Trojaner-Board - Malware eingefangen? Suchergebnisse im Browser fehlerhaft.

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Malware eingefangen? Suchergebnisse im Browser fehlerhaft. (https://www.trojaner-board.de/186494-malware-eingefangen-suchergebnisse-browser-fehlerhaft.html)

Malware eingefangen? Suchergebnisse im Browser fehlerhaft.

Hallo,

brauche mal Hilfe, komme selbst nicht weiter.

Bei jedem Suchvorgang, egal mit welchem Browser(Firefox,Chrome, Internetexplorer) verrutscht das Suchergebnis nach unten. Das heißt das ursprünglich gesuchte wird für 1 sec oben angezeigt, bevor es dann nach unten rutscht, zum anklicken kommt man erst gar nicht. Oben werden dann ausschließlich Suchergebnisse mit Werbung angezeigt.

Hijack This findet nichts außergewöhnliches, Adwarecleaner hat Einträge gefunden, bei den ich mir nicht sicher bin, ob ich die einfach unter angegebenem Ort löschen kann.

Ich poste schon mal hier den Logfile von Adware.

Danke im Voraus

# AdwCleaner 7.0.1.0 - Logfile created on Sat Aug 12 17:31:39 2017
# Updated on 2017/05/08 by Malwarebytes
# Database: 08-11-2017.1
# Running on Windows 8.1 (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

PUP.Optional.APNToolBar.Gen, APNMCP

***** [ Folders ] *****

Adware.Elex, C:\Windows\System32\config\systemprofile\AppData\Local\SearchProtect
Adware.Elex, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SearchProtect
PUP.Optional.Legacy, C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Users\Marlies\AppData\Local\YSearchUtil
PUP.Optional.Legacy, C:\Program Files (x86)\Yahoo!\yset
PUP.Optional.Ask, C:\ProgramData\AskPartnerNetwork
PUP.Optional.Ask, C:\ProgramData\Application Data\AskPartnerNetwork
PUP.Optional.Ask, C:\Program Files (x86)\AskPartnerNetwork
PUP.Optional.Ask, C:\Users\All Users\AskPartnerNetwork
PUP.Optional.Ask, C:\Users\Marlies\AppData\Local\AskPartnerNetwork
Rogue.ForcedExtension, C:\ProgramData\apn
Rogue.ForcedExtension, C:\ProgramData\Application Data\apn
Rogue.ForcedExtension, C:\Users\All Users\apn
Rogue.ForcedExtension, C:\Users\Marlies\AppData\Local\Temp\apn
PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\FileViewPro
PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\Temp\FileViewPro

***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\All Users\Desktop\simplicheck.lnk
PUP.Optional.Legacy, C:\Users\Public\Desktop\simplicheck.lnk

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\key-find.com
PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.key-find.com
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\izito.de
PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\www.izito.de
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2300}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | ApnTBMon
PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | ApnTBMon
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf
PUP.Optional.Ask, [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork
PUP.Optional.Ask, [Key] - HKCU\Software\AskPartnerNetwork
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [6178 B] - [2015/3/6 19:56:16]

:hallo:

In Kürze meldet sich ein Helfer bei dir. :)

Hallo und :hallo:

Bevor wir beginnen beachte bitte Folgendes:

Installiere/Deinstalliere bitte nichts während wir hier an deinem Problem arbeiten
Speicher alle unsere Tools auf dem Desktop ab (das ist später wichtig!)
Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach auf mehrere Posts aufteilen
Falls vorhanden: Logs die jünger als 1 Monat sind bitte posten
Verwende keine weiteren Tools ohne Aufforderung
Wichtig: Auch wenn dein Problem behoben scheint kann dein System noch infiziert sein, arbeite also bitte weiter bis ich dir ein "Clean" gebe

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden.
Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert.
Adware & Co. können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean :daumenhoc bekommst

Schritt 1:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Logfile FRST u. Addition

Hallo,

danke für die Antwort.

Ich poste die gewünschten txt´s

Danke schon mal wieder im Voraus für die Mühe.

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08-2017

durchgeführt von M (Administrator) auf KASRELLO (13-08-2017 14:04:52)

Gestartet von C:\Users\M\Downloads

Geladene Profile: M(Verfügbare Profile: M & Ms_2)

Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

(CrossLoop) C:\Users\M\AppData\Local\CrossLoop\CrossLoopService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Program Files (x86)\FWdriver_v\POSHXMain.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe

(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Nero AG) C:\Program Files (x86)\Nero\Nero TuneItUp\ServiceProvider.exe

(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

() C:\Program Files (x86)\FWdriver_v\POSHX.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

() C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe

() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(Telegram Messenger LLP) C:\Users\M\AppData\Roaming\Telegram Desktop\Telegram.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Trend Micro Inc.) C:\Downloads\downloads\HiJackThis204.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\TeamViewer.exe

(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\tv_w32.exe

(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\tv_x64.exe

(TeamViewer GmbH) C:\Users\M\AppData\Local\Temp\TeamViewer\TeamViewer_Desktop.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)

HKLM\...\Run: [POSHX] => C:\Program Files (x86)\FWdriver_v\POSHX.exe [647168 2013-09-03] ()

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-01] (Synaptics Incorporated)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)

HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-08-05] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1719184 2015-09-23] (APN)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-06-13] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)

HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960248 2015-10-26] ()

HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2015-10-01] (AVM Berlin)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 

Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2014-12-21]

ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MBCameraMonitor.lnk [2014-12-22]

ShortcutTarget: MBCameraMonitor.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe (PIXELA CORPORATION)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-27]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-05-15]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2017-05-03]

ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)

Startup: C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-12-26]

ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4

Tcpip\..\Interfaces\{471AEB88-C6B2-4C00-9669-3CC3EE935AD6}: [DhcpNameServer] 192.168.192.1

Tcpip\..\Interfaces\{C54B9ABE-D820-4EAF-86DC-7FF0424B0FD3}: [DhcpNameServer] 80.69.96.12 81.210.129.4

Tcpip\..\Interfaces\{D8F505BE-40F8-41DB-87A6-F6B74D4C7B56}: [DhcpNameServer] 80.69.96.12 81.210.129.4
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = ?type=hppp

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = ?type=hppp

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)

BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)

BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-10-26] (Wondershare)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13] (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13] (Oracle Corporation)

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)

Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)

Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei

Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei

Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei
 

FireFox:

========

FF DefaultProfile: vy7huq4o.default

FF ProfilePath: C:\Users\M\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default [2017-08-12]

FF Extension: (Avira Browser Safety) - C:\Users\M\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default\Extensions\abs@avira.com.xpi [2017-08-10]

FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com

FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2015-11-15] [ist nicht signiert]

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-30] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-30] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-13] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-13] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp

CHR StartupUrls: Default -> "hxxp://www.rp-online.de/"

CHR Profile: C:\Users\M\AppData\Local\Google\Chrome\User Data\Default [2017-08-13]

CHR Extension: (Google Docs) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]

CHR Extension: (Google Drive) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]

CHR Extension: (YouTube) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]

CHR Extension: (Google-Suche) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]

CHR Extension: (Adobe Acrobat) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-06-05]

CHR Extension: (Google Docs Offline) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]

CHR Extension: (Google Mail) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]

CHR Extension: (Chrome Media Router) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-10]

CHR Extension: (Mein BMI - Shopping Angebote) - C:\Users\M\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppohoeonaecgahebikkipfeoojbccoan [2017-04-09]

CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-10-01]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-10-01]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-12-26] (Adobe Systems) [Datei ist nicht signiert]

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [206224 2015-09-23] (APN LLC.)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [377976 2017-06-13] (Avira Operations GmbH & Co. KG)

S4 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2015-10-01] () [Datei ist nicht signiert]

R2 CrossLoopService; C:\Users\M\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop)

R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)

R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [404376 2017-06-30] (McAfee, Inc.)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] ()

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 POSHXService; C:\Program Files (x86)\FWdriver_v\POSHXMain.exe [114688 2012-12-26] () [Datei ist nicht signiert]

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()

R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.)

R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.)

S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.)

S3 tvnserver; C:\Users\M\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.) [Datei ist nicht signiert]

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation)

S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AirplaneModeHID; C:\Windows\System32\drivers\AirplaneModeHID.sys [30512 2013-09-04] (Elitegroup Computer System)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-19] (Avira Operations GmbH & Co. KG)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [173784 2017-08-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-08-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-03] (Avira Operations GmbH & Co. KG)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2015-10-01] (AVM Berlin)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-03] (Avira Operations GmbH & Co. KG)

R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)

R3 fwlanusb6_860; C:\Windows\system32\DRIVERS\fwlanusb6_860.sys [2234912 2015-10-01] (AVM GmbH)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)

S3 s1018bus; C:\Windows\System32\drivers\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\system32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\system32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\system32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\system32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\system32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\drivers\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-01] (Synaptics Incorporated)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-01] (Synaptics Incorporated)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-27] (Wondershare)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-08-13 14:01 - 2017-08-13 14:02 - 015747576 _____ (TeamViewer GmbH) C:\Users\M\Downloads\TeamViewer_Setup.exe

2017-08-12 21:01 - 2017-08-12 21:03 - 000045799 _____ C:\Users\M\Downloads\Addition.txt

2017-08-12 20:59 - 2017-08-13 14:05 - 000032080 _____ C:\Users\M\Downloads\FRST.txt

2017-08-12 20:58 - 2017-08-13 14:04 - 000000000 ____D C:\FRST

2017-08-12 20:57 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\M\Downloads\FRST64.exe

2017-08-12 19:28 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\M\Downloads\adwcleaner_7.0.1.0 (1).exe

2017-08-12 19:27 - 2017-08-12 19:27 - 008185288 _____ (Malwarebytes) C:\Users\M\Downloads\adwcleaner_7.0.1.0.exe

2017-08-12 19:11 - 2017-08-12 19:11 - 001529352 _____ C:\Users\M\Downloads\HijackThis - CHIP-Installer.exe

2017-08-09 16:24 - 2017-08-09 16:24 - 003376660 _____ C:\Users\M\Downloads\SpeisekartePlatonWeb.pdf

2017-08-07 12:51 - 2017-08-07 12:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices

2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\McAfee Security Scan

2017-07-26 10:51 - 2017-07-26 10:51 - 000021308 _____ C:\Users\M\Downloads\_26-07-2017_1051.pdf

2017-07-21 11:11 - 2017-07-21 11:11 - 000143952 _____ C:\Users\M\Downloads\1500628271864.pdf

2017-07-21 11:05 - 2017-07-21 11:05 - 000117974 _____ C:\Users\M\Downloads\2017-07-10.pdf

2017-07-20 23:45 - 2017-07-20 23:45 - 000000992 _____ C:\Users\M\Downloads\ (kasrello) - Verknüpfung.lnk

2017-07-18 19:06 - 2017-07-18 19:06 - 000003176 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-708953619-3332147771-3993505364-1001

2017-07-15 08:10 - 2017-07-15 08:10 - 000021569 _____ C:\Users\M\Downloads\15-07-2017_0807.pdf
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-08-13 13:44 - 2014-05-20 17:06 - 000000000 ____D C:\Users\M\AppData\Roaming\ClassicShell

2017-08-13 13:19 - 2015-04-21 09:19 - 000000000 ____D C:\Users\M\AppData\Roaming\Telegram Desktop

2017-08-13 13:17 - 2014-05-15 15:48 - 000003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D79CCDCC-5C13-412F-9EFD-1CDF8B9C287B}

2017-08-12 19:31 - 2015-03-06 21:02 - 000000000 ____D C:\AdwCleaner

2017-08-12 18:29 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness

2017-08-12 18:28 - 2014-06-04 17:29 - 000000000 ____D C:\Users\M\AppData\Roaming\Skype

2017-08-12 12:56 - 2017-02-16 19:30 - 000000000 ____D C:\Users\M\AppData\LocalLow\Mozilla

2017-08-11 16:39 - 2014-05-15 15:43 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-708953619-3332147771-3993505364-1001

2017-08-11 16:34 - 2017-06-01 14:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2017-08-11 07:21 - 2014-05-15 15:39 - 000000000 __RDO C:\Users\M\SkyDrive

2017-08-11 07:20 - 2017-02-11 18:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2017-08-11 07:19 - 2014-05-15 15:39 - 000000000 ____D C:\Users\M\Documents\Youcam

2017-08-11 07:18 - 2016-06-25 11:01 - 000000436 _____ C:\Windows\Tasks\Nero TuneItUp PRO (Tray).job

2017-08-10 17:03 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps

2017-08-10 12:09 - 2014-05-15 15:38 - 000000000 ____D C:\Users\M

2017-08-09 17:32 - 2014-05-21 20:42 - 000000000 ____D C:\ProgramData\CanonIJPLM

2017-08-09 09:58 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp

2017-08-09 09:44 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf

2017-08-08 20:24 - 2014-06-02 09:25 - 003854848 ___SH C:\Users\M\Desktop\Thumbs.db

2017-08-08 15:30 - 2017-05-10 20:23 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-08-08 15:30 - 2017-05-10 20:23 - 000002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2017-08-08 15:00 - 2014-12-30 11:19 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2017-08-07 12:47 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2017-08-07 12:46 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI

2017-08-05 15:46 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2017-08-05 15:30 - 2014-06-01 22:26 - 000173784 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2017-08-05 15:30 - 2014-06-01 22:26 - 000167464 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2017-08-02 00:03 - 2015-06-21 15:34 - 000000000 ____D C:\Users\M\AppData\Local\.elfohilfe

2017-07-30 14:46 - 2015-05-04 09:57 - 000000000 ____D C:\Users\M\Downloads\Telegram Desktop

2017-07-27 23:00 - 2016-05-10 23:23 - 000000000 ____D C:\Program Files\McAfee Security Scan

2017-07-27 23:00 - 2016-04-30 19:15 - 000001984 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

2017-07-25 08:50 - 2013-09-05 21:28 - 000767518 _____ C:\Windows\system32\perfh007.dat

2017-07-25 08:50 - 2013-09-05 21:28 - 000160240 _____ C:\Windows\system32\perfc007.dat

2017-07-25 08:50 - 2013-09-05 21:13 - 001783084 _____ C:\Windows\system32\PerfStringBackup.INI

2017-07-21 15:33 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF

2017-07-20 04:56 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache

2017-07-19 18:16 - 2013-09-07 12:35 - 000000000 ____D C:\ProgramData\Package Cache

2017-07-19 18:10 - 2013-08-22 16:44 - 000397024 _____ C:\Windows\system32\FNTCACHE.DAT

2017-07-19 17:57 - 2014-12-11 00:09 - 000000000 ____D C:\Windows\system32\appraiser

