimmt denn hier nicht? (HKLM\...\Vernaeht und zugeflixt! Was stimmt denn hier nicht?) (Version:  - )
Vidalia 0.2.15 (HKLM\...\Vidalia) (Version:  - )
Video Downloader (Version: 1.2.0 - RealNetworks) Hidden
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.6.4 - Shark007)
VTech Download Agent Library (Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM\...\VTechDownloadManager) (Version:  - VTech)
Wieso? Weshalb? Warum? - Unser Körper (HKLM\...\com.rd.www.desktop.DesktopBody) (Version: 1.0.0 - Ravensburger Digital GmbH)
Wieso? Weshalb? Warum? - Unser Körper (Version: 1.0.0 - Ravensburger Digital GmbH) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WordPerfect Office X3 (HKLM\...\_{54DB13F1-0CE0-4BAB-BD5F-7DE150C043C8}) (Version:  - Corel Corporation)
WordPerfect Office X3 (Version: 13.3 - Corel Corporation) Hidden
World Voyage (HKLM\...\World Voyage) (Version: 1.0.0.0 - INTENIUM GmbH)
XMedia Recode 2.3.0.4 (HKLM\...\XMedia Recode) (Version: 2.3.0.4 - Sebastian Dörfler)
XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.)
Zuma's Revenge! (HKLM\...\Zuma's Revenge!1.0) (Version: 1.0 - AllSmartGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> kein Dateipfad

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {032A98DE-A547-4FB1-97B4-777E85FCE80F} - System32\Tasks\{51ECF608-A47D-464B-892E-9A3067C4CA0E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {04338029-ABEF-4DB2-A56D-FF0641970A7A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {08FA19ED-87A2-4BE4-B4F6-1170192766D0} - System32\Tasks\{1D76B916-65CA-47A7-9DD1-C614C8F74E56} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {0922A476-D472-4C6B-AF0D-283C447FF4F0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {248BA49A-31FC-4CBC-AC12-0AD50B3730CD} - System32\Tasks\{2D2CF1E0-A39F-4435-B084-62C323AD4F56} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {262EF14E-2D04-4238-8DD2-2B9AFBBAEC1F} - System32\Tasks\{D62DA859-B3A5-4A8C-8643-BC908C434082} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {2B93871E-90A6-4BD6-B5B2-2B2CCE5A5740} - System32\Tasks\{C791566E-54A6-4DAF-8C0F-0153AA08A504} => pcalua.exe -a D:\Software\Nero\setupx.exe -d D:\Software\Nero
Task: {2D4FEC81-5640-445A-97C1-A780D1FD2CD8} - System32\Tasks\{3D22388D-753E-494E-8F61-D351F8E67C68} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {34B169BF-29C1-4D9E-ABAD-DD33D6A48488} - System32\Tasks\{AA3E9FEA-EE1C-4BD0-A6EE-0AB550AE278F} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {3C30CE7A-A21F-4478-8DFD-AB4484B05538} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {3F4F5314-363F-4D5F-AD46-3C6D3EAA7DDA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} - System32\Tasks\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => Firefox.exe
Task: {474C30BF-0A7E-4DC2-9E6B-369B154E8229} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {49897270-27FE-4B7E-A4F9-1B4F8AE27E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {49E28B95-9408-4715-97DA-1AB7339805C6} - System32\Tasks\{EA4F2F72-7C23-4AB9-8184-245B49DE749F} => C:\Program Files\DEUTSCHLAND SPIELT\BeetleJu2 VollVersion\BeetleJu2_og.exe [2010-11-23] (INTENIUM GmbH)
Task: {4C08C992-D45F-4D07-9702-9FF2FB1E7DA0} - System32\Tasks\{7D0AE273-2305-48F1-AF5C-46BFD622F47E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4E016ADD-5044-4D20-841E-C43FFE2861BD} - System32\Tasks\{F4A27F14-3152-470D-9565-039442275C50} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4EC8D6F7-19A4-43EB-A744-BF2A0A15F56E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {50748F55-16EA-4C55-8547-7EC1D0947037} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {5AC92F98-B42E-4F21-9AA0-01AD0439642E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {5B3F853B-FE70-4847-8631-186551D7012C} - System32\Tasks\{07CBC734-EBA5-454A-913B-EC737132222F} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {66D53617-940A-4E05-871F-28B9007E2CC3} - System32\Tasks\{9BFE3ECE-693E-45CE-A00E-7DC315188CEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {6B725544-E42B-4580-B4AE-E272703AF399} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {6C42F0C8-5E73-4DE6-A971-9CE99159C71D} - System32\Tasks\{71507EB2-BF35-48B0-8135-FCBC7D54BAEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {77D92D5C-1736-4593-BC70-36551C747A1A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {78201B2F-5E80-4168-B233-7212E7A89D0D} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {7DD6E2A0-C6F1-4EFD-92B0-4A0D547C24C5} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {893B18BE-C091-4B27-9D76-82F0BCA99813} - System32\Tasks\{84074564-9C97-48A0-BBB3-89DAB27B7C9B} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9240E8E9-1D41-40BA-B4DE-32542C7145DB} - System32\Tasks\{97E672C4-E6D1-4ED6-99D8-B122A1F86FC0} => pcalua.exe -a D:\DVPP\Setup.exe -d D:\DVPP
Task: {979D3F17-6619-45C5-B404-606838B44253} - System32\Tasks\{E4546B87-1D17-4B95-A0A5-37522F5D05EF} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9C2F05E8-F861-43CF-987B-095EF430F405} - System32\Tasks\{F3AEE607-769D-4C8B-824B-88BEB035F102} => pcalua.exe -a C:\Spiele\Lillifee\setup.exe -d D:
Task: {B0993B05-978C-4A15-AA87-B18AB9A99EFD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {B37A6E42-727E-4E31-A77C-04022A464880} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2015-11-04] (RealNetworks, Inc.)
Task: {BFD53BF4-19B8-4502-92DD-7D926FFA8CA6} - System32\Tasks\{EC680A57-E7BC-4A66-8FBB-20A511FDFA89} => pcalua.exe -a D:\bin\EasyInst.exe -d D:\
Task: {C8250CB2-F11F-4A98-95BB-BA5E812E6A7E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {DAAAE172-7743-4C96-B232-DCC0F5FC7607} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {DBF5DE37-8E99-4B07-813D-41126EA90DB3} - System32\Tasks\{81430713-60CA-4B71-8FBB-D14DA0751514} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F0E42A33-0E8E-4BB2-80F9-8418E2340E57} - System32\Tasks\{287D07D5-E1D7-4882-9C98-35680FC50E9A} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {F20691E7-0B1D-438A-ABD0-2D94FF823CEA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {F526EC9D-6127-42C8-A3B4-E081029D3F7D} - System32\Tasks\{3DEE68DB-465B-46BB-87CD-D6BEE805EFD1} => C:\Program Files\Daedalic Entertainment\The Night of the Rabbit\rabbit.exe [2013-04-28] (Daedalic Entertainment GmbH)
Task: {FB0BD155-6754-4ECC-9711-162FE2741D51} - System32\Tasks\Amazon Music Helper => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-12-08] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-01-17 15:57 - 2014-12-08 07:27 - 06277952 _____ () C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
2006-11-02 11:40 - 2006-11-02 11:40 - 00174656 _____ () C:\Windows\system32\PSIService.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00033088 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00037720 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2015-11-04 15:19 - 2015-11-04 15:19 - 00039768 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-11-04 15:20 - 2015-11-04 15:20 - 00037728 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll
2017-01-27 13:54 - 2017-01-20 07:47 - 01732896 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 02097616 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 01719760 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2010-06-09 18:10 - 2009-10-23 18:34 - 00827904 _____ () C:\Program Files\dvd43\DVD43_Tray.exe
2011-07-29 00:08 - 2011-07-29 00:08 - 01259376 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2011-07-29 00:09 - 2011-07-29 00:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-06-24 09:54 - 2013-06-20 08:58 - 00391040 _____ () C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
2013-06-24 09:54 - 2010-06-24 02:16 - 02150400 _____ () C:\Program Files\VTech\DownloadManager\System\QtCore4.dll
2013-06-24 09:54 - 2010-07-13 14:07 - 07826432 _____ () C:\Program Files\VTech\DownloadManager\System\QtGui4.dll
2013-06-24 09:54 - 2010-06-02 03:29 - 00934912 _____ () C:\Program Files\VTech\DownloadManager\System\QtNetwork4.dll
2013-06-24 09:54 - 2010-06-02 03:28 - 00335360 _____ () C:\Program Files\VTech\DownloadManager\System\QtXml4.dll
2013-06-24 09:54 - 2012-08-06 10:54 - 09843640 _____ () C:\Program Files\VTech\DownloadManager\System\QtWebKit4.dll
2013-06-24 09:54 - 2010-06-02 03:56 - 00232960 _____ () C:\Program Files\VTech\DownloadManager\System\phonon4.dll
2013-06-24 09:54 - 2010-06-02 03:54 - 02530816 _____ () C:\Program Files\VTech\DownloadManager\System\QtXmlPatterns4.dll
2013-06-24 09:54 - 2010-07-05 10:19 - 00116736 _____ () C:\Program Files\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2013-06-24 09:54 - 2010-11-11 10:24 - 00028160 _____ () C:\Program Files\VTech\DownloadManager\System\DACommCenter.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00025600 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qgif4.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00119808 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qjpeg4.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00714992 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
2016-07-05 17:13 - 2016-07-05 17:13 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00653608 _____ () c:\program files\real\realplayer\RPDS\Lib\r1api.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00077552 _____ () C:\Program Files\RealNetworks\RealDownloader\dtvhooks.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00022312 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\mediautil.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 01520936 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avformat-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 04274984 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avcodec-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00322856 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avutil-52.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00846848 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
2015-10-02 18:33 - 2012-10-25 15:19 - 01401344 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\nicLan.dll
2015-10-02 18:33 - 2012-12-04 15:22 - 00193024 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\DC_WFF.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00293376 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\WJRtl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:24FECE50 [398]
AlternateDataStreams: C:\ProgramData\TEMP:260575F1 [422]
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4 [368]
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6 [183]
AlternateDataStreams: C:\ProgramData\TEMP:574F975B [184]
AlternateDataStreams: C:\ProgramData\TEMP:9BB8C675 [171]
AlternateDataStreams: C:\ProgramData\TEMP:A3B8F70C [128]
AlternateDataStreams: C:\ProgramData\TEMP:A4AF8D0D [169]
AlternateDataStreams: C:\ProgramData\TEMP:ADF211B1 [100]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [173]
AlternateDataStreams: C:\ProgramData\TEMP:B8791731 [170]
AlternateDataStreams: C:\ProgramData\TEMP:BEE39E9B [190]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\ProgramData\TEMP:E51234A9 [154]
AlternateDataStreams: C:\ProgramData\TEMP:FAB64002 [164]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.exe:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.scr:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.bat:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.com:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.cmd:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.reg:  =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2006-11-02 03:23 - 2006-09-18 14:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost
::1            localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AOButler.exe - Verknüpfung.lnk => C:\Windows\pss\AOButler.exe - Verknüpfung.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Kornelia^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^AOButler.lnk => C:\Windows\pss\AOButler.lnk.Startup
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background
MSCONFIG\startupreg: Spiele Post => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{771781D7-42F2-4719-BCFC-468823CD634A}] => C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F8F60273-BD4C-4058-B246-6F633BD6A891}] => LPort=1900
FirewallRules: [{20D276B1-3C90-4929-8A32-E4ACCBECC2C8}] => LPort=2869
FirewallRules: [{3355F104-DC9F-42F3-8E9D-3BF5DBF8FEB3}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{0BEA84F4-2656-475A-AE06-59E81719D75F}] => svchost.exe
FirewallRules: [{2BFBBFCF-8C85-480D-A055-0DB5677BDCDE}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{5B4D0C77-79AF-4923-BDC1-B51891E48444}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [UDP Query User{BC460BB0-BD68-48F3-BEB2-47578A7623D9}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{2339DF44-A7DD-4E22-A32A-32DCC95DC337}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{A59E1834-01D3-478B-90C5-6E1D4924AFDB}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{AEB0C184-B9E4-434C-B087-A14CA1DF867B}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{08572AF5-8353-4B61-B8C0-24C618870A9E}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{670FA4AF-6DA8-487A-91EE-B07143EB2170}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BD40ABE-22B5-4230-B66B-47D3BD3D0390}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{55D99CB2-C725-42FC-847A-5909C961EAE8}] => C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{85FDB52D-7A01-43A8-9009-6A168010138A}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8758F947-09B2-41DF-88EC-579BC9CA03E7}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{459568E9-83FC-4C8A-9663-91C2C9B6026F}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{92605963-E425-410C-BB6E-8F4EDEA0C349}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D48E3507-9052-45D0-9E44-24AC955777AA}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4ED3AA0F-7E02-449A-BAA4-34B72C42BF3C}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{A8E2B43C-F558-48C1-A629-118843C42FE8}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [{84839E9D-9BF0-4CCD-A922-70507EA96606}] => c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{175EF583-D4BB-4455-BF80-3778A39EAEAC}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{189936DE-97ED-4FCF-AFD9-FA1ABFB6C531}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D0577CA9-F454-408A-ACDF-7F280302E7BD}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{95DF96B5-51A5-4BAD-8FE7-4BC3CF9AF3DF}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D81DFAC4-5EE4-4BF8-A94D-84503C9C6E7F}] => C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{88496792-6A83-4826-9392-C3A2DBF731BE}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{08F10482-4231-4238-9029-5220201C0B87}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{3199F9F6-FD40-4F4E-B578-F886A82D57DA}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [UDP Query User{AE639368-64F0-4A58-B6CA-0EE42A599710}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe

==================== Wiederherstellungspunkte =========================

24-01-2017 15:04:25 Windows Update
27-01-2017 15:11:14 Avira System Speedup Optimierung
27-01-2017 16:04:18 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: atksgt
Description: atksgt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: atksgt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: sptd
Description: sptd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: sptd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/30/2017 07:02:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1d50
Startzeit der fehlerhaften Anwendung: 0x01d27b220a87b452
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 4a87d4f7-e716-11e6-98c3-001d607b2853

Error: (01/30/2017 06:54:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x19bc
Startzeit der fehlerhaften Anwendung: 0x01d27b20a1bec3b8
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 3181c03b-e715-11e6-98c3-001d607b2853

Error: (01/30/2017 06:44:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x6b8
Startzeit der fehlerhaften Anwendung: 0x01d27b18b440fab7
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: c32495fe-e713-11e6-98c3-001d607b2853

Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 08:47:50 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 08:47:50 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 02:50:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x15a4
Startzeit der fehlerhaften Anwendung: 0x01d27a35cd75a541
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: e30ce1ad-e629-11e6-aa4c-001d607b2853

Error: (01/29/2017 02:43:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1368
Startzeit der fehlerhaften Anwendung: 0x01d27a34d2826c97
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: f5cc0ce1-e628-11e6-aa4c-001d607b2853

Error: (01/29/2017 02:36:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x15c8
Startzeit der fehlerhaften Anwendung: 0x01d27a3288bbadc4
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: f726ff1b-e627-11e6-aa4c-001d607b2853


Systemfehler:
=============
Error: (01/30/2017 07:02:49 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (01/30/2017 06:55:33 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/30/2017 06:55:33 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/30/2017 06:55:33 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/30/2017 06:55:33 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/30/2017 06:54:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/30/2017 06:45:29 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/30/2017 06:45:29 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/30/2017 06:45:29 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/30/2017 06:45:29 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.


==================== Memory info ===========================

Processor: AMD Athlon(tm) X2 Dual Core Processor BE-2300
Prozentuale Nutzung des RAM: 80%
Installierter physikalischer RAM: 1918.49 MB
Verfügbarer physikalischer RAM: 380.04 MB
Summe virtueller Speicher: 3836.98 MB
Verfügbarer virtueller Speicher: 1602.27 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:242.77 GB) (Free:93.87 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive e: () (Fixed) (Total:207.36 GB) (Free:35.49 GB) NTFS
Drive g: (Black) (Fixed) (Total:465.76 GB) (Free:413.34 GB) NTFS
Drive i: (EXTERN 2 -Spiegel-) (Fixed) (Total:242.77 GB) (Free:143.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive m: (EXTERN 1 -DATEN-) (Fixed) (Total:1255.2 GB) (Free:437.65 GB) NTFS
Drive n: (EXTERN 3) (Fixed) (Total:100 GB) (Free:99.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C76EBDA3)
Partition 1: (Active) - (Size=242.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15.6 GB) - (Type=27)
Partition 3: (Not Active) - (Size=207.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5C921633)
Partition 1: (Not Active) - (Size=1255.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=507.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 256E7802)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================

M-K-D-B 30.01.2017 21:21
Servus,


wir schauen nochmal kurz, ob noch was von AdwCleaner und MBAM gefunden wird:





Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel
    • "Prefetch" Dateien
    • Proxy
    • Winsock
    • Internet Explorer Richtlinien
    • Chrome Richtlinien
  • Bestätige die Auswahl mit Ok.
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).






Schritt 2
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM nach dem Neustart, klicke auf Berichte.
  • Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
  • Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.





Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von MBAM,
  • die Logdatei von JRT,
  • die beiden neuen Logdateien von FRST.

Mineko 31.01.2017 11:00
Code:
# AdwCleaner v6.043 - Bericht erstellt am 31/01/2017 um 09:34:02
# Aktualisiert am 27/01/2017 von Malwarebytes
# Datenbank : 2017-01-30.3 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X86)
# Benutzername : Kornelia - KORNELIA-PC
# Gestartet von : C:\Users\Kornelia\Desktop\adwcleaner_6.043.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****



***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [12222 Bytes] - [27/01/2017 15:41:46]
C:\AdwCleaner\AdwCleaner[C2].txt - [1063 Bytes] - [31/01/2017 09:34:02]
C:\AdwCleaner\AdwCleaner[S0].txt - [14900 Bytes] - [27/01/2017 15:37:33]
C:\AdwCleaner\AdwCleaner[S1].txt - [1517 Bytes] - [31/01/2017 09:32:45]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1283 Bytes] ##########
Code:
Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 31.01.17
Scan-Zeit: 09:47
Protokolldatei: mbam.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.6.1469
Komponentenversion: 1.0.50
Version des Aktualisierungspakets: 1.0.1141
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Kornelia-PC\Kornelia

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 378806
Abgelaufene Zeit: 20 Min., 58 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Home Premium x86
Ran by Kornelia (Administrator) on 31.01.2017 at 10:18:26,36
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 8

Successfully deleted: C:\Users\Kornelia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6BS8D21F (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Kornelia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\846V9UK5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Kornelia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LA36Y56O (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Kornelia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFJ0IE28 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6BS8D21F (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\846V9UK5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LA36Y56O (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZFJ0IE28 (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 31.01.2017 at 10:22:55,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 29-01-2017
durchgeführt von Kornelia (Administrator) auf KORNELIA-PC (31-01-2017 10:24:25)
Gestartet von C:\Users\Kornelia\Desktop
Geladene Profile: Kornelia &  (Verfügbare Profile: Kornelia & Tabea)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.VpnService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
(mobile concepts GmbH) C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4702208 2007-10-01] (Realtek Semiconductor)
HKLM\...\Run: [dvd43] => C:\Program Files\dvd43\dvd43_tray.exe [827904 2009-10-23] ()
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AgentMonitor] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [391040 2013-06-20] ()
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [286992 2015-11-28] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25744 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup Tray] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [160936 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM Group Policy restriction on software: C:\Program Files\Common Files\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Spiele Post] => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Run: [Spiele Post] => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961\...\MountPoints2: {663fc844-a6e0-11e0-b32f-806e6f6e6963} - D:\Autorun.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1003.bak-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093822329\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1003.bak-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093822329\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AOButler.exe - Verknüpfung.lnk [2012-05-05]
ShortcutTarget: AOButler.exe - Verknüpfung.lnk -> C:\Program Files\ArcorOnline\AOButler.exe (Keine Datei)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk [2013-01-10]
ShortcutTarget: Google Calendar Sync.lnk -> C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013-02-09]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (Keine Datei)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-11-28]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-10-02]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
Startup: C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-31]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AOButler.lnk [2012-06-03]
ShortcutTarget: AOButler.lnk -> C:\Program Files\ArcorOnline\AOButler.exe (Keine Datei)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-03-04]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-31]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-31]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23F9AFAB-2021-4A7D-9477-EBCFE8F59F7E}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9AD09A44-51EC-4D6E-9E93-74F49F171E7E}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-11-04] (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961 -> Kein Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  Keine Datei
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Keine Datei
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default [2017-01-31]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\20811wxw.default ->
FF Homepage: Mozilla\Firefox\Profiles\20811wxw.default -> about:home
FF Session Restore: Mozilla\Firefox\Profiles\20811wxw.default -> ist aktiviert.
FF NetworkProxy: Mozilla\Firefox\Profiles\20811wxw.default -> type", 1
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com [2017-01-26]
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com.xpi [2017-01-08]
FF Extension: (FacebookBlocker) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\facebookBlocker@webgraph.com [2014-02-16] [ist nicht signiert]
FF Extension: (NO Google Analytics) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-JcGokIiQyjoBAQ@jetpack.xpi [2016-06-09]
FF Extension: (Official My JDownloader AddOn) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2017-01-07]
FF Extension: (Test Pilot) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\testpilot@labs.mozilla.com.xpi [2016-09-01]
FF Extension: (NoScript) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-01-20]
FF Extension: (Adblock Plus) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-16]
FF Extension: (Torbutton) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}.xpi [2012-10-11] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-07-05] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: (Mehr Leistung und Videoformate für dein HTML5 &video&) - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-12-27] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll [2012-07-05] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-11-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2010-02-04] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-11-28] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2014-04-27] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2014-04-27] (RealPlayer Cloud)

Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll => Keine Datei
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\pdf.dll => Keine Datei
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default [2017-01-27]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-16]
CHR Extension: (RealDownloader) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-11-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-07]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-15]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files\Avira\VPN\Avira.VpnService.exe [300344 2017-01-18] (Avira Operations GmbH & Co. KG)
R2 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S2 gupdate1cacc58a1955820; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-02] (Google Inc.)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-12-06] (Hewlett-Packard Company) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888 2017-01-20] (Malwarebytes)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-11-04] ()
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1095976 2015-11-28] (RealNetworks, Inc.)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [35304 2017-01-11] (Avira Operations GmbH & Co. KG)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ACEDRV05; C:\Windows\system32\drivers\ACEDRV05.sys [97792 2010-03-10] (Protect Software GmbH) [Datei ist nicht signiert]
R2 ACEDRV08; C:\Windows\system32\drivers\ACEDRV08.sys [108768 2010-12-28] (Protect Software GmbH)
R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2010-04-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119208 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140840 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [30672 2016-12-16] (Avira Operations GmbH & Co. KG)
R3 dvd43llh; C:\Windows\System32\DRIVERS\dvd43llh.sys [18816 2010-06-09] (RIF) [Datei ist nicht signiert]
S3 eapihdrv; C:\Users\Kornelia\AppData\Local\Temp\ehdrv.sys [135760 2017-01-27] (ESET)
S3 HCW713x; C:\Windows\System32\DRIVERS\HCW713x.sys [827776 2007-03-26] (Hauppauge Computer Works inc.)
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2008-02-14] (Paragon Software Group)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2010-04-05] ()
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
S3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2007-02-27] ()
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36624 2007-01-28] (Sonic Solutions) [Datei ist nicht signiert]
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2012-10-25] (Realtek Semiconductor Corporation                          )
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-10-22] (Duplex Secure Ltd.)
R2 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [Datei ist nicht signiert]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-31 10:24 - 2017-01-31 10:25 - 00031949 _____ C:\Users\Kornelia\Desktop\FRST.txt
2017-01-31 10:22 - 2017-01-31 10:22 - 00001881 _____ C:\Users\Kornelia\Desktop\JRT.txt
2017-01-31 10:16 - 2017-01-31 10:16 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2017-01-31 10:09 - 2017-01-31 10:09 - 00001255 _____ C:\Users\Kornelia\Desktop\mbam.txt
2017-01-31 09:40 - 2017-01-31 09:40 - 00001365 _____ C:\Users\Kornelia\Desktop\AdwCleaner[C2].txt
2017-01-31 09:22 - 2017-01-31 09:22 - 04015056 _____ C:\Users\Kornelia\Desktop\adwcleaner_6.043.exe
2017-01-29 14:14 - 2017-01-29 14:14 - 00000000 ____D C:\Users\TEMP.Kornelia-PC\AppData\Local\Real
2017-01-29 14:12 - 2017-01-29 14:15 - 00000000 ____D C:\Users\TEMP.Kornelia-PC
2017-01-28 13:24 - 2017-01-28 13:31 - 00219282 _____ C:\TDSSKiller.3.1.0.12_28.01.2017_13.24.30_log.txt
2017-01-28 13:22 - 2017-01-28 13:22 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Kornelia\Desktop\tdsskiller.exe
2017-01-28 13:03 - 2017-01-30 17:52 - 01762816 _____ (Farbar) C:\Users\Kornelia\Desktop\FRST.exe
2017-01-27 23:56 - 2017-01-31 10:24 - 00000000 ____D C:\FRST
2017-01-27 16:27 - 2017-01-27 16:27 - 02870984 _____ (ESET) C:\Users\Kornelia\Desktop\esetsmartinstaller_deu.exe
2017-01-27 15:58 - 2017-01-27 15:58 - 01663040 _____ (Malwarebytes) C:\Users\Kornelia\Desktop\JRT.exe
2017-01-27 15:27 - 2017-01-31 09:34 - 00000000 ____D C:\AdwCleaner
2017-01-27 14:42 - 2017-01-27 14:42 - 00000000 ____D C:\Users\Kornelia\AppData\Local\AviraSpeedup
2017-01-27 14:35 - 2017-01-27 14:35 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Avira
2017-01-27 13:56 - 2017-01-31 09:39 - 00094656 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-27 13:56 - 2017-01-31 09:39 - 00063264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-27 13:56 - 2017-01-27 13:56 - 00152512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-27 13:55 - 2017-01-31 09:39 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-27 13:55 - 2017-01-31 09:38 - 00219584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-27 13:55 - 2017-01-27 13:55 - 00002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-27 13:55 - 2017-01-27 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-27 13:55 - 2017-01-20 07:47 - 00059976 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-27 00:03 - 2017-01-27 00:04 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2017-01-26 22:47 - 2017-01-26 22:47 - 00001134 _____ C:\Users\Kornelia\Desktop\Avira Antivirus starten.lnk
2017-01-26 21:06 - 2017-01-26 21:06 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_588a51b66deb0__ws.exe
2017-01-26 19:57 - 2017-01-26 19:57 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Avira
2017-01-26 17:28 - 2017-01-26 17:28 - 00000000 ____D C:\Users\Kornelia\Downloads\Notfall DVD 7.0 Free
2017-01-26 16:35 - 2017-01-26 17:04 - 1276319704 _____ C:\Users\Kornelia\Downloads\Notfall_DVD_7.0_Free.zip
2017-01-26 13:57 - 2017-01-26 13:57 - 00001101 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk
2017-01-26 13:57 - 2017-01-26 13:57 - 00000998 _____ C:\Users\Public\Desktop\Avira Phantom VPN.lnk
2017-01-26 13:56 - 2017-01-31 09:39 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-01-26 13:52 - 2017-01-26 13:52 - 00001166 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-01-26 13:43 - 2017-01-26 13:49 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_5889ec8b9e38c__ws.exe
2017-01-24 23:24 - 2017-01-24 23:24 - 00000936 _____ C:\Users\Kornelia\Desktop\duplicate.txt
2017-01-19 19:22 - 2017-01-19 21:20 - 00000000 ____D C:\Users\Kornelia\Desktop\Rekla Herd
2017-01-12 23:57 - 2017-01-12 23:58 - 00000000 ____D C:\Users\Kornelia\Desktop\SCHULE
2017-01-11 13:22 - 2017-01-05 18:46 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 13:22 - 2017-01-05 18:46 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 13:22 - 2017-01-05 18:43 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 13:22 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 13:22 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 13:22 - 2017-01-05 18:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-10 16:32 - 2017-01-25 00:18 - 00040346 _____ C:\Users\Kornelia\Desktop\Dateiliste.xlsx
2017-01-08 21:33 - 2017-01-08 21:33 - 00000000 ____D C:\Users\Kornelia\AppData\Local\CEF
2017-01-07 22:31 - 2017-01-07 22:31 - 00002075 _____ C:\Users\Kornelia\Desktop\JDownloader 2.lnk
2017-01-07 22:31 - 2017-01-07 22:31 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-01-07 22:27 - 2017-01-27 15:13 - 00000000 ____D C:\Users\Kornelia\AppData\Local\JDownloader 2.0
2017-01-07 22:23 - 2017-01-07 22:23 - 00076504 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\WebInstaller.exe
2017-01-07 19:32 - 2017-01-31 10:14 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Mozilla
2017-01-07 19:20 - 2017-01-07 19:20 - 00243720 _____ C:\Users\Kornelia\Downloads\Firefox Setup Stub 50.1.0.exe
2017-01-07 17:29 - 2017-01-24 23:13 - 00000000 ____D C:\Users\Kornelia\Downloads\Downloader
2017-01-07 17:21 - 2017-01-07 17:23 - 26539720 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\JDownloaderSetup.exe
2017-01-07 16:50 - 2017-01-07 16:50 - 00000000 ____D C:\Users\Kornelia\Downloads\Info