2017-07-19 17:56 - 2016-04-30 19:15 - 000000000 ____D C:\Program Files\TrueKey

2017-07-18 19:06 - 2016-04-18 22:43 - 000002366 _____ C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk

2017-07-18 19:06 - 2014-05-20 19:09 - 000003184 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-708953619-3332147771-3993505364-1001
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-12-21 13:17 - 2016-12-21 13:17 - 007680000 _____ () C:\Program Files (x86)\GUTE6BF.tmp

2014-06-17 18:46 - 2017-01-09 16:52 - 000119808 _____ () C:\Users\M\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-09-07 12:29 - 2013-09-07 12:29 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

2013-09-12 05:59 - 2013-09-12 05:59 - 000000032 _____ () C:\ProgramData\Temp.log
 

Einige Dateien in TEMP:

====================

2016-11-15 16:20 - 2016-11-15 16:20 - 011127352 _____ (Albelli                                                     ) C:\Users\M\AppData\Local\Temp\0BB5CC15-AA68-4718-93A1-822DCC2015E9.exe

2014-06-01 22:26 - 2014-08-07 16:50 - 000000000 ____D () C:\Users\M\AppData\Local\Temp\avgnt.exe

2016-11-28 23:54 - 2016-11-28 23:54 - 012545632 _____ (Albelli                                                     ) C:\Users\M\AppData\Local\Temp\F177397B-C751-4B7D-BE67-6A8FD23C9C48.exe

2016-08-04 23:38 - 2011-02-07 11:09 - 000850320 ____N (CANON INC.) C:\Users\M\AppData\Local\Temp\MSETUP4.EXE

2016-08-04 23:41 - 2011-03-23 06:48 - 000349592 ____R (CANON INC.) C:\Users\M\AppData\Local\Temp\uninstall.exe

2017-04-08 22:12 - 2017-04-08 22:12 - 013705448 _____ (Nero AG                                                     ) C:\Users\M\AppData\Local\Temp\Update_Simplitec_PowerSuite_Auto.exe
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-08-08 15:55
 

==================== Ende von FRST.txt ============================

Hier der Nächste:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-08-2017

durchgeführt von M (13-08-2017 14:06:37)

Gestartet von C:\Users\M\Downloads

Windows 8.1 (Update) (X64) (2014-05-15 13:38:24)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-708953619-3332147771-3993505364-500 - Administrator - Disabled)

Gast (S-1-5-21-708953619-3332147771-3993505364-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-708953619-3332147771-3993505364-1003 - Limited - Enabled)

M(S-1-5-21-708953619-3332147771-3993505364-1001 - Administrator - Enabled) => C:\Users\M

M_2 (S-1-5-21-708953619-3332147771-3993505364-1004 - Limited - Enabled) => C:\Users\M_2
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)

Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.29.32 - Avira Operations GmbH & Co. KG)

Avira Connect (HKLM-x32\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden

Avira Connect (HKLM-x32\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.07 - AVM Berlin)

calibre (HKLM-x32\...\{D47B7229-AC24-4D79-96AB-880649FFC892}) (Version: 2.19.0 - Kovid Goyal)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )

Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )

Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)

Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )

Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version:  - )

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon MP490 series Benutzerregistrierung (HKLM-x32\...\Canon MP490 series Benutzerregistrierung) (Version:  - )

Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.10.0 - Canon Inc.)

Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.11.0.1 - Canon Inc.)

Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.0.6 - Canon Inc.)

Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)

Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.10.0.0 - Canon Inc.)

Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )

Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)

CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerDirector 11 (HKLM\...\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3215 - Ihr Firmenname) Hidden

CyberLink PowerRecover (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.) Hidden

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version:  - )

Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)

DriverTools 1.0 (HKLM-x32\...\DriverTools) (Version: 1.0 - Huawei Technologies Co.,Ltd)

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 18.1.22140 - Landesfinanzdirektion Thüringen)

Everio MediaBrowser (HKLM-x32\...\{5CA03ECF-B4A6-464B-9F5D-64D8B61B083F}) (Version: 1.00.013 - PIXELA)

Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software)

FlexPoints 2.0 (HKLM-x32\...\{F460E5B9-E678-484B-A2E8-BFDF93A57A03}) (Version: 1.00.0000 - Weight Watchers)

Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerija (HKLM-x32\...\{BE2DE42A-6696-4EE7-9E59-B9385F339DD3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotótár (HKLM-x32\...\{8D977EAA-DF3E-4054-A98D-F27AEB0248DD}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)

Galerie de photos (HKLM-x32\...\{F4D99A13-F63A-4FC1-8799-CFFDB78DDFB3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)

Intel Security True Key (HKLM\...\TrueKey) (Version: 4.19.108.1 - Intel Security)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3282 - Intel Corporation)

Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{252CC716-1EDE-4C7F-8881-15B7AEBF8F5C}) (Version: 16.5.0.0096 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{72814a2c-2e03-4a50-b30a-43e7884b3934}) (Version: 16.5.1 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)

Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MAGIX Foto Designer 7 (HKLM\...\{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG) Hidden

MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG)

Mahjongg - Ancient Mayas (HKLM-x32\...\{18D52937-2121-49FA-B734-EA1EF38AA04F}_is1) (Version:  - cerasus.media GmbH)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.587.1 - McAfee, Inc.)

MediaCoder x64 0.8.43.5830 (HKLM\...\MediaCoder x64) (Version: 0.8.43.5830 - Mediatronic)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)

Movie Maker (HKLM-x32\...\{0FD2B9C6-DB91-48EA-9518-AB5B68CA1E28}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{3C5F91EF-5C0B-4D13-BCBE-0FC6FC3ED7F9}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{5B91D34E-B583-4E08-BB48-4F18086A0DB7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{705C31EB-E0AB-4C1F-A834-993F9E08B085}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{7693587D-5D66-4208-ABEA-C370217D1D9B}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{8E038DF1-B140-46D6-9D82-1BDF8DC56764}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{E169436E-49D8-419B-A5C0-D245EAF99611}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 53.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.2 (x86 de)) (Version: 53.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.2.6333 - Mozilla)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

Music Recorder (HKLM-x32\...\{E3579DBA-00BA-4E32-AE90-63B6CDA30D56}) (Version: 14.0.62200.0 - Audials AG)

Nero 7 Essentials (HKLM-x32\...\{D34D82E0-4600-407B-9478-8506C1DD1031}) (Version: 7.02.3307 - Nero AG)

OLYMPUS Digital Camera Updater (HKLM-x32\...\{D18925CE-5AF9-4394-8EF7-1081FFE7E98B}) (Version: 1.2.0 - OLYMPUS IMAGING CORP.)

OLYMPUS Viewer 3 (HKLM-x32\...\{F0C70F68-E57F-4D76-A012-E20F8E12946E}) (Version: 1.4.1 - OLYMPUS IMAGING CORP.)

online-foto Bestellsoftware (HKLM-x32\...\online-foto Bestellsoftware) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)

PDF Architect 2 Convert Module (HKLM-x32\...\{53434783-F9A7-4D64-B91A-05A3BF925D70}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Forms Module (HKLM-x32\...\{4CB8D214-0400-45FA-B084-AAB0C74AD032}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Insert Module (HKLM-x32\...\{DD7BB68A-7D8A-4F62-806A-3424C2A170E7}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 OCR Module (HKLM-x32\...\{952E5B8F-82C2-46D1-B642-37B2635CE440}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Review Module (HKLM-x32\...\{664D6EE3-9A35-4284-B9D2-80A509DF9295}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Secure Module (HKLM-x32\...\{99E0C0D4-6746-44EE-A132-5E7E3D6FAAFB}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)

PriMus Free 1.1 (Build 11020) (HKLM-x32\...\PriMus Free_is1) (Version: 1.1.0.11020 - Columbus Soft)

Raccolta foto (HKLM-x32\...\{FA6BC7A5-85B3-4DC2-825C-D508E386151A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7030 - Realtek Semiconductor Corp.)

Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C2300}) (Version: 12.35.0.284 - APN, LLC) <==== ACHTUNG

simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)

Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)

Sony Ericsson PC Companion 1.50.52 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.50.52 - Sony Ericsson)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.0 - Synaptics Incorporated)

Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)

WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.53 - NCH Software)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)

WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version:  - Yahoo Inc.)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-708953619-3332147771-3993505364-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\M\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileCoAuthLib64.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)

ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers1-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()

ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-08-26] (Intel Corporation)

ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)

ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2014-04-20] (IvoSoft)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {145D433F-F4F5-4F0B-A64B-8C8291F19A6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-01] (Synaptics Incorporated)

Task: {45FD7644-A331-4E36-BCD1-DFC43A0CFAEA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)

Task: {61A981C6-C35F-49A3-8E3D-54CB19B763E2} - System32\Tasks\Nero TuneItUp PRO (Tray) => C:\Program Files (x86)\Nero\Nero TuneItUp\ServiceProvider.exe [2016-06-06] (Nero AG)

Task: {7F880913-CCFC-4B27-B7C3-B781B2E5FFE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {993A1863-842C-4EAC-8319-9713C2B9D95D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-07-13] (Microsoft Corporation)

Task: {CCB5A282-43DA-4578-B841-CAF077C81C01} - System32\Tasks\{DD49092F-C446-4EEC-BD77-C4F3994ACAFA} => C:\Windows\system32\pcalua.exe -a E:\System\dx80a.exe -d E:\System

Task: {D56949F9-18CC-4B3E-9C54-796189BBE1A0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\M\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs

Task: {E5A22EA6-4AC2-487C-8B07-531491916A09} - System32\Tasks\{C7994087-E7AF-4290-9F3C-979444759543} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Einfach Genial\EinfachGenial.exe" -d "C:\Program Files (x86)\Einfach Genial\"

Task: {EA9A4FAB-99BE-473F-A97F-327175694D43} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-08-08] (Dolby Laboratories Inc.)

Task: {ED45692D-0624-4FE1-845A-711B66075EE2} - System32\Tasks\Nero TuneItUp PRO => C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe [2016-06-06] (Nero AG)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Nero TuneItUp PRO (Tray).job => C:\Program Files (x86)\Nero\Nero TuneItUp\ServiceProvider.exe

Task: C:\Windows\Tasks\Nero TuneItUp PRO.job => C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 

ShortcutWithArgument: C:\Users\M\Desktop\CrossLoop Connect.lnk -> C:\Users\M\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

ShortcutWithArgument: C:\Users\M\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrossLoop\CrossLoop.lnk -> C:\Users\M\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

ShortcutWithArgument: C:\Users\M\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CrossLoop.lnk -> C:\Users\M\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-05-21 20:42 - 2011-02-07 09:56 - 000138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2013-09-07 12:40 - 2012-12-26 11:36 - 000114688 _____ () C:\Program Files (x86)\FWdriver_v\POSHXMain.exe

2014-05-20 20:41 - 2013-03-06 14:42 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2015-11-15 13:32 - 2015-02-27 15:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll

2013-09-07 12:40 - 2013-09-03 21:38 - 000647168 _____ () C:\Program Files (x86)\FWdriver_v\POSHX.exe

2016-03-15 10:26 - 2016-03-15 10:26 - 004535192 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe

2014-12-21 15:41 - 2014-04-08 10:13 - 000069120 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

2017-08-08 15:30 - 2017-08-02 09:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll

2017-08-08 15:30 - 2017-08-02 09:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll

2013-09-07 12:40 - 2013-07-24 10:23 - 000106496 _____ () C:\Program Files (x86)\FWdriver_v\KIPowerDll.dll

2013-09-07 12:10 - 2013-08-08 13:25 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2016-06-25 11:00 - 2016-06-06 17:03 - 000110088 _____ () C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\asp_ipc32.dll

2013-09-07 12:40 - 2013-07-11 12:41 - 000348160 _____ () C:\Program Files (x86)\FWdriver_v\SuperHealthDLL.dll

2013-09-07 12:40 - 2012-06-22 20:32 - 000266240 _____ () C:\Program Files (x86)\FWdriver_v\SuperSpeederDLL.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000049424 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_thread-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000048400 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_date_time-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000068504 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashRpt.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000618256 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_regex-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000544152 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\StreamingClient.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000016144 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_system-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000040856 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashHandlerNET.dll

2014-12-21 15:41 - 2014-04-08 10:08 - 000112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll

2014-05-21 20:47 - 2008-07-03 15:18 - 000364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser\pxl_m17n_tool.dll

2013-09-12 06:56 - 2013-08-05 09:49 - 000627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2013-08-05 16:48 - 2013-08-05 16:48 - 000016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

2015-11-15 13:32 - 2015-04-28 16:22 - 001498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2015-11-15 13:32 - 2014-05-19 18:19 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2014-03-31 21:35 - 2014-03-31 21:35 - 000282304 _____ () C:\Program Files (x86)\Windows Live\Writer\de\WindowsLive.Writer.Localization.resources.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [246]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: 80.69.96.12 - 81.210.129.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{8B219A9C-3E95-4887-B558-0A20C3849406}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{55B1AAA0-1495-4582-AA48-9DD5FE0C9324}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{2B993C4B-B78F-402C-91B3-32B5F826346F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{90A06370-CC6A-4993-AE7D-905297E8D278}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

FirewallRules: [{DC152F63-F1D3-4181-AE00-8C232B30FBF9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

FirewallRules: [{9F2453BC-E7A0-4197-BB67-11A849EF3BD1}] => (Allow) C:\Users\M\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [{9AC8C66D-A4A0-43A9-85FE-DDBE39F6FEFE}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{D7B2403C-AD42-441B-99CC-7F24749CE4FC}] => (Allow) LPort=2869

FirewallRules: [{62642C0A-EAA3-418F-B6FF-4DFABDFCE1DF}] => (Allow) LPort=1900

FirewallRules: [{269BE6C4-2529-4920-BC89-90562EB4559C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{0EF250F3-BEB1-4580-9B21-0B4920E3D812}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE

FirewallRules: [TCP Query User{30D7B601-7145-4279-9DC8-CD63CEEF410B}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{19E2251F-9D9A-4F3F-AF13-CB1F4F6F5B90}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{674BBF60-83EC-4D49-BC50-4A8D2C0E23AB}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\vncviewer.exe

FirewallRules: [{991741BC-B7DE-4AE4-86E4-7C57C27E8CEF}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\vncviewer.exe

FirewallRules: [{587DB821-EE55-4343-A6DB-FC0E0A6E7F28}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\tvnserver.exe

FirewallRules: [{31BCFED6-4B00-4337-BAC8-082E9ABA39AB}] => (Allow) C:\Users\M\AppData\Local\CrossLoop\tvnserver.exe

FirewallRules: [TCP Query User{79D86FFA-D8C6-4252-83BC-4A5943BB7492}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{18961C28-5FA2-4BD0-812F-435D307495CE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [TCP Query User{2FDFBC6C-3AAA-420C-A13E-6BCBEFCC5707}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe

FirewallRules: [UDP Query User{80D9ED45-F5AC-4F4F-AD81-E79788EBEE11}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe

FirewallRules: [TCP Query User{62317F72-4518-4EF9-B0FE-891B8AE34422}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe

FirewallRules: [UDP Query User{15F2D807-18A8-4C16-BE0F-21EE162FF060}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe

FirewallRules: [{43637725-3109-4A55-944F-2A471CE3684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{259979CB-6D50-420A-AA41-80218EA26266}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{E944FA45-73CD-49C6-8B91-CF4D30E620F5}C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light

FirewallRules: [UDP Query User{ADFF7C71-3FB6-423D-8934-F4397726FF2B}C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\m\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light

FirewallRules: [{CBE23198-7DA5-4CA2-8258-DCC8D46A1F67}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{EDEBD6B2-21BE-4AF3-B12A-5579AE31D8F7}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{19E7BCCF-1E7B-4771-AADF-005603F1FC0E}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{3CC1DAF6-7789-4F41-97ED-46D05A46B74D}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{0114B05C-5AB4-4746-BDEF-285A47D4807C}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{BEB671ED-E6AB-41C5-97E7-AEA42072F475}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{85210530-AB5A-477F-BC00-390D7967D42A}] => (Allow) C:\Users\M\Downloads\WLAN-Optimierer (1).exe

FirewallRules: [{065D11A9-B330-4118-9C13-63DF353F6630}] => (Allow) C:\Users\M\Downloads\WLAN-Optimierer (1).exe

FirewallRules: [{CA0FC07B-E636-4A4E-8663-046F71034854}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Wiederherstellungspunkte =========================
 

20-07-2017 04:53:52 Geplanter Prüfpunkt

28-07-2017 11:09:16 Geplanter Prüfpunkt

06-08-2017 19:22:46 Geplanter Prüfpunkt
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (08/13/2017 01:57:03 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).
 

Error: (08/09/2017 04:09:28 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1f08
 

Startzeit: 01d310e87e89834f
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: 57fae5f2-7d0c-11e7-835f-5c514f28d736
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (08/07/2017 10:25:10 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).
 

Error: (08/06/2017 01:38:37 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0

Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000131745

ID des fehlerhaften Prozesses: 0x1408

Startzeit der fehlerhaften Anwendung: 0x01d30e43edcf1f08

Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe

Pfad des fehlerhaften Moduls: IWMSSvc.dll

Berichtskennung: 33516914-7a37-11e7-835d-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (08/05/2017 07:19:53 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0

Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000000d3491

ID des fehlerhaften Prozesses: 0xfec

Startzeit der fehlerhaften Anwendung: 0x01d30e0f0470031a

Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe

Pfad des fehlerhaften Moduls: IWMSSvc.dll

Berichtskennung: 4ad90e5c-7a02-11e7-835d-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/31/2017 01:45:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).
 

Error: (07/29/2017 12:32:32 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1f18
 

Startzeit: 01d3085542ceea34
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: 38fc3dad-7449-11e7-835d-5c514f28d736
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (07/27/2017 11:01:35 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: aec
 

Startzeit: 01d3071ac02fe086
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: b8b225ac-730e-11e7-835c-5c514f28d736
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (07/24/2017 09:59:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: KASRELLO)

Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (07/24/2017 09:59:06 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: KASRELLO)

Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 
 

Systemfehler:

=============

Error: (08/07/2017 12:47:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (08/07/2017 12:47:18 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)

Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".
 

Error: (08/06/2017 05:54:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (08/06/2017 05:54:08 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)

Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".
 

Error: (08/05/2017 03:46:25 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Avira Email-Schutz" wurde mit dem folgenden dienstspezifischen Fehler beendet: 

Unzulässige Funktion.
 

Error: (08/05/2017 03:46:15 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 

Zugriff verweigert
 

Error: (08/05/2017 03:46:15 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 

Zugriff verweigert
 

Error: (08/05/2017 03:46:14 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Type" aufgrund folgenden Fehlers fehlgeschlagen: 

Zugriff verweigert
 

Error: (08/05/2017 03:37:36 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (08/05/2017 03:37:35 PM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 

Zugriff verweigert
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz

Prozentuale Nutzung des RAM: 76%

Installierter physikalischer RAM: 4004.02 MB

Verfügbarer physikalischer RAM: 947.46 MB

Summe virtueller Speicher: 7882.27 MB

Verfügbarer virtueller Speicher: 3951.21 MB
 

==================== Laufwerke ================================
 

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:66.11 GB) NTFS

Drive d: (Recover) (Fixed) (Total:60 GB) (Free:45.11 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 465.8 GB) (Disk ID: 3782765E)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

Schritt 1:

Downloade Dir bitte AdwCleaner auf deinen Desktop (Bebilderte Anleitung).

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- Tracing Schlüssel
- Prefetch Dateien
- Proxy
- Winsock
- IE Richtlinien
- Chrome Richtlinien
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist. Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Klicke am Ende der Bereinigung auf Jetzt neu starten. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2:

Downloade Dir bitte Malwarebytes Anti-Malware 3 (Bebilderte Anleitung)

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM nach dem Neustart, klicke auf Berichte.
Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3:

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Hallo Tician,

danke für die Antwort und weitere Arbeitsschritte.

AdwCleaner.txt

Code:

# AdwCleaner 7.0.1.0 - Logfile created on Tue Aug 15 09:21:23 2017

# Updated on 2017/05/08 by Malwarebytes 

# Database: 08-15-2017.1

# Running on Windows 8.1 (X64)

# Mode: scan

# Support: https://www.malwarebytes.com/support
 
 
 
 
 
 
 
 
 
 

***** [ Services ] *****
 

PUP.Optional.APNToolBar.Gen, APNMCP
 
 

***** [ Folders ] *****
 

Adware.Elex, C:\Windows\System32\config\systemprofile\AppData\Local\SearchProtect

Adware.Elex, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SearchProtect

PUP.Optional.Legacy, C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil

PUP.Optional.Legacy, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil

PUP.Optional.Legacy, C:\Users\Marlies\AppData\Local\YSearchUtil

PUP.Optional.Legacy, C:\Program Files (x86)\Yahoo!\yset

PUP.Optional.Ask, C:\ProgramData\AskPartnerNetwork

PUP.Optional.Ask, C:\ProgramData\Application Data\AskPartnerNetwork

PUP.Optional.Ask, C:\Program Files (x86)\AskPartnerNetwork

PUP.Optional.Ask, C:\Users\All Users\AskPartnerNetwork

PUP.Optional.Ask, C:\Users\Marlies\AppData\Local\AskPartnerNetwork

Rogue.ForcedExtension, C:\ProgramData\apn

Rogue.ForcedExtension, C:\ProgramData\Application Data\apn

Rogue.ForcedExtension, C:\Users\All Users\apn

Rogue.ForcedExtension, C:\Users\Marlies\AppData\Local\Temp\apn

PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\FileViewPro

PUP.Optional.FileViewPro, C:\Users\Marlies\AppData\Local\Temp\FileViewPro
 
 

***** [ Files ] *****
 

PUP.Optional.Legacy, C:\Users\All Users\Desktop\simplicheck.lnk

PUP.Optional.Legacy, C:\Users\Public\Desktop\simplicheck.lnk
 
 

***** [ DLL ] *****
 

No malicious DLLs found.
 

***** [ WMI ] *****
 

No malicious WMI found.
 

***** [ Shortcuts ] *****
 

No malicious shortcuts found.
 

***** [ Tasks ] *****
 

No malicious tasks found.
 

***** [ Registry ] *****
 

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\key-find.com

PUP.Optional.Legacy, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.key-find.com

PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\izito.de

PUP.Optional.Legacy, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\www.izito.de

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2300}

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15

PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | ApnTBMon

PUP.Optional.Legacy, [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 | ApnTBMon

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf

PUP.Optional.Ask, [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork

PUP.Optional.Ask, [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\AskPartnerNetwork

PUP.Optional.Ask, [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork

PUP.Optional.Ask, [Key] - HKCU\Software\AskPartnerNetwork

PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com

PUP.Optional.SlimCleanerPlus, [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
 
 

***** [ Firefox (and derivatives) ] *****
 

No malicious Firefox entries.
 

***** [ Chromium (and derivatives) ] *****
 

No malicious Chromium entries.
 

*************************
 

C:/AdwCleaner/AdwCleaner[S0].txt - [6178 B] - [2015/3/6 19:56:16]

C:/AdwCleaner/AdwCleaner[S1].txt - [8737 B] - [2017/8/12 17:31:39]
 
 

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt ##########

Hier erster Teil mbam.txt

Code:

Malwarebytes

www.malwarebytes.com
 

-Protokolldetails-

Scan-Datum: 15.08.17

Scan-Zeit: 12:48

Protokolldatei: mbam.txt

Administrator: Ja
 

-Softwaredaten-

Version: 3.1.2.1733

Komponentenversion: 1.0.160

Version des Aktualisierungspakets: 1.0.2590

Lizenz: Testversion
 

-Systemdaten-

Betriebssystem: Windows 8.1

CPU: x64

Dateisystem: NTFS

Benutzer: KASRELLO\Marlies
 

-Scan-Ãœbersicht-

Scan-Typ: Bedrohungs-Scan

Ergebnis: Abgeschlossen

Gescannte Objekte: 390206

Erkannte Bedrohungen: 638

In die QuarantÃ¤ne verschobene Bedrohungen: 638

Abgelaufene Zeit: 24 Min., 30 Sek.
 

-Scan-Optionen-

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

-Scan-Details-

Prozess: 1

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SERVICEPROVIDER.EXE, In QuarantÃ¤ne, [2146], [354276],1.0.2590
 

Modul: 10

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SERVICEPROVIDER.EXE, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRLOGGER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COMMON\ASP_IPC32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\EXCEPTIONHANDLER32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\QUICKATTENDANCEMODULE\QUICKATTENDANCEMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRSTYLER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COCKPITMODULE\COCKPITMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\SCHEDULERMODULE\SCHEDULERMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\GAHELPER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SIMPLIPROTECT.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590
 

RegistrierungsschlÃ¼ssel: 4

PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, In QuarantÃ¤ne, [14287], [245531],1.0.2590

PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, In QuarantÃ¤ne, [14287], [245531],1.0.2590

PUP.Optional.NeroTuneItUp, HKLM\SOFTWARE\WOW6432NODE\NERO\nero_tuneitup, In QuarantÃ¤ne, [2146], [354277],1.0.2590

PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, In QuarantÃ¤ne, [6066], [241622],1.0.2590
 

Registrierungswert: 2

PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf|PATH, In QuarantÃ¤ne, [14287], [245531],1.0.2590

PUP.Optional.ASKPartnerNetwork, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf|PATH, In QuarantÃ¤ne, [14287], [245531],1.0.2590
 

Registrierungsdaten: 5

PUP.Optional.HttpBreaker, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Ersetzt, [15364], [293099],1.0.2590

PUP.Optional.HttpBreaker, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Ersetzt, [15364], [293099],1.0.2590

PUP.Optional.HttpBreaker, HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Ersetzt, [15364], [293098],1.0.2590

PUP.Optional.HttpBreaker, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Ersetzt, [15364], [293099],1.0.2590

PUP.Optional.HttpBreaker, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Ersetzt, [15364], [293099],1.0.2590
 

Daten-Stream: 0

(keine bÃ¶sartigen Elemente erkannt)
 

Ordner: 50

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\TemperatureMonitoringModule, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Backups, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ExceptionHandlerDll, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\softwareproducts, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\checkdetails, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\driverupdate, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\services, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\reports, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\startup, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAMDATA\Nero\Nero TuneItUp, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TemperatureMonitoringModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncRemoteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryDefragModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CPUMonitoringModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SystemRemoteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DefragModule, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\protein\Resource, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\protein, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\NERO, In QuarantÃ¤ne, [2146], [354280],1.0.2590
 

Datei: 566

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SERVICEPROVIDER.EXE, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRLOGGER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COMMON\ASP_IPC32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\EXCEPTIONHANDLER32.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\QUICKATTENDANCEMODULE\QUICKATTENDANCEMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MRSTYLER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\COCKPITMODULE\COCKPITMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\MODULES\SCHEDULERMODULE\SCHEDULERMODULE.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\GAHELPER.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAM FILES (X86)\NERO\NERO TUNEITUP\SIMPLIPROTECT.DLL, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\checkdetails\BrowserCleanerModule.result, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\driverupdate\driverupdate.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ExceptionHandlerDll\Exception.exlog, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ExceptionHandlerDll\Trace.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\data.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\e6567ba482c6b6cb24d3.png, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\NERO_WOW_EN.png, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\newsfeed\NERO_WOW_EN_#2.png, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Log\2016-06-28 00-09-49 RegCleanerDll.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\Log\2017-04-08 22-11-44 RegCleanerDll.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\BlackList.cfg, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\RegCleanerDll\RegCleanerDll.cfg, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\reports\template_report.html, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\services\services.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\startup\startup.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\TemperatureMonitoringModule\TemperatureMonitoringModule.cfg, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\TemperatureMonitoringModule\TemperatureMonitoringModule.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ComputerID2.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\nero_tuneitup.ini, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\scheduler_ignore.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\Setup Log 2016-06-25 #002.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\Setup Log 2017-04-08 #001.log, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\simplitec_Power_Suite.ini, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\ToBeUninstalled.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_DE.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_EN.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_ES.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_FR.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_IT.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_KO.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_NL.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_PL.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_PT.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\usertips_RU.xml, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Nero\Nero TuneItUp\winsettings.dat, In QuarantÃ¤ne, [2146], [354279],1.0.2590

PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_KFGAIBFBMKJGMIMHBBAIKFNPKKJKPOAN_0.LOCALSTORAGE, In QuarantÃ¤ne, [218], [252935],1.0.2590

PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_CIGIAGPBKAPEPGKLNCNAJBAKKPKOPMAM_0.LOCALSTORAGE, In QuarantÃ¤ne, [218], [255546],1.0.2590

PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_CIGIAGPBKAPEPGKLNCNAJBAKKPKOPMAM_0.LOCALSTORAGE-JOURNAL, In QuarantÃ¤ne, [218], [255546],1.0.2590