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-31 10:23 - 2013-06-11 21:18 - 00000940 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job
2017-01-31 10:19 - 2010-03-25 21:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-01-31 09:52 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-31 09:52 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-31 09:43 - 2010-03-26 02:57 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-01-31 09:37 - 2011-07-05 09:31 - 00000000 ____D C:\Users\Kornelia
2017-01-31 09:37 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-31 09:33 - 2011-07-05 10:34 - 00000008 __RSH C:\Users\Kornelia\ntuser.pol
2017-01-31 09:33 - 2011-07-05 10:33 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-01-31 09:31 - 2013-03-01 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-31 09:12 - 2015-09-16 17:12 - 00000000 ____D C:\Users\Kornelia\Desktop\Neuer Ordner (2)
2017-01-31 08:58 - 2013-03-14 15:50 - 00000000 ____D C:\Windows\pss
2017-01-27 22:23 - 2013-06-11 21:18 - 00000918 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job
2017-01-27 15:43 - 2016-03-27 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-27 15:43 - 2012-04-30 09:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-27 15:40 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-01-27 15:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2017-01-27 15:13 - 2011-11-01 11:13 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Vidalia
2017-01-27 15:13 - 2011-07-05 10:25 - 00000000 ____D C:\Windows\Panther
2017-01-27 15:13 - 2011-04-13 13:21 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\skypePM
2017-01-27 15:12 - 2010-10-31 18:18 - 00000000 ___RD C:\Users\Kornelia\Desktop\Tabea Spiele
2017-01-27 15:12 - 2007-10-12 08:47 - 00000000 ____D C:\Program Files\DivX
2017-01-27 14:43 - 2011-07-05 10:27 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-27 14:43 - 2009-07-14 09:47 - 00702942 _____ C:\Windows\system32\perfh007.dat
2017-01-27 14:43 - 2009-07-14 09:47 - 00150582 _____ C:\Windows\system32\perfc007.dat
2017-01-27 14:43 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-01-27 00:05 - 2010-12-16 14:57 - 00000000 ____D C:\Program Files\GMX
2017-01-26 23:52 - 2011-09-30 10:13 - 00000000 ____D C:\Users\Public\Documents\Tivola_prefs
2017-01-26 23:52 - 2011-02-23 18:14 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\Program Files\Amazon
2017-01-26 23:52 - 2010-03-10 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tivola
2017-01-26 23:48 - 2011-03-09 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:41 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\DVDVideoSoft
2017-01-26 23:43 - 2016-10-23 15:39 - 00150152 _____ C:\Windows\ntbtlog.txt
2017-01-26 17:26 - 2016-10-24 10:00 - 00120432 _____ C:\Users\Kornelia\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-26 16:28 - 2016-10-21 23:01 - 00428280 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-26 13:57 - 2016-10-21 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-01-26 13:57 - 2012-12-22 20:23 - 00000000 ____D C:\Program Files\Avira
2017-01-26 13:57 - 2012-05-20 11:07 - 00000000 ____D C:\ProgramData\Avira
2017-01-26 13:52 - 2015-11-28 11:45 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 13:30 - 2011-04-05 15:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-01-25 13:21 - 2012-02-26 18:45 - 00000000 ____D C:\Users\Kornelia\Downloads\Heidi
2017-01-24 23:47 - 2011-04-05 14:45 - 00000000 ____D C:\ProgramData\Norton
2017-01-23 15:51 - 2012-01-17 15:04 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Microsoft Help
2017-01-23 12:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-22 00:11 - 2016-08-14 14:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 21:19 - 2010-04-01 21:23 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\COREL
2017-01-19 21:13 - 2010-04-29 21:48 - 00000000 ____D C:\Users\Kornelia\Documents\My PSP Files
2017-01-19 21:13 - 2010-04-22 22:31 - 00001786 ___SH C:\Windows\system32\KGyGaAvL.sys
2017-01-11 23:30 - 2013-09-01 10:47 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 23:19 - 2011-08-09 13:50 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 19:31 - 2012-05-27 00:08 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-10 19:31 - 2011-09-06 09:10 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-10 19:31 - 2010-03-13 11:32 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-08 21:33 - 2010-03-12 09:41 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Adobe
2017-01-07 19:31 - 2011-10-05 01:27 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-07 19:31 - 2010-03-06 17:48 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2010-06-02 05:21 - 2010-06-02 05:21 - 1347354 _____ () C:\Program Files\Apr2005_d3dx9_25_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1078962 _____ () C:\Program Files\Apr2005_d3dx9_25_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1397830 _____ () C:\Program Files\Apr2006_d3dx9_30_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1115221 _____ () C:\Program Files\Apr2006_d3dx9_30_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0916430 _____ () C:\Program Files\Apr2006_MDX1_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 4162630 _____ () C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0179133 _____ () C:\Program Files\Apr2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0133103 _____ () C:\Program Files\Apr2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087101 _____ () C:\Program Files\Apr2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046010 _____ () C:\Program Files\Apr2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0698612 _____ () C:\Program Files\APR2007_d3dx10_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0695865 _____ () C:\Program Files\APR2007_d3dx10_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1607358 _____ () C:\Program Files\APR2007_d3dx9_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1606039 _____ () C:\Program Files\APR2007_d3dx9_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0195766 _____ () C:\Program Files\APR2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0151225 _____ () C:\Program Files\APR2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0096817 _____ () C:\Program Files\APR2007_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0053302 _____ () C:\Program Files\APR2007_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1350542 _____ () C:\Program Files\Aug2005_d3dx9_27_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1077644 _____ () C:\Program Files\Aug2005_d3dx9_27_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0182903 _____ () C:\Program Files\AUG2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0137235 _____ () C:\Program Files\AUG2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087142 _____ () C:\Program Files\AUG2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046058 _____ () C:\Program Files\AUG2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0852286 _____ () C:\Program Files\AUG2007_d3dx10_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0796867 _____ () C:\Program Files\AUG2007_d3dx10_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1800160 _____ () C:\Program Files\AUG2007_d3dx9_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1708152 _____ () C:\Program Files\AUG2007_d3dx9_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0198096 _____ () C:\Program Files\AUG2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0153012 _____ () C:\Program Files\AUG2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0867612 _____ () C:\Program Files\Aug2008_d3dx10_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0849167 _____ () C:\Program Files\Aug2008_d3dx10_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1794084 _____ () C:\Program Files\Aug2008_d3dx9_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1464672 _____ () C:\Program Files\Aug2008_d3dx9_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0121772 _____ () C:\Program Files\Aug2008_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0092996 _____ () C:\Program Files\Aug2008_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271412 _____ () C:\Program Files\Aug2008_XAudio_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271038 _____ () C:\Program Files\Aug2008_XAudio_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0919044 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0900598 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3112111 _____ () C:\Program Files\Aug2009_d3dcsx_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3319740 _____ () C:\Program Files\Aug2009_d3dcsx_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0232635 _____ () C:\Program Files\Aug2009_d3dx10_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0192131 _____ () C:\Program Files\Aug2009_d3dx10_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0136301 _____ () C:\Program Files\Aug2009_d3dx11_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0105044 _____ () C:\Program Files\Aug2009_d3dx11_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0930116 _____ () C:\Program Files\Aug2009_d3dx9_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0728456 _____ () C:\Program Files\Aug2009_d3dx9_42_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122408 _____ () C:\Program Files\Aug2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093106 _____ () C:\Program Files\Aug2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273264 _____ () C:\Program Files\Aug2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272642 _____ () C:\Program Files\Aug2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1357976 _____ () C:\Program Files\Dec2005_d3dx9_28_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1079456 _____ () C:\Program Files\Dec2005_d3dx9_28_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0212807 _____ () C:\Program Files\DEC2006_d3dx10_00_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0191720 _____ () C:\Program Files\DEC2006_d3dx10_00_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1571154 _____ () C:\Program Files\DEC2006_d3dx9_32_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1574376 _____ () C:\Program Files\DEC2006_d3dx9_32_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0192475 _____ () C:\Program Files\DEC2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0145599 _____ () C:\Program Files\DEC2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0089944 _____ (Microsoft Corporation) C:\Program Files\DSETUP.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 1801048 _____ () C:\Program Files\dsetup32.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 0042410 _____ () C:\Program Files\dxdllreg_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0537432 _____ () C:\Program Files\DXSETUP.exe
2010-06-02 05:22 - 2010-06-02 05:22 - 0094011 _____ () C:\Program Files\dxupdate.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1247499 _____ () C:\Program Files\Feb2005_d3dx9_24_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1013225 _____ () C:\Program Files\Feb2005_d3dx9_24_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1362796 _____ () C:\Program Files\Feb2006_d3dx9_29_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1084720 _____ () C:\Program Files\Feb2006_d3dx9_29_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0178359 _____ () C:\Program Files\Feb2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0132409 _____ () C:\Program Files\Feb2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0194675 _____ () C:\Program Files\FEB2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0147983 _____ () C:\Program Files\FEB2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054678 _____ () C:\Program Files\Feb2010_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0020713 _____ () C:\Program Files\Feb2010_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122446 _____ () C:\Program Files\Feb2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093180 _____ () C:\Program Files\Feb2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0276960 _____ () C:\Program Files\Feb2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277191 _____ () C:\Program Files\Feb2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1336002 _____ () C:\Program Files\Jun2005_d3dx9_26_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1064925 _____ () C:\Program Files\Jun2005_d3dx9_26_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0180785 _____ () C:\Program Files\JUN2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0133671 _____ () C:\Program Files\JUN2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0699044 _____ () C:\Program Files\JUN2007_d3dx10_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0698472 _____ () C:\Program Files\JUN2007_d3dx10_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607774 _____ () C:\Program Files\JUN2007_d3dx9_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607286 _____ () C:\Program Files\JUN2007_d3dx9_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197122 _____ () C:\Program Files\JUN2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0152909 _____ () C:\Program Files\JUN2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0867828 _____ () C:\Program Files\JUN2008_d3dx10_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0849919 _____ () C:\Program Files\JUN2008_d3dx10_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1792608 _____ () C:\Program Files\JUN2008_d3dx9_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1463878 _____ () C:\Program Files\JUN2008_d3dx9_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055154 _____ () C:\Program Files\JUN2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021905 _____ () C:\Program Files\JUN2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121054 _____ () C:\Program Files\JUN2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093128 _____ () C:\Program Files\JUN2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269628 _____ () C:\Program Files\JUN2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269024 _____ () C:\Program Files\JUN2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0944460 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0931471 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0752783 _____ () C:\Program Files\Jun2010_d3dcsx_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0762188 _____ () C:\Program Files\Jun2010_d3dcsx_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0235955 _____ () C:\Program Files\Jun2010_d3dx10_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197283 _____ () C:\Program Files\Jun2010_d3dx10_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138205 _____ () C:\Program Files\Jun2010_d3dx11_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0109445 _____ () C:\Program Files\Jun2010_d3dx11_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0937246 _____ () C:\Program Files\Jun2010_d3dx9_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0768036 _____ () C:\Program Files\Jun2010_d3dx9_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0124596 _____ () C:\Program Files\Jun2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093686 _____ () C:\Program Files\Jun2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277338 _____ () C:\Program Files\Jun2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0278060 _____ () C:\Program Files\Jun2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0844884 _____ () C:\Program Files\Mar2008_d3dx10_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0818260 _____ () C:\Program Files\Mar2008_d3dx10_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1769862 _____ () C:\Program Files\Mar2008_d3dx9_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1443282 _____ () C:\Program Files\Mar2008_d3dx9_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055058 _____ () C:\Program Files\Mar2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021867 _____ () C:\Program Files\Mar2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122336 _____ () C:\Program Files\Mar2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093734 _____ () C:\Program Files\Mar2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0251194 _____ () C:\Program Files\Mar2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0226250 _____ () C:\Program Files\Mar2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1067160 _____ () C:\Program Files\Mar2009_d3dx10_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1040745 _____ () C:\Program Files\Mar2009_d3dx10_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1973702 _____ () C:\Program Files\Mar2009_d3dx9_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1612446 _____ () C:\Program Files\Mar2009_d3dx9_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054600 _____ () C:\Program Files\Mar2009_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021298 _____ () C:\Program Files\Mar2009_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121506 _____ () C:\Program Files\Mar2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092740 _____ () C:\Program Files\Mar2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0275044 _____ () C:\Program Files\Mar2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273018 _____ () C:\Program Files\Mar2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0864600 _____ () C:\Program Files\Nov2007_d3dx10_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0803884 _____ () C:\Program Files\Nov2007_d3dx10_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1802058 _____ () C:\Program Files\Nov2007_d3dx9_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1709360 _____ () C:\Program Files\Nov2007_d3dx9_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0046144 _____ () C:\Program Files\NOV2007_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0018496 _____ () C:\Program Files\NOV2007_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0196762 _____ () C:\Program Files\NOV2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0148264 _____ () C:\Program Files\NOV2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0994154 _____ () C:\Program Files\Nov2008_d3dx10_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0965421 _____ () C:\Program Files\Nov2008_d3dx10_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1906878 _____ () C:\Program Files\Nov2008_d3dx9_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1550796 _____ () C:\Program Files\Nov2008_d3dx9_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054522 _____ () C:\Program Files\Nov2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021851 _____ () C:\Program Files\Nov2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121794 _____ () C:\Program Files\Nov2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092684 _____ () C:\Program Files\Nov2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273960 _____ () C:\Program Files\Nov2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272611 _____ () C:\Program Files\Nov2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0086037 _____ () C:\Program Files\Oct2005_xinput_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0045359 _____ () C:\Program Files\Oct2005_xinput_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1412902 _____ () C:\Program Files\OCT2006_d3dx9_31_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1127217 _____ () C:\Program Files\OCT2006_d3dx9_31_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0182361 _____ () C:\Program Files\OCT2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138017 _____ () C:\Program Files\OCT2006_XACT_x86.cab
2010-10-22 14:05 - 2010-10-22 14:46 - 0000388 _____ () C:\Users\Kornelia\AppData\Roaming\burnaware.ini
2013-12-18 23:02 - 2013-12-19 00:05 - 0000679 _____ () C:\Users\Kornelia\AppData\Local\cookies.ini
2011-08-17 17:39 - 2015-07-28 17:08 - 0008192 _____ () C:\Users\Kornelia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-26 18:23 - 2011-07-26 18:23 - 0000000 _____ () C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2011-07-05 09:26

==================== Ende vom FRST.txt ============================

Mineko 31.01.2017 11:01
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 29-01-2017
durchgeführt von Kornelia (31-01-2017 10:26:32)
Gestartet von C:\Users\Kornelia\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2011-07-05 09:33:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1736235967-2657770174-236075978-500 - Administrator - Disabled)
Gast (S-1-5-21-1736235967-2657770174-236075978-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1736235967-2657770174-236075978-1005 - Limited - Enabled)
Konni (S-1-5-21-1736235967-2657770174-236075978-1003 - Administrator - Enabled)
Kornelia (S-1-5-21-1736235967-2657770174-236075978-1001 - Administrator - Enabled) => C:\Users\Kornelia
Tabea (S-1-5-21-1736235967-2657770174-236075978-1002 - Limited - Enabled) => C:\Users\Tabea

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 4.65 (HKLM\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Aladins Wunderlampe (HKLM\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM\...\Alamandi) (Version: 0.0.0.0 - INTENIUM GmbH)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Annabel (HKLM\...\Annabel) (Version: 1.0.0.0 - INTENIUM GmbH)
ATI Catalyst Install Manager (HKLM\...\{CC516453-9703-ABF9-201F-58A5EC567292}) (Version: 3.0.642.0 - ATI Technologies, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG)
Avira Connect (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM\...\Avira Phantom VPN) (Version: 2.4.3.30556 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 3.1.1.4250 - Avira Operations GmbH & Co. KG)
Azada ™: Ancient Magic (HKLM\...\BFG-Azada - Ancient Magic) (Version:  - )
Azada: In Libro (HKLM\...\BFG-Azada - In Libro) (Version:  - )
Azteca (HKLM\...\Azteca) (Version: 1.0.0.0 - INTENIUM GmbH)
Beetle Ju 2 (HKLM\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Bengal (HKLM\...\Bengal) (Version: 1.0.1.0 - INTENIUM GmbH)
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 2.0.0.28 - )
Botanica - Reise ins Unbekannte (HKLM\...\BFG-Botanica - Reise ins Unbekannte) (Version:  - )
calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)
ccc-core-static (Version: 2007.0821.2146.36991 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Chinese Checkers (HKLM\...\40-com.novelgames.flashgames.checkers) (Version: 1.8.0 - Novel Games Limited)
Chinese Checkers (Version: 1.8.0 - Novel Games Limited) Hidden
Corel Paint Shop Pro Photo XI (HKLM\...\{E1C7EF5E-3A7B-4ED4-A48B-F70F1B36EAB4}) (Version: 11.20.0000 - Corel Corporation)
Corel Snapfire DVD Maker (HKLM\...\{17E14D89-3A9F-4706-9F9B-C2DFC7ABE94B}) (Version: 1.20.0000 - Corel Corporation)
Corel Snapfire Plus (HKLM\...\{7ADE3A47-B425-45E9-8FF6-11BE2B775645}) (Version: 1.201.0000 - Corel Corporation)
CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Da Vincis Perlen Puzzle (HKLM\...\Da Vincis Perlen Puzzle) (Version:  - )
Das Reich des Drachen (HKLM\...\Das Reich des Drachen) (Version: 1.0.0.0 - INTENIUM GmbH)
Das Vermächtnis - Der Baum des Lebens (1.00) (HKLM\...\Das Vermächtnis - Der Baum des Lebens_is1) (Version:  - City Interactive)
Der Perfekte Weihnachtsbaum (HKLM\...\Der Perfekte Weihnachtsbaum) (Version: 1.0.0.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.2010.6.23 - INTENIUM GmbH)
Diamantenfee 2 (HKLM\...\Diamantenfee 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Diamond Drop 2 (HKLM\...\Diamond Drop 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DIE GEHEIMNISSE DER SPIDERWICKS (HKLM\...\{DFA723CE-22B4-4E6B-92CF-176256ECF2DE}) (Version: 1.00.0000 - Sierra Entertainment)
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Die Kluge Eule) (Version:  - )
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\...\Die Kluge Eule) (Version:  - )
Die Wiege Olympias 2 (HKLM\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.3 - DivX, LLC)
Drawn: &reg; Flucht aus der Dunkelheit (HKLM\...\BFG-Drawn - Flucht aus der Dunkelheit) (Version:  - )
Drawn: Der Turm ™ (HKLM\...\BFG-Drawn - Der Turm) (Version:  - )
Dream Chronicles (HKLM\...\Dream Chronicles) (Version:  - PlayFirst, Inc.)
Dream Chronicles ™ 2: The Eternal Maze (HKLM\...\BFG-Dream Chronicles 2 - The Eternal Maze) (Version:  - )
DVD43 v4.6.0 (HKLM\...\DVD43_is1) (Version:  - )
DVS Video Downloader Addon for Mozilla Firefox version 4.3.4.17 (HKLM\...\DVS Video Downloader Addon for Mozilla Firefox_is1) (Version: 4.3.4.17 - DVDVideoSoft Ltd.)
Emil und Pauline Auf dem Land (remove only) (HKLM\...\Emil und Pauline Auf dem Land) (Version:  - )
Emil und Pauline In der Stadt (remove only) (HKLM\...\Emil und Pauline In der Stadt) (Version:  - )
Enigmatis - Vermisst in Maple Creek (HKLM\...\Enigmatis - Vermisst in Maple Creek_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Ewige Reise - Das neue Atlantis (HKLM\...\Ewige Reise - Das neue Atlantis) (Version:  - )
Fabled Legends: Die Ruckkehr des Rattenfangers (HKLM\...\BFG-Fabled Legends - Die Rueckkehr des Rattenfaengers) (Version:  - )
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FarmFrenzy (HKLM\...\FarmFrenzy) (Version:  - )
Finstere Liebschaft - Immortal Lovers (HKLM\...\Finstere Liebschaft - Immortal Lovers) (Version:  - )
foobar2000 v1.0.3 (HKLM\...\foobar2000) (Version: 1.0.3 - Peter Pawlowski)
Forest Legends - Der Ruf der Liebe (HKLM\...\Forest Legends - Der Ruf der Liebe) (Version:  - )
FormatFactory 3.5.0.0 (HKLM\...\FormatFactory) (Version: 3.5.0.0 - Format Factory)
Free Studio version 2013 (HKLM\...\Free Studio_is1) (Version: 6.1.0.320 - DVDVideoSoft Ltd.)
Galileo Family Quiz - Spezial II (HKLM\...\Galileo Family Quiz - Spezial II) (Version:  - SevenOne Intermedia)
Geheimakte 2 - Puritas Cordis (HKLM\...\{BE7347AD-2D93-4A74-8DBF-C1B073DAE509}) (Version: 1.00.0000 - Deep Silver)
Geheime Fälle: Die gestohlene Venus (HKLM\...\Geheime Fälle: Die gestohlene Venus) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 2.7.2.6 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 2.7.2 - 1 und 1 Internet AG) Hidden
Google Calendar Sync (HKLM\...\Google Calendar Sync) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
Gravely Silent: Haus des Schreckens (HKLM\...\BFG-Gravely Silent - Haus des Schreckens) (Version:  - )
Haunted Manor: Der Herr der Spiegel (HKLM\...\BFG-Haunted Manor - Der Herr der Spiegel) (Version:  - )
Hauppauge MCE XP/Vista Software Encoder (2.0.25102) (HKLM\...\Hauppauge MCE2005 Software Encoder) (Version: 2.0.25102 - Hauppauge Computer Works, Inc.)
Heroes of Hellas (HKLM\...\{C0906D83-1FE0-4176-A940-45A348080987}) (Version: 1.00.0000 - Purplehills)
Hexentanz und Firlefanz (HKLM\...\Hexentanz und Firlefanz) (Version:  - )
Hidden Expedition &reg; : Bermudadreieck (HKLM\...\BFG-Hidden Expedition - Bermudadreieck) (Version:  - )
Hidden Mysteries Salem Secrets (HKLM\...\Hidden Mysteries Salem Secrets) (Version: 1.0 - astrogon Software)
Hidden Mysteries Vampire Secrets (HKLM\...\Hidden Mysteries Vampire Secrets) (Version: 1.0 - astragon Software)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBee FREE 5.1.2 (build 456) (HKLM\...\JetBee_is1) (Version:  - )
Jewel Puzzle (HKLM\...\Jewel Puzzle) (Version: 1.0.0.0 - INTENIUM GmbH)
Kleiner Eisbär 2 (HKLM\...\Kleiner Eisbär 2) (Version:  - )
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Lauras Stern (HKLM\...\Lauras Stern) (Version:  - )
Letstrade (HKLM\...\{E0091C29-DEE8-4B24-BF65-8C35B5940D77}) (Version: 1.00.0000 - Buhl Data Service)
LightScribe System Software  1.17.90.1 (HKLM\...\{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}) (Version: 1.17.90.1 - LightScribe)
Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Manic Digger (HKLM\...\{119E2FCB-5CDD-4C24-BCB2-56A824E2BF0A}_is1) (Version:  - )
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Midnight Mysteries Salem Witch Trials (HKLM\...\Midnight Mysteries Salem Witch Trials) (Version: 1.1.0.0 - MumboJumbo)
Mozilla Firefox 51.0.1 (x86 de) (HKLM\...\Mozilla Firefox 51.0.1 (x86 de)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
Mozilla Thunderbird 45.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 45.6.0 (x86 de)) (Version: 45.6.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Case Files&reg;: Dire Grove™ (HKLM\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst Handbuch ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst Handbuch) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst) (Version:  - )
Mystery Case Files: Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Ravenhearst) (Version:  - )
Mystery of Cleopatra (HKLM\...\Mystery of Cleopatra 1.0) (Version: 1.0 - Rondo Media)
Mystery Places - Das Geheimnis der Geistervilla (HKLM\...\Mystery Places - Das Geheimnis der Geistervilla_is1) (Version:  - )
Mystery Tales - Insel der Träume (HKLM\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Trackers: Raincliff (HKLM\...\BFG-Mystery Trackers - Raincliff) (Version:  - )
Natalie Brooks (HKLM\...\Natalie Brooks) (Version:  - )
Nero 7 Essentials (HKLM\...\{0DE739CA-9487-4E3E-8511-92EAF01F1031}) (Version: 7.03.0274 - Nero AG)
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Pahelika: Secret Legends (HKLM\...\Pahelika: Secret Legends) (Version:  - The Games Company Worldwide GmbH)
Paragon Hard Disk Manager 2008 Professional (HKLM\...\{E9E4BB29-FA98-401B-9EDE-9906906E33DE}) (Version:  - Paragon Software Group)
PixiePack Codec Pack (HKLM\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polipo 1.0.4.1 (HKLM\...\Polipo) (Version:  - )
Prinzessin Isabella (HKLM\...\Prinzessin Isabella) (Version: 1.0.0.0 - INTENIUM GmbH)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProtectDisc Helper Driver 10 (HKLM\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
Radiotracker (HKLM\...\{1E863F44-2D2D-4BD7-B25B-EDA9FF622267}) (Version: 6.2.13700.0 - RapidSolution Software AG)
ratDVD 0.78.1444 (HKLM\...\ratDVD) (Version: 0.78.1444 - ratDVD)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
RealDownloader (Version: 18.1.2.176 - RealNetworks, Inc.) Hidden
RealDownloader (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.2 - RealNetworks)
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rooms - Die Villa 1.0d  (HKLM\...\Rooms - Die Villa) (Version: 1.0d - Halycon Media)
Samantha Swift and the Mystery From Atlantis (HKLM\...\Samantha Swift and the Mystery From Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Sandra Fleming Chronicles – Crystal Skulls (HKLM\...\Sandra Fleming Chronicles – Crystal Skulls) (Version: 1.0.0.0 - INTENIUM GmbH)
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Simajo (HKLM\...\Simajo) (Version:  - )
Skins (Version: 2007.0821.2146.36991 - ATI) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spirits of Mystery: Dunkler Fluch (HKLM\...\BFG-Spirits of Mystery - Dunkler Fluch) (Version:  - )
Spur der Träume (HKLM\...\Spur der Träume) (Version: 1.0.0.0 - INTENIUM GmbH)
Sweet Home 3D version 3.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Enchanted Kingdom: Elisa’s Adventure (HKLM\...\The Enchanted Kingdom: Elisa’s Adventure) (Version: 1.0.0.0 - INTENIUM GmbH)
The Fall Trilogy (HKLM\...\The Fall Trilogy_is1) (Version:  - Morphicon)
The Fall Trilogy Chapter 2 (HKLM\...\The Fall Trilogy Chapter 2_is1) (Version:  - Morphicon)
The Night of the Rabbit (HKLM\...\The Night of the Rabbit) (Version: 1.0 - Daedalic Entertainment)
The Sultans Labyrinth: Das Opfer des K&ouml;nigs (HKLM\...\BFG-The Sultans Labyrinth - Das Opfer des Koenigs) (Version:  - ) <==== ACHTUNG
Tor 0.2.2.35 (HKLM\...\Tor) (Version:  - )
TP-LINK 300Mbps Wireless USB Adapter Treiber (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trödelschätze (HKLM\...\{AC368309-A247-42C0-9AAF-ABB2E067B79C}) (Version: 1.00.0000 - Valusoft)
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Try Corel Snapfire muvee autoProducer add on (Version: 1.00.0000 - Ihr Firmenname) Hidden
Turtix (HKLM\...\Turtix) (Version:  - )
Turtix 2 (HKLM\...\Turtix 2) (Version:  - )
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vernaeht und zugeflixt! Was stimmt denn hier nicht? (HKLM\...\Vernaeht und zugeflixt! Was stimmt denn hier nicht?) (Version:  - )
Vidalia 0.2.15 (HKLM\...\Vidalia) (Version:  - )
Video Downloader (Version: 1.2.0 - RealNetworks) Hidden
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.6.4 - Shark007)
VTech Download Agent Library (Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM\...\VTechDownloadManager) (Version:  - VTech)
Wieso? Weshalb? Warum? - Unser Körper (HKLM\...\com.rd.www.desktop.DesktopBody) (Version: 1.0.0 - Ravensburger Digital GmbH)
Wieso? Weshalb? Warum? - Unser Körper (Version: 1.0.0 - Ravensburger Digital GmbH) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WordPerfect Office X3 (HKLM\...\_{54DB13F1-0CE0-4BAB-BD5F-7DE150C043C8}) (Version:  - Corel Corporation)
WordPerfect Office X3 (Version: 13.3 - Corel Corporation) Hidden
World Voyage (HKLM\...\World Voyage) (Version: 1.0.0.0 - INTENIUM GmbH)
XMedia Recode 2.3.0.4 (HKLM\...\XMedia Recode) (Version: 2.3.0.4 - Sebastian Dörfler)
XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.)
Zuma's Revenge! (HKLM\...\Zuma's Revenge!1.0) (Version: 1.0 - AllSmartGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> kein Dateipfad

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {032A98DE-A547-4FB1-97B4-777E85FCE80F} - System32\Tasks\{51ECF608-A47D-464B-892E-9A3067C4CA0E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {04338029-ABEF-4DB2-A56D-FF0641970A7A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {08FA19ED-87A2-4BE4-B4F6-1170192766D0} - System32\Tasks\{1D76B916-65CA-47A7-9DD1-C614C8F74E56} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {0922A476-D472-4C6B-AF0D-283C447FF4F0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {248BA49A-31FC-4CBC-AC12-0AD50B3730CD} - System32\Tasks\{2D2CF1E0-A39F-4435-B084-62C323AD4F56} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {262EF14E-2D04-4238-8DD2-2B9AFBBAEC1F} - System32\Tasks\{D62DA859-B3A5-4A8C-8643-BC908C434082} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {2B93871E-90A6-4BD6-B5B2-2B2CCE5A5740} - System32\Tasks\{C791566E-54A6-4DAF-8C0F-0153AA08A504} => pcalua.exe -a D:\Software\Nero\setupx.exe -d D:\Software\Nero
Task: {2D4FEC81-5640-445A-97C1-A780D1FD2CD8} - System32\Tasks\{3D22388D-753E-494E-8F61-D351F8E67C68} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {34B169BF-29C1-4D9E-ABAD-DD33D6A48488} - System32\Tasks\{AA3E9FEA-EE1C-4BD0-A6EE-0AB550AE278F} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {3C30CE7A-A21F-4478-8DFD-AB4484B05538} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {3F4F5314-363F-4D5F-AD46-3C6D3EAA7DDA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} - System32\Tasks\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => Firefox.exe
Task: {474C30BF-0A7E-4DC2-9E6B-369B154E8229} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {49897270-27FE-4B7E-A4F9-1B4F8AE27E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {49E28B95-9408-4715-97DA-1AB7339805C6} - System32\Tasks\{EA4F2F72-7C23-4AB9-8184-245B49DE749F} => C:\Program Files\DEUTSCHLAND SPIELT\BeetleJu2 VollVersion\BeetleJu2_og.exe [2010-11-23] (INTENIUM GmbH)
Task: {4C08C992-D45F-4D07-9702-9FF2FB1E7DA0} - System32\Tasks\{7D0AE273-2305-48F1-AF5C-46BFD622F47E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4E016ADD-5044-4D20-841E-C43FFE2861BD} - System32\Tasks\{F4A27F14-3152-470D-9565-039442275C50} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4EC8D6F7-19A4-43EB-A744-BF2A0A15F56E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {50748F55-16EA-4C55-8547-7EC1D0947037} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {5AC92F98-B42E-4F21-9AA0-01AD0439642E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {5B3F853B-FE70-4847-8631-186551D7012C} - System32\Tasks\{07CBC734-EBA5-454A-913B-EC737132222F} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {66D53617-940A-4E05-871F-28B9007E2CC3} - System32\Tasks\{9BFE3ECE-693E-45CE-A00E-7DC315188CEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {6B725544-E42B-4580-B4AE-E272703AF399} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {6C42F0C8-5E73-4DE6-A971-9CE99159C71D} - System32\Tasks\{71507EB2-BF35-48B0-8135-FCBC7D54BAEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {77D92D5C-1736-4593-BC70-36551C747A1A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {78201B2F-5E80-4168-B233-7212E7A89D0D} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {7DD6E2A0-C6F1-4EFD-92B0-4A0D547C24C5} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {893B18BE-C091-4B27-9D76-82F0BCA99813} - System32\Tasks\{84074564-9C97-48A0-BBB3-89DAB27B7C9B} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9240E8E9-1D41-40BA-B4DE-32542C7145DB} - System32\Tasks\{97E672C4-E6D1-4ED6-99D8-B122A1F86FC0} => pcalua.exe -a D:\DVPP\Setup.exe -d D:\DVPP
Task: {979D3F17-6619-45C5-B404-606838B44253} - System32\Tasks\{E4546B87-1D17-4B95-A0A5-37522F5D05EF} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9C2F05E8-F861-43CF-987B-095EF430F405} - System32\Tasks\{F3AEE607-769D-4C8B-824B-88BEB035F102} => pcalua.exe -a C:\Spiele\Lillifee\setup.exe -d D:
Task: {B0993B05-978C-4A15-AA87-B18AB9A99EFD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {B37A6E42-727E-4E31-A77C-04022A464880} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2015-11-04] (RealNetworks, Inc.)
Task: {BFD53BF4-19B8-4502-92DD-7D926FFA8CA6} - System32\Tasks\{EC680A57-E7BC-4A66-8FBB-20A511FDFA89} => pcalua.exe -a D:\bin\EasyInst.exe -d D:\
Task: {C8250CB2-F11F-4A98-95BB-BA5E812E6A7E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {DAAAE172-7743-4C96-B232-DCC0F5FC7607} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {DBF5DE37-8E99-4B07-813D-41126EA90DB3} - System32\Tasks\{81430713-60CA-4B71-8FBB-D14DA0751514} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F0E42A33-0E8E-4BB2-80F9-8418E2340E57} - System32\Tasks\{287D07D5-E1D7-4882-9C98-35680FC50E9A} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {F20691E7-0B1D-438A-ABD0-2D94FF823CEA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {F526EC9D-6127-42C8-A3B4-E081029D3F7D} - System32\Tasks\{3DEE68DB-465B-46BB-87CD-D6BEE805EFD1} => C:\Program Files\Daedalic Entertainment\The Night of the Rabbit\rabbit.exe [2013-04-28] (Daedalic Entertainment GmbH)
Task: {FB0BD155-6754-4ECC-9711-162FE2741D51} - System32\Tasks\Amazon Music Helper => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-12-08] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2006-11-02 11:40 - 2006-11-02 11:40 - 00174656 _____ () C:\Windows\system32\PSIService.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00033088 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00037720 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2015-11-04 15:19 - 2015-11-04 15:19 - 00039768 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-11-04 15:20 - 2015-11-04 15:20 - 00037728 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:24FECE50 [398]
AlternateDataStreams: C:\ProgramData\TEMP:260575F1 [422]
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4 [368]
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6 [183]
AlternateDataStreams: C:\ProgramData\TEMP:574F975B [184]
AlternateDataStreams: C:\ProgramData\TEMP:9BB8C675 [171]
AlternateDataStreams: C:\ProgramData\TEMP:A3B8F70C [128]
AlternateDataStreams: C:\ProgramData\TEMP:A4AF8D0D [169]
AlternateDataStreams: C:\ProgramData\TEMP:ADF211B1 [100]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [173]
AlternateDataStreams: C:\ProgramData\TEMP:B8791731 [170]
AlternateDataStreams: C:\ProgramData\TEMP:BEE39E9B [190]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\ProgramData\TEMP:E51234A9 [154]
AlternateDataStreams: C:\ProgramData\TEMP:FAB64002 [164]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.exe:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.scr:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.bat:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.com:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.cmd:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.reg:  =>  <===== ACHTUNG

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2006-11-02 03:23 - 2006-09-18 14:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost
::1            localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961\Control Panel\Desktop\\Wallpaper -> C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1003.bak-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093822329\Control Panel\Desktop\\Wallpaper -> C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{771781D7-42F2-4719-BCFC-468823CD634A}] => C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F8F60273-BD4C-4058-B246-6F633BD6A891}] => LPort=1900
FirewallRules: [{20D276B1-3C90-4929-8A32-E4ACCBECC2C8}] => LPort=2869
FirewallRules: [{3355F104-DC9F-42F3-8E9D-3BF5DBF8FEB3}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{0BEA84F4-2656-475A-AE06-59E81719D75F}] => svchost.exe
FirewallRules: [{2BFBBFCF-8C85-480D-A055-0DB5677BDCDE}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{5B4D0C77-79AF-4923-BDC1-B51891E48444}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [UDP Query User{BC460BB0-BD68-48F3-BEB2-47578A7623D9}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{2339DF44-A7DD-4E22-A32A-32DCC95DC337}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{A59E1834-01D3-478B-90C5-6E1D4924AFDB}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{AEB0C184-B9E4-434C-B087-A14CA1DF867B}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{08572AF5-8353-4B61-B8C0-24C618870A9E}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{670FA4AF-6DA8-487A-91EE-B07143EB2170}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BD40ABE-22B5-4230-B66B-47D3BD3D0390}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{55D99CB2-C725-42FC-847A-5909C961EAE8}] => C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{85FDB52D-7A01-43A8-9009-6A168010138A}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8758F947-09B2-41DF-88EC-579BC9CA03E7}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{459568E9-83FC-4C8A-9663-91C2C9B6026F}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{92605963-E425-410C-BB6E-8F4EDEA0C349}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D48E3507-9052-45D0-9E44-24AC955777AA}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4ED3AA0F-7E02-449A-BAA4-34B72C42BF3C}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{A8E2B43C-F558-48C1-A629-118843C42FE8}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [{84839E9D-9BF0-4CCD-A922-70507EA96606}] => c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{175EF583-D4BB-4455-BF80-3778A39EAEAC}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{189936DE-97ED-4FCF-AFD9-FA1ABFB6C531}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D0577CA9-F454-408A-ACDF-7F280302E7BD}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{95DF96B5-51A5-4BAD-8FE7-4BC3CF9AF3DF}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D81DFAC4-5EE4-4BF8-A94D-84503C9C6E7F}] => C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{88496792-6A83-4826-9392-C3A2DBF731BE}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{08F10482-4231-4238-9029-5220201C0B87}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{3199F9F6-FD40-4F4E-B578-F886A82D57DA}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [UDP Query User{AE639368-64F0-4A58-B6CA-0EE42A599710}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe

==================== Wiederherstellungspunkte =========================

24-01-2017 15:04:25 Windows Update
27-01-2017 15:11:14 Avira System Speedup Optimierung
27-01-2017 16:04:18 JRT Pre-Junkware Removal
31-01-2017 10:18:32 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: atksgt
Description: atksgt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: atksgt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: sptd
Description: sptd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: sptd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/31/2017 10:26:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0xec0
Startzeit der fehlerhaften Anwendung: 0x01d27b9dbdf6dc0e
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 516ee2c7-e797-11e6-8b50-001d607b2853

Error: (01/31/2017 10:18:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-1736235967-2657770174-236075978-1003.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.


Vorgang:
  OnIdentify-Ereignis
  Generatordaten werden gesammelt

Kontext:
  Ausführungskontext: Shadow Copy Optimization Writer
  Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
  Generatorname: Shadow Copy Optimization Writer
  Generatorinstanz-ID: {825d267e-3731-43bf-9430-d8f483269a9a}

Error: (01/30/2017 07:02:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1d50
Startzeit der fehlerhaften Anwendung: 0x01d27b220a87b452
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 4a87d4f7-e716-11e6-98c3-001d607b2853

Error: (01/30/2017 06:54:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x19bc
Startzeit der fehlerhaften Anwendung: 0x01d27b20a1bec3b8
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 3181c03b-e715-11e6-98c3-001d607b2853

Error: (01/30/2017 06:44:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x6b8
Startzeit der fehlerhaften Anwendung: 0x01d27b18b440fab7
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: c32495fe-e713-11e6-98c3-001d607b2853

Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 08:47:50 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 08:47:50 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/29/2017 02:50:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x15a4
Startzeit der fehlerhaften Anwendung: 0x01d27a35cd75a541
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: e30ce1ad-e629-11e6-aa4c-001d607b2853


Systemfehler:
=============
Error: (01/31/2017 10:27:15 AM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/31/2017 10:27:15 AM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/31/2017 10:27:15 AM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/31/2017 10:27:15 AM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/31/2017 10:26:34 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/31/2017 09:46:16 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/31/2017 09:42:28 AM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/31/2017 09:42:28 AM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/31/2017 09:42:28 AM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/31/2017 09:42:28 AM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.


==================== Memory info ===========================

Processor: AMD Athlon(tm) X2 Dual Core Processor BE-2300
Prozentuale Nutzung des RAM: 49%
Installierter physikalischer RAM: 1918.49 MB
Verfügbarer physikalischer RAM: 960.62 MB
Summe virtueller Speicher: 3836.98 MB
Verfügbarer virtueller Speicher: 2418.91 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:242.77 GB) (Free:93.6 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive e: () (Fixed) (Total:207.36 GB) (Free:35.49 GB) NTFS
Drive g: (Black) (Fixed) (Total:465.76 GB) (Free:413.34 GB) NTFS
Drive i: (EXTERN 2 -Spiegel-) (Fixed) (Total:242.77 GB) (Free:143.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive m: (EXTERN 1 -DATEN-) (Fixed) (Total:1255.2 GB) (Free:437.65 GB) NTFS
Drive n: (EXTERN 3) (Fixed) (Total:100 GB) (Free:99.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C76EBDA3)
Partition 1: (Active) - (Size=242.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15.6 GB) - (Type=27)
Partition 3: (Not Active) - (Size=207.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5C921633)
Partition 1: (Not Active) - (Size=1255.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=507.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 256E7802)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================

M-K-D-B 31.01.2017 20:36
Servus,





Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
start
CloseProcesses:
HKLM Group Policy restriction on software: C:\Program Files\Common Files\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ACHTUNG
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961 -> Kein Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  Keine Datei
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Keine Datei
FF Homepage: Mozilla\Firefox\Profiles\20811wxw.default -> about:home
FF NetworkProxy: Mozilla\Firefox\Profiles\20811wxw.default -> type", 1
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> kein Dateipfad
Task: {40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} - System32\Tasks\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => Firefox.exe
AlternateDataStreams: C:\ProgramData\TEMP:24FECE50 [398]
AlternateDataStreams: C:\ProgramData\TEMP:260575F1 [422]
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4 [368]
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6 [183]
AlternateDataStreams: C:\ProgramData\TEMP:574F975B [184]
AlternateDataStreams: C:\ProgramData\TEMP:9BB8C675 [171]
AlternateDataStreams: C:\ProgramData\TEMP:A3B8F70C [128]
AlternateDataStreams: C:\ProgramData\TEMP:A4AF8D0D [169]
AlternateDataStreams: C:\ProgramData\TEMP:ADF211B1 [100]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [173]
AlternateDataStreams: C:\ProgramData\TEMP:B8791731 [170]
AlternateDataStreams: C:\ProgramData\TEMP:BEE39E9B [190]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\ProgramData\TEMP:E51234A9 [154]
AlternateDataStreams: C:\ProgramData\TEMP:FAB64002 [164]
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.exe:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.scr:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.bat:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.com:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.cmd:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.reg:  =>  <===== ACHTUNG
Folder: C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Schritt 2
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die beiden neuen Logdateien von FRST (FRST.txt und Addition.txt).

Mineko 31.01.2017 21:54
Hallo Matthias, das ist ja richtig spannend
Hier der Fixlog.txt
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version: 29-01-2017
durchgeführt von Kornelia (31-01-2017 21:31:26) Run:1
Gestartet von C:\Users\Kornelia\Desktop
Geladene Profile: Kornelia &  (Verfügbare Profile: Kornelia & Tabea)
Start-Modus: Normal

==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
HKLM Group Policy restriction on software: C:\Program Files\Common Files\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\G DATA <====== ACHTUNG
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ACHTUNG
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
URLSearchHook: HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} -  Keine Datei
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961 -> Kein Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  Keine Datei
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Keine Datei
FF Homepage: Mozilla\Firefox\Profiles\20811wxw.default -> about:home
FF NetworkProxy: Mozilla\Firefox\Profiles\20811wxw.default -> type", 1
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> kein Dateipfad
Task: {40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} - System32\Tasks\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => Firefox.exe
AlternateDataStreams: C:\ProgramData\TEMP:24FECE50 [398]
AlternateDataStreams: C:\ProgramData\TEMP:260575F1 [422]
AlternateDataStreams: C:\ProgramData\TEMP:35501BA4 [368]
AlternateDataStreams: C:\ProgramData\TEMP:45A64DE6 [183]
AlternateDataStreams: C:\ProgramData\TEMP:574F975B [184]
AlternateDataStreams: C:\ProgramData\TEMP:9BB8C675 [171]
AlternateDataStreams: C:\ProgramData\TEMP:A3B8F70C [128]
AlternateDataStreams: C:\ProgramData\TEMP:A4AF8D0D [169]
AlternateDataStreams: C:\ProgramData\TEMP:ADF211B1 [100]
AlternateDataStreams: C:\ProgramData\TEMP:B139DDF3 [173]
AlternateDataStreams: C:\ProgramData\TEMP:B8791731 [170]
AlternateDataStreams: C:\ProgramData\TEMP:BEE39E9B [190]
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1 [112]
AlternateDataStreams: C:\ProgramData\TEMP:E51234A9 [154]
AlternateDataStreams: C:\ProgramData\TEMP:FAB64002 [164]
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.exe:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.scr:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.bat:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.com:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.cmd:  =>  <===== ACHTUNG
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.reg:  =>  <===== ACHTUNG
Folder: C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************

Prozesse erfolgreich geschlossen.
HKLM Group Policy restriction on software: C:\Program Files\Common Files\G DATA <====== ACHTUNG => erfolgreich wiederhergestellt
HKLM Group Policy restriction on software: C:\Program Files\Common Files\Symantec Shared <====== ACHTUNG => erfolgreich wiederhergestellt
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\G DATA <====== ACHTUNG => erfolgreich wiederhergestellt
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ACHTUNG => erfolgreich wiederhergestellt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{c840e246-6b95-475e-9bd7-caa1c7eca9f2} => Wert erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\Software\Microsoft\Internet Explorer\URLSearchHooks\\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724 - (Kein Name) - {c840e246-6b95-475e-9bd7-caa1c7eca9f2} => Wert nicht gefunden.
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} => Wert nicht gefunden.
HKCR\CLSID\Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} => Schlüssel nicht gefunden.
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-01312017093817961\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{{D4027C7F-154A-4066-A1AD-4243D8127440} => Wert nicht gefunden.
HKCR\CLSID\Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{{D4027C7F-154A-4066-A1AD-4243D8127440} => Schlüssel nicht gefunden.
Firefox "homepage" erfolgreich entfernt
Firefox Proxy-Einstellungen wurden zurückgesetzt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{00BB2763-6A77-11D0-A535-00C04FD7D062} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{03C036F1-A186-11D0-824A-00AA005B4383} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4336A54D-038B-4685-AB02-99BB52D3FB8B} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{603D3800-BD81-11D0-A3A5-00C04FD706EC} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{6311429E-2F1A-4777-880F-C7289FD10169} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{76765B11-3F95-4AF2-AC9D-EA55D8994F1A} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{77F419AA-771A-45FF-AC66-7567FA3243D3} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{807C1E6C-1D00-453F-B920-B61BB7CDD997} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{82C588E7-E54B-408C-9F8C-6AF9ADF6F1E9} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{AE054212-3535-4430-83ED-D501AA6680E6} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{B8967F85-58AE-4F46-9FB2-5D7904798F4B} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{EDB5F444-CB8D-445A-A523-EC5AB6EA33C7} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C} => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{40B72FB4-CFE2-4347-A69C-6AA6A1291F0F} => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CC841AF3-7C05-4252-BDD9-2A3892CD4929} => Schlüssel erfolgreich entfernt
C:\ProgramData\TEMP => ":24FECE50" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":260575F1" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":35501BA4" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":45A64DE6" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":574F975B" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":9BB8C675" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":A3B8F70C" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":A4AF8D0D" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":ADF211B1" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":B139DDF3" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":B8791731" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":BEE39E9B" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":D1B5B4F1" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":E51234A9" ADS erfolgreich entfernt.
C:\ProgramData\TEMP => ":FAB64002" ADS erfolgreich entfernt.
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.exe => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.scr => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.bat => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.com => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.cmd => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\.reg => Schlüssel erfolgreich entfernt

========================= Folder: C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C} ========================

C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C} => Datei

====== Ende von Folder: ======


========= dir "%ProgramFiles%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: 02B7-1024

 Verzeichnis von C:\Program Files

28.01.2017  12:26    <DIR>          .
28.01.2017  12:26    <DIR>          ..
05.07.2011  09:33    <DIR>          7-Zip
14.08.2016  14:22    <DIR>          Adobe
05.07.2011  09:33    <DIR>          Alcohol Soft
26.01.2017  23:52    <DIR>          Amazon
02.06.2010  05:21        1.347.354 Apr2005_d3dx9_25_x64.cab
02.06.2010  05:21        1.078.962 Apr2005_d3dx9_25_x86.cab
02.06.2010  05:21        1.397.830 Apr2006_d3dx9_30_x64.cab
02.06.2010  05:21        1.115.221 Apr2006_d3dx9_30_x86.cab
02.06.2010  05:21          916.430 Apr2006_MDX1_x86.cab
02.06.2010  05:21        4.162.630 Apr2006_MDX1_x86_Archive.cab
02.06.2010  05:21          179.133 Apr2006_XACT_x64.cab
02.06.2010  05:21          133.103 Apr2006_XACT_x86.cab
02.06.2010  05:21            87.101 Apr2006_xinput_x64.cab
02.06.2010  05:21            46.010 Apr2006_xinput_x86.cab
02.06.2010  05:21          698.612 APR2007_d3dx10_33_x64.cab
02.06.2010  05:21          695.865 APR2007_d3dx10_33_x86.cab
02.06.2010  05:21        1.607.358 APR2007_d3dx9_33_x64.cab
02.06.2010  05:21        1.606.039 APR2007_d3dx9_33_x86.cab
02.06.2010  05:21          195.766 APR2007_XACT_x64.cab
02.06.2010  05:21          151.225 APR2007_XACT_x86.cab
02.06.2010  05:21            96.817 APR2007_xinput_x64.cab
02.06.2010  05:21            53.302 APR2007_xinput_x86.cab
10.03.2012  19:36    <DIR>          astragon Software
22.10.2011  16:30    <DIR>          astrogon Software
05.07.2011  09:33    <DIR>          ATI
05.07.2011  09:33    <DIR>          ATI Technologies
02.06.2010  05:21        1.350.542 Aug2005_d3dx9_27_x64.cab
02.06.2010  05:21        1.077.644 Aug2005_d3dx9_27_x86.cab
02.06.2010  05:21          182.903 AUG2006_XACT_x64.cab
02.06.2010  05:21          137.235 AUG2006_XACT_x86.cab
02.06.2010  05:21            87.142 AUG2006_xinput_x64.cab
02.06.2010  05:21            46.058 AUG2006_xinput_x86.cab
02.06.2010  05:21          852.286 AUG2007_d3dx10_35_x64.cab
02.06.2010  05:21          796.867 AUG2007_d3dx10_35_x86.cab
02.06.2010  05:21        1.800.160 AUG2007_d3dx9_35_x64.cab
02.06.2010  05:21        1.708.152 AUG2007_d3dx9_35_x86.cab
02.06.2010  05:21          198.096 AUG2007_XACT_x64.cab
02.06.2010  05:21          153.012 AUG2007_XACT_x86.cab
02.06.2010  05:21          867.612 Aug2008_d3dx10_39_x64.cab
02.06.2010  05:21          849.167 Aug2008_d3dx10_39_x86.cab
02.06.2010  05:21        1.794.084 Aug2008_d3dx9_39_x64.cab
02.06.2010  05:21        1.464.672 Aug2008_d3dx9_39_x86.cab
02.06.2010  05:21          121.772 Aug2008_XACT_x64.cab
02.06.2010  05:21            92.996 Aug2008_XACT_x86.cab
02.06.2010  05:21          271.412 Aug2008_XAudio_x64.cab
02.06.2010  05:21          271.038 Aug2008_XAudio_x86.cab
02.06.2010  05:21          919.044 Aug2009_D3DCompiler_42_x64.cab
02.06.2010  05:21          900.598 Aug2009_D3DCompiler_42_x86.cab
02.06.2010  05:21        3.112.111 Aug2009_d3dcsx_42_x64.cab
02.06.2010  05:21        3.319.740 Aug2009_d3dcsx_42_x86.cab
02.06.2010  05:21          232.635 Aug2009_d3dx10_42_x64.cab
02.06.2010  05:21          192.131 Aug2009_d3dx10_42_x86.cab
02.06.2010  05:21          136.301 Aug2009_d3dx11_42_x64.cab
02.06.2010  05:21          105.044 Aug2009_d3dx11_42_x86.cab
02.06.2010  05:21          930.116 Aug2009_d3dx9_42_x64.cab
02.06.2010  05:21          728.456 Aug2009_d3dx9_42_x86.cab
02.06.2010  05:22          122.408 Aug2009_XACT_x64.cab
02.06.2010  05:22            93.106 Aug2009_XACT_x86.cab
02.06.2010  05:22          273.264 Aug2009_XAudio_x64.cab
02.06.2010  05:22          272.642 Aug2009_XAudio_x86.cab
26.01.2017  13:57    <DIR>          Avira
05.07.2011  09:33    <DIR>          AviSynth 2.5
05.07.2011  09:33    <DIR>          bfgclient
05.07.2011  09:33    <DIR>          BurnAware Free
30.09.2013  16:38    <DIR>          Calibre2
04.01.2014  21:08    <DIR>          CCleaner
02.07.2013  14:21    <DIR>          CDBurnerXP
10.03.2013  19:49    <DIR>          CDEX-WAV-TO-MP3
05.07.2011  09:33    <DIR>          City Interactive
07.01.2017  17:25    <DIR>          Common Files
05.07.2011  09:34    <DIR>          Complex
05.07.2011  09:34    <DIR>          Corel
14.10.2015  19:09    <DIR>          Daedalic Entertainment
05.07.2011  09:34    <DIR>          DataDesign
02.06.2010  05:22        1.357.976 Dec2005_d3dx9_28_x64.cab
02.06.2010  05:22        1.079.456 Dec2005_d3dx9_28_x86.cab
02.06.2010  05:22          212.807 DEC2006_d3dx10_00_x64.cab
02.06.2010  05:22          191.720 DEC2006_d3dx10_00_x86.cab
02.06.2010  05:22        1.571.154 DEC2006_d3dx9_32_x64.cab
02.06.2010  05:22        1.574.376 DEC2006_d3dx9_32_x86.cab
02.06.2010  05:22          192.475 DEC2006_XACT_x64.cab
02.06.2010  05:22          145.599 DEC2006_XACT_x86.cab
22.02.2014  13:49    <DIR>          DEUTSCHLAND SPIELT
27.01.2017  15:12    <DIR>          DivX
02.06.2010  05:22            89.944 DSETUP.dll
02.06.2010  05:22        1.801.048 dsetup32.dll
05.07.2011  16:03    <DIR>          DVD Maker
05.07.2011  09:35    <DIR>          dvd43
26.01.2017  23:48    <DIR>          DVDVideoSoft
02.06.2010  05:22            42.410 dxdllreg_x86.cab
02.06.2010  05:22          537.432 DXSETUP.exe
02.06.2010  05:22            94.011 dxupdate.cab
07.12.2011  17:38    <DIR>          Emil und Pauline
02.06.2010  05:22        1.247.499 Feb2005_d3dx9_24_x64.cab
02.06.2010  05:22        1.013.225 Feb2005_d3dx9_24_x86.cab
02.06.2010  05:22        1.362.796 Feb2006_d3dx9_29_x64.cab
02.06.2010  05:22        1.084.720 Feb2006_d3dx9_29_x86.cab
02.06.2010  05:22          178.359 Feb2006_XACT_x64.cab
02.06.2010  05:22          132.409 Feb2006_XACT_x86.cab
02.06.2010  05:22          194.675 FEB2007_XACT_x64.cab
02.06.2010  05:22          147.983 FEB2007_XACT_x86.cab
02.06.2010  05:22            54.678 Feb2010_X3DAudio_x64.cab
02.06.2010  05:22            20.713 Feb2010_X3DAudio_x86.cab
02.06.2010  05:22          122.446 Feb2010_XACT_x64.cab
02.06.2010  05:22            93.180 Feb2010_XACT_x86.cab
02.06.2010  05:22          276.960 Feb2010_XAudio_x64.cab
02.06.2010  05:22          277.191 Feb2010_XAudio_x86.cab
13.05.2010  19:02    <DIR>          FLAC
05.07.2011  09:37    <DIR>          foobar2000
05.07.2011  09:37    <DIR>          FreeTime
23.07.2012  13:08    <DIR>          Galileo Family Quiz - Spezial II
27.11.2011  14:47    <DIR>          Galileo Family Quiz - Spezial III
27.01.2017  00:05    <DIR>          GMX
19.07.2012  08:17    <DIR>          GMX SMS-MMS-Manager
11.12.2013  07:42    <DIR>          Google
17.02.2014  00:37    <DIR>          Impactor
17.12.2016  11:29    <DIR>          Internet Explorer
15.02.2012  01:42    <DIR>          Java
02.06.2010  05:22        1.336.002 Jun2005_d3dx9_26_x64.cab
02.06.2010  05:22        1.064.925 Jun2005_d3dx9_26_x86.cab
02.06.2010  05:22          180.785 JUN2006_XACT_x64.cab
02.06.2010  05:22          133.671 JUN2006_XACT_x86.cab
02.06.2010  05:22          699.044 JUN2007_d3dx10_34_x64.cab
02.06.2010  05:22          698.472 JUN2007_d3dx10_34_x86.cab
02.06.2010  05:22        1.607.774 JUN2007_d3dx9_34_x64.cab
02.06.2010  05:22        1.607.286 JUN2007_d3dx9_34_x86.cab
02.06.2010  05:22          197.122 JUN2007_XACT_x64.cab
02.06.2010  05:22          152.909 JUN2007_XACT_x86.cab
02.06.2010  05:22          867.828 JUN2008_d3dx10_38_x64.cab
02.06.2010  05:22          849.919 JUN2008_d3dx10_38_x86.cab
02.06.2010  05:22        1.792.608 JUN2008_d3dx9_38_x64.cab
02.06.2010  05:22        1.463.878 JUN2008_d3dx9_38_x86.cab
02.06.2010  05:22            55.154 JUN2008_X3DAudio_x64.cab
02.06.2010  05:22            21.905 JUN2008_X3DAudio_x86.cab
02.06.2010  05:22          121.054 JUN2008_XACT_x64.cab
02.06.2010  05:22            93.128 JUN2008_XACT_x86.cab
02.06.2010  05:22          269.628 JUN2008_XAudio_x64.cab
02.06.2010  05:22          269.024 JUN2008_XAudio_x86.cab
02.06.2010  05:22          944.460 Jun2010_D3DCompiler_43_x64.cab
02.06.2010  05:22          931.471 Jun2010_D3DCompiler_43_x86.cab
02.06.2010  05:22          752.783 Jun2010_d3dcsx_43_x64.cab
02.06.2010  05:22          762.188 Jun2010_d3dcsx_43_x86.cab
02.06.2010  05:22          235.955 Jun2010_d3dx10_43_x64.cab
02.06.2010  05:22          197.283 Jun2010_d3dx10_43_x86.cab
02.06.2010  05:22          138.205 Jun2010_d3dx11_43_x64.cab
02.06.2010  05:22          109.445 Jun2010_d3dx11_43_x86.cab
02.06.2010  05:22          937.246 Jun2010_d3dx9_43_x64.cab
02.06.2010  05:22          768.036 Jun2010_d3dx9_43_x86.cab
02.06.2010  05:22          124.596 Jun2010_XACT_x64.cab
02.06.2010  05:22            93.686 Jun2010_XACT_x86.cab
02.06.2010  05:22          277.338 Jun2010_XAudio_x64.cab
02.06.2010  05:22          278.060 Jun2010_XAudio_x86.cab
05.07.2011  09:37    <DIR>          Letstrade
02.07.2012  23:17    <DIR>          LicenseCrawler
05.07.2011  09:38    <DIR>          Logitech
27.01.2017  13:54    <DIR>          Malwarebytes
28.04.2012  20:53    <DIR>          Manic Digger
02.06.2010  05:22          844.884 Mar2008_d3dx10_37_x64.cab
02.06.2010  05:22          818.260 Mar2008_d3dx10_37_x86.cab
02.06.2010  05:22        1.769.862 Mar2008_d3dx9_37_x64.cab
02.06.2010  05:22        1.443.282 Mar2008_d3dx9_37_x86.cab
02.06.2010  05:22            55.058 Mar2008_X3DAudio_x64.cab
02.06.2010  05:22            21.867 Mar2008_X3DAudio_x86.cab
02.06.2010  05:22          122.336 Mar2008_XACT_x64.cab
02.06.2010  05:22            93.734 Mar2008_XACT_x86.cab
02.06.2010  05:22          251.194 Mar2008_XAudio_x64.cab
02.06.2010  05:22          226.250 Mar2008_XAudio_x86.cab
02.06.2010  05:22        1.067.160 Mar2009_d3dx10_41_x64.cab
02.06.2010  05:22        1.040.745 Mar2009_d3dx10_41_x86.cab
02.06.2010  05:22        1.973.702 Mar2009_d3dx9_41_x64.cab
02.06.2010  05:22        1.612.446 Mar2009_d3dx9_41_x86.cab
02.06.2010  05:22            54.600 Mar2009_X3DAudio_x64.cab
02.06.2010  05:22            21.298 Mar2009_X3DAudio_x86.cab
02.06.2010  05:22          121.506 Mar2009_XACT_x64.cab
02.06.2010  05:22            92.740 Mar2009_XACT_x86.cab
02.06.2010  05:22          275.044 Mar2009_XAudio_x64.cab
02.06.2010  05:22          273.018 Mar2009_XAudio_x86.cab
25.05.2012  10:56    <DIR>          Microsoft
05.07.2011  09:38    <DIR>          Microsoft CAPICOM 2.1.0.2
05.07.2011  09:38    <DIR>          Microsoft Games
17.01.2012  15:08    <DIR>          Microsoft Office
28.10.2016  15:23    <DIR>          Microsoft Silverlight
15.01.2012  23:51    <DIR>          Microsoft SQL Server Compact Edition
17.01.2012  15:08    <DIR>          Microsoft Visual Studio
17.01.2012  15:05    <DIR>          Microsoft Visual Studio 8
18.01.2012  03:03    <DIR>          Microsoft Works
17.01.2012  15:07    <DIR>          Microsoft.NET
27.01.2017  15:43    <DIR>          Mozilla Firefox
27.01.2017  15:43    <DIR>          Mozilla Maintenance Service
27.01.2017  00:04    <DIR>          Mozilla Thunderbird
17.01.2012  15:09    <DIR>          MSBuild
27.11.2012  17:11    <DIR>          MSECache
15.10.2007  00:01    <DIR>          MSXML 4.0
21.10.2011  17:43    <DIR>          MumboJumbo
07.10.2013  15:35    <DIR>          Mystery Places - Das Geheimnis der Geistervilla
05.07.2011  09:38    <DIR>          Nero
02.06.2010  05:22          864.600 Nov2007_d3dx10_36_x64.cab
02.06.2010  05:22          803.884 Nov2007_d3dx10_36_x86.cab
02.06.2010  05:22        1.802.058 Nov2007_d3dx9_36_x64.cab
02.06.2010  05:22        1.709.360 Nov2007_d3dx9_36_x86.cab
02.06.2010  05:22            46.144 NOV2007_X3DAudio_x64.cab
02.06.2010  05:22            18.496 NOV2007_X3DAudio_x86.cab
02.06.2010  05:22          196.762 NOV2007_XACT_x64.cab
02.06.2010  05:22          148.264 NOV2007_XACT_x86.cab
02.06.2010  05:22          994.154 Nov2008_d3dx10_40_x64.cab
02.06.2010  05:22          965.421 Nov2008_d3dx10_40_x86.cab
02.06.2010  05:22        1.906.878 Nov2008_d3dx9_40_x64.cab
02.06.2010  05:22        1.550.796 Nov2008_d3dx9_40_x86.cab
02.06.2010  05:22            54.522 Nov2008_X3DAudio_x64.cab
02.06.2010  05:22            21.851 Nov2008_X3DAudio_x86.cab
02.06.2010  05:22          121.794 Nov2008_XACT_x64.cab
02.06.2010  05:22            92.684 Nov2008_XACT_x86.cab
02.06.2010  05:22          273.960 Nov2008_XAudio_x64.cab
02.06.2010  05:22          272.611 Nov2008_XAudio_x86.cab
26.06.2012  14:29    <DIR>          Novel Games
02.06.2010  05:22            86.037 Oct2005_xinput_x64.cab
02.06.2010  05:22            45.359 Oct2005_xinput_x86.cab
02.06.2010  05:22        1.412.902 OCT2006_d3dx9_31_x64.cab
02.06.2010  05:22        1.127.217 OCT2006_d3dx9_31_x86.cab
02.06.2010  05:22          182.361 OCT2006_XACT_x64.cab
02.06.2010  05:22          138.017 OCT2006_XACT_x86.cab
05.07.2011  09:38    <DIR>          OXXOGames
05.07.2011  09:39    <DIR>          Paragon Software
05.07.2011  09:39    <DIR>          PixiePack Codec Pack
23.09.2011  22:37    <DIR>          PlayReady
05.07.2011  09:39    <DIR>          ProtectDisc Driver Installer
12.03.2014  19:45    <DIR>          Purplehills
05.07.2011  09:39    <DIR>          RapidSolution
10.03.2013  19:42    <DIR>          ratDVD
28.12.2011  12:24    <DIR>          Ravensburger Digital
01.12.2012  14:55    <DIR>          Ravensburger tiptoi
28.11.2015  11:46    <DIR>          Real
28.11.2015  11:44    <DIR>          RealNetworks
05.07.2011  09:39    <DIR>          Realtek
14.07.2009  05:52    <DIR>          Reference Assemblies
13.10.2012  15:49    <DIR>          rondomedia
06.11.2011  12:42    <DIR>          S.A.D
24.10.2011  09:43    <DIR>          Sierra Entertainment
03.05.2015  12:42    <DIR>          Skype
16.11.2012  16:59    <DIR>          Sony
27.05.2013  15:08    <DIR>          Sony Ericsson
22.08.2011  20:00    <DIR>          Sweet Home 3D
02.10.2015  18:33    <DIR>          TP-LINK
16.09.2013  20:58    <DIR>          TrueCrypt
28.02.2014  12:32    <DIR>          Tr”delsch„tze
22.09.2013  10:31    <DIR>          uTorrent
01.11.2011  11:13    <DIR>          Vidalia Bundle
05.07.2011  09:40    <DIR>          VistaCodecPack
18.12.2013  23:01    <DIR>          VTech
05.07.2011  09:40    <DIR>          Windows Calendar
05.07.2011  09:40    <DIR>          Windows Collaboration
01.09.2013  11:26    <DIR>          Windows Defender
06.08.2012  00:44    <DIR>          Windows Live
05.07.2011  16:03    <DIR>          Windows Mail
28.10.2016  15:26    <DIR>          Windows Media Player
05.07.2011  10:33    <DIR>          Windows NT
05.07.2011  09:40    <DIR>          Windows Photo Gallery
05.07.2011  16:03    <DIR>          Windows Photo Viewer
05.07.2011  16:03    <DIR>          Windows Portable Devices
05.07.2011  16:03    <DIR>          Windows Sidebar
05.07.2011  09:40    <DIR>          WinTV
05.07.2011  09:40    <DIR>          WordPerfect Office X3
05.07.2011  09:40    <DIR>          XMedia Recode
08.10.2014  16:36    <DIR>          XMind
            157 Datei(en),    103.174.432 Bytes
            109 Verzeichnis(se), 99.605.426.176 Bytes frei