PUP.Optional.CrossRider, C:\USERS\MARLIES\APPDATA\ROAMING\OPERA SOFTWARE\OPERA STABLE\LOCAL STORAGE\CHROME-EXTENSION_KFGAIBFBMKJGMIMHBBAIKFNPKKJKPOAN_0.LOCALSTORAGE-JOURNAL, In QuarantÃ¤ne, [218], [252935],1.0.2590

PUP.Optional.NeroTuneItUp, C:\USERS\PUBLIC\DESKTOP\NERO TUNEITUP.LNK, In QuarantÃ¤ne, [2146], [354283],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\all.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Apache License.txt, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Bold.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-BoldItalic.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Italic.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Light.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\Roboto-Regular.ttf, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\styles.xml, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_da_DK.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_de_DE.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_en.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_es_ES.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_fi_FI.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_fr_FR.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_it_IT.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_nl_NL.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_no_NO.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_pl_PL.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_pt_BR.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_pt_PT.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_ru_RU.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\grafix\welcome_sv_SE.png, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\PowerSuite_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\ServiceProvider_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\SimpliProtect_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\language\TuneItUp_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\SchedulerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SchedulerModule\timetable.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\BrowserCleanerModule\BrowserCleanerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CockpitModule\CockpitModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\Analyze.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\Defragment.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\DefragmentOptimize.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\ListAllFiles.MyD, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\MyDefragDll.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\process.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\Shredder32.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\SSDTest.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\common\undelete.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\CPUMonitoringModule\CPUMonitoringModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DataManagerModule\DataManagerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DefragModule\DefragModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

Hier der zweite Teil

Code:

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DeletedFileShredderModule\DeletedFileShredderModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\DriverUpdateModule\DriverUpdateModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedModule\HighSpeedModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\HighSpeedRemoteModule\HighSpeedRemoteModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOptSettings.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\InternetTuningModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_DA.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_de.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_detailed_de.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_en.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_es.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_FI.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_fr.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_it.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_KO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_nl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_NO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_pl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_pt.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_PT_BR.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_ru.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\InternetTuningModule\IntOpt_texts_SV.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncModule\MobileSyncModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\MobileSyncRemoteModule\MobileSyncRemoteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\PowerSaverModule\PowerSaverModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\QuickAttendanceModule\QuickAttendanceModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RecycleBinShredderModule\RecycleBinShredderModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryCleanerModule\RegistryCleanerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\RegistryDefragModule\RegistryDefragModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\ServicesModule\ServicesModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SoftwareUpdateModule\SoftwareUpdateModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\StartUpModule\StartUpModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\SystemRemoteModule\SystemRemoteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TemperatureMonitoringModule\cpuidsdk32.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TemperatureMonitoringModule\TemperatureMonitoringModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\TrashFileCleanerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\TrashFileCleanerModule\trashfiles.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UndeleteModule\UndeleteModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\UninstallManagerModule\UninstallManagerModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_FI.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_KO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\WinSettingsModule_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_DA.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_de.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_en.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_es.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_fr.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_it.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_KO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_nl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_NO.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_pl.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_pt.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_PT_BR.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_ru.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\modules\WinSettingsModule\winsettings_texts_SV.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroBasics\NeroBasics_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_DA.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_DE.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_EN.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_ES.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_FI.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_FR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_IT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_NL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_NO.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_PL.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_PT.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_PT_BR.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_RU.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\products\NeroPremium\NeroPremium_SV.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\protein\Resource\UnlockDialog_common.ini, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_de.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\CrashLogMailer.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\install.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\InstallHelper.dll, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_da.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_en.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_es.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_fi.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_fr.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_it.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_nl.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_no.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_pl.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_pt.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_pt_BR.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_ru.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\product_sv.cfg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUpStart.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUpStart.VisualElementsManifest.xml, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\unins000.dat, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\unins000.exe, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.NeroTuneItUp, C:\Program Files (x86)\Nero\Nero TuneItUp\unins000.msg, In QuarantÃ¤ne, [2146], [354276],1.0.2590

PUP.Optional.SpeedingUpMyPC, C:\USERS\MARLIES\APPDATA\LOCAL\TEMP\__TMP_204968F6, In QuarantÃ¤ne, [894], [334223],1.0.2590

PUP.Optional.InstallCore, C:\USERS\MARLIES\DOWNLOADS\APPCLEANER_INSTALLER.EXE, In QuarantÃ¤ne, [2], [65139],1.0.2590

PUP.Optional.DownloadSponsor, C:\USERS\MARLIES\DOWNLOADS\INSSIDER HOME LETZTE FREEWARE VERSION - CHIP-INSTALLER.EXE, In QuarantÃ¤ne, [506], [413936],1.0.2590

PUP.Optional.AdvancedSystemCare, C:\USERS\MARLIES\DOWNLOADS\ASCCHIPASCFCBW.EXE, In QuarantÃ¤ne, [1188], [336134],1.0.2590

PUP.Optional.DownloadSponsor, C:\USERS\MARLIES\DOWNLOADS\MICROSOFT NET FRAMEWORK - CHIP-INSTALLER.EXE, In QuarantÃ¤ne, [506], [413936],1.0.2590

PUP.Optional.DownloadSponsor, C:\USERS\MARLIES\DOWNLOADS\TELEGRAM FOR DESKTOP - CHIP-INSTALLER.EXE, In QuarantÃ¤ne, [506], [413936],1.0.2590

PUP.Optional.NeroTuneItUp, C:\WINDOWS\TASKS\NERO TUNEITUP PRO.JOB, In QuarantÃ¤ne, [2146], [354287],1.0.2590

PUP.Optional.NeroTuneItUp, C:\WINDOWS\TASKS\NERO TUNEITUP PRO (TRAY).JOB, In QuarantÃ¤ne, [2146], [354287],1.0.2590

PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.tb.ask.com_0.localstorage, In QuarantÃ¤ne, [257], [240306],1.0.2590

PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.tb.ask.com_0.localstorage-journal, In QuarantÃ¤ne, [257], [240306],1.0.2590

PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.myway.com_0.localstorage, In QuarantÃ¤ne, [257], [240305],1.0.2590

PUP.Optional.MindSpark, C:\USERS\MARLIES\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_smsfrombrowser.dl.myway.com_0.localstorage-journal, In QuarantÃ¤ne, [257], [240305],1.0.2590

PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[1].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590

PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[2].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590

PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[3].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590

PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[4].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590

PUP.Optional.ASK, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\LOCAL\MICROSOFT\WINDOWS\INETCACHE\IE\AskToolbarInstaller-ORJ-SPE[5].7z, In QuarantÃ¤ne, [510], [358503],1.0.2590

PUP.Optional.NeroTuneItUp, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\NERO\NERO TUNEITUP.LNK, In QuarantÃ¤ne, [2146], [354280],1.0.2590

PUP.Optional.NeroTuneItUp, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero\1-Klick-Optimierung.lnk, In QuarantÃ¤ne, [2146], [354280],1.0.2590

PUP.Optional.NeroTuneItUp, C:\WINDOWS\SYSTEM32\TASKS\Nero TuneItUp PRO, In QuarantÃ¤ne, [2146], [354278],1.0.2590

PUP.Optional.NeroTuneItUp, C:\WINDOWS\SYSTEM32\TASKS\Nero TuneItUp PRO (Tray), In QuarantÃ¤ne, [2146], [354278],1.0.2590
 

Physischer Sektor: 0

(keine bÃ¶sartigen Elemente erkannt)

(end)

Die anderen txt´s habe ich auch erstellt, kann sie aber in dieser Antwort nicht posten, weil dann der Text für den Beitrag zu lang wird.

Es steht in der Beschreibung, das wenn ich auf meinen Beitrag antworte, um die Weitern auch zu posten, dann sehe es so aus als sei mein Thema in Arbeit und ich könnte keine Antwort erhalten.

Wie kann, bzw. soll ich in dem Fall vorgehen?

Gruß Kasrello

Hi,

du bist doch schon bei mir in Arbeit, der Hinweis hat nur mit dem ersten Post zu tun. Einfach wie gehabt eine weitere Antwort machen und dort den Rest der Logs posten :)

Und bitte auch die richtige Datei von ADW posten. Wenn die nicht da ist, dann die Anleitung genau lesen und nochmal ausführen. Funde sollten gelöscht werden ;)

Restliche txt´s

Hallo Tician,

es war die Richtige ADW und Funde wurden gelöscht.

Ich habe erst die ADW, erzeugt und die dann gespeichert. Anschließend die Mbam, die gespeichert und dann FRST und Addition erstellt.

Jetzt habe ich das verstanden, ich werde jetzt gleich die restlichen nacheinander posten.

:dankeschoen:

Hallo Tician,

hier jetzt die FRST.txt

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08-2017

durchgeführt von Marlies (Administrator) auf KASRELLO (15-08-2017 14:35:04)

Gestartet von C:\Users\Marlies\Desktop

Geladene Profile: Marlies &  (Verfügbare Profile: Marlies & Marlies_2)

Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(CrossLoop) C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Program Files (x86)\FWdriver_v\POSHXMain.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe

(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

() C:\Program Files (x86)\FWdriver_v\POSHX.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe

(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

() C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe

() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)

HKLM\...\Run: [POSHX] => C:\Program Files (x86)\FWdriver_v\POSHX.exe [647168 2013-09-03] ()

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-01] (Synaptics Incorporated)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)

HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-08-05] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-06-13] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)

HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960248 2015-10-26] ()

HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2015-10-01] (AVM Berlin)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 

Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2014-12-21]

ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MBCameraMonitor.lnk [2014-12-22]

ShortcutTarget: MBCameraMonitor.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe (PIXELA CORPORATION)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-27]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-05-15]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2017-05-03]

ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)

Startup: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-12-26]

ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4

Tcpip\..\Interfaces\{471AEB88-C6B2-4C00-9669-3CC3EE935AD6}: [DhcpNameServer] 192.168.192.1

Tcpip\..\Interfaces\{C54B9ABE-D820-4EAF-86DC-7FF0424B0FD3}: [DhcpNameServer] 80.69.96.12 81.210.129.4

Tcpip\..\Interfaces\{D8F505BE-40F8-41DB-87A6-F6B74D4C7B56}: [DhcpNameServer] 80.69.96.12 81.210.129.4
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/

HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133428919 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429106 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)

BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)

BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-10-26] (Wondershare)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13] (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13] (Oracle Corporation)

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)

Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)

Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei

Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei

Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei
 

FireFox:

========

FF DefaultProfile: vy7huq4o.default

FF ProfilePath: C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default [2017-08-12]

FF Extension: (Avira Browser Safety) - C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default\Extensions\abs@avira.com.xpi [2017-08-10]

FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com

FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2015-11-15] [ist nicht signiert]

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-30] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-30] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-13] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-13] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp

CHR StartupUrls: Default -> "hxxp://www.rp-online.de/"

CHR Profile: C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default [2017-08-15]

CHR Extension: (Google Docs) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]

CHR Extension: (Google Drive) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]

CHR Extension: (YouTube) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]

CHR Extension: (Google-Suche) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]

CHR Extension: (Adobe Acrobat) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-06-05]

CHR Extension: (Google Docs Offline) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]

CHR Extension: (Google Mail) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]

CHR Extension: (Chrome Media Router) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-10]

CHR Extension: (Mein BMI - Shopping Angebote) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppohoeonaecgahebikkipfeoojbccoan [2017-04-09]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-12-26] (Adobe Systems) [Datei ist nicht signiert]

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [377976 2017-06-13] (Avira Operations GmbH & Co. KG)

S4 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2015-10-01] () [Datei ist nicht signiert]

R2 CrossLoopService; C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop)

R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)

R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [404376 2017-06-30] (McAfee, Inc.)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] ()

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 POSHXService; C:\Program Files (x86)\FWdriver_v\POSHXMain.exe [114688 2012-12-26] () [Datei ist nicht signiert]

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)

R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.)

R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.)

S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.)

S3 tvnserver; C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.) [Datei ist nicht signiert]

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation)

S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AirplaneModeHID; C:\Windows\System32\drivers\AirplaneModeHID.sys [30512 2013-09-04] (Elitegroup Computer System)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-19] (Avira Operations GmbH & Co. KG)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [173784 2017-08-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-08-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-03] (Avira Operations GmbH & Co. KG)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2015-10-01] (AVM Berlin)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-03] (Avira Operations GmbH & Co. KG)

R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)

R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-06-27] ()

R3 fwlanusb6_860; C:\Windows\system32\DRIVERS\fwlanusb6_860.sys [2234912 2015-10-01] (AVM GmbH)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation)

R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-08-15] (Malwarebytes)

R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-15] (Malwarebytes)

R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-08-15] (Malwarebytes)

R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-15] (Malwarebytes)

R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-08-15] (Malwarebytes)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)

S3 s1018bus; C:\Windows\System32\drivers\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\system32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\system32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\system32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\system32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\system32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\drivers\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-01] (Synaptics Incorporated)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-01] (Synaptics Incorporated)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-27] (Wondershare)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-08-15 14:35 - 2017-08-15 14:36 - 000034340 _____ C:\Users\Marlies\Desktop\FRST.txt

2017-08-15 14:33 - 2017-08-15 13:57 - 000056062 _____ C:\Users\Marlies\Desktop\FRST2.txt

2017-08-15 14:33 - 2017-08-15 13:50 - 000046982 _____ C:\Users\Marlies\Desktop\Addition2.txt

2017-08-15 14:33 - 2017-08-15 13:37 - 000100013 _____ C:\Users\Marlies\Desktop\mbam1.txt

2017-08-15 14:33 - 2017-08-15 11:21 - 000008805 _____ C:\Users\Marlies\Desktop\AdwCleaner[S2].txt

2017-08-15 14:33 - 2017-08-13 14:53 - 000040849 _____ C:\Users\Marlies\Desktop\FRST 1.txt

2017-08-15 14:33 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\Marlies\Desktop\FRST64.exe

2017-08-15 14:33 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Desktop\adwcleaner_7.0.1.0 (1).exe

2017-08-15 14:32 - 2017-08-13 15:05 - 000045346 _____ C:\Users\Marlies\Desktop\Addition1.txt

2017-08-15 14:20 - 2016-08-05 00:20 - 000001150 _____ C:\Users\Marlies\Desktop\OpenOffice (2) - Kopie.lnk

2017-08-15 14:20 - 2016-06-26 15:44 - 000000852 _____ C:\Users\Marlies\Desktop\MediaCoder x64 - Kopie.lnk

2017-08-15 14:20 - 2015-09-26 23:49 - 000001149 _____ C:\Users\Marlies\Desktop\OLYMPUS Viewer 3 - Kopie.lnk

2017-08-15 14:20 - 2015-09-26 23:49 - 000001129 _____ C:\Users\Marlies\Desktop\OLYMPUS Digital Kamera Updater - Kopie.lnk

2017-08-15 14:20 - 2012-08-11 07:23 - 000001275 _____ C:\Users\Marlies\Desktop\Medion Services - Kopie.lnk

2017-08-15 14:14 - 2017-08-15 14:31 - 000000000 ____D C:\Users\Marlies\Desktop\gesammeltes Desktop

2017-08-15 13:37 - 2017-08-15 13:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices

2017-08-15 12:42 - 2017-08-15 13:35 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys

2017-08-15 12:42 - 2017-08-15 13:35 - 000093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys

2017-08-15 12:42 - 2017-08-15 13:35 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2017-08-15 12:42 - 2017-08-15 13:34 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2017-08-15 12:42 - 2017-08-15 12:47 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys

2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Malwarebytes

2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\Program Files\Malwarebytes

2017-08-15 12:42 - 2017-06-27 12:06 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys

2017-08-15 12:37 - 2017-08-15 12:38 - 065033984 _____ (Malwarebytes ) C:\Users\Marlies\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe

2017-08-15 11:05 - 2017-08-15 14:34 - 000000000 ____D C:\Users\Marlies\Desktop\Trojaner

2017-08-15 06:22 - 2017-08-15 06:23 - 000538120 _____ C:\Windows\Minidump\081517-23156-01.dmp

2017-08-14 23:23 - 2017-08-13 17:32 - 000001059 _____ C:\Users\Marlies\Desktop\TeamViewer 12.lnk

2017-08-14 23:21 - 2017-08-14 23:21 - 000001272 _____ C:\Users\Marlies\Downloads\TeamViewer_Setup (1) - Verknüpfung.lnk

2017-08-13 17:26 - 2017-08-13 17:32 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk

2017-08-13 17:26 - 2017-08-13 17:32 - 000001047 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk

2017-08-13 17:26 - 2017-08-13 17:32 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2017-08-13 15:46 - 2017-08-13 15:46 - 015747576 _____ (TeamViewer GmbH) C:\Users\Marlies\Downloads\TeamViewer_Setup (1).exe

2017-08-13 14:54 - 2017-08-13 14:54 - 000041303 _____ C:\Users\Marlies\Downloads\FRST3.txt

2017-08-13 14:17 - 2017-08-13 14:17 - 000045497 _____ C:\Users\Marlies\Desktop\Addition.txt

2017-08-12 21:01 - 2017-08-13 14:08 - 000045494 _____ C:\Users\Marlies\Downloads\Addition.txt

2017-08-12 20:59 - 2017-08-13 14:08 - 000041303 _____ C:\Users\Marlies\Downloads\FRST.txt

2017-08-12 20:58 - 2017-08-15 14:35 - 000000000 ____D C:\FRST

2017-08-12 20:57 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\Marlies\Downloads\FRST64.exe

2017-08-12 19:28 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Downloads\adwcleaner_7.0.1.0 (1).exe

2017-08-12 19:11 - 2017-08-12 19:11 - 001529352 _____ C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe

2017-08-09 16:38 - 2017-08-02 05:17 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2017-08-09 16:38 - 2017-07-21 15:40 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll

2017-08-09 16:38 - 2017-07-21 15:40 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll

2017-08-09 16:38 - 2017-07-15 12:10 - 000536688 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2017-08-09 16:38 - 2017-07-15 12:10 - 000140016 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe

2017-08-09 16:38 - 2017-07-15 12:06 - 000449840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2017-08-09 16:38 - 2017-07-15 12:06 - 000136832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe

2017-08-09 16:38 - 2017-07-14 22:08 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll

2017-08-09 16:38 - 2017-07-14 20:44 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll

2017-08-09 16:38 - 2017-07-14 08:49 - 025733632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2017-08-09 16:38 - 2017-07-14 08:19 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2017-08-09 16:38 - 2017-07-14 07:35 - 005981184 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2017-08-09 16:38 - 2017-07-14 06:40 - 015254016 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2017-08-09 16:38 - 2017-07-14 04:54 - 020270080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2017-08-09 16:38 - 2017-07-14 04:17 - 004546048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2017-08-09 16:38 - 2017-07-08 22:14 - 000376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys

2017-08-09 16:38 - 2017-07-08 21:12 - 004169728 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2017-08-09 16:38 - 2017-07-08 19:45 - 007078912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll

2017-08-09 16:38 - 2017-07-08 19:05 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2017-08-09 16:38 - 2017-07-08 18:39 - 005274624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll

2017-08-09 16:38 - 2017-07-08 18:37 - 007797248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2017-08-09 16:38 - 2017-07-08 18:23 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2017-08-09 16:38 - 2017-07-08 17:59 - 005270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2017-08-09 16:38 - 2017-07-08 05:46 - 000377688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys

2017-08-09 16:38 - 2017-07-08 05:16 - 007440728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2017-08-09 16:38 - 2017-07-08 05:16 - 001674520 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2017-08-09 16:38 - 2017-07-08 05:16 - 001534072 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2017-08-09 16:38 - 2017-07-08 05:16 - 001499920 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2017-08-09 16:38 - 2017-07-08 05:16 - 001370328 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2017-08-09 16:38 - 2017-07-08 05:16 - 000086360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2017-08-09 16:38 - 2017-07-01 15:47 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll

2017-08-09 16:38 - 2017-06-24 18:46 - 000424448 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll

2017-08-09 16:38 - 2017-06-24 18:16 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll

2017-08-09 16:38 - 2017-06-13 19:51 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2017-08-09 16:38 - 2017-06-13 19:23 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2017-08-09 16:38 - 2017-06-13 19:19 - 000383488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll

2017-08-09 16:38 - 2017-06-13 19:16 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll

2017-08-09 16:38 - 2017-06-13 19:11 - 000238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2017-08-09 16:38 - 2017-06-13 19:07 - 000304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2017-08-09 16:38 - 2017-06-13 16:17 - 000656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2017-08-09 16:38 - 2017-06-13 16:16 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2017-08-09 16:38 - 2017-06-13 11:47 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2017-08-09 16:38 - 2017-06-13 11:09 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2017-08-09 16:38 - 2017-06-13 10:22 - 001436160 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2017-08-09 16:38 - 2017-06-13 10:16 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2017-08-09 16:38 - 2017-06-13 10:10 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll

2017-08-09 16:38 - 2017-06-13 10:07 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2017-08-09 16:38 - 2017-06-13 10:03 - 000302080 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2017-08-09 16:38 - 2017-06-13 09:54 - 000374272 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2017-08-09 16:38 - 2017-06-13 09:50 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2017-08-09 16:38 - 2017-06-12 02:14 - 000276320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2017-08-09 16:38 - 2017-06-11 22:13 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll

2017-08-09 16:38 - 2017-06-11 22:11 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll

2017-08-09 16:38 - 2017-06-11 22:02 - 002778112 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2017-08-09 16:38 - 2017-06-11 22:02 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll

2017-08-09 16:38 - 2017-06-11 21:52 - 002463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2017-08-09 16:38 - 2017-06-08 19:01 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2017-08-09 16:38 - 2017-06-08 19:01 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2017-08-09 16:38 - 2017-06-08 03:48 - 002457936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2017-08-09 16:38 - 2017-06-07 06:25 - 000428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2017-08-09 16:38 - 2017-06-06 20:38 - 000607232 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2017-08-09 16:38 - 2017-06-06 19:44 - 000530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2017-08-09 16:38 - 2017-05-27 18:42 - 001115136 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2017-08-09 16:37 - 2017-07-14 08:44 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2017-08-09 16:37 - 2017-07-14 07:26 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2017-08-09 16:37 - 2017-07-14 07:10 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2017-08-09 16:37 - 2017-07-14 06:23 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2017-08-09 16:37 - 2017-07-14 06:07 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2017-08-09 16:37 - 2017-07-14 05:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2017-08-09 16:37 - 2017-07-14 04:48 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2017-08-09 16:37 - 2017-07-14 04:38 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2017-08-09 16:37 - 2017-07-14 04:17 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2017-08-09 16:37 - 2017-07-14 04:12 - 000693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2017-08-09 16:37 - 2017-07-14 04:09 - 013663744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2017-08-09 16:37 - 2017-07-14 03:53 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2017-08-09 16:37 - 2017-07-14 03:50 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2017-08-09 16:37 - 2017-07-14 03:48 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2017-08-09 16:37 - 2017-06-15 16:17 - 002551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2017-08-09 16:37 - 2017-06-15 16:16 - 001920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2017-08-09 16:37 - 2017-06-09 15:47 - 000448629 _____ C:\Windows\system32\ApnDatabase.xml

2017-08-09 16:37 - 2017-05-27 18:38 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll

2017-08-09 16:24 - 2017-08-09 16:24 - 003376660 _____ C:\Users\Marlies\Downloads\SpeisekartePlatonWeb.pdf

2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\McAfee Security Scan

2017-07-26 10:51 - 2017-07-26 10:51 - 000021308 _____ C:\Users\Marlies\Downloads\...26-07-2017_1051.pdf

2017-07-21 11:11 - 2017-07-21 11:11 - 000143952 _____ C:\Users\Marlies\Downloads\1500628271864.pdf

2017-07-21 11:05 - 2017-07-21 11:05 - 000117974 _____ C:\Users\Marlies\Downloads\...-2017-07-10.pdf

2017-07-20 23:45 - 2017-07-20 23:45 - 000000992 _____ C:\Users\Marlies\Downloads\...(kasrello) - Verknüpfung.lnk

2017-07-18 19:06 - 2017-07-18 19:06 - 000003176 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-708953619-3332147771-3993505364-1001
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-08-15 14:31 - 2014-06-02 09:25 - 003875328 ___SH C:\Users\Marlies\Desktop\Thumbs.db

2017-08-15 13:45 - 2014-06-04 17:29 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Skype

2017-08-15 13:38 - 2014-05-15 15:43 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-708953619-3332147771-3993505364-1001

2017-08-15 13:36 - 2014-05-15 15:39 - 000000000 ___DO C:\Users\Marlies\SkyDrive

2017-08-15 13:36 - 2014-05-15 15:39 - 000000000 ____D C:\Users\Marlies\Documents\Youcam

2017-08-15 13:33 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2017-08-15 13:15 - 2015-04-21 09:19 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Telegram Desktop

2017-08-15 12:45 - 2014-05-20 17:06 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\ClassicShell

2017-08-15 12:30 - 2014-05-15 15:48 - 000003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D79CCDCC-5C13-412F-9EFD-1CDF8B9C287B}

2017-08-15 11:24 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI

2017-08-15 11:23 - 2015-09-13 16:46 - 000000000 ____D C:\Program Files (x86)\Yahoo!

2017-08-15 11:21 - 2015-03-06 21:02 - 000000000 ____D C:\AdwCleaner

2017-08-15 06:22 - 2017-05-20 01:28 - 541711296 _____ C:\Windows\MEMORY.DMP

2017-08-15 06:22 - 2017-05-20 01:28 - 000000000 ____D C:\Windows\Minidump

2017-08-14 23:24 - 2014-05-15 15:38 - 000000000 ____D C:\Users\Marlies

2017-08-14 23:20 - 2014-11-03 18:12 - 000883712 ___SH C:\Users\Marlies\Downloads\Thumbs.db

2017-08-14 23:15 - 2013-08-22 16:44 - 000398144 _____ C:\Windows\system32\FNTCACHE.DAT

2017-08-14 17:02 - 2014-06-17 18:46 - 000119808 _____ C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2017-08-13 17:26 - 2015-06-01 11:15 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\TeamViewer

2017-08-13 17:21 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf

2017-08-13 16:35 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp

2017-08-13 15:58 - 2014-05-20 17:27 - 000000000 ____D C:\Windows\system32\MRT

2017-08-13 15:57 - 2014-05-20 19:18 - 000000000 ____D C:\Users\Marlies_2

2017-08-13 15:54 - 2014-05-20 17:27 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2017-08-12 18:29 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness

2017-08-12 12:56 - 2017-02-16 19:30 - 000000000 ____D C:\Users\Marlies\AppData\LocalLow\Mozilla

2017-08-11 16:34 - 2017-06-01 14:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2017-08-11 07:20 - 2017-02-11 18:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2017-08-10 17:03 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps

2017-08-09 17:32 - 2014-05-21 20:42 - 000000000 ____D C:\ProgramData\CanonIJPLM

2017-08-08 15:30 - 2017-05-10 20:23 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-08-08 15:30 - 2017-05-10 20:23 - 000002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2017-08-08 15:00 - 2014-12-30 11:19 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2017-08-05 15:46 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2017-08-05 15:30 - 2014-06-01 22:26 - 000173784 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2017-08-05 15:30 - 2014-06-01 22:26 - 000167464 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2017-08-02 00:03 - 2015-06-21 15:34 - 000000000 ____D C:\Users\Marlies\AppData\Local\.elfohilfe

2017-07-30 14:46 - 2015-05-04 09:57 - 000000000 ____D C:\Users\Marlies\Downloads\Telegram Desktop

2017-07-29 02:03 - 2013-08-22 17:38 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2017-07-29 02:03 - 2013-08-22 17:38 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2017-07-27 23:00 - 2016-05-10 23:23 - 000000000 ____D C:\Program Files\McAfee Security Scan

2017-07-27 23:00 - 2016-04-30 19:15 - 000001984 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

2017-07-25 08:50 - 2013-09-05 21:28 - 000767518 _____ C:\Windows\system32\perfh007.dat

2017-07-25 08:50 - 2013-09-05 21:28 - 000160240 _____ C:\Windows\system32\perfc007.dat

2017-07-25 08:50 - 2013-09-05 21:13 - 001783084 _____ C:\Windows\system32\PerfStringBackup.INI

2017-07-21 15:33 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF

2017-07-20 04:56 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache

2017-07-19 18:16 - 2013-09-07 12:35 - 000000000 ____D C:\ProgramData\Package Cache

2017-07-19 17:57 - 2014-12-11 00:09 - 000000000 ____D C:\Windows\system32\appraiser

2017-07-19 17:56 - 2016-04-30 19:15 - 000000000 ____D C:\Program Files\TrueKey

2017-07-18 19:06 - 2016-04-18 22:43 - 000002366 _____ C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk

2017-07-18 19:06 - 2014-05-20 19:09 - 000003184 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-708953619-3332147771-3993505364-1001
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-12-21 13:17 - 2016-12-21 13:17 - 007680000 _____ () C:\Program Files (x86)\GUTE6BF.tmp

2014-06-17 18:46 - 2017-08-14 17:02 - 000119808 _____ () C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-09-07 12:29 - 2013-09-07 12:29 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