========= Ende von CMD: =========


========= dir "%ProgramFiles(x86)%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: 02B7-1024

 Verzeichnis von C:\Users\Kornelia\Desktop

Datei nicht gefunden

========= Ende von CMD: =========


========= dir "%ProgramData%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: 02B7-1024

 Verzeichnis von C:\ProgramData

14.08.2016  14:22    <DIR>          Adobe
05.07.2011  09:41    <DIR>          Ahead
05.07.2011  09:41    <DIR>          Alawar Stargaze
05.07.2011  09:41    <DIR>          ATI
26.01.2017  13:57    <DIR>          Avira
11.01.2015  13:58    <DIR>          Baidu
05.07.2011  09:41    <DIR>          Borland
05.07.2011  09:41    <DIR>          Canneverbe Limited
05.07.2011  09:41    <DIR>          Corel
07.03.2012  20:23    <DIR>          Deep Shadows
27.12.2011  19:04    <DIR>          DivX
03.03.2012  21:32    <DIR>          Elephant Games
05.07.2011  09:41    <DIR>          FarmFrenzy3_Russia
21.02.2014  19:19    <DIR>          FarmFrenzy_Rome
05.07.2011  09:41    <DIR>          Fenomen Games
05.07.2011  09:41    <DIR>          Finstere Liebschaft
05.07.2011  09:41    <DIR>          G DATA
19.09.2011  16:17    <DIR>          Intenium
05.07.2011  09:41    <DIR>          IronCode
31.03.2012  21:35    <DIR>          Kingdom
05.07.2011  09:41    <DIR>          LightScribe
05.07.2011  09:41    <DIR>          LogiShrd
27.01.2017  13:54    <DIR>          Malwarebytes
05.07.2011  09:41    <DIR>          McAfee
24.10.2011  09:43    <DIR>          Media Center Programs
05.07.2011  09:41    <DIR>          Merscom
23.10.2016  14:14    <DIR>          Microsoft Help
05.07.2011  09:41    <DIR>          MMM
30.04.2012  09:26    <DIR>          Mozilla
21.10.2011  17:46    <DIR>          MumboJumbo
05.07.2011  09:41    <DIR>          My Music
05.07.2011  09:41    <DIR>          Nero
24.01.2017  23:47    <DIR>          Norton
11.12.2011  18:05    <DIR>          NortonInstaller
26.01.2017  13:52    <DIR>          Package Cache
05.07.2011  09:41    <DIR>          Perfect-Tree
05.07.2011  09:41    <DIR>          PlayFirst
05.07.2011  09:41    <DIR>          RapidSolution
28.11.2015  11:45    <DIR>          Real
28.11.2015  11:43    <DIR>          RealNetworks
05.07.2011  09:41    <DIR>          ScreenSeven
16.03.2014  18:45    <DIR>          Sierra
24.11.2012  18:34    <DIR>          Simajo The Travel M¢stery Game
03.05.2015  12:42    <DIR>          Skype
04.08.2012  23:08    <DIR>          Skype Extras
16.11.2012  16:59    <DIR>          Sony
29.04.2013  18:43    <DIR>          Sony Ericsson
05.07.2011  09:41    <DIR>          SpinTop Games
05.07.2011  09:41    <DIR>          Sun
12.09.2013  19:38    <DIR>          Symantec
05.11.2016  13:17    <DIR>          TEMP
05.07.2011  09:41    <DIR>          TheFallTrilogy-PG
05.07.2011  09:41    <DIR>          TheFallTrilogyEp2-PG
22.10.2011  13:04    <DIR>          Top Evidence
02.10.2015  18:33    <DIR>          TP-LINK
05.07.2011  09:41    <DIR>          TuneUp Software
05.07.2011  09:42    <DIR>          VistaCodecs
18.12.2013  23:01    <DIR>          VTech
23.09.2011  21:04    <DIR>          Windows Genuine Advantage
              0 Datei(en),              0 Bytes
              59 Verzeichnis(se), 99.605.270.528 Bytes frei

========= Ende von CMD: =========


========= dir "%Appdata%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: 02B7-1024

 Verzeichnis von C:\Users\Kornelia\AppData\Roaming

27.01.2017  16:06    <DIR>          .
27.01.2017  16:06    <DIR>          ..
28.04.2012  18:19    <DIR>          .minecraft
30.09.2013  16:19    <DIR>          Adobe
12.03.2010  09:44    <DIR>          AdobeUM
05.07.2011  09:51    <DIR>          Ahead
26.01.2017  23:52    <DIR>          Amazon
17.10.2011  23:27    <DIR>          Anabel
13.10.2012  15:57    <DIR>          Artifex Mundi
05.07.2011  09:51    <DIR>          ATI
26.01.2017  19:57    <DIR>          Avira
07.04.2013  09:41    <DIR>          Big Fish Games
27.12.2014  17:31    <DIR>          Blue Tea Games
14.09.2013  17:49    <DIR>          Boomzap
22.10.2010  14:46              388 burnaware.ini
30.09.2013  16:39    <DIR>          calibre
07.04.2013  09:41    <DIR>          Canneverbe Limited
05.07.2011  09:51    <DIR>          cerasus.media
28.12.2011  12:26    <DIR>          com.rd.www.desktop.DesktopBody
29.06.2012  07:57    <DIR>          com.unitedinternet.ums.sms-mms-manager
19.01.2017  21:19    <DIR>          COREL
05.07.2011  09:51    <DIR>          DivX
07.04.2013  09:43    <DIR>          dvdcss
26.01.2017  23:48    <DIR>          DVDVideoSoft
03.03.2012  21:32    <DIR>          Elephant Games
07.04.2013  09:41    <DIR>          Enki Games
04.06.2013  18:23    <DIR>          ERS Game Studios
23.04.2012  16:54    <DIR>          EurekaLog
28.02.2014  12:35    <DIR>          Fabulous Finds
05.07.2011  09:51    <DIR>          Finstere Liebschaft
07.04.2013  09:43    <DIR>          foobar2000
05.07.2011  09:51    <DIR>          Friday's games
10.03.2012  19:41    <DIR>          GameMill Entertainment
04.10.2012  13:25    <DIR>          HandBrake
12.07.2011  14:00    <DIR>          Identities
05.07.2011  09:51    <DIR>          InstallShield
05.07.2011  09:51    <DIR>          IronCode
05.07.2011  09:51    <DIR>          Leadertech
07.04.2013  09:41    <DIR>          Macromedia
26.02.2014  20:08    <DIR>          Mad Head Games
14.07.2009  09:56    <DIR>          Media Center Programs
05.07.2011  09:51    <DIR>          Merscom
07.04.2013  09:41    <DIR>          Mozilla
05.07.2011  09:51    <DIR>          PlayFirst
05.07.2011  09:51    <DIR>          Princess Isabella
07.04.2013  09:43    <DIR>          ProtectDisc
28.11.2015  11:49    <DIR>          Real
28.11.2015  11:45    <DIR>          RealNetworks
07.04.2013  09:41    <DIR>          S.A.D
05.07.2011  09:51    <DIR>          Sahmon Games
30.10.2011  09:15    <DIR>          ScreenSeven
05.07.2011  09:51    <DIR>          SevenSails
06.01.2014  23:21    <DIR>          Skype
27.01.2017  15:13    <DIR>          skypePM
07.04.2013  09:43    <DIR>          Thunderbird
22.10.2011  13:04    <DIR>          Top Evidence
07.04.2013  09:43    <DIR>          Tor
23.11.2015  19:30    <DIR>          TP-LINK
16.09.2013  22:25    <DIR>          TrueCrypt
07.04.2013  09:41    <DIR>          TuneUp Software
17.09.2012  16:29    <DIR>          U3
07.04.2013  09:41    <DIR>          URSE Games
21.10.2016  20:41    <DIR>          uTorrent
05.07.2011  09:51    <DIR>          Vast Studios
27.01.2017  15:13    <DIR>          Vidalia
07.04.2013  09:43    <DIR>          VistaCodecs
07.04.2013  15:52    <DIR>          vlc
07.04.2013  09:43    <DIR>          XMedia Recode
              1 Datei(en),            388 Bytes
              67 Verzeichnis(se), 99.605.221.376 Bytes frei

========= Ende von CMD: =========


========= dir "%LocalAppdata%" =========

 Volume in Laufwerk C: hat keine Bezeichnung.
 Volumeseriennummer: 02B7-1024

 Verzeichnis von C:\Users\Kornelia\AppData\Local

30.01.2017  17:51    <DIR>          .
30.01.2017  17:51    <DIR>          ..
08.01.2017  21:33    <DIR>          Adobe
05.07.2011  09:50    <DIR>          Ahead
17.01.2015  15:57    <DIR>          Amazon Music
05.07.2011  09:50    <DIR>          Apps
05.07.2011  09:50    <DIR>          ATI
27.01.2017  14:35    <DIR>          Avira
27.01.2017  14:42    <DIR>          AviraSpeedup
18.12.2013  23:02    <DIR>          cache
30.09.2013  16:39    <DIR>          calibre-cache
08.01.2017  21:33    <DIR>          CEF
19.12.2013  00:05              679 cookies.ini
05.07.2011  09:50    <DIR>          Corel
14.10.2015  19:22    <DIR>          Daedalic Entertainment
28.07.2015  17:08            8.192 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
27.12.2011  19:41    <DIR>          DDMSettings
01.12.2016  22:09    <DIR>          Diagnostics
07.04.2013  09:43    <DIR>          Downloaded Installations
11.06.2013  21:19    <DIR>          Facebook
05.07.2011  09:50    <DIR>          G DATA
26.01.2017  17:26          120.432 GDIPFONTCACHEV1.DAT
07.04.2013  09:40    <DIR>          Google
19.07.2015  16:28    <DIR>          GWX
27.01.2017  15:13    <DIR>          JDownloader 2.0
05.07.2011  09:50    <DIR>          LogiShrd
20.06.2012  10:25    <DIR>          Macromedia
30.10.2015  08:13    <DIR>          Microsoft
06.08.2013  22:07    <DIR>          Microsoft Games
23.01.2017  15:51    <DIR>          Microsoft Help
15.08.2013  13:59    <DIR>          Mozilla
17.05.2014  10:35    <DIR>          Programs
07.04.2013  09:40    <DIR>          RapidSolution
10.03.2013  19:42    <DIR>          ratDVD
04.09.2013  15:57    <DIR>          Real
16.11.2012  18:44    <DIR>          Sony
13.09.2010  20:53    <DIR>          STARGAZE_IMAGE_CACHE
31.01.2017  21:31    <DIR>          Temp
30.12.2014  23:13    <DIR>          Thunderbird
07.07.2015  15:06    <DIR>          Turtix
07.04.2013  09:41    <DIR>          VirtualStore
21.07.2012  12:03    <DIR>          Windows Live
26.07.2011  18:23                0 {38D64D27-A406-4959-8E9F-79A45D04043C}
              4 Datei(en),        129.303 Bytes
              39 Verzeichnis(se), 99.605.180.416 Bytes frei

========= Ende von CMD: =========


========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01312017094722724\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


========= ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========= Ende von CMD: =========


========= netsh winsock reset =========


Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.


========= Ende von CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 70352372 B
Java, Flash, Steam htmlcache => 8170 B
Windows/system/drivers => 43340406 B
Edge => 0 B
Chrome => 658800 B
Firefox => 394678138 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 451140 B
Public => 0 B
ProgramData => 0 B
systemprofile => 29542723 B
LocalService => 66228 B
NetworkService => 83110 B
Kornelia => 620806143 B
Tabea => 1224853 B
Konni => 125177 B

RecycleBin => 1763360 B
EmptyTemp: => 1.1 GB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende vom Fixlog 21:35:35 ====

Mineko 31.01.2017 22:07
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 29-01-2017
durchgeführt von Kornelia (Administrator) auf KORNELIA-PC (31-01-2017 21:55:20)
Gestartet von C:\Users\Kornelia\Desktop
Geladene Profile: Kornelia (Verfügbare Profile: Kornelia & Tabea)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.VpnService.exe
() C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Nero AG) C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(mobile concepts GmbH) C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Program Files\dvd43\DVD43_Tray.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(Intenium) C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe
(Google) C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
() C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4702208 2007-10-01] (Realtek Semiconductor)
HKLM\...\Run: [dvd43] => C:\Program Files\dvd43\dvd43_tray.exe [827904 2009-10-23] ()
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AgentMonitor] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [391040 2013-06-20] ()
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [286992 2015-11-28] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25744 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup Tray] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [160936 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Spiele Post] => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AOButler.exe - Verknüpfung.lnk [2012-05-05]
ShortcutTarget: AOButler.exe - Verknüpfung.lnk -> C:\Program Files\ArcorOnline\AOButler.exe (Keine Datei)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk [2013-01-10]
ShortcutTarget: Google Calendar Sync.lnk -> C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013-02-09]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (Keine Datei)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-11-28]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-10-02]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
Startup: C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-31]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AOButler.lnk [2012-06-03]
ShortcutTarget: AOButler.lnk -> C:\Program Files\ArcorOnline\AOButler.exe (Keine Datei)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-03-04]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-31]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-01-31]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23F9AFAB-2021-4A7D-9477-EBCFE8F59F7E}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9AD09A44-51EC-4D6E-9E93-74F49F171E7E}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-11-04] (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default [2017-01-31]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\20811wxw.default ->
FF Session Restore: Mozilla\Firefox\Profiles\20811wxw.default -> ist aktiviert.
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com [2017-01-26]
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com.xpi [2017-01-08]
FF Extension: (FacebookBlocker) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\facebookBlocker@webgraph.com [2014-02-16] [ist nicht signiert]
FF Extension: (NO Google Analytics) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-JcGokIiQyjoBAQ@jetpack.xpi [2016-06-09]
FF Extension: (Official My JDownloader AddOn) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2017-01-07]
FF Extension: (Test Pilot) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\testpilot@labs.mozilla.com.xpi [2016-09-01]
FF Extension: (NoScript) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-01-20]
FF Extension: (Adblock Plus) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-16]
FF Extension: (Torbutton) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}.xpi [2012-10-11] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-07-05] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: (Mehr Leistung und Videoformate für dein HTML5 &video&) - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-12-27] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll [2012-07-05] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-11-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2010-02-04] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-11-28] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2014-04-27] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2014-04-27] (RealPlayer Cloud)

Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll => Keine Datei
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\pdf.dll => Keine Datei
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default [2017-01-31]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-16]
CHR Extension: (RealDownloader) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-11-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-07]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-15]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files\Avira\VPN\Avira.VpnService.exe [300344 2017-01-18] (Avira Operations GmbH & Co. KG)
R2 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S2 gupdate1cacc58a1955820; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-02] (Google Inc.)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-12-06] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888 2017-01-20] (Malwarebytes)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-11-04] ()
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1095976 2015-11-28] (RealNetworks, Inc.)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [35304 2017-01-11] (Avira Operations GmbH & Co. KG)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ACEDRV05; C:\Windows\system32\drivers\ACEDRV05.sys [97792 2010-03-10] (Protect Software GmbH) [Datei ist nicht signiert]
R2 ACEDRV08; C:\Windows\system32\drivers\ACEDRV08.sys [108768 2010-12-28] (Protect Software GmbH)
R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2010-04-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119208 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140840 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [30672 2016-12-16] (Avira Operations GmbH & Co. KG)
R3 dvd43llh; C:\Windows\System32\DRIVERS\dvd43llh.sys [18816 2010-06-09] (RIF) [Datei ist nicht signiert]
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59976 2017-01-20] ()
S3 HCW713x; C:\Windows\System32\DRIVERS\HCW713x.sys [827776 2007-03-26] (Hauppauge Computer Works inc.)
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2008-02-14] (Paragon Software Group)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2010-04-05] ()
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
S3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [152512 2017-01-31] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [94656 2017-01-31] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-01-31] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [219584 2017-01-31] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [63264 2017-01-31] (Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2007-02-27] ()
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36624 2007-01-28] (Sonic Solutions) [Datei ist nicht signiert]
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2012-10-25] (Realtek Semiconductor Corporation                          )
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-10-22] (Duplex Secure Ltd.)
R2 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [Datei ist nicht signiert]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)
S3 eapihdrv; \??\C:\Users\Kornelia\AppData\Local\Temp\ehdrv.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-31 21:55 - 2017-01-31 21:57 - 00028579 _____ C:\Users\Kornelia\Desktop\FRST.txt
2017-01-31 21:31 - 2017-01-31 21:35 - 00042018 _____ C:\Users\Kornelia\Desktop\Fixlog.txt
2017-01-31 10:22 - 2017-01-31 10:22 - 00001881 _____ C:\Users\Kornelia\Desktop\JRT.txt
2017-01-31 10:16 - 2017-01-31 21:40 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2017-01-31 10:09 - 2017-01-31 10:09 - 00001255 _____ C:\Users\Kornelia\Desktop\mbam.txt
2017-01-31 09:40 - 2017-01-31 09:40 - 00001365 _____ C:\Users\Kornelia\Desktop\AdwCleaner[C2].txt
2017-01-31 09:22 - 2017-01-31 09:22 - 04015056 _____ C:\Users\Kornelia\Desktop\adwcleaner_6.043.exe
2017-01-29 14:14 - 2017-01-29 14:14 - 00000000 ____D C:\Users\TEMP.Kornelia-PC\AppData\Local\Real
2017-01-29 14:12 - 2017-01-29 14:15 - 00000000 ____D C:\Users\TEMP.Kornelia-PC
2017-01-28 13:24 - 2017-01-28 13:31 - 00219282 _____ C:\TDSSKiller.3.1.0.12_28.01.2017_13.24.30_log.txt
2017-01-28 13:22 - 2017-01-28 13:22 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Kornelia\Desktop\tdsskiller.exe
2017-01-28 13:03 - 2017-01-30 17:52 - 01762816 _____ (Farbar) C:\Users\Kornelia\Desktop\FRST.exe
2017-01-27 23:56 - 2017-01-31 21:55 - 00000000 ____D C:\FRST
2017-01-27 16:27 - 2017-01-27 16:27 - 02870984 _____ (ESET) C:\Users\Kornelia\Desktop\esetsmartinstaller_deu.exe
2017-01-27 15:58 - 2017-01-27 15:58 - 01663040 _____ (Malwarebytes) C:\Users\Kornelia\Desktop\JRT.exe
2017-01-27 15:27 - 2017-01-31 09:34 - 00000000 ____D C:\AdwCleaner
2017-01-27 14:42 - 2017-01-27 14:42 - 00000000 ____D C:\Users\Kornelia\AppData\Local\AviraSpeedup
2017-01-27 14:35 - 2017-01-27 14:35 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Avira
2017-01-27 13:56 - 2017-01-31 21:42 - 00094656 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-27 13:56 - 2017-01-31 21:42 - 00063264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-27 13:56 - 2017-01-31 10:36 - 00152512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-27 13:55 - 2017-01-31 21:42 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-27 13:55 - 2017-01-31 21:41 - 00219584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-27 13:55 - 2017-01-27 13:55 - 00002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-27 13:55 - 2017-01-27 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-27 13:55 - 2017-01-20 07:47 - 00059976 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-27 00:03 - 2017-01-27 00:04 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2017-01-26 22:47 - 2017-01-26 22:47 - 00001134 _____ C:\Users\Kornelia\Desktop\Avira Antivirus starten.lnk
2017-01-26 21:06 - 2017-01-26 21:06 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_588a51b66deb0__ws.exe
2017-01-26 19:57 - 2017-01-26 19:57 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Avira
2017-01-26 17:28 - 2017-01-26 17:28 - 00000000 ____D C:\Users\Kornelia\Downloads\Notfall DVD 7.0 Free
2017-01-26 16:35 - 2017-01-26 17:04 - 1276319704 _____ C:\Users\Kornelia\Downloads\Notfall_DVD_7.0_Free.zip
2017-01-26 13:57 - 2017-01-26 13:57 - 00001101 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk
2017-01-26 13:57 - 2017-01-26 13:57 - 00000998 _____ C:\Users\Public\Desktop\Avira Phantom VPN.lnk
2017-01-26 13:56 - 2017-01-31 21:44 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-01-26 13:52 - 2017-01-26 13:52 - 00001166 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-01-26 13:43 - 2017-01-26 13:49 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_5889ec8b9e38c__ws.exe
2017-01-24 23:24 - 2017-01-24 23:24 - 00000936 _____ C:\Users\Kornelia\Desktop\duplicate.txt
2017-01-19 19:22 - 2017-01-19 21:20 - 00000000 ____D C:\Users\Kornelia\Desktop\Rekla Herd
2017-01-12 23:57 - 2017-01-12 23:58 - 00000000 ____D C:\Users\Kornelia\Desktop\SCHULE
2017-01-11 13:22 - 2017-01-05 18:46 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 13:22 - 2017-01-05 18:46 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 13:22 - 2017-01-05 18:43 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 13:22 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 13:22 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 13:22 - 2017-01-05 18:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-10 16:32 - 2017-01-25 00:18 - 00040346 _____ C:\Users\Kornelia\Desktop\Dateiliste.xlsx
2017-01-08 21:33 - 2017-01-08 21:33 - 00000000 ____D C:\Users\Kornelia\AppData\Local\CEF
2017-01-07 22:31 - 2017-01-07 22:31 - 00002075 _____ C:\Users\Kornelia\Desktop\JDownloader 2.lnk
2017-01-07 22:31 - 2017-01-07 22:31 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-01-07 22:27 - 2017-01-27 15:13 - 00000000 ____D C:\Users\Kornelia\AppData\Local\JDownloader 2.0
2017-01-07 22:23 - 2017-01-07 22:23 - 00076504 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\WebInstaller.exe
2017-01-07 19:32 - 2017-01-31 21:54 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Mozilla
2017-01-07 19:20 - 2017-01-07 19:20 - 00243720 _____ C:\Users\Kornelia\Downloads\Firefox Setup Stub 50.1.0.exe
2017-01-07 17:29 - 2017-01-24 23:13 - 00000000 ____D C:\Users\Kornelia\Downloads\Downloader
2017-01-07 17:21 - 2017-01-07 17:23 - 26539720 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\JDownloaderSetup.exe
2017-01-07 16:50 - 2017-01-07 16:50 - 00000000 ____D C:\Users\Kornelia\Downloads\Info