2013-09-12 05:59 - 2013-09-12 05:59 - 000000032 _____ () C:\ProgramData\Temp.log
 

Einige Dateien in TEMP:

====================

2016-11-15 16:20 - 2016-11-15 16:20 - 011127352 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\0BB5CC15-AA68-4718-93A1-822DCC2015E9.exe

2014-06-01 22:26 - 2014-08-07 16:50 - 000000000 ____D () C:\Users\Marlies\AppData\Local\Temp\avgnt.exe

2016-11-28 23:54 - 2016-11-28 23:54 - 012545632 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\F177397B-C751-4B7D-BE67-6A8FD23C9C48.exe

2016-08-04 23:38 - 2011-02-07 11:09 - 000850320 ____N (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\MSETUP4.EXE

2016-08-04 23:41 - 2011-03-23 06:48 - 000349592 ____R (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\uninstall.exe

2017-04-08 22:12 - 2017-04-08 22:12 - 013705448 _____ (Nero AG                                                     ) C:\Users\Marlies\AppData\Local\Temp\Update_Simplitec_PowerSuite_Auto.exe
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-08-13 16:30
 

==================== Ende von FRST.txt ============================

Und hier die Addition.txt

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-08-2017

durchgeführt von Marlies (15-08-2017 14:37:48)

Gestartet von C:\Users\Marlies\Desktop

Windows 8.1 (Update) (X64) (2014-05-15 13:38:24)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-708953619-3332147771-3993505364-500 - Administrator - Disabled)

Gast (S-1-5-21-708953619-3332147771-3993505364-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-708953619-3332147771-3993505364-1003 - Limited - Enabled)

Marlies (S-1-5-21-708953619-3332147771-3993505364-1001 - Administrator - Enabled) => C:\Users\Marlies

Marlies_2 (S-1-5-21-708953619-3332147771-3993505364-1004 - Limited - Enabled) => C:\Users\Marlies_2
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}

AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)

Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)

Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.29.32 - Avira Operations GmbH & Co. KG)

Avira Connect (HKLM-x32\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden

Avira Connect (HKLM-x32\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.07 - AVM Berlin)

calibre (HKLM-x32\...\{D47B7229-AC24-4D79-96AB-880649FFC892}) (Version: 2.19.0 - Kovid Goyal)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )

Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )

Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)

Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )

Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version:  - )

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon MP490 series Benutzerregistrierung (HKLM-x32\...\Canon MP490 series Benutzerregistrierung) (Version:  - )

Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.10.0 - Canon Inc.)

Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.11.0.1 - Canon Inc.)

Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.0.6 - Canon Inc.)

Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)

Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.10.0.0 - Canon Inc.)

Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )

Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)

CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerDirector 11 (HKLM\...\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3215 - Ihr Firmenname) Hidden

CyberLink PowerRecover (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.) Hidden

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version:  - )

Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)

DriverTools 1.0 (HKLM-x32\...\DriverTools) (Version: 1.0 - Huawei Technologies Co.,Ltd)

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 18.1.22140 - Landesfinanzdirektion Thüringen)

Everio MediaBrowser (HKLM-x32\...\{5CA03ECF-B4A6-464B-9F5D-64D8B61B083F}) (Version: 1.00.013 - PIXELA)

Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software)

FlexPoints 2.0 (HKLM-x32\...\{F460E5B9-E678-484B-A2E8-BFDF93A57A03}) (Version: 1.00.0000 - Weight Watchers)

Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerija (HKLM-x32\...\{BE2DE42A-6696-4EE7-9E59-B9385F339DD3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotótár (HKLM-x32\...\{8D977EAA-DF3E-4054-A98D-F27AEB0248DD}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)

Galerie de photos (HKLM-x32\...\{F4D99A13-F63A-4FC1-8799-CFFDB78DDFB3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)

Intel Security True Key (HKLM\...\TrueKey) (Version: 4.19.108.1 - Intel Security)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3282 - Intel Corporation)

Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{252CC716-1EDE-4C7F-8881-15B7AEBF8F5C}) (Version: 16.5.0.0096 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{72814a2c-2e03-4a50-b30a-43e7884b3934}) (Version: 16.5.1 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)

Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MAGIX Foto Designer 7 (HKLM\...\{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG) Hidden

MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG)

Mahjongg - Ancient Mayas (HKLM-x32\...\{18D52937-2121-49FA-B734-EA1EF38AA04F}_is1) (Version:  - cerasus.media GmbH)

Malwarebytes Version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.587.1 - McAfee, Inc.)

MediaCoder x64 0.8.43.5830 (HKLM\...\MediaCoder x64) (Version: 0.8.43.5830 - Mediatronic)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)

Movie Maker (HKLM-x32\...\{0FD2B9C6-DB91-48EA-9518-AB5B68CA1E28}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{3C5F91EF-5C0B-4D13-BCBE-0FC6FC3ED7F9}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{5B91D34E-B583-4E08-BB48-4F18086A0DB7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{705C31EB-E0AB-4C1F-A834-993F9E08B085}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{7693587D-5D66-4208-ABEA-C370217D1D9B}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{8E038DF1-B140-46D6-9D82-1BDF8DC56764}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{E169436E-49D8-419B-A5C0-D245EAF99611}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 53.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 53.0.2 (x86 de)) (Version: 53.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.2.6333 - Mozilla)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

Music Recorder (HKLM-x32\...\{E3579DBA-00BA-4E32-AE90-63B6CDA30D56}) (Version: 14.0.62200.0 - Audials AG)

Nero 7 Essentials (HKLM-x32\...\{D34D82E0-4600-407B-9478-8506C1DD1031}) (Version: 7.02.3307 - Nero AG)

OLYMPUS Digital Camera Updater (HKLM-x32\...\{D18925CE-5AF9-4394-8EF7-1081FFE7E98B}) (Version: 1.2.0 - OLYMPUS IMAGING CORP.)

OLYMPUS Viewer 3 (HKLM-x32\...\{F0C70F68-E57F-4D76-A012-E20F8E12946E}) (Version: 1.4.1 - OLYMPUS IMAGING CORP.)

online-foto Bestellsoftware (HKLM-x32\...\online-foto Bestellsoftware) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)

PDF Architect 2 Convert Module (HKLM-x32\...\{53434783-F9A7-4D64-B91A-05A3BF925D70}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Forms Module (HKLM-x32\...\{4CB8D214-0400-45FA-B084-AAB0C74AD032}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Insert Module (HKLM-x32\...\{DD7BB68A-7D8A-4F62-806A-3424C2A170E7}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 OCR Module (HKLM-x32\...\{952E5B8F-82C2-46D1-B642-37B2635CE440}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Review Module (HKLM-x32\...\{664D6EE3-9A35-4284-B9D2-80A509DF9295}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Secure Module (HKLM-x32\...\{99E0C0D4-6746-44EE-A132-5E7E3D6FAAFB}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)

PriMus Free 1.1 (Build 11020) (HKLM-x32\...\PriMus Free_is1) (Version: 1.1.0.11020 - Columbus Soft)

Raccolta foto (HKLM-x32\...\{FA6BC7A5-85B3-4DC2-825C-D508E386151A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7030 - Realtek Semiconductor Corp.)

simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)

Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)

Sony Ericsson PC Companion 1.50.52 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.50.52 - Sony Ericsson)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.0 - Synaptics Incorporated)

TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.81460 - TeamViewer)

Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)

Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)

WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.53 - NCH Software)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)

WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-708953619-3332147771-3993505364-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Marlies\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileCoAuthLib64.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)

ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers1-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()

ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-08-26] (Intel Corporation)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)

ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2014-04-20] (IvoSoft)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {145D433F-F4F5-4F0B-A64B-8C8291F19A6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-01] (Synaptics Incorporated)

Task: {45FD7644-A331-4E36-BCD1-DFC43A0CFAEA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)

Task: {7F880913-CCFC-4B27-B7C3-B781B2E5FFE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {993A1863-842C-4EAC-8319-9713C2B9D95D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-08-13] (Microsoft Corporation)

Task: {CCB5A282-43DA-4578-B841-CAF077C81C01} - System32\Tasks\{DD49092F-C446-4EEC-BD77-C4F3994ACAFA} => C:\Windows\system32\pcalua.exe -a E:\System\dx80a.exe -d E:\System

Task: {D56949F9-18CC-4B3E-9C54-796189BBE1A0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs

Task: {E5A22EA6-4AC2-487C-8B07-531491916A09} - System32\Tasks\{C7994087-E7AF-4290-9F3C-979444759543} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Einfach Genial\EinfachGenial.exe" -d "C:\Program Files (x86)\Einfach Genial\"

Task: {EA9A4FAB-99BE-473F-A97F-327175694D43} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-08-08] (Dolby Laboratories Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 

ShortcutWithArgument: C:\Users\Marlies\Desktop\gesammeltes Desktop\CrossLoop Connect.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrossLoop\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-11-15 13:32 - 2015-02-27 15:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll

2014-05-21 20:42 - 2011-02-07 09:56 - 000138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2013-09-07 12:40 - 2012-12-26 11:36 - 000114688 _____ () C:\Program Files (x86)\FWdriver_v\POSHXMain.exe

2014-05-20 20:41 - 2013-03-06 14:42 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2017-08-15 12:42 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

2013-09-07 12:40 - 2013-09-03 21:38 - 000647168 _____ () C:\Program Files (x86)\FWdriver_v\POSHX.exe

2016-03-15 10:26 - 2016-03-15 10:26 - 004535192 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe

2014-12-21 15:41 - 2014-04-08 10:13 - 000069120 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

2017-08-08 15:30 - 2017-08-02 09:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll

2017-08-08 15:30 - 2017-08-02 09:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll

2013-09-07 12:40 - 2013-07-24 10:23 - 000106496 _____ () C:\Program Files (x86)\FWdriver_v\KIPowerDll.dll

2013-09-07 12:40 - 2013-07-11 12:41 - 000348160 _____ () C:\Program Files (x86)\FWdriver_v\SuperHealthDLL.dll

2013-09-07 12:40 - 2012-06-22 20:32 - 000266240 _____ () C:\Program Files (x86)\FWdriver_v\SuperSpeederDLL.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000049424 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_thread-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000048400 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_date_time-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000068504 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashRpt.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000618256 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_regex-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000544152 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\StreamingClient.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000016144 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_system-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000040856 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashHandlerNET.dll

2014-12-21 15:41 - 2014-04-08 10:08 - 000112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll

2013-09-12 06:56 - 2013-08-05 09:49 - 000627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2013-08-05 16:48 - 2013-08-05 16:48 - 000016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

2014-05-21 20:47 - 2008-07-03 15:18 - 000364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser\pxl_m17n_tool.dll

2015-11-15 13:32 - 2015-04-28 16:22 - 001498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2015-11-15 13:32 - 2014-05-19 18:19 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2013-09-07 12:10 - 2013-08-08 13:25 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [246]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\MEDION\wallpaper.jpg

DNS Servers: 80.69.96.12 - 81.210.129.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{8B219A9C-3E95-4887-B558-0A20C3849406}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{55B1AAA0-1495-4582-AA48-9DD5FE0C9324}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{2B993C4B-B78F-402C-91B3-32B5F826346F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{90A06370-CC6A-4993-AE7D-905297E8D278}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

FirewallRules: [{DC152F63-F1D3-4181-AE00-8C232B30FBF9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

FirewallRules: [{9F2453BC-E7A0-4197-BB67-11A849EF3BD1}] => (Allow) C:\Users\Marlies\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [{9AC8C66D-A4A0-43A9-85FE-DDBE39F6FEFE}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{D7B2403C-AD42-441B-99CC-7F24749CE4FC}] => (Allow) LPort=2869

FirewallRules: [{62642C0A-EAA3-418F-B6FF-4DFABDFCE1DF}] => (Allow) LPort=1900

FirewallRules: [{269BE6C4-2529-4920-BC89-90562EB4559C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{0EF250F3-BEB1-4580-9B21-0B4920E3D812}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE

FirewallRules: [TCP Query User{30D7B601-7145-4279-9DC8-CD63CEEF410B}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{19E2251F-9D9A-4F3F-AF13-CB1F4F6F5B90}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{674BBF60-83EC-4D49-BC50-4A8D2C0E23AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe

FirewallRules: [{991741BC-B7DE-4AE4-86E4-7C57C27E8CEF}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe

FirewallRules: [{587DB821-EE55-4343-A6DB-FC0E0A6E7F28}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe

FirewallRules: [{31BCFED6-4B00-4337-BAC8-082E9ABA39AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe

FirewallRules: [TCP Query User{79D86FFA-D8C6-4252-83BC-4A5943BB7492}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{18961C28-5FA2-4BD0-812F-435D307495CE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [TCP Query User{2FDFBC6C-3AAA-420C-A13E-6BCBEFCC5707}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe

FirewallRules: [UDP Query User{80D9ED45-F5AC-4F4F-AD81-E79788EBEE11}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe

FirewallRules: [TCP Query User{62317F72-4518-4EF9-B0FE-891B8AE34422}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe

FirewallRules: [UDP Query User{15F2D807-18A8-4C16-BE0F-21EE162FF060}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe

FirewallRules: [{43637725-3109-4A55-944F-2A471CE3684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{259979CB-6D50-420A-AA41-80218EA26266}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{E944FA45-73CD-49C6-8B91-CF4D30E620F5}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light

FirewallRules: [UDP Query User{ADFF7C71-3FB6-423D-8934-F4397726FF2B}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light

FirewallRules: [{CBE23198-7DA5-4CA2-8258-DCC8D46A1F67}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{EDEBD6B2-21BE-4AF3-B12A-5579AE31D8F7}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{19E7BCCF-1E7B-4771-AADF-005603F1FC0E}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{3CC1DAF6-7789-4F41-97ED-46D05A46B74D}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{0114B05C-5AB4-4746-BDEF-285A47D4807C}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{BEB671ED-E6AB-41C5-97E7-AEA42072F475}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{85210530-AB5A-477F-BC00-390D7967D42A}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe

FirewallRules: [{065D11A9-B330-4118-9C13-63DF353F6630}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe

FirewallRules: [{CA0FC07B-E636-4A4E-8663-046F71034854}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{3305F1AB-D85F-427B-AF97-08BF4F1AEA40}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{E441B1EC-AF32-4A43-AB22-85B910BF6F24}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{8E5D2BAF-65B0-44D0-8F54-4C35840428F3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{36087549-1626-46EA-981E-CCAD684FE34C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
 

==================== Wiederherstellungspunkte =========================
 

28-07-2017 11:09:16 Geplanter Prüfpunkt

06-08-2017 19:22:46 Geplanter Prüfpunkt

13-08-2017 15:52:04 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (08/15/2017 01:14:25 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 18c0
 

Startzeit: 01d315b5e68cf280
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: dc42c48f-81a9-11e7-8365-5c514f28d736
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (08/14/2017 11:17:54 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ZeroConfigService.exe, Version: 16.5.0.0, Zeitstempel: 0x52179ea0

Name des fehlerhaften Moduls: MurocApi.dll, Version: 16.5.0.0, Zeitstempel: 0x52179d03

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000002bcd8

ID des fehlerhaften Prozesses: 0xe0c

Startzeit der fehlerhaften Anwendung: 0x01d315429d365647

Pfad der fehlerhaften Anwendung: C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

Pfad des fehlerhaften Moduls: C:\Program Files\Intel\WiFi\bin\MurocApi.dll

Berichtskennung: 090e28ff-8136-11e7-8362-eca86b578664

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (08/14/2017 05:02:36 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.9600.17415, Zeitstempel: 0x545046f0

Name des fehlerhaften Moduls: MpvDec_imx.ax, Version: 2.0.2.2, Zeitstempel: 0x4892c1ea

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00004474

ID des fehlerhaften Prozesses: 0x1e78

Startzeit der fehlerhaften Anwendung: 0x01d3150e51d92da1

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Windows Media Player\wmplayer.exe

Pfad des fehlerhaften Moduls: C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MpvDec_imx.ax

Berichtskennung: 9b2cd969-8101-11e7-8361-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (08/14/2017 09:06:00 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).
 

Error: (08/13/2017 01:57:03 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).
 

Error: (08/09/2017 04:09:28 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1f08
 

Startzeit: 01d310e87e89834f
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: 57fae5f2-7d0c-11e7-835f-5c514f28d736
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (08/07/2017 10:25:10 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).
 

Error: (08/06/2017 01:38:37 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0

Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000131745

ID des fehlerhaften Prozesses: 0x1408

Startzeit der fehlerhaften Anwendung: 0x01d30e43edcf1f08

Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe

Pfad des fehlerhaften Moduls: IWMSSvc.dll

Berichtskennung: 33516914-7a37-11e7-835d-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (08/05/2017 07:19:53 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: WLANExt.exe, Version: 6.3.9600.17415, Zeitstempel: 0x545041d0

Name des fehlerhaften Moduls: IWMSSvc.dll_unloaded, Version: 16.5.0.0, Zeitstempel: 0x52179d83

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00000000000d3491

ID des fehlerhaften Prozesses: 0xfec

Startzeit der fehlerhaften Anwendung: 0x01d30e0f0470031a

Pfad der fehlerhaften Anwendung: C:\Windows\system32\WLANExt.exe

Pfad des fehlerhaften Moduls: IWMSSvc.dll

Berichtskennung: 4ad90e5c-7a02-11e7-835d-5c514f28d736

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/31/2017 01:45:08 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80070005).
 
 

Systemfehler:

=============

Error: (08/15/2017 01:33:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (08/15/2017 01:33:04 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)

Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".
 

Error: (08/15/2017 11:25:40 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (08/15/2017 11:25:07 AM) (Source: BTHUSB) (EventID: 17) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (08/15/2017 11:25:05 AM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: NT-AUTORITÄT)

Description: Fehler "126" beim Laden der Kennwortbenachrichtigungs-DLL ""C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"". Stellen Sie sicher, dass der in der Registrierung definierte DLL-Pfad "HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages" sich auf einen korrekten und absoluten Pfad (<Laufwerk>:\<Pfad>\<Dateiname>.<Erw.>) bezieht und nicht auf einen relativen oder ungültigen Pfad. Wenn der DLL-Pfad falsch ist, stellen Sie sicher, dass sich alle Hilfsdateien im gleichen Verzeichnis befinden und dass das Systemkonto sowohl auf den DLL-Pfad als auch die Hilfsdateien Lesezugriff hat.  Wenden Sie sich an den Anbieter der Benachrichtigungs-DLL, um weitere Unterstützung zu erhalten. Weitere Informationen finden Sie im Internet unter "hxxp://go.microsoft.com/fwlink/?LinkId=245898".
 

Error: (08/15/2017 11:24:05 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)

Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
 

Modulpfad: C:\Windows\System32\IWMSSvc.dll
 

Error: (08/15/2017 11:24:05 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)

Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
 

Modulpfad: C:\Windows\System32\IWMSSvc.dll
 

Error: (08/15/2017 11:24:01 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)

Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
 

Modulpfad: C:\Windows\System32\IWMSSvc.dll
 

Error: (08/15/2017 11:23:57 AM) (Source: DCOM) (EventID: 10010) (User: KASRELLO)

Description: Der Server "{4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (08/15/2017 11:23:24 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Intel Security True Key" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz

Prozentuale Nutzung des RAM: 63%

Installierter physikalischer RAM: 4004.02 MB

Verfügbarer physikalischer RAM: 1444.97 MB

Summe virtueller Speicher: 8100.02 MB

Verfügbarer virtueller Speicher: 5027.5 MB
 

==================== Laufwerke ================================
 

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:63.79 GB) NTFS

Drive d: (Recover) (Fixed) (Total:60 GB) (Free:45.11 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 465.8 GB) (Disk ID: 3782765E)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

So, ich hoffe, jetzt passt alles und es ist alles richtig :headbang:

Grüße Kasrello

Hi,

Falsche ADW-Datei. Du hast mir folgende Datei gezeigt:
C:\AdwCleaner\AdwCleaner[S2].txt
In meiner Anleitung steht das ich diese Datei brauche:
C:\AdwCleaner\AdwCleaner[Cx].txt
S = Search; C = Clean
Ich brauche das Clean-Log, also das mit dem 'C' im Namen.

Zitat:

Ich habe erst die ADW, erzeugt und die dann gespeichert.

Speichern solltest du auch nichts manuell:

Code:

Am Ende des Suchlaufs öffnet sich automatisch eine Logdatei. Schließe diese.

 Klicke nun auf Löschen

Schritt 1:

Richtige ADW-Datei posten - wenn diese nicht vorhanden ist dann bitte ADW genau nach meiner Anleitung ausführen.

Schritt 2:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3:

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Richtige ADW Datei

Hallo Tician,

hier die ADW mit dem C, die habe ich nicht neu erzeugt, die war im Ordner vorhanden.

Sorry und Danke :crazy:

Code:

# AdwCleaner 7.0.1.0 - Logfile created on Tue Aug 15 09:23:45 2017

# Updated on 2017/05/08 by Malwarebytes 

# Running on Windows 8.1 (X64)

# Mode: clean

# Support: https://www.malwarebytes.com/support
 

***** [ Services ] *****
 

Deleted: APNMCP
 
 

***** [ Folders ] *****
 

Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\SearchProtect

Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SearchProtect

Deleted: C:\Windows\System32\config\systemprofile\AppData\Local\YSearchUtil

Deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil

Deleted: C:\Users\Marlies\AppData\Local\YSearchUtil

Deleted: C:\Program Files (x86)\Yahoo!\yset

Deleted: C:\ProgramData\AskPartnerNetwork

Deleted: C:\ProgramData\Application Data\AskPartnerNetwork

Deleted: C:\Program Files (x86)\AskPartnerNetwork

Deleted: C:\Users\All Users\AskPartnerNetwork

Deleted: C:\Users\Marlies\AppData\Local\AskPartnerNetwork

Deleted: C:\ProgramData\apn

Deleted: C:\ProgramData\Application Data\apn

Deleted: C:\Users\All Users\apn

Deleted: C:\Users\Marlies\AppData\Local\Temp\apn

Deleted: C:\Users\Marlies\AppData\Local\FileViewPro

Deleted: C:\Users\Marlies\AppData\Local\Temp\FileViewPro
 
 

***** [ Files ] *****
 

Deleted: C:\Users\All Users\Desktop\simplicheck.lnk

Deleted: C:\Users\Public\Desktop\simplicheck.lnk
 
 

***** [ DLL ] *****
 

No malicious DLLs cleaned.
 

***** [ WMI ] *****
 

No malicious WMI cleaned.
 

***** [ Shortcuts ] *****
 

No malicious shortcuts cleaned.
 

***** [ Tasks ] *****
 

No malicious tasks deleted.
 

***** [ Registry ] *****
 

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cloudfront.net

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\d31bfnnwekbny6.cloudfront.net

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\key-find.com

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.key-find.com

Deleted: [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\izito.de

Deleted: [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Internet Explorer\DOMStorage\www.izito.de

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! SearchSet

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C2300}

Deleted: [Key] - HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98FD652EB4839214E97B69DD8EEA1D29

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\930D9472A978D7A4EB16BF4DECB173B7

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\499E8534DA7E759419D2048CB780D3D5

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62255E52F19EC97429A42D59D49024FA

Deleted: [Key] - HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEB93799E8B47D14CA356E4343D632A4

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DCE3C04E576AD15F972B67D0725120C

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE7C2A75DF08824E9CEFDE20F655BD9

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15

Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|ApnTBMon

Deleted: [Value] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ApnTBMon

Deleted: [Key] - HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.apn.native_messaging_host_aaaaaiabcopkplhgaedhbloeejhhankf

Deleted: [Key] - HKU\.DEFAULT\Software\AskPartnerNetwork

Deleted: [Key] - HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\AskPartnerNetwork

Deleted: [Key] - HKU\S-1-5-18\Software\AskPartnerNetwork

Deleted: [Key] - HKCU\Software\AskPartnerNetwork

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com

Deleted: [Key] - HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
 
 

***** [ Firefox (and derivatives) ] *****
 

No malicious Firefox entries deleted.
 

***** [ Chromium (and derivatives) ] *****
 

No malicious Chromium entries deleted.
 

*************************
 

::Tracing keys deleted

::Winsock settings cleared

::Prefetch files deleted

::Proxy settings cleared

::IE policies deleted

::Chrome policies deleted

::Additional Actions: 0
 
 
 

*************************
 

C:/AdwCleaner/AdwCleaner[S0].txt - [6178 B] - [2015/3/6 19:56:16]

C:/AdwCleaner/AdwCleaner[S1].txt - [8737 B] - [2017/8/12 17:31:39]

C:/AdwCleaner/AdwCleaner[S2].txt - [8805 B] - [2017/8/15 9:21:23]
 
 

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

Der Rest kommt gleich...

So nach stundenlangem Scannen jetzt hier die TXT von Eset

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bff9c445086b8741b657ebd92ba0e50f

# end=init

# utc_time=2017-08-16 10:57:46

# local_time=2017-08-16 12:57:46 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

Update Finalize

Updated modules version: 34416

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=bff9c445086b8741b657ebd92ba0e50f

# end=updated

# utc_time=2017-08-16 11:01:12

# local_time=2017-08-16 01:01:12 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# osver=6.2.9200 NT 

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=bff9c445086b8741b657ebd92ba0e50f

# engine=34416

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2017-08-16 05:50:55

# local_time=2017-08-16 07:50:55 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1='Avira Antivirus'

# compatibility_mode=1815 16777213 100 97 30125 54965001 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 66 85 10877949 18669578 0 0

# scanned=505023

# found=22

# cleaned=0

# scan_time=24582

sh=99F97AD369E8621AB4D17DF53E80E60FEE99C727 ft=1 fh=42567613b862d846 vn="Variante von Win32/DownloadSponsor.A eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Marlies\AppData\Local\Temp\OCS\ocs_v71b.exe.vir"

sh=3B88EE420C4250B675AB3CF9CB14D5F4A681D948 ft=1 fh=36d6aab19b2c07d2 vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\FreeYouTubeDownload.exe"

sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-232759-258.dll"

sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-232759-693.dll"

sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-232759-895.dll"

sh=685D65CCD52FD9D90C402CF9026344267E8B6FD9 ft=1 fh=532da5564656d18c vn="Variante von Win32/Toolbar.Conduit.AQ eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Downloads\downloads\backups\backup-20110713-233452-614.dll"

sh=7F0938E5C44E7504116FD8A35F0EC7CC4429C8BE ft=1 fh=f3301f0f711aeedf vn="Variante von Win32/Toolbar.Conduit.AR eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\empc_setup.exe"

sh=B5DB65CD47FB167862703F3F2DB6D72A45466BB8 ft=1 fh=398a74cd707f8124 vn="Win32/Toolbar.Conduit.A eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe"

sh=3936E1DDEA2681088E10A5DAB9D3CF636E5840A5 ft=1 fh=7dd12d17e3bd656c vn="Win32/SoftonicDownloader.E eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe"

sh=D102D0E880558D12D81BB9A0C6EF480A3ACF8BFA ft=1 fh=9f3140d695f7767e vn="Variante von Win32/SoftonicDownloader.E eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe"

sh=F33547BA76907DB507361DDFEB25F630BAD5E5B5 ft=1 fh=3c223d0a79cb83c8 vn="Win32/SoftonicDownloader.E eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe"

sh=6BE8CCAE9FB81F1235E2F9DBBB70869CC7176300 ft=0 fh=0000000000000000 vn="JS/Lightning.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Microsoft\Windows\INetCache\Virtualized\C\Users\Marlies\Application Data\SupTab\indexJS"

sh=B415FBAC6D3D8F6352FBE1D7445814E9E5CE773F ft=1 fh=5ab72e8b385a4803 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\DMR\dmr_72.exe"

sh=4101270357B096EF454463D13581E3D123C60560 ft=1 fh=2a17fddd6cb742ea vn="Variante von Win32/InstallCore.ACL eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\is1128754588\48B678D2_stp\RAM.dll"

sh=4101270357B096EF454463D13581E3D123C60560 ft=1 fh=2a17fddd6cb742ea vn="Variante von Win32/InstallCore.ACL eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\is357113909\126218940_stp\RAM.dll"

sh=EA722D3D25469D7783DEDC1BACFBC6113D2CCD4F ft=1 fh=6cb4c11799500962 vn="Variante von Win32/InstallCore.ACL eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\AppData\Local\Temp\is357113909\126218972_stp\icc.dll"

sh=9D1697A3CD5680D6EC9D7F19A3012AC91B5FAB9B ft=1 fh=6f208321397883f7 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe"

sh=50138F55E2755C7AADEA769599ED42B0120D7AC3 ft=1 fh=29264819b400f6f5 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe"

sh=EA669DA72502D621B03073F7EA8FBA285837477D ft=1 fh=287d5363c13a3561 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe"

sh=008D05AC0F697B9DF3CA1B0BA9F5BD2CD1FCF734 ft=1 fh=1c1750ab11770f12 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe"

sh=6F64813302C457638A4DF88744E54DC6D441658A ft=1 fh=d8a112ff280394a0 vn="Win32/Solvusoft.A eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe"

sh=9ACBB6208ADF4A654351F2226C16AAF8FE4E2140 ft=1 fh=950d781e481e065c vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe"

Hier die neue FRST.txt

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-08-2017

durchgeführt von Marlies (Administrator) auf KASRELLO (16-08-2017 20:15:36)

Gestartet von C:\Users\Marlies\Desktop

Geladene Profile: Marlies &  (Verfügbare Profile: Marlies & Marlies_2)

Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(CrossLoop) C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe

(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe

() C:\Program Files (x86)\FWdriver_v\POSHXMain.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe

(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe

(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

() C:\Program Files (x86)\FWdriver_v\POSHX.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Sony Ericsson Mobile Communications AB) C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe

() C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe

() C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe

(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(CANON INC.) C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(Telegram Messenger LLP) C:\Users\Marlies\AppData\Roaming\Telegram Desktop\Telegram.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office\WINWORD.EXE

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13648600 2013-08-29] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)

HKLM\...\Run: [POSHX] => C:\Program Files (x86)\FWdriver_v\POSHX.exe [647168 2013-09-03] ()

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2774256 2013-08-01] (Synaptics Incorporated)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)

HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)

HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)

HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2013-09-10] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-11] (CyberLink Corp.)