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-01-31 21:54 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-31 21:54 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-31 21:47 - 2011-07-05 10:27 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-31 21:47 - 2009-07-14 09:47 - 00702942 _____ C:\Windows\system32\perfh007.dat
2017-01-31 21:47 - 2009-07-14 09:47 - 00150582 _____ C:\Windows\system32\perfc007.dat
2017-01-31 21:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-01-31 21:43 - 2015-09-16 17:12 - 00000000 ____D C:\Users\Kornelia\Desktop\Neuer Ordner (2)
2017-01-31 21:43 - 2010-03-26 02:57 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-01-31 21:40 - 2010-03-25 21:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-01-31 21:40 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-31 21:38 - 2011-07-05 09:31 - 00000000 ____D C:\Users\Kornelia
2017-01-31 21:34 - 2011-05-03 14:50 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Temp
2017-01-31 21:31 - 2013-03-01 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-31 19:23 - 2013-06-11 21:18 - 00000940 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job
2017-01-31 09:33 - 2011-07-05 10:34 - 00000008 __RSH C:\Users\Kornelia\ntuser.pol
2017-01-31 09:33 - 2011-07-05 10:33 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-01-31 08:58 - 2013-03-14 15:50 - 00000000 ____D C:\Windows\pss
2017-01-27 22:23 - 2013-06-11 21:18 - 00000918 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job
2017-01-27 15:43 - 2016-03-27 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-27 15:43 - 2012-04-30 09:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-27 15:40 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-01-27 15:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2017-01-27 15:13 - 2011-11-01 11:13 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Vidalia
2017-01-27 15:13 - 2011-07-05 10:25 - 00000000 ____D C:\Windows\Panther
2017-01-27 15:13 - 2011-04-13 13:21 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\skypePM
2017-01-27 15:12 - 2010-10-31 18:18 - 00000000 ___RD C:\Users\Kornelia\Desktop\Tabea Spiele
2017-01-27 15:12 - 2007-10-12 08:47 - 00000000 ____D C:\Program Files\DivX
2017-01-27 00:05 - 2010-12-16 14:57 - 00000000 ____D C:\Program Files\GMX
2017-01-26 23:52 - 2011-09-30 10:13 - 00000000 ____D C:\Users\Public\Documents\Tivola_prefs
2017-01-26 23:52 - 2011-02-23 18:14 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\Program Files\Amazon
2017-01-26 23:52 - 2010-03-10 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tivola
2017-01-26 23:48 - 2011-03-09 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:41 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\DVDVideoSoft
2017-01-26 23:43 - 2016-10-23 15:39 - 00150152 _____ C:\Windows\ntbtlog.txt
2017-01-26 17:26 - 2016-10-24 10:00 - 00120432 _____ C:\Users\Kornelia\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-26 16:28 - 2016-10-21 23:01 - 00428280 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-26 13:57 - 2016-10-21 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-01-26 13:57 - 2012-12-22 20:23 - 00000000 ____D C:\Program Files\Avira
2017-01-26 13:57 - 2012-05-20 11:07 - 00000000 ____D C:\ProgramData\Avira
2017-01-26 13:52 - 2015-11-28 11:45 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 13:30 - 2011-04-05 15:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-01-25 13:21 - 2012-02-26 18:45 - 00000000 ____D C:\Users\Kornelia\Downloads\Heidi
2017-01-24 23:47 - 2011-04-05 14:45 - 00000000 ____D C:\ProgramData\Norton
2017-01-23 15:51 - 2012-01-17 15:04 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Microsoft Help
2017-01-23 12:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-22 00:11 - 2016-08-14 14:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 21:19 - 2010-04-01 21:23 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\COREL
2017-01-19 21:13 - 2010-04-29 21:48 - 00000000 ____D C:\Users\Kornelia\Documents\My PSP Files
2017-01-19 21:13 - 2010-04-22 22:31 - 00001786 ___SH C:\Windows\system32\KGyGaAvL.sys
2017-01-11 23:30 - 2013-09-01 10:47 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 23:19 - 2011-08-09 13:50 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 19:31 - 2012-05-27 00:08 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-10 19:31 - 2011-09-06 09:10 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-10 19:31 - 2010-03-13 11:32 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-08 21:33 - 2010-03-12 09:41 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Adobe
2017-01-07 19:31 - 2011-10-05 01:27 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-07 19:31 - 2010-03-06 17:48 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2010-06-02 05:21 - 2010-06-02 05:21 - 1347354 _____ () C:\Program Files\Apr2005_d3dx9_25_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1078962 _____ () C:\Program Files\Apr2005_d3dx9_25_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1397830 _____ () C:\Program Files\Apr2006_d3dx9_30_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1115221 _____ () C:\Program Files\Apr2006_d3dx9_30_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0916430 _____ () C:\Program Files\Apr2006_MDX1_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 4162630 _____ () C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0179133 _____ () C:\Program Files\Apr2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0133103 _____ () C:\Program Files\Apr2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087101 _____ () C:\Program Files\Apr2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046010 _____ () C:\Program Files\Apr2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0698612 _____ () C:\Program Files\APR2007_d3dx10_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0695865 _____ () C:\Program Files\APR2007_d3dx10_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1607358 _____ () C:\Program Files\APR2007_d3dx9_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1606039 _____ () C:\Program Files\APR2007_d3dx9_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0195766 _____ () C:\Program Files\APR2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0151225 _____ () C:\Program Files\APR2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0096817 _____ () C:\Program Files\APR2007_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0053302 _____ () C:\Program Files\APR2007_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1350542 _____ () C:\Program Files\Aug2005_d3dx9_27_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1077644 _____ () C:\Program Files\Aug2005_d3dx9_27_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0182903 _____ () C:\Program Files\AUG2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0137235 _____ () C:\Program Files\AUG2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087142 _____ () C:\Program Files\AUG2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046058 _____ () C:\Program Files\AUG2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0852286 _____ () C:\Program Files\AUG2007_d3dx10_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0796867 _____ () C:\Program Files\AUG2007_d3dx10_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1800160 _____ () C:\Program Files\AUG2007_d3dx9_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1708152 _____ () C:\Program Files\AUG2007_d3dx9_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0198096 _____ () C:\Program Files\AUG2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0153012 _____ () C:\Program Files\AUG2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0867612 _____ () C:\Program Files\Aug2008_d3dx10_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0849167 _____ () C:\Program Files\Aug2008_d3dx10_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1794084 _____ () C:\Program Files\Aug2008_d3dx9_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1464672 _____ () C:\Program Files\Aug2008_d3dx9_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0121772 _____ () C:\Program Files\Aug2008_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0092996 _____ () C:\Program Files\Aug2008_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271412 _____ () C:\Program Files\Aug2008_XAudio_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271038 _____ () C:\Program Files\Aug2008_XAudio_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0919044 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0900598 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3112111 _____ () C:\Program Files\Aug2009_d3dcsx_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3319740 _____ () C:\Program Files\Aug2009_d3dcsx_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0232635 _____ () C:\Program Files\Aug2009_d3dx10_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0192131 _____ () C:\Program Files\Aug2009_d3dx10_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0136301 _____ () C:\Program Files\Aug2009_d3dx11_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0105044 _____ () C:\Program Files\Aug2009_d3dx11_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0930116 _____ () C:\Program Files\Aug2009_d3dx9_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0728456 _____ () C:\Program Files\Aug2009_d3dx9_42_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122408 _____ () C:\Program Files\Aug2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093106 _____ () C:\Program Files\Aug2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273264 _____ () C:\Program Files\Aug2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272642 _____ () C:\Program Files\Aug2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1357976 _____ () C:\Program Files\Dec2005_d3dx9_28_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1079456 _____ () C:\Program Files\Dec2005_d3dx9_28_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0212807 _____ () C:\Program Files\DEC2006_d3dx10_00_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0191720 _____ () C:\Program Files\DEC2006_d3dx10_00_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1571154 _____ () C:\Program Files\DEC2006_d3dx9_32_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1574376 _____ () C:\Program Files\DEC2006_d3dx9_32_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0192475 _____ () C:\Program Files\DEC2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0145599 _____ () C:\Program Files\DEC2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0089944 _____ (Microsoft Corporation) C:\Program Files\DSETUP.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 1801048 _____ () C:\Program Files\dsetup32.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 0042410 _____ () C:\Program Files\dxdllreg_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0537432 _____ () C:\Program Files\DXSETUP.exe
2010-06-02 05:22 - 2010-06-02 05:22 - 0094011 _____ () C:\Program Files\dxupdate.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1247499 _____ () C:\Program Files\Feb2005_d3dx9_24_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1013225 _____ () C:\Program Files\Feb2005_d3dx9_24_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1362796 _____ () C:\Program Files\Feb2006_d3dx9_29_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1084720 _____ () C:\Program Files\Feb2006_d3dx9_29_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0178359 _____ () C:\Program Files\Feb2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0132409 _____ () C:\Program Files\Feb2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0194675 _____ () C:\Program Files\FEB2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0147983 _____ () C:\Program Files\FEB2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054678 _____ () C:\Program Files\Feb2010_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0020713 _____ () C:\Program Files\Feb2010_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122446 _____ () C:\Program Files\Feb2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093180 _____ () C:\Program Files\Feb2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0276960 _____ () C:\Program Files\Feb2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277191 _____ () C:\Program Files\Feb2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1336002 _____ () C:\Program Files\Jun2005_d3dx9_26_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1064925 _____ () C:\Program Files\Jun2005_d3dx9_26_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0180785 _____ () C:\Program Files\JUN2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0133671 _____ () C:\Program Files\JUN2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0699044 _____ () C:\Program Files\JUN2007_d3dx10_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0698472 _____ () C:\Program Files\JUN2007_d3dx10_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607774 _____ () C:\Program Files\JUN2007_d3dx9_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607286 _____ () C:\Program Files\JUN2007_d3dx9_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197122 _____ () C:\Program Files\JUN2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0152909 _____ () C:\Program Files\JUN2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0867828 _____ () C:\Program Files\JUN2008_d3dx10_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0849919 _____ () C:\Program Files\JUN2008_d3dx10_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1792608 _____ () C:\Program Files\JUN2008_d3dx9_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1463878 _____ () C:\Program Files\JUN2008_d3dx9_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055154 _____ () C:\Program Files\JUN2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021905 _____ () C:\Program Files\JUN2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121054 _____ () C:\Program Files\JUN2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093128 _____ () C:\Program Files\JUN2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269628 _____ () C:\Program Files\JUN2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269024 _____ () C:\Program Files\JUN2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0944460 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0931471 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0752783 _____ () C:\Program Files\Jun2010_d3dcsx_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0762188 _____ () C:\Program Files\Jun2010_d3dcsx_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0235955 _____ () C:\Program Files\Jun2010_d3dx10_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197283 _____ () C:\Program Files\Jun2010_d3dx10_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138205 _____ () C:\Program Files\Jun2010_d3dx11_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0109445 _____ () C:\Program Files\Jun2010_d3dx11_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0937246 _____ () C:\Program Files\Jun2010_d3dx9_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0768036 _____ () C:\Program Files\Jun2010_d3dx9_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0124596 _____ () C:\Program Files\Jun2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093686 _____ () C:\Program Files\Jun2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277338 _____ () C:\Program Files\Jun2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0278060 _____ () C:\Program Files\Jun2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0844884 _____ () C:\Program Files\Mar2008_d3dx10_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0818260 _____ () C:\Program Files\Mar2008_d3dx10_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1769862 _____ () C:\Program Files\Mar2008_d3dx9_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1443282 _____ () C:\Program Files\Mar2008_d3dx9_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055058 _____ () C:\Program Files\Mar2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021867 _____ () C:\Program Files\Mar2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122336 _____ () C:\Program Files\Mar2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093734 _____ () C:\Program Files\Mar2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0251194 _____ () C:\Program Files\Mar2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0226250 _____ () C:\Program Files\Mar2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1067160 _____ () C:\Program Files\Mar2009_d3dx10_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1040745 _____ () C:\Program Files\Mar2009_d3dx10_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1973702 _____ () C:\Program Files\Mar2009_d3dx9_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1612446 _____ () C:\Program Files\Mar2009_d3dx9_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054600 _____ () C:\Program Files\Mar2009_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021298 _____ () C:\Program Files\Mar2009_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121506 _____ () C:\Program Files\Mar2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092740 _____ () C:\Program Files\Mar2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0275044 _____ () C:\Program Files\Mar2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273018 _____ () C:\Program Files\Mar2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0864600 _____ () C:\Program Files\Nov2007_d3dx10_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0803884 _____ () C:\Program Files\Nov2007_d3dx10_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1802058 _____ () C:\Program Files\Nov2007_d3dx9_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1709360 _____ () C:\Program Files\Nov2007_d3dx9_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0046144 _____ () C:\Program Files\NOV2007_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0018496 _____ () C:\Program Files\NOV2007_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0196762 _____ () C:\Program Files\NOV2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0148264 _____ () C:\Program Files\NOV2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0994154 _____ () C:\Program Files\Nov2008_d3dx10_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0965421 _____ () C:\Program Files\Nov2008_d3dx10_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1906878 _____ () C:\Program Files\Nov2008_d3dx9_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1550796 _____ () C:\Program Files\Nov2008_d3dx9_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054522 _____ () C:\Program Files\Nov2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021851 _____ () C:\Program Files\Nov2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121794 _____ () C:\Program Files\Nov2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092684 _____ () C:\Program Files\Nov2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273960 _____ () C:\Program Files\Nov2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272611 _____ () C:\Program Files\Nov2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0086037 _____ () C:\Program Files\Oct2005_xinput_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0045359 _____ () C:\Program Files\Oct2005_xinput_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1412902 _____ () C:\Program Files\OCT2006_d3dx9_31_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1127217 _____ () C:\Program Files\OCT2006_d3dx9_31_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0182361 _____ () C:\Program Files\OCT2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138017 _____ () C:\Program Files\OCT2006_XACT_x86.cab
2010-10-22 14:05 - 2010-10-22 14:46 - 0000388 _____ () C:\Users\Kornelia\AppData\Roaming\burnaware.ini
2013-12-18 23:02 - 2013-12-19 00:05 - 0000679 _____ () C:\Users\Kornelia\AppData\Local\cookies.ini
2011-08-17 17:39 - 2015-07-28 17:08 - 0008192 _____ () C:\Users\Kornelia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-26 18:23 - 2011-07-26 18:23 - 0000000 _____ () C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2011-07-05 09:26

==================== Ende vom FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 29-01-2017
durchgeführt von Kornelia (31-01-2017 21:58:38)
Gestartet von C:\Users\Kornelia\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2011-07-05 09:33:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1736235967-2657770174-236075978-500 - Administrator - Disabled)
Gast (S-1-5-21-1736235967-2657770174-236075978-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1736235967-2657770174-236075978-1005 - Limited - Enabled)
Konni (S-1-5-21-1736235967-2657770174-236075978-1003 - Administrator - Enabled)
Kornelia (S-1-5-21-1736235967-2657770174-236075978-1001 - Administrator - Enabled) => C:\Users\Kornelia
Tabea (S-1-5-21-1736235967-2657770174-236075978-1002 - Limited - Enabled) => C:\Users\Tabea

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 4.65 (HKLM\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Aladins Wunderlampe (HKLM\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM\...\Alamandi) (Version: 0.0.0.0 - INTENIUM GmbH)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Annabel (HKLM\...\Annabel) (Version: 1.0.0.0 - INTENIUM GmbH)
ATI Catalyst Install Manager (HKLM\...\{CC516453-9703-ABF9-201F-58A5EC567292}) (Version: 3.0.642.0 - ATI Technologies, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG)
Avira Connect (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM\...\Avira Phantom VPN) (Version: 2.4.3.30556 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 3.1.1.4250 - Avira Operations GmbH & Co. KG)
Azada ™: Ancient Magic (HKLM\...\BFG-Azada - Ancient Magic) (Version:  - )
Azada: In Libro (HKLM\...\BFG-Azada - In Libro) (Version:  - )
Azteca (HKLM\...\Azteca) (Version: 1.0.0.0 - INTENIUM GmbH)
Beetle Ju 2 (HKLM\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Bengal (HKLM\...\Bengal) (Version: 1.0.1.0 - INTENIUM GmbH)
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 2.0.0.28 - )
Botanica - Reise ins Unbekannte (HKLM\...\BFG-Botanica - Reise ins Unbekannte) (Version:  - )
calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)
ccc-core-static (Version: 2007.0821.2146.36991 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Chinese Checkers (HKLM\...\40-com.novelgames.flashgames.checkers) (Version: 1.8.0 - Novel Games Limited)
Chinese Checkers (Version: 1.8.0 - Novel Games Limited) Hidden
Corel Paint Shop Pro Photo XI (HKLM\...\{E1C7EF5E-3A7B-4ED4-A48B-F70F1B36EAB4}) (Version: 11.20.0000 - Corel Corporation)
Corel Snapfire DVD Maker (HKLM\...\{17E14D89-3A9F-4706-9F9B-C2DFC7ABE94B}) (Version: 1.20.0000 - Corel Corporation)
Corel Snapfire Plus (HKLM\...\{7ADE3A47-B425-45E9-8FF6-11BE2B775645}) (Version: 1.201.0000 - Corel Corporation)
CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Da Vincis Perlen Puzzle (HKLM\...\Da Vincis Perlen Puzzle) (Version:  - )
Das Reich des Drachen (HKLM\...\Das Reich des Drachen) (Version: 1.0.0.0 - INTENIUM GmbH)
Das Vermächtnis - Der Baum des Lebens (1.00) (HKLM\...\Das Vermächtnis - Der Baum des Lebens_is1) (Version:  - City Interactive)
Der Perfekte Weihnachtsbaum (HKLM\...\Der Perfekte Weihnachtsbaum) (Version: 1.0.0.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.2010.6.23 - INTENIUM GmbH)
Diamantenfee 2 (HKLM\...\Diamantenfee 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Diamond Drop 2 (HKLM\...\Diamond Drop 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DIE GEHEIMNISSE DER SPIDERWICKS (HKLM\...\{DFA723CE-22B4-4E6B-92CF-176256ECF2DE}) (Version: 1.00.0000 - Sierra Entertainment)
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Die Kluge Eule) (Version:  - )
Die Wiege Olympias 2 (HKLM\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.3 - DivX, LLC)
Drawn: &reg; Flucht aus der Dunkelheit (HKLM\...\BFG-Drawn - Flucht aus der Dunkelheit) (Version:  - )
Drawn: Der Turm ™ (HKLM\...\BFG-Drawn - Der Turm) (Version:  - )
Dream Chronicles (HKLM\...\Dream Chronicles) (Version:  - PlayFirst, Inc.)
Dream Chronicles ™ 2: The Eternal Maze (HKLM\...\BFG-Dream Chronicles 2 - The Eternal Maze) (Version:  - )
DVD43 v4.6.0 (HKLM\...\DVD43_is1) (Version:  - )
DVS Video Downloader Addon for Mozilla Firefox version 4.3.4.17 (HKLM\...\DVS Video Downloader Addon for Mozilla Firefox_is1) (Version: 4.3.4.17 - DVDVideoSoft Ltd.)
Emil und Pauline Auf dem Land (remove only) (HKLM\...\Emil und Pauline Auf dem Land) (Version:  - )
Emil und Pauline In der Stadt (remove only) (HKLM\...\Emil und Pauline In der Stadt) (Version:  - )
Enigmatis - Vermisst in Maple Creek (HKLM\...\Enigmatis - Vermisst in Maple Creek_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Ewige Reise - Das neue Atlantis (HKLM\...\Ewige Reise - Das neue Atlantis) (Version:  - )
Fabled Legends: Die Ruckkehr des Rattenfangers (HKLM\...\BFG-Fabled Legends - Die Rueckkehr des Rattenfaengers) (Version:  - )
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FarmFrenzy (HKLM\...\FarmFrenzy) (Version:  - )
Finstere Liebschaft - Immortal Lovers (HKLM\...\Finstere Liebschaft - Immortal Lovers) (Version:  - )
foobar2000 v1.0.3 (HKLM\...\foobar2000) (Version: 1.0.3 - Peter Pawlowski)
Forest Legends - Der Ruf der Liebe (HKLM\...\Forest Legends - Der Ruf der Liebe) (Version:  - )
FormatFactory 3.5.0.0 (HKLM\...\FormatFactory) (Version: 3.5.0.0 - Format Factory)
Free Studio version 2013 (HKLM\...\Free Studio_is1) (Version: 6.1.0.320 - DVDVideoSoft Ltd.)
Galileo Family Quiz - Spezial II (HKLM\...\Galileo Family Quiz - Spezial II) (Version:  - SevenOne Intermedia)
Geheimakte 2 - Puritas Cordis (HKLM\...\{BE7347AD-2D93-4A74-8DBF-C1B073DAE509}) (Version: 1.00.0000 - Deep Silver)
Geheime Fälle: Die gestohlene Venus (HKLM\...\Geheime Fälle: Die gestohlene Venus) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 2.7.2.6 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 2.7.2 - 1 und 1 Internet AG) Hidden
Google Calendar Sync (HKLM\...\Google Calendar Sync) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
Gravely Silent: Haus des Schreckens (HKLM\...\BFG-Gravely Silent - Haus des Schreckens) (Version:  - )
Haunted Manor: Der Herr der Spiegel (HKLM\...\BFG-Haunted Manor - Der Herr der Spiegel) (Version:  - )
Hauppauge MCE XP/Vista Software Encoder (2.0.25102) (HKLM\...\Hauppauge MCE2005 Software Encoder) (Version: 2.0.25102 - Hauppauge Computer Works, Inc.)
Heroes of Hellas (HKLM\...\{C0906D83-1FE0-4176-A940-45A348080987}) (Version: 1.00.0000 - Purplehills)
Hexentanz und Firlefanz (HKLM\...\Hexentanz und Firlefanz) (Version:  - )
Hidden Expedition &reg; : Bermudadreieck (HKLM\...\BFG-Hidden Expedition - Bermudadreieck) (Version:  - )
Hidden Mysteries Salem Secrets (HKLM\...\Hidden Mysteries Salem Secrets) (Version: 1.0 - astrogon Software)
Hidden Mysteries Vampire Secrets (HKLM\...\Hidden Mysteries Vampire Secrets) (Version: 1.0 - astragon Software)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBee FREE 5.1.2 (build 456) (HKLM\...\JetBee_is1) (Version:  - )
Jewel Puzzle (HKLM\...\Jewel Puzzle) (Version: 1.0.0.0 - INTENIUM GmbH)
Kleiner Eisbär 2 (HKLM\...\Kleiner Eisbär 2) (Version:  - )
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Lauras Stern (HKLM\...\Lauras Stern) (Version:  - )
Letstrade (HKLM\...\{E0091C29-DEE8-4B24-BF65-8C35B5940D77}) (Version: 1.00.0000 - Buhl Data Service)
LightScribe System Software  1.17.90.1 (HKLM\...\{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}) (Version: 1.17.90.1 - LightScribe)
Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Manic Digger (HKLM\...\{119E2FCB-5CDD-4C24-BCB2-56A824E2BF0A}_is1) (Version:  - )
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Midnight Mysteries Salem Witch Trials (HKLM\...\Midnight Mysteries Salem Witch Trials) (Version: 1.1.0.0 - MumboJumbo)
Mozilla Firefox 51.0.1 (x86 de) (HKLM\...\Mozilla Firefox 51.0.1 (x86 de)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
Mozilla Thunderbird 45.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 45.6.0 (x86 de)) (Version: 45.6.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Case Files&reg;: Dire Grove™ (HKLM\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst Handbuch ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst Handbuch) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst) (Version:  - )
Mystery Case Files: Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Ravenhearst) (Version:  - )
Mystery of Cleopatra (HKLM\...\Mystery of Cleopatra 1.0) (Version: 1.0 - Rondo Media)
Mystery Places - Das Geheimnis der Geistervilla (HKLM\...\Mystery Places - Das Geheimnis der Geistervilla_is1) (Version:  - )
Mystery Tales - Insel der Träume (HKLM\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Trackers: Raincliff (HKLM\...\BFG-Mystery Trackers - Raincliff) (Version:  - )
Natalie Brooks (HKLM\...\Natalie Brooks) (Version:  - )
Nero 7 Essentials (HKLM\...\{0DE739CA-9487-4E3E-8511-92EAF01F1031}) (Version: 7.03.0274 - Nero AG)
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Pahelika: Secret Legends (HKLM\...\Pahelika: Secret Legends) (Version:  - The Games Company Worldwide GmbH)
Paragon Hard Disk Manager 2008 Professional (HKLM\...\{E9E4BB29-FA98-401B-9EDE-9906906E33DE}) (Version:  - Paragon Software Group)
PixiePack Codec Pack (HKLM\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polipo 1.0.4.1 (HKLM\...\Polipo) (Version:  - )
Prinzessin Isabella (HKLM\...\Prinzessin Isabella) (Version: 1.0.0.0 - INTENIUM GmbH)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProtectDisc Helper Driver 10 (HKLM\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
Radiotracker (HKLM\...\{1E863F44-2D2D-4BD7-B25B-EDA9FF622267}) (Version: 6.2.13700.0 - RapidSolution Software AG)
ratDVD 0.78.1444 (HKLM\...\ratDVD) (Version: 0.78.1444 - ratDVD)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
RealDownloader (Version: 18.1.2.176 - RealNetworks, Inc.) Hidden
RealDownloader (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.2 - RealNetworks)
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rooms - Die Villa 1.0d  (HKLM\...\Rooms - Die Villa) (Version: 1.0d - Halycon Media)
Samantha Swift and the Mystery From Atlantis (HKLM\...\Samantha Swift and the Mystery From Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Sandra Fleming Chronicles – Crystal Skulls (HKLM\...\Sandra Fleming Chronicles – Crystal Skulls) (Version: 1.0.0.0 - INTENIUM GmbH)
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Simajo (HKLM\...\Simajo) (Version:  - )
Skins (Version: 2007.0821.2146.36991 - ATI) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spirits of Mystery: Dunkler Fluch (HKLM\...\BFG-Spirits of Mystery - Dunkler Fluch) (Version:  - )
Spur der Träume (HKLM\...\Spur der Träume) (Version: 1.0.0.0 - INTENIUM GmbH)
Sweet Home 3D version 3.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Enchanted Kingdom: Elisa’s Adventure (HKLM\...\The Enchanted Kingdom: Elisa’s Adventure) (Version: 1.0.0.0 - INTENIUM GmbH)
The Fall Trilogy (HKLM\...\The Fall Trilogy_is1) (Version:  - Morphicon)
The Fall Trilogy Chapter 2 (HKLM\...\The Fall Trilogy Chapter 2_is1) (Version:  - Morphicon)
The Night of the Rabbit (HKLM\...\The Night of the Rabbit) (Version: 1.0 - Daedalic Entertainment)
The Sultans Labyrinth: Das Opfer des K&ouml;nigs (HKLM\...\BFG-The Sultans Labyrinth - Das Opfer des Koenigs) (Version:  - ) <==== ACHTUNG
Tor 0.2.2.35 (HKLM\...\Tor) (Version:  - )
TP-LINK 300Mbps Wireless USB Adapter Treiber (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trödelschätze (HKLM\...\{AC368309-A247-42C0-9AAF-ABB2E067B79C}) (Version: 1.00.0000 - Valusoft)
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Try Corel Snapfire muvee autoProducer add on (Version: 1.00.0000 - Ihr Firmenname) Hidden
Turtix (HKLM\...\Turtix) (Version:  - )
Turtix 2 (HKLM\...\Turtix 2) (Version:  - )
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vernaeht und zugeflixt! Was stimmt denn hier nicht? (HKLM\...\Vernaeht und zugeflixt! Was stimmt denn hier nicht?) (Version:  - )
Vidalia 0.2.15 (HKLM\...\Vidalia) (Version:  - )
Video Downloader (Version: 1.2.0 - RealNetworks) Hidden
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.6.4 - Shark007)
VTech Download Agent Library (Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM\...\VTechDownloadManager) (Version:  - VTech)
Wieso? Weshalb? Warum? - Unser Körper (HKLM\...\com.rd.www.desktop.DesktopBody) (Version: 1.0.0 - Ravensburger Digital GmbH)
Wieso? Weshalb? Warum? - Unser Körper (Version: 1.0.0 - Ravensburger Digital GmbH) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WordPerfect Office X3 (HKLM\...\_{54DB13F1-0CE0-4BAB-BD5F-7DE150C043C8}) (Version:  - Corel Corporation)
WordPerfect Office X3 (Version: 13.3 - Corel Corporation) Hidden
World Voyage (HKLM\...\World Voyage) (Version: 1.0.0.0 - INTENIUM GmbH)
XMedia Recode 2.3.0.4 (HKLM\...\XMedia Recode) (Version: 2.3.0.4 - Sebastian Dörfler)
XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.)
Zuma's Revenge! (HKLM\...\Zuma's Revenge!1.0) (Version: 1.0 - AllSmartGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {032A98DE-A547-4FB1-97B4-777E85FCE80F} - System32\Tasks\{51ECF608-A47D-464B-892E-9A3067C4CA0E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {04338029-ABEF-4DB2-A56D-FF0641970A7A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {08FA19ED-87A2-4BE4-B4F6-1170192766D0} - System32\Tasks\{1D76B916-65CA-47A7-9DD1-C614C8F74E56} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {0922A476-D472-4C6B-AF0D-283C447FF4F0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {248BA49A-31FC-4CBC-AC12-0AD50B3730CD} - System32\Tasks\{2D2CF1E0-A39F-4435-B084-62C323AD4F56} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {262EF14E-2D04-4238-8DD2-2B9AFBBAEC1F} - System32\Tasks\{D62DA859-B3A5-4A8C-8643-BC908C434082} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {2B93871E-90A6-4BD6-B5B2-2B2CCE5A5740} - System32\Tasks\{C791566E-54A6-4DAF-8C0F-0153AA08A504} => pcalua.exe -a D:\Software\Nero\setupx.exe -d D:\Software\Nero
Task: {2D4FEC81-5640-445A-97C1-A780D1FD2CD8} - System32\Tasks\{3D22388D-753E-494E-8F61-D351F8E67C68} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {34B169BF-29C1-4D9E-ABAD-DD33D6A48488} - System32\Tasks\{AA3E9FEA-EE1C-4BD0-A6EE-0AB550AE278F} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {3C30CE7A-A21F-4478-8DFD-AB4484B05538} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {3F4F5314-363F-4D5F-AD46-3C6D3EAA7DDA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {474C30BF-0A7E-4DC2-9E6B-369B154E8229} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {49897270-27FE-4B7E-A4F9-1B4F8AE27E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {49E28B95-9408-4715-97DA-1AB7339805C6} - System32\Tasks\{EA4F2F72-7C23-4AB9-8184-245B49DE749F} => C:\Program Files\DEUTSCHLAND SPIELT\BeetleJu2 VollVersion\BeetleJu2_og.exe [2010-11-23] (INTENIUM GmbH)
Task: {4C08C992-D45F-4D07-9702-9FF2FB1E7DA0} - System32\Tasks\{7D0AE273-2305-48F1-AF5C-46BFD622F47E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4E016ADD-5044-4D20-841E-C43FFE2861BD} - System32\Tasks\{F4A27F14-3152-470D-9565-039442275C50} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4EC8D6F7-19A4-43EB-A744-BF2A0A15F56E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {50748F55-16EA-4C55-8547-7EC1D0947037} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {5AC92F98-B42E-4F21-9AA0-01AD0439642E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {5B3F853B-FE70-4847-8631-186551D7012C} - System32\Tasks\{07CBC734-EBA5-454A-913B-EC737132222F} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {66D53617-940A-4E05-871F-28B9007E2CC3} - System32\Tasks\{9BFE3ECE-693E-45CE-A00E-7DC315188CEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {6B725544-E42B-4580-B4AE-E272703AF399} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {6C42F0C8-5E73-4DE6-A971-9CE99159C71D} - System32\Tasks\{71507EB2-BF35-48B0-8135-FCBC7D54BAEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {77D92D5C-1736-4593-BC70-36551C747A1A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {78201B2F-5E80-4168-B233-7212E7A89D0D} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {7DD6E2A0-C6F1-4EFD-92B0-4A0D547C24C5} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {893B18BE-C091-4B27-9D76-82F0BCA99813} - System32\Tasks\{84074564-9C97-48A0-BBB3-89DAB27B7C9B} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9240E8E9-1D41-40BA-B4DE-32542C7145DB} - System32\Tasks\{97E672C4-E6D1-4ED6-99D8-B122A1F86FC0} => pcalua.exe -a D:\DVPP\Setup.exe -d D:\DVPP
Task: {979D3F17-6619-45C5-B404-606838B44253} - System32\Tasks\{E4546B87-1D17-4B95-A0A5-37522F5D05EF} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9C2F05E8-F861-43CF-987B-095EF430F405} - System32\Tasks\{F3AEE607-769D-4C8B-824B-88BEB035F102} => pcalua.exe -a C:\Spiele\Lillifee\setup.exe -d D:
Task: {B0993B05-978C-4A15-AA87-B18AB9A99EFD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {B37A6E42-727E-4E31-A77C-04022A464880} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2015-11-04] (RealNetworks, Inc.)
Task: {BFD53BF4-19B8-4502-92DD-7D926FFA8CA6} - System32\Tasks\{EC680A57-E7BC-4A66-8FBB-20A511FDFA89} => pcalua.exe -a D:\bin\EasyInst.exe -d D:\
Task: {C8250CB2-F11F-4A98-95BB-BA5E812E6A7E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {DAAAE172-7743-4C96-B232-DCC0F5FC7607} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {DBF5DE37-8E99-4B07-813D-41126EA90DB3} - System32\Tasks\{81430713-60CA-4B71-8FBB-D14DA0751514} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F0E42A33-0E8E-4BB2-80F9-8418E2340E57} - System32\Tasks\{287D07D5-E1D7-4882-9C98-35680FC50E9A} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {F20691E7-0B1D-438A-ABD0-2D94FF823CEA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {F526EC9D-6127-42C8-A3B4-E081029D3F7D} - System32\Tasks\{3DEE68DB-465B-46BB-87CD-D6BEE805EFD1} => C:\Program Files\Daedalic Entertainment\The Night of the Rabbit\rabbit.exe [2013-04-28] (Daedalic Entertainment GmbH)
Task: {FB0BD155-6754-4ECC-9711-162FE2741D51} - System32\Tasks\Amazon Music Helper => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-12-08] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-01-17 15:57 - 2014-12-08 07:27 - 06277952 _____ () C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
2006-11-02 11:40 - 2006-11-02 11:40 - 00174656 _____ () C:\Windows\system32\PSIService.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00033088 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00037720 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2015-11-04 15:19 - 2015-11-04 15:19 - 00039768 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-11-04 15:20 - 2015-11-04 15:20 - 00037728 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll
2017-01-27 13:54 - 2017-01-20 07:47 - 01732896 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 01719760 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 02097616 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2010-06-09 18:10 - 2009-10-23 18:34 - 00827904 _____ () C:\Program Files\dvd43\DVD43_Tray.exe
2011-07-29 00:08 - 2011-07-29 00:08 - 01259376 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2011-07-29 00:09 - 2011-07-29 00:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-06-24 09:54 - 2013-06-20 08:58 - 00391040 _____ () C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
2013-06-24 09:54 - 2010-06-24 02:16 - 02150400 _____ () C:\Program Files\VTech\DownloadManager\System\QtCore4.dll
2013-06-24 09:54 - 2010-07-13 14:07 - 07826432 _____ () C:\Program Files\VTech\DownloadManager\System\QtGui4.dll
2013-06-24 09:54 - 2010-06-02 03:29 - 00934912 _____ () C:\Program Files\VTech\DownloadManager\System\QtNetwork4.dll
2013-06-24 09:54 - 2010-06-02 03:28 - 00335360 _____ () C:\Program Files\VTech\DownloadManager\System\QtXml4.dll
2013-06-24 09:54 - 2012-08-06 10:54 - 09843640 _____ () C:\Program Files\VTech\DownloadManager\System\QtWebKit4.dll
2013-06-24 09:54 - 2010-06-02 03:56 - 00232960 _____ () C:\Program Files\VTech\DownloadManager\System\phonon4.dll
2013-06-24 09:54 - 2010-06-02 03:54 - 02530816 _____ () C:\Program Files\VTech\DownloadManager\System\QtXmlPatterns4.dll
2013-06-24 09:54 - 2010-07-05 10:19 - 00116736 _____ () C:\Program Files\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2013-06-24 09:54 - 2010-11-11 10:24 - 00028160 _____ () C:\Program Files\VTech\DownloadManager\System\DACommCenter.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00025600 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qgif4.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00119808 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qjpeg4.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00714992 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
2016-07-05 17:13 - 2016-07-05 17:13 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00653608 _____ () c:\program files\real\realplayer\RPDS\Lib\r1api.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00077552 _____ () C:\Program Files\RealNetworks\RealDownloader\dtvhooks.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00022312 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\mediautil.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 01520936 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avformat-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 04274984 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avcodec-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00322856 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avutil-52.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00846848 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
2015-10-02 18:33 - 2012-10-25 15:19 - 01401344 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\nicLan.dll
2015-10-02 18:33 - 2012-12-04 15:22 - 00193024 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\DC_WFF.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00293376 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\WJRtl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2006-11-02 03:23 - 2006-09-18 14:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost
::1            localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{771781D7-42F2-4719-BCFC-468823CD634A}] => C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F8F60273-BD4C-4058-B246-6F633BD6A891}] => LPort=1900
FirewallRules: [{20D276B1-3C90-4929-8A32-E4ACCBECC2C8}] => LPort=2869
FirewallRules: [{3355F104-DC9F-42F3-8E9D-3BF5DBF8FEB3}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{0BEA84F4-2656-475A-AE06-59E81719D75F}] => svchost.exe
FirewallRules: [{2BFBBFCF-8C85-480D-A055-0DB5677BDCDE}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{5B4D0C77-79AF-4923-BDC1-B51891E48444}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [UDP Query User{BC460BB0-BD68-48F3-BEB2-47578A7623D9}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{2339DF44-A7DD-4E22-A32A-32DCC95DC337}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{A59E1834-01D3-478B-90C5-6E1D4924AFDB}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{AEB0C184-B9E4-434C-B087-A14CA1DF867B}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{08572AF5-8353-4B61-B8C0-24C618870A9E}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{670FA4AF-6DA8-487A-91EE-B07143EB2170}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BD40ABE-22B5-4230-B66B-47D3BD3D0390}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{55D99CB2-C725-42FC-847A-5909C961EAE8}] => C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{85FDB52D-7A01-43A8-9009-6A168010138A}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8758F947-09B2-41DF-88EC-579BC9CA03E7}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{459568E9-83FC-4C8A-9663-91C2C9B6026F}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{92605963-E425-410C-BB6E-8F4EDEA0C349}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D48E3507-9052-45D0-9E44-24AC955777AA}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4ED3AA0F-7E02-449A-BAA4-34B72C42BF3C}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{A8E2B43C-F558-48C1-A629-118843C42FE8}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [{84839E9D-9BF0-4CCD-A922-70507EA96606}] => c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{175EF583-D4BB-4455-BF80-3778A39EAEAC}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{189936DE-97ED-4FCF-AFD9-FA1ABFB6C531}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D0577CA9-F454-408A-ACDF-7F280302E7BD}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{95DF96B5-51A5-4BAD-8FE7-4BC3CF9AF3DF}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D81DFAC4-5EE4-4BF8-A94D-84503C9C6E7F}] => C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{88496792-6A83-4826-9392-C3A2DBF731BE}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{08F10482-4231-4238-9029-5220201C0B87}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{3199F9F6-FD40-4F4E-B578-F886A82D57DA}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [UDP Query User{AE639368-64F0-4A58-B6CA-0EE42A599710}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe

==================== Wiederherstellungspunkte =========================

27-01-2017 15:11:14 Avira System Speedup Optimierung
27-01-2017 16:04:18 JRT Pre-Junkware Removal
31-01-2017 10:18:32 JRT Pre-Junkware Removal
31-01-2017 12:12:23 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: sptd
Description: sptd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: sptd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: atksgt
Description: atksgt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: atksgt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (01/31/2017 12:12:24 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-1736235967-2657770174-236075978-1003.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.


Vorgang:
  OnIdentify-Ereignis
  Generatordaten werden gesammelt

Kontext:
  Ausführungskontext: Shadow Copy Optimization Writer
  Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
  Generatorname: Shadow Copy Optimization Writer
  Generatorinstanz-ID: {4d4d6a6c-951d-4573-97e6-d65f83cdb7bf}

Error: (01/31/2017 10:46:12 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1618
Startzeit der fehlerhaften Anwendung: 0x01d27ba5591e6ca2
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 192d5167-e79a-11e6-8b50-001d607b2853

Error: (01/31/2017 10:34:49 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1aac
Startzeit der fehlerhaften Anwendung: 0x01d27ba42f6e5710
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 81d79c50-e798-11e6-8b50-001d607b2853

Error: (01/31/2017 10:26:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0xec0
Startzeit der fehlerhaften Anwendung: 0x01d27b9dbdf6dc0e
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 516ee2c7-e797-11e6-8b50-001d607b2853

Error: (01/31/2017 10:18:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "ConvertStringSidToSid(S-1-5-21-1736235967-2657770174-236075978-1003.bak)" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070539, Die Struktur der Sicherheitskennung ist unzulässig.
.


Vorgang:
  OnIdentify-Ereignis
  Generatordaten werden gesammelt

Kontext:
  Ausführungskontext: Shadow Copy Optimization Writer
  Generatorklassen-ID: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
  Generatorname: Shadow Copy Optimization Writer
  Generatorinstanz-ID: {825d267e-3731-43bf-9430-d8f483269a9a}

Error: (01/30/2017 07:02:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1d50
Startzeit der fehlerhaften Anwendung: 0x01d27b220a87b452
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 4a87d4f7-e716-11e6-98c3-001d607b2853

Error: (01/30/2017 06:54:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x19bc
Startzeit der fehlerhaften Anwendung: 0x01d27b20a1bec3b8
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 3181c03b-e715-11e6-98c3-001d607b2853

Error: (01/30/2017 06:44:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x6b8
Startzeit der fehlerhaften Anwendung: 0x01d27b18b440fab7
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: c32495fe-e713-11e6-98c3-001d607b2853

Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (01/30/2017 05:45:22 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0


Systemfehler:
=============
Error: (01/31/2017 09:48:32 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/31/2017 09:48:27 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (01/31/2017 09:44:52 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/31/2017 09:44:52 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/31/2017 09:44:52 PM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (01/31/2017 09:44:52 PM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (01/31/2017 09:41:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
sptd

Error: (01/31/2017 09:40:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Net.Tcp-Listeneradapter" ist vom Dienst "Net.Tcp-Portfreigabedienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (01/31/2017 09:40:18 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Pipe-Listeneradapter" ist von folgendem Dienst abhängig: was. Dieser Dienst ist eventuell nicht installiert.

Error: (01/31/2017 09:40:18 PM) (Source: Service Control Manager) (EventID: 7003) (User: )
Description: Der Dienst "Net.Msmq-Listeneradapter" ist von folgendem Dienst abhängig: msmq. Dieser Dienst ist eventuell nicht installiert.


==================== Memory info ===========================

Processor: AMD Athlon(tm) X2 Dual Core Processor BE-2300
Prozentuale Nutzung des RAM: 70%
Installierter physikalischer RAM: 1918.49 MB
Verfügbarer physikalischer RAM: 575.17 MB
Summe virtueller Speicher: 3836.98 MB
Verfügbarer virtueller Speicher: 1987.38 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:242.77 GB) (Free:93.91 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive e: () (Fixed) (Total:207.36 GB) (Free:35.49 GB) NTFS
Drive g: (Black) (Fixed) (Total:465.76 GB) (Free:413.34 GB) NTFS
Drive i: (EXTERN 2 -Spiegel-) (Fixed) (Total:242.77 GB) (Free:143.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive m: (EXTERN 1 -DATEN-) (Fixed) (Total:1255.2 GB) (Free:437.65 GB) NTFS
Drive n: (EXTERN 3) (Fixed) (Total:100 GB) (Free:99.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C76EBDA3)
Partition 1: (Active) - (Size=242.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15.6 GB) - (Type=27)
Partition 3: (Not Active) - (Size=207.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5C921633)
Partition 1: (Not Active) - (Size=1255.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=507.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 256E7802)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================

M-K-D-B 01.02.2017 16:45
Servus,


wir kontrollieren nochmal alles. :)



Hinweis: Der Suchlauf mit ESET kann länger dauern.





Schritt 1

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset







Schritt 2
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
  • Starte die HitmanPro.exe
  • Klicke auf
  • Entferne den Haken bei
  • Klicke auf
    und
  • Akzeptiere die Lizenzbedingungen und klicke auf
  • Klicke auf

    und auf
  • Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
    und speichere die Logdatei auf Deinem Desktop.
  • Schließe HitmanPro und poste mir das Log.

 







Schritt 3
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.





http://www.trojaner-board.de/extra/lesestoff.pngGibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?







Bitte poste mit deiner nächsten Antwort
  • die Logdatei von ESET,
  • die Logdatei von HitmanPro,
  • die beiden neuen Logdateien von FRST,
  • die Beantwortung der gestellten Fragen.

Mineko 02.02.2017 10:04
Guten Morgen hier das Ergebnis von ESET
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=dc2a0704a181cb439299cdc8a433c412
# end=init
# utc_time=2017-02-01 07:44:43
# local_time=2017-02-01 08:44:43 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 32265
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=dc2a0704a181cb439299cdc8a433c412
# end=updated
# utc_time=2017-02-01 07:52:03
# local_time=2017-02-01 08:52:03 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=dc2a0704a181cb439299cdc8a433c412
# engine=32265
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-02-02 07:28:21
# local_time=2017-02-02 08:28:21 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Antivirus'
# compatibility_mode=1815 16777213 100 96 47180 11041719 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 46067 237651692 0 0
# scanned=600115
# found=28
# cleaned=0
# scan_time=41777
sh=359D977D432E4F90FE627B2717144AE873990AC4 ft=1 fh=63c7b0ee3e7f229d vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\ggoppqrpfeabtekltzlalztmxkjtjgqk\DVDVideoSoftTB.exe"
sh=E5A3C100D2D0FD94482783AF2B2FF94CDFC9923F ft=1 fh=a0ddd0619a504a2e vn="Variante von Win32/Hao123.A eventuell unerwünschte Anwendung" ac=I fn="C:\Program Files\FreeTime\FormatFactory\FFModules\Package\BaiDu\hao123inst.exe"
sh=2F074FF6995CE4BD79FCF3C89FD7076C73680DF9 ft=0 fh=0000000000000000 vn="Variante von Win32/RealNetworks.A eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Kornelia\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\14.05\agent\stub_data\stubinst_pkg_de.cab"
sh=6DC035BB1612861D335391A42C7170BE5D77CA13 ft=1 fh=11fa780f626a2ac2 vn="Variante von Win32/AdkDLLWrapper.A eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Kornelia\AppData\Roaming\uTorrent\updates\3.3.1_30017.exe"
sh=B22621B2E760AEB8EE8DC609D4BEB5476D4BDAA2 ft=1 fh=92f0fff0bbfcb40b vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Kornelia\Downloads\Format_Factory260DE.exe"
sh=3837DCC6FC0D2C7D2CD6765EE18175468E314815 ft=1 fh=404bf2cda126427a vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="C:\Users\Kornelia\Downloads\freeyoutubetomp3converter31126.exe.vir"
sh=1094E31788BDC2238A40C28A874E7471B9E6170F ft=1 fh=32b3e6431ddd6067 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="E:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\860C184Ed01"
sh=1094E31788BDC2238A40C28A874E7471B9E6170F ft=1 fh=32b3e6431ddd6067 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="E:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\C1F9F939d01"
sh=359D977D432E4F90FE627B2717144AE873990AC4 ft=1 fh=63c7b0ee3e7f229d vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="I:\Program Files\Common Files\DVDVideoSoft\TB\DVDVideoSoftTB.exe"
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y eventuell unerwünschte Anwendung" ac=I fn="I:\Program Files\Conduit\Community Alerts\Alert.dll"
sh=7354F453CA88AF4EEF855E47165977CF25A44D41 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.AL eventuell unerwünschte Anwendung" ac=I fn="I:\Users\Kornelia\AppData\Local\CRE\leocdeigfnkaojcapikdjcdbedcjmffc.crx"
sh=A1280B1F085B8284DC157EC359BD1ADA091CFE7E ft=1 fh=d8aa3384d1249a40 vn="Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung" ac=I fn="I:\Users\Kornelia\AppData\Local\uTorrentBar_DE\ldrtbuTor.dll"
sh=92E84D2216A7763D580E42FA2493CCF67D0D0560 ft=1 fh=e8efc42494afd9f6 vn="Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung" ac=I fn="I:\Users\Kornelia\AppData\Local\uTorrentBar_DE\tbuTor.dll"
sh=B22621B2E760AEB8EE8DC609D4BEB5476D4BDAA2 ft=1 fh=92f0fff0bbfcb40b vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="I:\Users\Kornelia\Downloads\Format_Factory260DE.exe"
sh=3837DCC6FC0D2C7D2CD6765EE18175468E314815 ft=1 fh=404bf2cda126427a vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="I:\Users\Kornelia\Downloads\Heidi\FreeYouTubeToMP3Converter31126.exe"
sh=CA06906006F86C886B6B04344DDEFB8DC7927EB9 ft=0 fh=0000000000000000 vn="Variante von Win32/Hao123.A eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 137.zip"
sh=4BCD9AEF6C8832AC72EA3010E8AEB4239B346C65 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 3.zip"
sh=88D70677761154BC7A607BD694F90A3257F6CD25 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit.Y eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 4.zip"
sh=9A658FBB3C181A1D8CA2824644F30E5B1368F73E ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.AL eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 42.zip"
sh=2A0521F01FE1B64A19284EB954F8BCE33D409015 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.P eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 49.zip"
sh=1DFD212674F25BD41E7BCE1896D0AA17451760D7 ft=0 fh=0000000000000000 vn="Variante von Win32/AdkDLLWrapper.A eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 50.zip"
sh=DDAFE99FE3438409D88DCF0429A04F8736B69044 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 52.zip"
sh=D0B1273A645BCF514CBBC3D09D22C9B4C3B6BE59 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 53.zip"
sh=B4C5A9F7F18909808C5092A3A6F1E835D833FB21 ft=0 fh=0000000000000000 vn="Variante von Win32/Hao123.A eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2015-08-26 200049\Backup Files 2015-08-26 200049\Backup files 7.zip"
sh=F234A2117163BEA139218D446CEFA02CC629B93B ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="M:\KORNELIA-PC\Backup Set 2016-10-24 123618\Backup Files 2016-10-24 123618\Backup files 4.zip"
sh=C313606778641C651319C69DD71AD9B143B2603A ft=0 fh=0000000000000000 vn="Variante von Android/AdDisplay.AppFlood.A eventuell unerwünschte Anwendung" ac=I fn="M:\SICHERUNG VON EXTERN\DATENSICHERUNG HANDY\Handykarte 20161612\Wechseldatenträger\rerware\MyBackup\AllAppsBackups\AppsMedia_2014_02_19\Apps\zsj.android.uninstall_328.apk"
sh=1094E31788BDC2238A40C28A874E7471B9E6170F ft=1 fh=32b3e6431ddd6067 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="M:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\860C184Ed01"
sh=1094E31788BDC2238A40C28A874E7471B9E6170F ft=1 fh=32b3e6431ddd6067 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="M:\SICHERUNG VON EXTERN\EIGENE DOKUMENTE\AppData\Local\Mozilla\Firefox\Profiles\20811wxw.default\Cache\C1F9F939d01"
Logdatei Hitman
Code:
HitmanPro 3.7.15.281
www.hitmanpro.com

  Computer name . . . . : KORNELIA-PC
  Windows . . . . . . . : 6.1.1.7601.X86/2
  User name . . . . . . : Kornelia-PC\Kornelia
  UAC . . . . . . . . . : Enabled
  License . . . . . . . : Free

  Scan date . . . . . . : 2017-02-02 09:49:37
  Scan mode . . . . . . : Normal
  Scan duration . . . . : 8m 36s
  Disk access mode  . . : Direct disk access (SRB)
  Cloud . . . . . . . . : Internet
  Reboot  . . . . . . . : No

  Threats . . . . . . . : 2
  Traces  . . . . . . . : 33

  Objects scanned . . . : 1.926.291
  Files scanned . . . . : 90.022
  Remnants scanned  . . : 647.776 files / 1.188.493 keys

Malware _____________________________________________________________________

  C:\Program Files\Vidalia Bundle\Tor\tor.exe
      Size . . . . . . . : 2.745.870 bytes
      Age  . . . . . . . : 1875.2 days (2011-12-16 04:45:30)
      Entropy  . . . . . : 6.3
      SHA-256  . . . . . : 07D4D7B01CD5DEFEA61560DA86C5E917D5E5994FA1B2EE979F853B527CE5B499
    > Kaspersky  . . . . : not-a-virus:NetTool.Win32.Tor.a
      Fuzzy  . . . . . . : 106.0
      References
        C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vidalia Bundle\Tor\Tor.lnk

  C:\Users\Kornelia\AppData\Local\JDownloader 2.0\tools\Windows\elevate\Elevate32.exe
      Size . . . . . . . : 69.632 bytes
      Age  . . . . . . . : 25.5 days (2017-01-07 22:30:56)
      Entropy  . . . . . : 5.7
      SHA-256  . . . . . : E708FE307DAB49A9FEB9F0CB845C3E13739F9F2BD9FE0B1C1A2AB749B5EFF45F
      Product  . . . . . : Elevate Application
      Publisher  . . . . : Johannes Passing
      Description  . . . : Elevate
      Version  . . . . . : 1.0.0.2894
      LanguageID . . . . : 0
    > HitmanPro  . . . . : Malware
      Fuzzy  . . . . . . : 100.0


Suspicious files ____________________________________________________________

  C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
      Size . . . . . . . : 6.277.952 bytes
      Age  . . . . . . . : 746.7 days (2015-01-17 15:57:04)
      Entropy  . . . . . : 6.6
      SHA-256  . . . . . : 03DCB98F1764862A0DFC1B3A6CD34BA583DA512E8E4556E891A228832C0F8DE1
      RSA Key Size . . . : 2048
      Parent Name  . . . : C:\Windows\system32\taskeng.exe
      Authenticode . . . : Self-signed
      Running processes  : 3372
      Fuzzy  . . . . . . : 24.0
        Program is code self-signed.
        This program is actively listening for inbound network connections.
        Uses the Windows Registry to run each time the user logs on.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Program starts automatically without user intervention.
        The file is in use by one or more active processes.
      Startup
        HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Amazon Music
        HKU\S-1-5-21-1736235967-2657770174-236075978-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Amazon Music
      Network Ports
        127.0.0.1:4750       

  C:\Users\Kornelia\Desktop\FRST.exe
      Size . . . . . . . : 1.762.816 bytes
      Age  . . . . . . . : 4.9 days (2017-01-28 13:03:32)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 619C07B350EBEF2033B0373A17EC2034B6AF6E30701AF05F4F218DE9B7BAB4CF
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
        Program has no publisher information but prompts the user for permission elevation.
        Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Time indicates that the file appeared recently on this computer.
      References
        HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Kornelia\Desktop\FRST.exe

  C:\Windows\system32\drivers\ACEDRV05.sys
      Size . . . . . . . : 97.792 bytes
      Age  . . . . . . . : 2520.8 days (2010-03-10 14:49:04)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 818FD957C6EA1869ED13EA8C0681D2850141E22A68A2D982E4AEEA2736F50555
      Service  . . . . . : ACEDRV05
      Fuzzy  . . . . . . : 23.0
        Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
        Starts automatically as a service during system bootup.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Program starts automatically without user intervention.
        The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
        The file is a device driver. Device drivers run as trusted (highly privileged) code.
      Startup
        HKLM\SYSTEM\CurrentControlSet\Services\ACEDRV05\

  C:\Windows\system32\drivers\acedrv10.sys
      Size . . . . . . . : 330.144 bytes
      Age  . . . . . . . : 3478.0 days (2007-07-27 09:13:08)
      Entropy  . . . . . : 7.8
      SHA-256  . . . . . : 28925A0A8A8953179BE07C1DC2E1D5B99AAE6C2AFE71F41851DDE4B558BE4600
      RSA Key Size . . . : 1024
      Service  . . . . . : acedrv10
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : 29.0
        The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
        Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
        Authors name is missing in version info. This is not common to most programs.
        Version control is missing. This file is probably created by an individual. This is not typical for most programs.
        Program starts automatically without user intervention.
        The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
        Starts automatically as a service during system bootup.
        Program contains PE structure anomalies. This is not typical for most programs.
        The file is a device driver. Device drivers run as trusted (highly privileged) code.
        Program is code signed with a valid Authenticode certificate.
      Startup
        HKLM\SYSTEM\CurrentControlSet\Services\acedrv10\


Potential Unwanted Programs _________________________________________________

  HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaadgepjkdffhjbkfjgnnffnfcffbg\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D321341397\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D341731497\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F463\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F497\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E563\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E597\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52463\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52497\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C517C4F4B3147AB4\ (AskBar)
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29\ (AskBar)
  HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}\ (AskBar)
  HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022000242\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}\ (AskBar)
  HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}\ (AskBar)
  HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Software\AppDataLow\Software\Smartbar\ (Conduit)
  HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\AppDataLow\Software\Smartbar\ (Conduit)
  HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} (AskBar)
  HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}\ (AskBar)
  HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}\ (AskBar)

Mineko 02.02.2017 10:57
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version: 29-01-2017
durchgeführt von Kornelia (Administrator) auf KORNELIA-PC (02-02-2017 10:05:19)
Gestartet von C:\Users\Kornelia\Desktop
Geladene Profile: Kornelia &  (Verfügbare Profile: Kornelia & Tabea)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\VPN\Avira.VpnService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Nero AG) C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
() C:\Windows\System32\PSIService.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(mobile concepts GmbH) C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe
() C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Program Files\dvd43\DVD43_Tray.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intenium) C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe
(Google) C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
() C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4702208 2007-10-01] (Realtek Semiconductor)
HKLM\...\Run: [dvd43] => C:\Program Files\dvd43\dvd43_tray.exe [827904 2009-10-23] ()
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AgentMonitor] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [391040 2013-06-20] ()
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [286992 2015-11-28] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [61896 2016-12-29] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\Antivirus\avgnt.exe [917576 2016-12-16] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup User Starter] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25744 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira System Speedup Tray] => C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [160936 2017-01-11] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Run: [Spiele Post] => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [144384 2010-11-20] (Microsoft Corporation)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Run: [Alamandi tray notifier] => C:\Program Files\DEUTSCHLAND SPIELT\Alamandi\TaskBarNotifier.exe [394992 2012-07-10] (Intenium)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Run: [Facebook Update] => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-11] (Facebook Inc.)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Run: [Amazon Music] => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [449760 2013-10-31] (Sony)
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Run: [Spiele Post] => C:\Program Files\OXXOGames\GPlayer\GameCenterNotifier.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Policies\Explorer: [NoRecentDocsHistory] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Policies\Explorer: [NoRecentDocsMenu] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Policies\Explorer: [NoStartMenuMFUprogramsList] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\MountPoints2: {dd31715e-6298-11df-b571-001d607b2853} - F:\LaunchU3.exe -a
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\MountPoints2: {fdc8adba-0935-11e2-a19e-001d607b2853} - G:\DPFMate.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\...\MountPoints2: {663fc844-a6e0-11e0-b32f-806e6f6e6963} - D:\Autorun.exe
HKU\S-1-5-21-1736235967-2657770174-236075978-1003.bak-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203524706\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1736235967-2657770174-236075978-1003.bak-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203524706\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AOButler.exe - Verknüpfung.lnk [2012-05-05]
ShortcutTarget: AOButler.exe - Verknüpfung.lnk -> C:\Program Files\ArcorOnline\AOButler.exe (Keine Datei)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Google Calendar Sync.lnk [2013-01-10]
ShortcutTarget: Google Calendar Sync.lnk -> C:\Program Files\Google\Google Calendar Sync\GoogleCalendarSync.exe (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2013-02-09]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (Keine Datei)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-11-28]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2015-10-02]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()
Startup: C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-02-01]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AOButler.lnk [2012-06-03]
ShortcutTarget: AOButler.lnk -> C:\Program Files\ArcorOnline\AOButler.exe (Keine Datei)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-03-04]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-02-01]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2017-02-01]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{23F9AFAB-2021-4A7D-9477-EBCFE8F59F7E}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9AD09A44-51EC-4D6E-9E93-74F49F171E7E}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#/?show_is=1&source=art
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#/?show_is=1&source=art
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-11-04] (RealDownloader)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-15] (Sun Microsystems, Inc.)
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932 -> Kein Name - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} -  Keine Datei
Toolbar: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Keine Datei
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default [2017-02-02]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\20811wxw.default ->
FF Session Restore: Mozilla\Firefox\Profiles\20811wxw.default -> ist aktiviert.
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com [2017-01-26]
FF Extension: (Avira Browser Safety) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\abs@avira.com.xpi [2017-01-08]
FF Extension: (FacebookBlocker) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\facebookBlocker@webgraph.com [2014-02-16] [ist nicht signiert]
FF Extension: (NO Google Analytics) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-JcGokIiQyjoBAQ@jetpack.xpi [2016-06-09]
FF Extension: (Official My JDownloader AddOn) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2017-01-07]
FF Extension: (Test Pilot) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\testpilot@labs.mozilla.com.xpi [2016-09-01]
FF Extension: (NoScript) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2017-01-20]
FF Extension: (Adblock Plus) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-16]
FF Extension: (Torbutton) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\Extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}.xpi [2012-10-11] [ist nicht signiert]
FF Extension: (Diagnostics) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\features\{68b98d93-b5ed-4672-bcf1-e5f094d0f471}\diagnostics@mozilla.org.xpi [2017-02-02]
FF Extension: (Send HSTS Priming Requests) - C:\Users\Kornelia\AppData\Roaming\Mozilla\Firefox\Profiles\20811wxw.default\features\{68b98d93-b5ed-4672-bcf1-e5f094d0f471}\hsts-priming@mozilla.org.xpi [2017-02-02]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-07-05] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: (Mehr Leistung und Videoformate für dein HTML5 &video&) - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-12-27] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll [2012-07-05] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin: @mcafee.com/McAfeeMssPlugin -> C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-11-28] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-08] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2010-02-04] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.1.2.175 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-11-28] (RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2012-02-15] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2014-04-27] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll [2014-04-27] (RealPlayer Cloud)

Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll => Keine Datei
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll => Keine Datei
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (DivX Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\50.0.2661.102\pdf.dll => Keine Datei
CHR Plugin: (Windows Genuine Advantage) - C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Profile: C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default [2017-01-31]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-16]
CHR Extension: (RealDownloader) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-11-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-06-16]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2013-04-07]
CHR Extension: (Kein Name) - C:\Users\Kornelia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-15]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - Chrome.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1089592 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\Antivirus\avguard.exe [476736 2016-12-16] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1490296 2016-12-16] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [372272 2016-12-29] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files\Avira\VPN\Avira.VpnService.exe [300344 2017-01-18] (Avira Operations GmbH & Co. KG)
R2 CGVPNCliSrvc; C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
S2 gupdate1cacc58a1955820; C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-02] (Google Inc.)
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-12-06] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888 2017-01-20] (Malwarebytes)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [174656 2006-11-02] () [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [33088 2015-11-04] ()
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1095976 2015-11-28] (RealNetworks, Inc.)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software) [Datei ist nicht signiert]
R2 SpeedupService; C:\Program Files\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [35304 2017-01-11] (Avira Operations GmbH & Co. KG)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ACEDRV05; C:\Windows\system32\drivers\ACEDRV05.sys [97792 2010-03-10] (Protect Software GmbH) [Datei ist nicht signiert]
R2 ACEDRV08; C:\Windows\system32\drivers\ACEDRV08.sys [108768 2010-12-28] (Protect Software GmbH)
R2 acedrv10; C:\Windows\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R2 acehlp10; C:\Windows\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2010-04-05] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119208 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140840 2016-12-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-09-27] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-09-27] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [30672 2016-12-16] (Avira Operations GmbH & Co. KG)
R3 dvd43llh; C:\Windows\System32\DRIVERS\dvd43llh.sys [18816 2010-06-09] (RIF) [Datei ist nicht signiert]
R3 eapihdrv; C:\Users\Kornelia\AppData\Local\Temp\ehdrv.sys [135760 2017-02-01] (ESET)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59976 2017-01-20] ()
S3 HCW713x; C:\Windows\System32\DRIVERS\HCW713x.sys [827776 2007-03-26] (Hauppauge Computer Works inc.)
R0 hotcore3; C:\Windows\System32\drivers\hotcore3.sys [39472 2008-02-14] (Paragon Software Group)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2010-04-05] ()
R3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25752 2009-10-07] ()
S3 LVUSBSta; C:\Windows\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [152512 2017-01-31] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [94656 2017-02-01] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-02-01] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [219584 2017-02-01] (Malwarebytes)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2007-02-27] ()
S3 pepifilter; C:\Windows\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors)
S3 PID_PEPI; C:\Windows\System32\DRIVERS\LV302V32.SYS [2687512 2009-04-30] (Logitech Inc.)
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [36624 2007-01-28] (Sonic Solutions) [Datei ist nicht signiert]
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2012-10-25] (Realtek Semiconductor Corporation                          )
S0 sptd; C:\Windows\System32\Drivers\sptd.sys [722416 2010-10-22] (Duplex Secure Ltd.)
R2 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5504 2012-06-03] () [Datei ist nicht signiert]
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-02-02 10:05 - 2017-02-02 10:06 - 00033200 _____ C:\Users\Kornelia\Desktop\FRST.txt
2017-02-02 09:48 - 2017-02-02 10:01 - 00000000 ____D C:\ProgramData\HitmanPro
2017-02-02 09:42 - 2017-02-02 09:42 - 11005320 _____ (SurfRight B.V.) C:\Users\Kornelia\Desktop\HitmanPro.exe
2017-01-31 10:22 - 2017-01-31 10:22 - 00001881 _____ C:\Users\Kornelia\Desktop\JRT.txt
2017-01-31 10:16 - 2017-02-01 20:34 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2017-01-31 09:22 - 2017-01-31 09:22 - 04015056 _____ C:\Users\Kornelia\Desktop\adwcleaner_6.043.exe
2017-01-29 14:14 - 2017-01-29 14:14 - 00000000 ____D C:\Users\TEMP.Kornelia-PC\AppData\Local\Real
2017-01-29 14:12 - 2017-01-29 14:15 - 00000000 ____D C:\Users\TEMP.Kornelia-PC
2017-01-28 13:24 - 2017-01-28 13:31 - 00219282 _____ C:\TDSSKiller.3.1.0.12_28.01.2017_13.24.30_log.txt
2017-01-28 13:22 - 2017-01-28 13:22 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Kornelia\Desktop\tdsskiller.exe
2017-01-28 13:03 - 2017-01-30 17:52 - 01762816 _____ (Farbar) C:\Users\Kornelia\Desktop\FRST.exe
2017-01-27 23:56 - 2017-02-02 10:05 - 00000000 ____D C:\FRST
2017-01-27 15:58 - 2017-01-27 15:58 - 01663040 _____ (Malwarebytes) C:\Users\Kornelia\Desktop\JRT.exe
2017-01-27 15:27 - 2017-01-31 09:34 - 00000000 ____D C:\AdwCleaner
2017-01-27 14:42 - 2017-01-27 14:42 - 00000000 ____D C:\Users\Kornelia\AppData\Local\AviraSpeedup
2017-01-27 14:35 - 2017-01-27 14:35 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Avira
2017-01-27 13:56 - 2017-02-01 20:36 - 00094656 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-27 13:56 - 2017-02-01 19:49 - 00063264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-27 13:56 - 2017-01-31 10:36 - 00152512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-27 13:55 - 2017-02-01 20:36 - 00039360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-27 13:55 - 2017-02-01 20:35 - 00219584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-27 13:55 - 2017-01-27 13:55 - 00002020 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-27 13:55 - 2017-01-27 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-27 13:55 - 2017-01-20 07:47 - 00059976 _____ C:\Windows\system32\Drivers\mbae.sys
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-27 13:54 - 2017-01-27 13:54 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-27 00:03 - 2017-01-27 00:04 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2017-01-26 22:47 - 2017-01-26 22:47 - 00001134 _____ C:\Users\Kornelia\Desktop\Avira Antivirus starten.lnk
2017-01-26 21:06 - 2017-01-26 21:06 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_588a51b66deb0__ws.exe
2017-01-26 19:57 - 2017-01-26 19:57 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Avira
2017-01-26 17:28 - 2017-01-26 17:28 - 00000000 ____D C:\Users\Kornelia\Downloads\Notfall DVD 7.0 Free
2017-01-26 16:35 - 2017-01-26 17:04 - 1276319704 _____ C:\Users\Kornelia\Downloads\Notfall_DVD_7.0_Free.zip
2017-01-26 13:57 - 2017-01-26 13:57 - 00001101 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk
2017-01-26 13:57 - 2017-01-26 13:57 - 00000998 _____ C:\Users\Public\Desktop\Avira Phantom VPN.lnk
2017-01-26 13:56 - 2017-02-01 20:37 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-01-26 13:52 - 2017-01-26 13:52 - 00001166 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-01-26 13:43 - 2017-01-26 13:49 - 04581024 _____ (Avira Operations GmbH & Co. KG) C:\Users\Kornelia\Downloads\avira_de_fass0_5889ec8b9e38c__ws.exe
2017-01-24 23:24 - 2017-01-24 23:24 - 00000936 _____ C:\Users\Kornelia\Desktop\duplicate.txt
2017-01-19 19:22 - 2017-01-19 21:20 - 00000000 ____D C:\Users\Kornelia\Desktop\Rekla Herd
2017-01-12 23:57 - 2017-01-12 23:58 - 00000000 ____D C:\Users\Kornelia\Desktop\SCHULE
2017-01-11 13:22 - 2017-01-05 18:46 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-11 13:22 - 2017-01-05 18:46 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-11 13:22 - 2017-01-05 18:43 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-11 13:22 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-11 13:22 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-11 13:22 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-11 13:22 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-11 13:22 - 2017-01-05 18:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-11 13:22 - 2017-01-05 18:19 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-10 16:32 - 2017-01-25 00:18 - 00040346 _____ C:\Users\Kornelia\Desktop\Dateiliste.xlsx
2017-01-08 21:33 - 2017-01-08 21:33 - 00000000 ____D C:\Users\Kornelia\AppData\Local\CEF
2017-01-07 22:31 - 2017-01-07 22:31 - 00002075 _____ C:\Users\Kornelia\Desktop\JDownloader 2.lnk
2017-01-07 22:31 - 2017-01-07 22:31 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2017-01-07 22:27 - 2017-01-27 15:13 - 00000000 ____D C:\Users\Kornelia\AppData\Local\JDownloader 2.0
2017-01-07 22:23 - 2017-01-07 22:23 - 00076504 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\WebInstaller.exe
2017-01-07 19:32 - 2017-02-02 10:04 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Mozilla
2017-01-07 19:20 - 2017-01-07 19:20 - 00243720 _____ C:\Users\Kornelia\Downloads\Firefox Setup Stub 50.1.0.exe
2017-01-07 17:29 - 2017-01-24 23:13 - 00000000 ____D C:\Users\Kornelia\Downloads\Downloader
2017-01-07 17:21 - 2017-01-07 17:23 - 26539720 _____ (AppWork GmbH) C:\Users\Kornelia\Downloads\JDownloaderSetup.exe
2017-01-07 16:50 - 2017-01-07 16:50 - 00000000 ____D C:\Users\Kornelia\Downloads\Info

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-02-02 09:46 - 2015-09-16 17:12 - 00000000 ____D C:\Users\Kornelia\Desktop\Neuer Ordner (2)
2017-02-02 09:43 - 2010-03-26 02:57 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2017-02-02 09:43 - 2010-03-25 21:41 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-02-02 09:31 - 2013-03-01 15:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-02-02 07:23 - 2013-06-11 21:18 - 00000940 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job
2017-02-02 03:21 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-02 03:21 - 2011-07-05 09:29 - 00021264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-01 22:23 - 2013-06-11 21:18 - 00000918 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job
2017-02-01 20:34 - 2011-07-05 09:31 - 00000000 ____D C:\Users\Kornelia
2017-02-01 20:34 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-31 21:47 - 2011-07-05 10:27 - 01629284 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-31 21:47 - 2009-07-14 09:47 - 00702942 _____ C:\Windows\system32\perfh007.dat
2017-01-31 21:47 - 2009-07-14 09:47 - 00150582 _____ C:\Windows\system32\perfc007.dat
2017-01-31 21:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2017-01-31 21:34 - 2011-05-03 14:50 - 00000000 ____D C:\Users\Kornelia\AppData\LocalLow\Temp
2017-01-31 09:33 - 2011-07-05 10:34 - 00000008 __RSH C:\Users\Kornelia\ntuser.pol
2017-01-31 09:33 - 2011-07-05 10:33 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-01-31 08:58 - 2013-03-14 15:50 - 00000000 ____D C:\Windows\pss
2017-01-27 15:43 - 2016-03-27 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-01-27 15:43 - 2012-04-30 09:26 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-01-27 15:40 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-01-27 15:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\tracing
2017-01-27 15:13 - 2011-11-01 11:13 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Vidalia
2017-01-27 15:13 - 2011-07-05 10:25 - 00000000 ____D C:\Windows\Panther
2017-01-27 15:13 - 2011-04-13 13:21 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\skypePM
2017-01-27 15:12 - 2010-10-31 18:18 - 00000000 ___RD C:\Users\Kornelia\Desktop\Tabea Spiele
2017-01-27 15:12 - 2007-10-12 08:47 - 00000000 ____D C:\Program Files\DivX
2017-01-27 00:05 - 2010-12-16 14:57 - 00000000 ____D C:\Program Files\GMX
2017-01-26 23:52 - 2011-09-30 10:13 - 00000000 ____D C:\Users\Public\Documents\Tivola_prefs
2017-01-26 23:52 - 2011-02-23 18:14 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amazon
2017-01-26 23:52 - 2011-02-23 18:11 - 00000000 ____D C:\Program Files\Amazon
2017-01-26 23:52 - 2010-03-10 14:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tivola
2017-01-26 23:48 - 2011-03-09 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:41 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\DVDVideoSoft
2017-01-26 23:48 - 2011-03-09 20:40 - 00000000 ____D C:\Program Files\DVDVideoSoft
2017-01-26 23:43 - 2016-10-23 15:39 - 00150152 _____ C:\Windows\ntbtlog.txt
2017-01-26 17:26 - 2016-10-24 10:00 - 00120432 _____ C:\Users\Kornelia\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-26 16:28 - 2016-10-21 23:01 - 00428280 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-26 13:57 - 2016-10-21 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-01-26 13:57 - 2012-12-22 20:23 - 00000000 ____D C:\Program Files\Avira
2017-01-26 13:57 - 2012-05-20 11:07 - 00000000 ____D C:\ProgramData\Avira
2017-01-26 13:52 - 2015-11-28 11:45 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-26 13:30 - 2011-04-05 15:08 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-01-25 13:21 - 2012-02-26 18:45 - 00000000 ____D C:\Users\Kornelia\Downloads\Heidi
2017-01-24 23:47 - 2011-04-05 14:45 - 00000000 ____D C:\ProgramData\Norton
2017-01-23 15:51 - 2012-01-17 15:04 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Microsoft Help
2017-01-23 12:32 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2017-01-22 00:11 - 2016-08-14 14:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 21:19 - 2010-04-01 21:23 - 00000000 ____D C:\Users\Kornelia\AppData\Roaming\COREL
2017-01-19 21:13 - 2010-04-29 21:48 - 00000000 ____D C:\Users\Kornelia\Documents\My PSP Files
2017-01-19 21:13 - 2010-04-22 22:31 - 00001786 ___SH C:\Windows\system32\KGyGaAvL.sys
2017-01-11 23:30 - 2013-09-01 10:47 - 00000000 ____D C:\Windows\system32\MRT
2017-01-11 23:19 - 2011-08-09 13:50 - 133456224 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-10 19:31 - 2012-05-27 00:08 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-01-10 19:31 - 2011-09-06 09:10 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-01-10 19:31 - 2010-03-13 11:32 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-08 21:33 - 2010-03-12 09:41 - 00000000 ____D C:\Users\Kornelia\AppData\Local\Adobe
2017-01-07 19:31 - 2011-10-05 01:27 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-07 19:31 - 2010-03-06 17:48 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2010-06-02 05:21 - 2010-06-02 05:21 - 1347354 _____ () C:\Program Files\Apr2005_d3dx9_25_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1078962 _____ () C:\Program Files\Apr2005_d3dx9_25_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1397830 _____ () C:\Program Files\Apr2006_d3dx9_30_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1115221 _____ () C:\Program Files\Apr2006_d3dx9_30_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0916430 _____ () C:\Program Files\Apr2006_MDX1_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 4162630 _____ () C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0179133 _____ () C:\Program Files\Apr2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0133103 _____ () C:\Program Files\Apr2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087101 _____ () C:\Program Files\Apr2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046010 _____ () C:\Program Files\Apr2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0698612 _____ () C:\Program Files\APR2007_d3dx10_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0695865 _____ () C:\Program Files\APR2007_d3dx10_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1607358 _____ () C:\Program Files\APR2007_d3dx9_33_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1606039 _____ () C:\Program Files\APR2007_d3dx9_33_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0195766 _____ () C:\Program Files\APR2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0151225 _____ () C:\Program Files\APR2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0096817 _____ () C:\Program Files\APR2007_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0053302 _____ () C:\Program Files\APR2007_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1350542 _____ () C:\Program Files\Aug2005_d3dx9_27_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1077644 _____ () C:\Program Files\Aug2005_d3dx9_27_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0182903 _____ () C:\Program Files\AUG2006_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0137235 _____ () C:\Program Files\AUG2006_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0087142 _____ () C:\Program Files\AUG2006_xinput_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0046058 _____ () C:\Program Files\AUG2006_xinput_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0852286 _____ () C:\Program Files\AUG2007_d3dx10_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0796867 _____ () C:\Program Files\AUG2007_d3dx10_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1800160 _____ () C:\Program Files\AUG2007_d3dx9_35_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1708152 _____ () C:\Program Files\AUG2007_d3dx9_35_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0198096 _____ () C:\Program Files\AUG2007_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0153012 _____ () C:\Program Files\AUG2007_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0867612 _____ () C:\Program Files\Aug2008_d3dx10_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0849167 _____ () C:\Program Files\Aug2008_d3dx10_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1794084 _____ () C:\Program Files\Aug2008_d3dx9_39_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 1464672 _____ () C:\Program Files\Aug2008_d3dx9_39_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0121772 _____ () C:\Program Files\Aug2008_XACT_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0092996 _____ () C:\Program Files\Aug2008_XACT_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271412 _____ () C:\Program Files\Aug2008_XAudio_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0271038 _____ () C:\Program Files\Aug2008_XAudio_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0919044 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0900598 _____ () C:\Program Files\Aug2009_D3DCompiler_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3112111 _____ () C:\Program Files\Aug2009_d3dcsx_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 3319740 _____ () C:\Program Files\Aug2009_d3dcsx_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0232635 _____ () C:\Program Files\Aug2009_d3dx10_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0192131 _____ () C:\Program Files\Aug2009_d3dx10_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0136301 _____ () C:\Program Files\Aug2009_d3dx11_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0105044 _____ () C:\Program Files\Aug2009_d3dx11_42_x86.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0930116 _____ () C:\Program Files\Aug2009_d3dx9_42_x64.cab
2010-06-02 05:21 - 2010-06-02 05:21 - 0728456 _____ () C:\Program Files\Aug2009_d3dx9_42_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122408 _____ () C:\Program Files\Aug2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093106 _____ () C:\Program Files\Aug2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273264 _____ () C:\Program Files\Aug2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272642 _____ () C:\Program Files\Aug2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1357976 _____ () C:\Program Files\Dec2005_d3dx9_28_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1079456 _____ () C:\Program Files\Dec2005_d3dx9_28_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0212807 _____ () C:\Program Files\DEC2006_d3dx10_00_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0191720 _____ () C:\Program Files\DEC2006_d3dx10_00_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1571154 _____ () C:\Program Files\DEC2006_d3dx9_32_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1574376 _____ () C:\Program Files\DEC2006_d3dx9_32_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0192475 _____ () C:\Program Files\DEC2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0145599 _____ () C:\Program Files\DEC2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0089944 _____ (Microsoft Corporation) C:\Program Files\DSETUP.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 1801048 _____ () C:\Program Files\dsetup32.dll
2010-06-02 05:22 - 2010-06-02 05:22 - 0042410 _____ () C:\Program Files\dxdllreg_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0537432 _____ () C:\Program Files\DXSETUP.exe
2010-06-02 05:22 - 2010-06-02 05:22 - 0094011 _____ () C:\Program Files\dxupdate.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1247499 _____ () C:\Program Files\Feb2005_d3dx9_24_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1013225 _____ () C:\Program Files\Feb2005_d3dx9_24_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1362796 _____ () C:\Program Files\Feb2006_d3dx9_29_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1084720 _____ () C:\Program Files\Feb2006_d3dx9_29_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0178359 _____ () C:\Program Files\Feb2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0132409 _____ () C:\Program Files\Feb2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0194675 _____ () C:\Program Files\FEB2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0147983 _____ () C:\Program Files\FEB2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054678 _____ () C:\Program Files\Feb2010_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0020713 _____ () C:\Program Files\Feb2010_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122446 _____ () C:\Program Files\Feb2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093180 _____ () C:\Program Files\Feb2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0276960 _____ () C:\Program Files\Feb2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277191 _____ () C:\Program Files\Feb2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1336002 _____ () C:\Program Files\Jun2005_d3dx9_26_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1064925 _____ () C:\Program Files\Jun2005_d3dx9_26_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0180785 _____ () C:\Program Files\JUN2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0133671 _____ () C:\Program Files\JUN2006_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0699044 _____ () C:\Program Files\JUN2007_d3dx10_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0698472 _____ () C:\Program Files\JUN2007_d3dx10_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607774 _____ () C:\Program Files\JUN2007_d3dx9_34_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1607286 _____ () C:\Program Files\JUN2007_d3dx9_34_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197122 _____ () C:\Program Files\JUN2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0152909 _____ () C:\Program Files\JUN2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0867828 _____ () C:\Program Files\JUN2008_d3dx10_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0849919 _____ () C:\Program Files\JUN2008_d3dx10_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1792608 _____ () C:\Program Files\JUN2008_d3dx9_38_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1463878 _____ () C:\Program Files\JUN2008_d3dx9_38_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055154 _____ () C:\Program Files\JUN2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021905 _____ () C:\Program Files\JUN2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121054 _____ () C:\Program Files\JUN2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093128 _____ () C:\Program Files\JUN2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269628 _____ () C:\Program Files\JUN2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0269024 _____ () C:\Program Files\JUN2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0944460 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0931471 _____ () C:\Program Files\Jun2010_D3DCompiler_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0752783 _____ () C:\Program Files\Jun2010_d3dcsx_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0762188 _____ () C:\Program Files\Jun2010_d3dcsx_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0235955 _____ () C:\Program Files\Jun2010_d3dx10_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0197283 _____ () C:\Program Files\Jun2010_d3dx10_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138205 _____ () C:\Program Files\Jun2010_d3dx11_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0109445 _____ () C:\Program Files\Jun2010_d3dx11_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0937246 _____ () C:\Program Files\Jun2010_d3dx9_43_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0768036 _____ () C:\Program Files\Jun2010_d3dx9_43_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0124596 _____ () C:\Program Files\Jun2010_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093686 _____ () C:\Program Files\Jun2010_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0277338 _____ () C:\Program Files\Jun2010_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0278060 _____ () C:\Program Files\Jun2010_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0844884 _____ () C:\Program Files\Mar2008_d3dx10_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0818260 _____ () C:\Program Files\Mar2008_d3dx10_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1769862 _____ () C:\Program Files\Mar2008_d3dx9_37_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1443282 _____ () C:\Program Files\Mar2008_d3dx9_37_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0055058 _____ () C:\Program Files\Mar2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021867 _____ () C:\Program Files\Mar2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0122336 _____ () C:\Program Files\Mar2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0093734 _____ () C:\Program Files\Mar2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0251194 _____ () C:\Program Files\Mar2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0226250 _____ () C:\Program Files\Mar2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1067160 _____ () C:\Program Files\Mar2009_d3dx10_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1040745 _____ () C:\Program Files\Mar2009_d3dx10_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1973702 _____ () C:\Program Files\Mar2009_d3dx9_41_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1612446 _____ () C:\Program Files\Mar2009_d3dx9_41_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054600 _____ () C:\Program Files\Mar2009_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021298 _____ () C:\Program Files\Mar2009_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121506 _____ () C:\Program Files\Mar2009_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092740 _____ () C:\Program Files\Mar2009_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0275044 _____ () C:\Program Files\Mar2009_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273018 _____ () C:\Program Files\Mar2009_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0864600 _____ () C:\Program Files\Nov2007_d3dx10_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0803884 _____ () C:\Program Files\Nov2007_d3dx10_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1802058 _____ () C:\Program Files\Nov2007_d3dx9_36_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1709360 _____ () C:\Program Files\Nov2007_d3dx9_36_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0046144 _____ () C:\Program Files\NOV2007_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0018496 _____ () C:\Program Files\NOV2007_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0196762 _____ () C:\Program Files\NOV2007_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0148264 _____ () C:\Program Files\NOV2007_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0994154 _____ () C:\Program Files\Nov2008_d3dx10_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0965421 _____ () C:\Program Files\Nov2008_d3dx10_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1906878 _____ () C:\Program Files\Nov2008_d3dx9_40_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1550796 _____ () C:\Program Files\Nov2008_d3dx9_40_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0054522 _____ () C:\Program Files\Nov2008_X3DAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0021851 _____ () C:\Program Files\Nov2008_X3DAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0121794 _____ () C:\Program Files\Nov2008_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0092684 _____ () C:\Program Files\Nov2008_XACT_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0273960 _____ () C:\Program Files\Nov2008_XAudio_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0272611 _____ () C:\Program Files\Nov2008_XAudio_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0086037 _____ () C:\Program Files\Oct2005_xinput_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0045359 _____ () C:\Program Files\Oct2005_xinput_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1412902 _____ () C:\Program Files\OCT2006_d3dx9_31_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 1127217 _____ () C:\Program Files\OCT2006_d3dx9_31_x86.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0182361 _____ () C:\Program Files\OCT2006_XACT_x64.cab
2010-06-02 05:22 - 2010-06-02 05:22 - 0138017 _____ () C:\Program Files\OCT2006_XACT_x86.cab
2010-10-22 14:05 - 2010-10-22 14:46 - 0000388 _____ () C:\Users\Kornelia\AppData\Roaming\burnaware.ini
2013-12-18 23:02 - 2013-12-19 00:05 - 0000679 _____ () C:\Users\Kornelia\AppData\Local\cookies.ini
2011-08-17 17:39 - 2015-07-28 17:08 - 0008192 _____ () C:\Users\Kornelia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2011-07-26 18:23 - 2011-07-26 18:23 - 0000000 _____ () C:\Users\Kornelia\AppData\Local\{38D64D27-A406-4959-8E9F-79A45D04043C}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2011-07-05 09:26

==================== Ende vom FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version: 29-01-2017
durchgeführt von Kornelia (02-02-2017 10:07:24)
Gestartet von C:\Users\Kornelia\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) (2011-07-05 09:33:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1736235967-2657770174-236075978-500 - Administrator - Disabled)
Gast (S-1-5-21-1736235967-2657770174-236075978-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1736235967-2657770174-236075978-1005 - Limited - Enabled)
Konni (S-1-5-21-1736235967-2657770174-236075978-1003 - Administrator - Enabled)
Kornelia (S-1-5-21-1736235967-2657770174-236075978-1001 - Administrator - Enabled) => C:\Users\Kornelia
Tabea (S-1-5-21-1736235967-2657770174-236075978-1002 - Limited - Enabled) => C:\Users\Tabea

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\uTorrent) (Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 4.65 (HKLM\...\7-Zip) (Version:  - )
Adobe Acrobat Reader DC - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.6.0.5970 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 24 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.5.635 - Adobe Systems, Inc.)
Aladins Wunderlampe (HKLM\...\Aladins Wunderlampe_is1) (Version:  - )
Alamandi (HKLM\...\Alamandi) (Version: 0.0.0.0 - INTENIUM GmbH)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Annabel (HKLM\...\Annabel) (Version: 1.0.0.0 - INTENIUM GmbH)
ATI Catalyst Install Manager (HKLM\...\{CC516453-9703-ABF9-201F-58A5EC567292}) (Version: 3.0.642.0 - ATI Technologies, Inc.)
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.24.146 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM\...\{845380e2-f0b5-4584-bc40-cc54345b3c06}) (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG)
Avira Connect (Version: 1.2.77.41287 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM\...\Avira Phantom VPN) (Version: 2.4.3.30556 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM\...\Avira System Speedup_is1) (Version: 3.1.1.4250 - Avira Operations GmbH & Co. KG)
Azada ™: Ancient Magic (HKLM\...\BFG-Azada - Ancient Magic) (Version:  - )
Azada: In Libro (HKLM\...\BFG-Azada - In Libro) (Version:  - )
Azteca (HKLM\...\Azteca) (Version: 1.0.0.0 - INTENIUM GmbH)
Beetle Ju 2 (HKLM\...\Beetle Ju 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Bengal (HKLM\...\Bengal) (Version: 1.0.1.0 - INTENIUM GmbH)
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 2.0.0.28 - )
Botanica - Reise ins Unbekannte (HKLM\...\BFG-Botanica - Reise ins Unbekannte) (Version:  - )
calibre (HKLM\...\{BA356893-F9F4-4C84-B10B-6EB2FC3C3B90}) (Version: 1.5.0 - Kovid Goyal)
ccc-core-static (Version: 2007.0821.2146.36991 - Ihr Firmenname) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Chinese Checkers (HKLM\...\40-com.novelgames.flashgames.checkers) (Version: 1.8.0 - Novel Games Limited)
Chinese Checkers (Version: 1.8.0 - Novel Games Limited) Hidden
Corel Paint Shop Pro Photo XI (HKLM\...\{E1C7EF5E-3A7B-4ED4-A48B-F70F1B36EAB4}) (Version: 11.20.0000 - Corel Corporation)
Corel Snapfire DVD Maker (HKLM\...\{17E14D89-3A9F-4706-9F9B-C2DFC7ABE94B}) (Version: 1.20.0000 - Corel Corporation)
Corel Snapfire Plus (HKLM\...\{7ADE3A47-B425-45E9-8FF6-11BE2B775645}) (Version: 1.201.0000 - Corel Corporation)
CyberGhost VPN Patch 4.7.19 (HKLM\...\CyberGhost VPN_is1) (Version:  - CyberGhost S.R.L.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Da Vincis Perlen Puzzle (HKLM\...\Da Vincis Perlen Puzzle) (Version:  - )
Das Reich des Drachen (HKLM\...\Das Reich des Drachen) (Version: 1.0.0.0 - INTENIUM GmbH)
Das Vermächtnis - Der Baum des Lebens (1.00) (HKLM\...\Das Vermächtnis - Der Baum des Lebens_is1) (Version:  - City Interactive)
Der Perfekte Weihnachtsbaum (HKLM\...\Der Perfekte Weihnachtsbaum) (Version: 1.0.0.0 - INTENIUM GmbH)
DEUTSCHLAND SPIELT GAME CENTER (HKLM\...\DSGPlayer) (Version: 1.2010.6.23 - INTENIUM GmbH)
Diamantenfee 2 (HKLM\...\Diamantenfee 2) (Version: 1.0.0.0 - INTENIUM GmbH)
Diamond Drop 2 (HKLM\...\Diamond Drop 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DIE GEHEIMNISSE DER SPIDERWICKS (HKLM\...\{DFA723CE-22B4-4E6B-92CF-176256ECF2DE}) (Version: 1.00.0000 - Sierra Entertainment)
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001\...\Die Kluge Eule) (Version:  - )
Die Kluge Eule (HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\...\Die Kluge Eule) (Version:  - )
Die Wiege Olympias 2 (HKLM\...\Die Wiege Olympias 2) (Version: 1.0.0.0 - INTENIUM GmbH)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.1.3 - DivX, LLC)
Drawn: &reg; Flucht aus der Dunkelheit (HKLM\...\BFG-Drawn - Flucht aus der Dunkelheit) (Version:  - )
Drawn: Der Turm ™ (HKLM\...\BFG-Drawn - Der Turm) (Version:  - )
Dream Chronicles (HKLM\...\Dream Chronicles) (Version:  - PlayFirst, Inc.)
Dream Chronicles ™ 2: The Eternal Maze (HKLM\...\BFG-Dream Chronicles 2 - The Eternal Maze) (Version:  - )
DVD43 v4.6.0 (HKLM\...\DVD43_is1) (Version:  - )
DVS Video Downloader Addon for Mozilla Firefox version 4.3.4.17 (HKLM\...\DVS Video Downloader Addon for Mozilla Firefox_is1) (Version: 4.3.4.17 - DVDVideoSoft Ltd.)
Emil und Pauline Auf dem Land (remove only) (HKLM\...\Emil und Pauline Auf dem Land) (Version:  - )
Emil und Pauline In der Stadt (remove only) (HKLM\...\Emil und Pauline In der Stadt) (Version:  - )
Enigmatis - Vermisst in Maple Creek (HKLM\...\Enigmatis - Vermisst in Maple Creek_is1) (Version:  - rondomedia Marketing & Vertriebs GmbH)
Ewige Reise - Das neue Atlantis (HKLM\...\Ewige Reise - Das neue Atlantis) (Version:  - )
Fabled Legends: Die Ruckkehr des Rattenfangers (HKLM\...\BFG-Fabled Legends - Die Rueckkehr des Rattenfaengers) (Version:  - )
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FarmFrenzy (HKLM\...\FarmFrenzy) (Version:  - )
Finstere Liebschaft - Immortal Lovers (HKLM\...\Finstere Liebschaft - Immortal Lovers) (Version:  - )
foobar2000 v1.0.3 (HKLM\...\foobar2000) (Version: 1.0.3 - Peter Pawlowski)
Forest Legends - Der Ruf der Liebe (HKLM\...\Forest Legends - Der Ruf der Liebe) (Version:  - )
FormatFactory 3.5.0.0 (HKLM\...\FormatFactory) (Version: 3.5.0.0 - Format Factory)
Free Studio version 2013 (HKLM\...\Free Studio_is1) (Version: 6.1.0.320 - DVDVideoSoft Ltd.)
Galileo Family Quiz - Spezial II (HKLM\...\Galileo Family Quiz - Spezial II) (Version:  - SevenOne Intermedia)
Geheimakte 2 - Puritas Cordis (HKLM\...\{BE7347AD-2D93-4A74-8DBF-C1B073DAE509}) (Version: 1.00.0000 - Deep Silver)
Geheime Fälle: Die gestohlene Venus (HKLM\...\Geheime Fälle: Die gestohlene Venus) (Version: 1.0.0.0 - INTENIUM GmbH)
Geheimnis von Montezuma 2 (HKLM\...\Geheimnis von Montezuma 2) (Version: 1.0.0.0 - INTENIUM GmbH)
GMX SMS-Manager (HKLM\...\com.unitedinternet.ums.sms-mms-manager) (Version: 2.7.2.6 - 1 und 1 Internet AG)
GMX SMS-Manager (Version: 2.7.2 - 1 und 1 Internet AG) Hidden
Google Calendar Sync (HKLM\...\Google Calendar Sync) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 53.0.2785.143 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.31.5 - Google Inc.) Hidden
Gravely Silent: Haus des Schreckens (HKLM\...\BFG-Gravely Silent - Haus des Schreckens) (Version:  - )
Haunted Manor: Der Herr der Spiegel (HKLM\...\BFG-Haunted Manor - Der Herr der Spiegel) (Version:  - )
Hauppauge MCE XP/Vista Software Encoder (2.0.25102) (HKLM\...\Hauppauge MCE2005 Software Encoder) (Version: 2.0.25102 - Hauppauge Computer Works, Inc.)
Heroes of Hellas (HKLM\...\{C0906D83-1FE0-4176-A940-45A348080987}) (Version: 1.00.0000 - Purplehills)
Hexentanz und Firlefanz (HKLM\...\Hexentanz und Firlefanz) (Version:  - )
Hidden Expedition &reg; : Bermudadreieck (HKLM\...\BFG-Hidden Expedition - Bermudadreieck) (Version:  - )
Hidden Mysteries Salem Secrets (HKLM\...\Hidden Mysteries Salem Secrets) (Version: 1.0 - astrogon Software)
Hidden Mysteries Vampire Secrets (HKLM\...\Hidden Mysteries Vampire Secrets) (Version: 1.0 - astragon Software)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JetBee FREE 5.1.2 (build 456) (HKLM\...\JetBee_is1) (Version:  - )
Jewel Puzzle (HKLM\...\Jewel Puzzle) (Version: 1.0.0.0 - INTENIUM GmbH)
Kleiner Eisbär 2 (HKLM\...\Kleiner Eisbär 2) (Version:  - )
Kuros (HKLM\...\Kuros) (Version: 1.0.0.0 - INTENIUM GmbH)
Lauras Stern (HKLM\...\Lauras Stern) (Version:  - )
Letstrade (HKLM\...\{E0091C29-DEE8-4B24-BF65-8C35B5940D77}) (Version: 1.00.0000 - Buhl Data Service)
LightScribe System Software  1.17.90.1 (HKLM\...\{CB16F6D9-EBC9-4BC6-B917-7AF53E99C067}) (Version: 1.17.90.1 - LightScribe)
Logitech Webcam Software (HKLM\...\{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}) (Version: 12.10.1113 - Logitech Inc.)
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
Manic Digger (HKLM\...\{119E2FCB-5CDD-4C24-BCB2-56A824E2BF0A}_is1) (Version:  - )
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Midnight Mysteries Salem Witch Trials (HKLM\...\Midnight Mysteries Salem Witch Trials) (Version: 1.1.0.0 - MumboJumbo)
Mozilla Firefox 51.0.1 (x86 de) (HKLM\...\Mozilla Firefox 51.0.1 (x86 de)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
Mozilla Thunderbird 45.6.0 (x86 de) (HKLM\...\Mozilla Thunderbird 45.6.0 (x86 de)) (Version: 45.6.0 - Mozilla)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB941833) (HKLM\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery Case Files&reg;: Dire Grove™ (HKLM\...\BFG-Mystery Case Files - Dire Grove) (Version:  - )
Mystery Case Files: Madame Fate &reg; (HKLM\...\BFG-Mystery Case Files - Madame Fate) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst Handbuch ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst Handbuch) (Version:  - )
Mystery Case Files: R&uuml;ckkehr nach Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Rueckkehr nach Ravenhearst) (Version:  - )
Mystery Case Files: Ravenhearst ™ (HKLM\...\BFG-Mystery Case Files - Ravenhearst) (Version:  - )
Mystery of Cleopatra (HKLM\...\Mystery of Cleopatra 1.0) (Version: 1.0 - Rondo Media)
Mystery Places - Das Geheimnis der Geistervilla (HKLM\...\Mystery Places - Das Geheimnis der Geistervilla_is1) (Version:  - )
Mystery Tales - Insel der Träume (HKLM\...\{2C0AC9A4-3FA8-4B71-848E-9BB9D492BC2E}_is1) (Version:  - cerasus.media GmbH)
Mystery Trackers: Raincliff (HKLM\...\BFG-Mystery Trackers - Raincliff) (Version:  - )
Natalie Brooks (HKLM\...\Natalie Brooks) (Version:  - )
Nero 7 Essentials (HKLM\...\{0DE739CA-9487-4E3E-8511-92EAF01F1031}) (Version: 7.03.0274 - Nero AG)
Nightfall Mysteries - Die Ashburg Verschwörung (HKLM\...\Nightfall Mysteries - Die Ashburg Verschwörung_is1) (Version:  - rondomedia)
Pahelika: Secret Legends (HKLM\...\Pahelika: Secret Legends) (Version:  - The Games Company Worldwide GmbH)
Paragon Hard Disk Manager 2008 Professional (HKLM\...\{E9E4BB29-FA98-401B-9EDE-9906906E33DE}) (Version:  - Paragon Software Group)
PixiePack Codec Pack (HKLM\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)
PlayReady PC Runtime x86 (HKLM\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Polipo 1.0.4.1 (HKLM\...\Polipo) (Version:  - )
Prinzessin Isabella (HKLM\...\Prinzessin Isabella) (Version: 1.0.0.0 - INTENIUM GmbH)
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProtectDisc Helper Driver 10 (HKLM\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
Radiotracker (HKLM\...\{1E863F44-2D2D-4BD7-B25B-EDA9FF622267}) (Version: 6.2.13700.0 - RapidSolution Software AG)
ratDVD 0.78.1444 (HKLM\...\ratDVD) (Version: 0.78.1444 - ratDVD)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
RealDownloader (Version: 18.1.2.176 - RealNetworks, Inc.) Hidden
RealDownloader (Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM\...\RealPlayer 18.1) (Version: 18.1.2 - RealNetworks)
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rooms - Die Villa 1.0d  (HKLM\...\Rooms - Die Villa) (Version: 1.0d - Halycon Media)
Samantha Swift and the Mystery From Atlantis (HKLM\...\Samantha Swift and the Mystery From Atlantis) (Version: 1.1.0.0 - MumboJumbo)
Sandra Fleming Chronicles – Crystal Skulls (HKLM\...\Sandra Fleming Chronicles – Crystal Skulls) (Version: 1.0.0.0 - INTENIUM GmbH)
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Simajo (HKLM\...\Simajo) (Version:  - )
Skins (Version: 2007.0821.2146.36991 - ATI) Hidden
Skype™ 7.0 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sony Ericsson Update Engine (HKLM\...\Update Engine) (Version: 2.13.6.201305161305 - Sony Ericsson Communications AB)
Sony PC Companion 2.10.188 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.188 - Sony)
Spirits of Mystery: Dunkler Fluch (HKLM\...\BFG-Spirits of Mystery - Dunkler Fluch) (Version:  - )
Spur der Träume (HKLM\...\Spur der Träume) (Version: 1.0.0.0 - INTENIUM GmbH)
Sweet Home 3D version 3.3 (HKLM\...\Sweet Home 3D_is1) (Version:  - eTeks)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
The Enchanted Kingdom: Elisa’s Adventure (HKLM\...\The Enchanted Kingdom: Elisa’s Adventure) (Version: 1.0.0.0 - INTENIUM GmbH)
The Fall Trilogy (HKLM\...\The Fall Trilogy_is1) (Version:  - Morphicon)
The Fall Trilogy Chapter 2 (HKLM\...\The Fall Trilogy Chapter 2_is1) (Version:  - Morphicon)
The Night of the Rabbit (HKLM\...\The Night of the Rabbit) (Version: 1.0 - Daedalic Entertainment)
The Sultans Labyrinth: Das Opfer des K&ouml;nigs (HKLM\...\BFG-The Sultans Labyrinth - Das Opfer des Koenigs) (Version:  - ) <==== ACHTUNG
Tor 0.2.2.35 (HKLM\...\Tor) (Version:  - )
TP-LINK 300Mbps Wireless USB Adapter Treiber (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Trödelschätze (HKLM\...\{AC368309-A247-42C0-9AAF-ABB2E067B79C}) (Version: 1.00.0000 - Valusoft)
TrueCrypt (HKLM\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
Try Corel Snapfire muvee autoProducer add on (Version: 1.00.0000 - Ihr Firmenname) Hidden
Turtix (HKLM\...\Turtix) (Version:  - )
Turtix 2 (HKLM\...\Turtix 2) (Version:  - )
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vernaeht und zugeflixt! Was stimmt denn hier nicht? (HKLM\...\Vernaeht und zugeflixt! Was stimmt denn hier nicht?) (Version:  - )
Vidalia 0.2.15 (HKLM\...\Vidalia) (Version:  - )
Video Downloader (Version: 1.2.0 - RealNetworks) Hidden
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.6.4 - Shark007)
VTech Download Agent Library (Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM\...\VTechDownloadManager) (Version:  - VTech)
Wieso? Weshalb? Warum? - Unser Körper (HKLM\...\com.rd.www.desktop.DesktopBody) (Version: 1.0.0 - Ravensburger Digital GmbH)
Wieso? Weshalb? Warum? - Unser Körper (Version: 1.0.0 - Ravensburger Digital GmbH) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WordPerfect Office X3 (HKLM\...\_{54DB13F1-0CE0-4BAB-BD5F-7DE150C043C8}) (Version:  - Corel Corporation)
WordPerfect Office X3 (Version: 13.3 - Corel Corporation) Hidden
World Voyage (HKLM\...\World Voyage) (Version: 1.0.0.0 - INTENIUM GmbH)
XMedia Recode 2.3.0.4 (HKLM\...\XMedia Recode) (Version: 2.3.0.4 - Sebastian Dörfler)
XMind 2013 (v3.4.1) (HKLM\...\XMind_is1) (Version: 3.4.1.201401221918 - XMind Ltd.)
Zuma's Revenge! (HKLM\...\Zuma's Revenge!1.0) (Version: 1.0 - AllSmartGames)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{1FD1FE74-9E3C-4C1C-AEEB-AAB592AD770F}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{5E71E4F3-E8C7-4906-9626-973E418762B6}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Update\1.2.205.0\goopdate.dll (Facebook Inc.)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe (Skype Limited)
CustomCLSID: HKU\S-1-5-21-1736235967-2657770174-236075978-1001_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {032A98DE-A547-4FB1-97B4-777E85FCE80F} - System32\Tasks\{51ECF608-A47D-464B-892E-9A3067C4CA0E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {04338029-ABEF-4DB2-A56D-FF0641970A7A} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {08FA19ED-87A2-4BE4-B4F6-1170192766D0} - System32\Tasks\{1D76B916-65CA-47A7-9DD1-C614C8F74E56} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {0922A476-D472-4C6B-AF0D-283C447FF4F0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {248BA49A-31FC-4CBC-AC12-0AD50B3730CD} - System32\Tasks\{2D2CF1E0-A39F-4435-B084-62C323AD4F56} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {262EF14E-2D04-4238-8DD2-2B9AFBBAEC1F} - System32\Tasks\{D62DA859-B3A5-4A8C-8643-BC908C434082} => C:\Program Files\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {2B93871E-90A6-4BD6-B5B2-2B2CCE5A5740} - System32\Tasks\{C791566E-54A6-4DAF-8C0F-0153AA08A504} => pcalua.exe -a D:\Software\Nero\setupx.exe -d D:\Software\Nero
Task: {2D4FEC81-5640-445A-97C1-A780D1FD2CD8} - System32\Tasks\{3D22388D-753E-494E-8F61-D351F8E67C68} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {34B169BF-29C1-4D9E-ABAD-DD33D6A48488} - System32\Tasks\{AA3E9FEA-EE1C-4BD0-A6EE-0AB550AE278F} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {3C30CE7A-A21F-4478-8DFD-AB4484B05538} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-10] (Adobe Systems Incorporated)
Task: {3F4F5314-363F-4D5F-AD46-3C6D3EAA7DDA} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {474C30BF-0A7E-4DC2-9E6B-369B154E8229} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {49897270-27FE-4B7E-A4F9-1B4F8AE27E3F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {49E28B95-9408-4715-97DA-1AB7339805C6} - System32\Tasks\{EA4F2F72-7C23-4AB9-8184-245B49DE749F} => C:\Program Files\DEUTSCHLAND SPIELT\BeetleJu2 VollVersion\BeetleJu2_og.exe [2010-11-23] (INTENIUM GmbH)
Task: {4C08C992-D45F-4D07-9702-9FF2FB1E7DA0} - System32\Tasks\{7D0AE273-2305-48F1-AF5C-46BFD622F47E} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4E016ADD-5044-4D20-841E-C43FFE2861BD} - System32\Tasks\{F4A27F14-3152-470D-9565-039442275C50} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {4EC8D6F7-19A4-43EB-A744-BF2A0A15F56E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {50748F55-16EA-4C55-8547-7EC1D0947037} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {561375CB-FF5A-417B-B297-BA73DE149581} - System32\Tasks\Microsoft\Windows\Wired\GatherWiredInfo => C:\Windows\system32\gatherWiredInfo.vbs
Task: {5AC92F98-B42E-4F21-9AA0-01AD0439642E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {5B3F853B-FE70-4847-8631-186551D7012C} - System32\Tasks\{07CBC734-EBA5-454A-913B-EC737132222F} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {66D53617-940A-4E05-871F-28B9007E2CC3} - System32\Tasks\{9BFE3ECE-693E-45CE-A00E-7DC315188CEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {6B725544-E42B-4580-B4AE-E272703AF399} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {6C42F0C8-5E73-4DE6-A971-9CE99159C71D} - System32\Tasks\{71507EB2-BF35-48B0-8135-FCBC7D54BAEC} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {77D92D5C-1736-4593-BC70-36551C747A1A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {78201B2F-5E80-4168-B233-7212E7A89D0D} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18] (Sun Microsystems, Inc.)
Task: {7DD6E2A0-C6F1-4EFD-92B0-4A0D547C24C5} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {893B18BE-C091-4B27-9D76-82F0BCA99813} - System32\Tasks\{84074564-9C97-48A0-BBB3-89DAB27B7C9B} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9240E8E9-1D41-40BA-B4DE-32542C7145DB} - System32\Tasks\{97E672C4-E6D1-4ED6-99D8-B122A1F86FC0} => pcalua.exe -a D:\DVPP\Setup.exe -d D:\DVPP
Task: {979D3F17-6619-45C5-B404-606838B44253} - System32\Tasks\{E4546B87-1D17-4B95-A0A5-37522F5D05EF} => C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
Task: {9C2F05E8-F861-43CF-987B-095EF430F405} - System32\Tasks\{F3AEE607-769D-4C8B-824B-88BEB035F102} => pcalua.exe -a C:\Spiele\Lillifee\setup.exe -d D:
Task: {B0993B05-978C-4A15-AA87-B18AB9A99EFD} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-06-11] (Facebook Inc.)
Task: {B37A6E42-727E-4E31-A77C-04022A464880} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2015-11-04] (RealNetworks, Inc.)
Task: {BFD53BF4-19B8-4502-92DD-7D926FFA8CA6} - System32\Tasks\{EC680A57-E7BC-4A66-8FBB-20A511FDFA89} => pcalua.exe -a D:\bin\EasyInst.exe -d D:\
Task: {C8250CB2-F11F-4A98-95BB-BA5E812E6A7E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {DAAAE172-7743-4C96-B232-DCC0F5FC7607} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-10-02] (Google Inc.)
Task: {DBF5DE37-8E99-4B07-813D-41126EA90DB3} - System32\Tasks\{81430713-60CA-4B71-8FBB-D14DA0751514} => pcalua.exe -a D:\autorun.exe -d D:\
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs
Task: {F0E42A33-0E8E-4BB2-80F9-8418E2340E57} - System32\Tasks\{287D07D5-E1D7-4882-9C98-35680FC50E9A} => C:\Program Files\astragon Software\Hidden Mysteries Vampire Secrets\Hidden Mysteries - Vampire Secrets.exe [2010-09-03] ()
Task: {F20691E7-0B1D-438A-ABD0-2D94FF823CEA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1736235967-2657770174-236075978-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-11-04] (RealNetworks, Inc.)
Task: {F526EC9D-6127-42C8-A3B4-E081029D3F7D} - System32\Tasks\{3DEE68DB-465B-46BB-87CD-D6BEE805EFD1} => C:\Program Files\Daedalic Entertainment\The Night of the Rabbit\rabbit.exe [2013-04-28] (Daedalic Entertainment GmbH)
Task: {FB0BD155-6754-4ECC-9711-162FE2741D51} - System32\Tasks\Amazon Music Helper => C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe [2014-12-08] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001Core.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1736235967-2657770174-236075978-1001UA.job => C:\Users\Kornelia\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2006-11-02 11:40 - 2006-11-02 11:40 - 00174656 _____ () C:\Windows\system32\PSIService.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00033088 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-11-04 15:20 - 2015-11-04 15:20 - 00037720 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2015-11-04 15:19 - 2015-11-04 15:19 - 00039768 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-11-04 15:20 - 2015-11-04 15:20 - 00037728 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll
2017-01-27 13:54 - 2017-01-20 07:47 - 01732896 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-01-27 13:55 - 2017-01-20 07:47 - 02097616 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2015-01-17 15:57 - 2014-12-08 07:27 - 06277952 _____ () C:\Users\Kornelia\AppData\Local\Amazon Music\Amazon Music Helper.exe
2010-06-09 18:10 - 2009-10-23 18:34 - 00827904 _____ () C:\Program Files\dvd43\DVD43_Tray.exe
2011-07-29 00:08 - 2011-07-29 00:08 - 01259376 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2011-07-29 00:09 - 2011-07-29 00:09 - 00096112 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2013-06-24 09:54 - 2013-06-20 08:58 - 00391040 _____ () C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
2013-06-24 09:54 - 2010-06-24 02:16 - 02150400 _____ () C:\Program Files\VTech\DownloadManager\System\QtCore4.dll
2013-06-24 09:54 - 2010-07-13 14:07 - 07826432 _____ () C:\Program Files\VTech\DownloadManager\System\QtGui4.dll
2013-06-24 09:54 - 2010-06-02 03:29 - 00934912 _____ () C:\Program Files\VTech\DownloadManager\System\QtNetwork4.dll
2013-06-24 09:54 - 2010-06-02 03:28 - 00335360 _____ () C:\Program Files\VTech\DownloadManager\System\QtXml4.dll
2013-06-24 09:54 - 2012-08-06 10:54 - 09843640 _____ () C:\Program Files\VTech\DownloadManager\System\QtWebKit4.dll
2013-06-24 09:54 - 2010-06-02 03:56 - 00232960 _____ () C:\Program Files\VTech\DownloadManager\System\phonon4.dll
2013-06-24 09:54 - 2010-06-02 03:54 - 02530816 _____ () C:\Program Files\VTech\DownloadManager\System\QtXmlPatterns4.dll
2013-06-24 09:54 - 2010-07-05 10:19 - 00116736 _____ () C:\Program Files\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2013-06-24 09:54 - 2010-11-11 10:24 - 00028160 _____ () C:\Program Files\VTech\DownloadManager\System\DACommCenter.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00025600 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qgif4.dll
2013-06-24 09:54 - 2010-06-02 06:05 - 00119808 _____ () C:\Program Files\VTech\DownloadManager\System\imageformats\qjpeg4.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00022312 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\mediautil.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 01520936 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avformat-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 04274984 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avcodec-55.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00322856 _____ () c:\program files\real\realplayer\RPDS\Tools\ffmpeg\avutil-52.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00846848 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
2015-10-02 18:33 - 2012-10-25 15:19 - 01401344 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\nicLan.dll
2015-10-02 18:33 - 2012-12-04 15:22 - 00193024 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\DC_WFF.dll
2015-10-02 18:33 - 2012-10-25 15:19 - 00293376 _____ () C:\Program Files\TP-LINK\TP-LINK-Konfigurationstool\WJRtl.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00714992 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
2016-07-05 17:13 - 2016-07-05 17:13 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll
2015-11-28 11:37 - 2015-11-28 11:37 - 00653608 _____ () c:\program files\real\realplayer\RPDS\Lib\r1api.dll
2016-07-05 17:18 - 2016-07-05 17:18 - 00077552 _____ () C:\Program Files\RealNetworks\RealDownloader\dtvhooks.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2006-11-02 03:23 - 2006-09-18 14:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1      localhost
::1            localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Control Panel\Desktop\\Wallpaper -> C:\Users\Kornelia\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Control Panel\Desktop\\Wallpaper -> C:\Users\Tabea\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1736235967-2657770174-236075978-1003.bak-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203524706\Control Panel\Desktop\\Wallpaper -> C:\Users\Konni\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{771781D7-42F2-4719-BCFC-468823CD634A}] => C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{F8F60273-BD4C-4058-B246-6F633BD6A891}] => LPort=1900
FirewallRules: [{20D276B1-3C90-4929-8A32-E4ACCBECC2C8}] => LPort=2869
FirewallRules: [{3355F104-DC9F-42F3-8E9D-3BF5DBF8FEB3}] => C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{0BEA84F4-2656-475A-AE06-59E81719D75F}] => svchost.exe
FirewallRules: [{2BFBBFCF-8C85-480D-A055-0DB5677BDCDE}] => C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{5B4D0C77-79AF-4923-BDC1-B51891E48444}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [UDP Query User{BC460BB0-BD68-48F3-BEB2-47578A7623D9}C:\program files\vidalia bundle\tor\tor.exe] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{2339DF44-A7DD-4E22-A32A-32DCC95DC337}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{A59E1834-01D3-478B-90C5-6E1D4924AFDB}] => C:\program files\vidalia bundle\tor\tor.exe
FirewallRules: [{AEB0C184-B9E4-434C-B087-A14CA1DF867B}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{08572AF5-8353-4B61-B8C0-24C618870A9E}] => C:\Program Files\Sony Ericsson\Update Engine\Sony Ericsson Update Engine.exe
FirewallRules: [{670FA4AF-6DA8-487A-91EE-B07143EB2170}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{8BD40ABE-22B5-4230-B66B-47D3BD3D0390}] => C:\Users\Kornelia\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{55D99CB2-C725-42FC-847A-5909C961EAE8}] => C:\Users\Kornelia\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{85FDB52D-7A01-43A8-9009-6A168010138A}] => C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{8758F947-09B2-41DF-88EC-579BC9CA03E7}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{459568E9-83FC-4C8A-9663-91C2C9B6026F}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{92605963-E425-410C-BB6E-8F4EDEA0C349}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D48E3507-9052-45D0-9E44-24AC955777AA}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{4ED3AA0F-7E02-449A-BAA4-34B72C42BF3C}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{A8E2B43C-F558-48C1-A629-118843C42FE8}C:\program files\freetime\formatfactory\formatfactory.exe] => C:\program files\freetime\formatfactory\formatfactory.exe
FirewallRules: [{84839E9D-9BF0-4CCD-A922-70507EA96606}] => c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{175EF583-D4BB-4455-BF80-3778A39EAEAC}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{189936DE-97ED-4FCF-AFD9-FA1ABFB6C531}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D0577CA9-F454-408A-ACDF-7F280302E7BD}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{95DF96B5-51A5-4BAD-8FE7-4BC3CF9AF3DF}] => C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe
FirewallRules: [{D81DFAC4-5EE4-4BF8-A94D-84503C9C6E7F}] => C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{88496792-6A83-4826-9392-C3A2DBF731BE}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [UDP Query User{08F10482-4231-4238-9029-5220201C0B87}C:\program files\java\jre6\bin\javaw.exe] => C:\program files\java\jre6\bin\javaw.exe
FirewallRules: [TCP Query User{3199F9F6-FD40-4F4E-B578-F886A82D57DA}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe
FirewallRules: [UDP Query User{AE639368-64F0-4A58-B6CA-0EE42A599710}C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe] => C:\users\kornelia\appdata\local\jdownloader 2.0\jdownloader2.exe

==================== Wiederherstellungspunkte =========================

27-01-2017 15:11:14 Avira System Speedup Optimierung
27-01-2017 16:04:18 JRT Pre-Junkware Removal
31-01-2017 10:18:32 JRT Pre-Junkware Removal
31-01-2017 12:12:23 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: atksgt
Description: atksgt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: atksgt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: sptd
Description: sptd
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: sptd
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/02/2017 07:37:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x2458
Startzeit der fehlerhaften Anwendung: 0x01d27d1bbbb7c26c
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 060b1601-e912-11e6-8ac3-001d607b2853

Error: (02/02/2017 07:14:58 AM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (02/02/2017 07:14:57 AM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (02/01/2017 10:20:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x1df4
Startzeit der fehlerhaften Anwendung: 0x01d27ccb87a7eb25
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 408620dc-e8c4-11e6-8ac3-001d607b2853

Error: (02/01/2017 09:40:26 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x16f8
Startzeit der fehlerhaften Anwendung: 0x01d27cc7040c80b9
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: a8ec6a26-e8be-11e6-8ac3-001d607b2853

Error: (02/01/2017 09:08:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a4a7
Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.7601.23517, Zeitstempel: 0x57adfdef
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002f2a13
ID des fehlerhaften Prozesses: 0x100c
Startzeit der fehlerhaften Anwendung: 0x01d27cc2b817f87e
Pfad der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll
Berichtskennung: 24760121-e8ba-11e6-8ac3-001d607b2853

Error: (02/01/2017 08:34:17 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (02/01/2017 08:34:17 PM) (Source: RealPlayerUpdateSvc) (EventID: 0) (User: )
Description: Event-ID 0

Error: (02/01/2017 07:50:03 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: Kornelia-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.

Error: (02/01/2017 07:50:03 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: Kornelia-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.


Systemfehler:
=============
Error: (02/02/2017 08:21:19 AM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (02/02/2017 08:21:14 AM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (02/02/2017 08:21:07 AM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (02/02/2017 07:37:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert.

Error: (02/02/2017 07:16:39 AM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (02/02/2017 07:16:39 AM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (02/02/2017 07:16:39 AM) (Source: WMPNetworkSvc) (EventID: 14349) (User: )
Description: Ein neuer Medienserver konnte nicht initialisiert werden, da im Windows-Medienlieferungsmodul ein Fehler "0x800700b7" aufgetreten ist. Starten Sie den Computer und den "WMPNetworkSvc"-Dienst neu. Wenn das Problem weiterhin besteht, installieren Sie Windows Media Player möglichst erneut.

Error: (02/02/2017 07:16:39 AM) (Source: WMPNetworkSvc) (EventID: 14353) (User: )
Description: Ein Medienlieferungsmodul mit der ID "0" konnte wegen Fehler "0x800700b7" beim Hinzufügen der URL "hxxp://+:10243/WMPNSSv4/1733801205/!S!" nicht initialisiert werden. Starten Sie den Computer und den WMPNetworkSvc-Dienst erneut. Wenn das Problem weiterhin besteht, installieren Sie nach Möglichkeit Windows Media Player erneut.

Error: (02/01/2017 11:01:14 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (02/01/2017 11:01:03 PM) (Source: Disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


==================== Memory info ===========================

Processor: AMD Athlon(tm) X2 Dual Core Processor BE-2300
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 1918.49 MB
Verfügbarer physikalischer RAM: 693.39 MB
Summe virtueller Speicher: 3836.98 MB
Verfügbarer virtueller Speicher: 1688.71 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:242.77 GB) (Free:92.54 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive e: () (Fixed) (Total:207.36 GB) (Free:35.49 GB) NTFS
Drive g: (Black) (Fixed) (Total:465.76 GB) (Free:413.34 GB) NTFS
Drive i: (EXTERN 2 -Spiegel-) (Fixed) (Total:242.77 GB) (Free:143.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive m: (EXTERN 1 -DATEN-) (Fixed) (Total:1255.2 GB) (Free:437.65 GB) NTFS
Drive n: (EXTERN 3) (Fixed) (Total:100 GB) (Free:99.87 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: C76EBDA3)
Partition 1: (Active) - (Size=242.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=15.6 GB) - (Type=27)
Partition 3: (Not Active) - (Size=207.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5C921633)
Partition 1: (Not Active) - (Size=1255.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=507.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 256E7802)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende vom Addition.txt ============================
Hallo Matthias,
PC läuft, etwas langsam, aber der ist ja auch schon alt :-) Mir ist bei der Aktion aufgefallen, dass ich einiges deinstallieren muss, da ich es nicht mehr brauche. Ist bestimmt nicht unnütz...
Allerdings einen Fehler gibt es leider immer noch: das aktuelle Fenster "rutscht" immer wieder in den "Hintergrund" (egal ob Firefox oder Schreibprogramm) auch wenn ich aktiv nur eine Anwendung geöffnet habe. Für die paar Zeilen musste ich den Cursor 5x "zurückholen" :-/

M-K-D-B 02.02.2017 17:49
Servus,




Alle externen Datenträge nochmal anschließen und ESET nochmal ausführen und alle Funde entfernen lassen!





Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
start
CloseProcesses:
DeleteKey: HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaadgepjkdffhjbkfjgnnffnfcffbg
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D321341397
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D341731497
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F463
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F497
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E563
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E597
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52463
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52497
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C517C4F4B3147AB4
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
DeleteKey: HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022000242\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Software\AppDataLow\Software\Smartbar
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\AppDataLow\Software\Smartbar
Unlock: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
CMD: reg delete "HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v {D4027C7F-154A-4066-A1AD-4243D8127440} /f
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Reboot:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird!







Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.




http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.




http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.




Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 

Microsoft Security Essentials (MSE) / Windows Defender (WD) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE/WD entschieden hast, brauchst du nicht extra MSE/WD zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.




Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.




Optional:
http://filepony.de/icon/adblock_firefox.pngAdblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
http://filepony.de/icon/noscript.png NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .




Abschließend noch ein paar grundsätzliche Bemerkungen:
  • Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
  • Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
  • Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.




Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Mineko 03.02.2017 23:35
Hier der Fixlog.txt
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x86) Version: 29-01-2017
durchgeführt von Kornelia (03-02-2017 23:16:13) Run:2
Gestartet von C:\Users\Kornelia\Desktop
Geladene Profile: Kornelia &  (Verfügbare Profile: Kornelia & Tabea)
Start-Modus: Normal

==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
DeleteKey: HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaadgepjkdffhjbkfjgnnffnfcffbg
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D321341397
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D341731497
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F463
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F497
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E563
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E597
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52463
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52497
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C517C4F4B3147AB4
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
DeleteKey: HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022000242\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Software\AppDataLow\Software\Smartbar
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\AppDataLow\Software\Smartbar
Unlock: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
CMD: reg delete "HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v {D4027C7F-154A-4066-A1AD-4243D8127440} /f
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
DeleteKey: HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Reboot:
end
*****************

Prozesse erfolgreich geschlossen.
HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaadgepjkdffhjbkfjgnnffnfcffbg => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D321341397 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51797D341731497 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F463 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B55F497 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E563 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61B74E597 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52463 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C51799E61BB52497 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37D473A7943363D7C517C4F4B3147AB4 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29 => Schlüssel erfolgreich entfernt
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} => Schlüssel erfolgreich entfernt
HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022000242\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} => Schlüssel nicht gefunden.
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} => Schlüssel nicht gefunden.
HKU\S-1-5-21-1736235967-2657770174-236075978-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-02022017022001771\Software\AppDataLow\Software\Smartbar => Schlüssel nicht gefunden.
HKU\S-1-5-21-1736235967-2657770174-236075978-1001\Software\AppDataLow\Software\Smartbar => Schlüssel erfolgreich entfernt
"HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" => Schlüssel konnte nicht entsperrt werden

========= reg delete "HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser" /v {D4027C7F-154A-4066-A1AD-4243D8127440} /f =========

FEHLER: Der angegebene Registrierungsschlssel bzw. Wert wurde nicht gefunden.

========= Ende von CMD: =========

HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} => Schlüssel nicht gefunden.
HKU\S-1-5-21-1736235967-2657770174-236075978-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-02012017203519932\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} => Schlüssel nicht gefunden.


Das System musste neu gestartet werden.

==== Ende vom Fixlog 23:16:31 ====

M-K-D-B 04.02.2017 00:16
Ich bin froh, dass wir helfen konnten :abklatsch:

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank! :)

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:43 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131