HKLM-x32\...\Run: [YouCam Service] => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [267224 2013-08-01] (CyberLink Corp.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-08-05] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [97512 2017-06-13] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)

HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Video Converter Ultimate\DelayPluginI.exe [1960248 2015-10-26] ()

HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1612920 2011-08-04] (CANON INC.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2011-01-15] (CANON INC.)

HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [937984 2015-10-01] (AVM Berlin)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Sony Ericsson PC Companion] => C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [772096 2009-06-18] (Sony Ericsson Mobile Communications AB)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29544576 2016-08-17] (Skype Technologies S.A.)

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe [4535192 2016-03-15] ()

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {497c22ea-3e37-11e4-82a5-5c514f28d736} - "F:\Startme.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {8065d9a5-3ac9-11e4-82a4-5c514f28d736} - "F:\iLinker.exe" 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\MountPoints2: {b6fe1c45-f46e-11e6-8336-5c514f28d736} - "F:\pushinst.exe" 

Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageBrowser EX Agent.lnk [2014-12-21]

ShortcutTarget: ImageBrowser EX Agent.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MBCameraMonitor.lnk [2014-12-22]

ShortcutTarget: MBCameraMonitor.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe (PIXELA CORPORATION)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-27]

ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2014-05-15]

ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\simplicheck.lnk [2017-05-03]

ShortcutTarget: simplicheck.lnk -> C:\Program Files (x86)\simplitec\simplicheck\simplicheck.exe (simplitec)

Startup: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2016-12-26]

ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 80.69.96.12 81.210.129.4

Tcpip\..\Interfaces\{471AEB88-C6B2-4C00-9669-3CC3EE935AD6}: [DhcpNameServer] 192.168.192.1

Tcpip\..\Interfaces\{C54B9ABE-D820-4EAF-86DC-7FF0424B0FD3}: [DhcpNameServer] 80.69.96.12 81.210.129.4

Tcpip\..\Interfaces\{D8F505BE-40F8-41DB-87A6-F6B74D4C7B56}: [DhcpNameServer] 80.69.96.12 81.210.129.4
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rp-online.de/

HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo13.msn.com/?pc=LCJB

HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133428919 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429106 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

SearchScopes: HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341 -> {3AB6D324-E6BD-4DC3-9ECB-B4FABD890450} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)

BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)

BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

BHO-x32: Wondershare Video Converter Ultimate 7.1.0 -> {451C804F-C205-4F03-B48E-537EC94937BF} -> C:\ProgramData\Wondershare\Video Converter Ultimate\WSBrowserAppMgr.dll [2015-10-26] (Wondershare)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-13] (Oracle Corporation)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-13] (Oracle Corporation)

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-28] (Google Inc.)

Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie64.dll [2017-06-26] (Intel Security)

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-06-26] (Intel Security)

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)

Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei

Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Keine Datei

Handler: WSWSVCUchrome - {1CA93FF0-A218-44F1 -  Keine Datei
 

FireFox:

========

FF DefaultProfile: vy7huq4o.default

FF ProfilePath: C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default [2017-08-16]

FF Extension: (Avira Browser Safety) - C:\Users\Marlies\AppData\Roaming\Mozilla\Firefox\Profiles\vy7huq4o.default\Extensions\abs@avira.com.xpi [2017-08-10]

FF HKLM-x32\...\Firefox\Extensions: [WSVCU@Wondershare.com] - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com

FF Extension: (Wondershare Video Converter Ultimate) - C:\ProgramData\Wondershare\Video Converter Ultimate\WSVCU@Wondershare.com [2015-11-15] [ist nicht signiert]

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-30] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-30] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-08] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-08] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-13] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-13] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)

FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp

CHR StartupUrls: Default -> "hxxp://www.rp-online.de/"

CHR Profile: C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default [2017-08-16]

CHR Extension: (Google Docs) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]

CHR Extension: (Google Drive) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]

CHR Extension: (YouTube) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]

CHR Extension: (Google-Suche) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]

CHR Extension: (Adobe Acrobat) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-06-05]

CHR Extension: (Google Docs Offline) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]

CHR Extension: (Google Mail) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]

CHR Extension: (Chrome Media Router) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-10]

CHR Extension: (Mein BMI - Shopping Angebote) - C:\Users\Marlies\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppohoeonaecgahebikkipfeoojbccoan [2017-04-09]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2016-12-26] (Adobe Systems) [Datei ist nicht signiert]

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-08-05] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-08-05] (Avira Operations GmbH & Co. KG)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [377976 2017-06-13] (Avira Operations GmbH & Co. KG)

R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [102304 2017-08-08] (Avira Operations GmbH & Co. KG)

S4 AvmSwitchUsb; C:\Program Files (x86)\avmwlanstick\AVMSwitchUsb.exe [125440 2015-10-01] () [Datei ist nicht signiert]

R2 CrossLoopService; C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopService.exe [569072 2012-01-06] (CrossLoop)

R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [74712 2013-03-11] (CyberLink)

R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [316376 2013-03-11] (CyberLink)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()

R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Datei ist nicht signiert]

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-08-08] (Intel Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-08-29] (Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-08] (Intel Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)

S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [404376 2017-06-30] (McAfee, Inc.)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2013-08-23] ()

S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)

R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)

S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)

R2 POSHXService; C:\Program Files (x86)\FWdriver_v\POSHXMain.exe [114688 2012-12-26] () [Datei ist nicht signiert]

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)

R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [1001920 2017-06-26] (McAfee, Inc.)

R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16928 2017-06-26] (McAfee, Inc.)

S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [87760 2017-06-26] (McAfee, Inc.)

S3 tvnserver; C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe [814080 2010-07-21] (GlavSoft LLC.) [Datei ist nicht signiert]

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3667696 2013-08-23] (Intel® Corporation)

S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AirplaneModeHID; C:\Windows\System32\drivers\AirplaneModeHID.sys [30512 2013-09-04] (Elitegroup Computer System)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-19] (Avira Operations GmbH & Co. KG)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [173784 2017-08-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-08-05] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-03] (Avira Operations GmbH & Co. KG)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2015-10-01] (AVM Berlin)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-03] (Avira Operations GmbH & Co. KG)

R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [132920 2013-04-23] (Motorola Solutions, Inc.)

R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1386296 2013-08-19] (Motorola Solutions, Inc.)

R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)

R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-06-27] ()

R3 fwlanusb6_860; C:\Windows\system32\DRIVERS\fwlanusb6_860.sys [2234912 2015-10-01] (AVM GmbH)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [117192 2013-08-29] (Intel Corporation)

R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-08-15] (Malwarebytes)

R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-15] (Malwarebytes)

R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-08-15] (Malwarebytes)

R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253856 2017-08-15] (Malwarebytes)

R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-08-16] (Malwarebytes)

R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)

R3 NETwNb64; C:\Windows\system32\DRIVERS\NETwbw02.sys [3589600 2013-09-25] (Intel Corporation)

S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)

S3 s1018bus; C:\Windows\System32\drivers\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)

S3 s1018mdfl; C:\Windows\system32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)

S3 s1018mdm; C:\Windows\system32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)

S3 s1018mgmt; C:\Windows\system32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)

S3 s1018nd5; C:\Windows\system32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)

S3 s1018obex; C:\Windows\system32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)

S3 s1018unic; C:\Windows\System32\drivers\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)

R3 SensorsAlsDriver; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)

S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [30448 2013-08-01] (Synaptics Incorporated)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-01] (Synaptics Incorporated)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

R3 WsAudio_Device; C:\Windows\system32\drivers\VirtualAudio.sys [31080 2015-02-27] (Wondershare)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-08-16 20:15 - 2017-08-16 20:15 - 000000000 ____D C:\Users\Marlies\Desktop\FRST-OlderVersion

2017-08-16 13:13 - 2017-08-15 12:31 - 000008252 _____ C:\Users\Marlies\Desktop\AdwCleaner[C0].txt

2017-08-16 12:50 - 2017-08-16 12:50 - 002870984 _____ (ESET) C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe

2017-08-15 14:37 - 2017-08-15 14:37 - 000000000 ____D C:\Users\Marlies\AppData\Local\TeamViewer

2017-08-15 14:35 - 2017-08-16 20:17 - 000035316 _____ C:\Users\Marlies\Desktop\FRST.txt

2017-08-15 14:33 - 2017-08-16 20:15 - 002395648 _____ (Farbar) C:\Users\Marlies\Desktop\FRST64.exe

2017-08-15 14:33 - 2017-08-15 14:49 - 000047346 _____ C:\Users\Marlies\Desktop\Addition2.txt

2017-08-15 14:33 - 2017-08-15 14:47 - 000058104 _____ C:\Users\Marlies\Desktop\FRST2.txt

2017-08-15 14:33 - 2017-08-15 13:37 - 000100013 _____ C:\Users\Marlies\Desktop\mbam1.txt

2017-08-15 14:33 - 2017-08-13 14:53 - 000040849 _____ C:\Users\Marlies\Desktop\FRST 1.txt

2017-08-15 14:33 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Desktop\adwcleaner_7.0.1.0 (1).exe

2017-08-15 14:32 - 2017-08-13 15:05 - 000045346 _____ C:\Users\Marlies\Desktop\Addition1.txt

2017-08-15 14:20 - 2016-08-05 00:20 - 000001150 _____ C:\Users\Marlies\Desktop\OpenOffice (2) - Kopie.lnk

2017-08-15 14:20 - 2016-06-26 15:44 - 000000852 _____ C:\Users\Marlies\Desktop\MediaCoder x64 - Kopie.lnk

2017-08-15 14:20 - 2015-09-26 23:49 - 000001149 _____ C:\Users\Marlies\Desktop\OLYMPUS Viewer 3 - Kopie.lnk

2017-08-15 14:20 - 2015-09-26 23:49 - 000001129 _____ C:\Users\Marlies\Desktop\OLYMPUS Digital Kamera Updater - Kopie.lnk

2017-08-15 14:20 - 2012-08-11 07:23 - 000001275 _____ C:\Users\Marlies\Desktop\Medion Services - Kopie.lnk

2017-08-15 14:14 - 2017-08-15 14:31 - 000000000 ____D C:\Users\Marlies\Desktop\gesammeltes Desktop

2017-08-15 13:37 - 2017-08-15 13:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices

2017-08-15 12:42 - 2017-08-16 19:55 - 000093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys

2017-08-15 12:42 - 2017-08-15 13:35 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys

2017-08-15 12:42 - 2017-08-15 13:35 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2017-08-15 12:42 - 2017-08-15 13:34 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2017-08-15 12:42 - 2017-08-15 12:47 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys

2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\ProgramData\Malwarebytes

2017-08-15 12:42 - 2017-08-15 12:42 - 000000000 ____D C:\Program Files\Malwarebytes

2017-08-15 12:42 - 2017-06-27 12:06 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys

2017-08-15 12:37 - 2017-08-15 12:38 - 065033984 _____ (Malwarebytes ) C:\Users\Marlies\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe

2017-08-15 11:05 - 2017-08-15 14:34 - 000000000 ____D C:\Users\Marlies\Desktop\Trojaner

2017-08-15 06:22 - 2017-08-15 06:23 - 000538120 _____ C:\Windows\Minidump\081517-23156-01.dmp

2017-08-14 23:23 - 2017-08-13 17:32 - 000001059 _____ C:\Users\Marlies\Desktop\TeamViewer 12.lnk

2017-08-14 23:21 - 2017-08-14 23:21 - 000001272 _____ C:\Users\Marlies\Downloads\TeamViewer_Setup (1) - Verknüpfung.lnk

2017-08-13 17:26 - 2017-08-16 12:28 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2017-08-13 17:26 - 2017-08-13 17:32 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk

2017-08-13 17:26 - 2017-08-13 17:32 - 000001047 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk

2017-08-13 15:46 - 2017-08-13 15:46 - 015747576 _____ (TeamViewer GmbH) C:\Users\Marlies\Downloads\TeamViewer_Setup (1).exe

2017-08-13 14:54 - 2017-08-13 14:54 - 000041303 _____ C:\Users\Marlies\Downloads\FRST3.txt

2017-08-13 14:17 - 2017-08-15 14:39 - 000047343 _____ C:\Users\Marlies\Desktop\Addition.txt

2017-08-12 21:01 - 2017-08-13 14:08 - 000045494 _____ C:\Users\Marlies\Downloads\Addition.txt

2017-08-12 20:59 - 2017-08-13 14:08 - 000041303 _____ C:\Users\Marlies\Downloads\FRST.txt

2017-08-12 20:58 - 2017-08-16 20:15 - 000000000 ____D C:\FRST

2017-08-12 20:57 - 2017-08-12 20:57 - 002395648 _____ (Farbar) C:\Users\Marlies\Downloads\FRST64.exe

2017-08-12 19:28 - 2017-08-12 19:28 - 008185288 _____ (Malwarebytes) C:\Users\Marlies\Downloads\adwcleaner_7.0.1.0 (1).exe

2017-08-12 19:11 - 2017-08-12 19:11 - 001529352 _____ C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe

2017-08-09 16:38 - 2017-08-02 05:17 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2017-08-09 16:38 - 2017-07-21 15:40 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll

2017-08-09 16:38 - 2017-07-21 15:40 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll

2017-08-09 16:38 - 2017-07-15 12:10 - 000536688 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2017-08-09 16:38 - 2017-07-15 12:10 - 000140016 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe

2017-08-09 16:38 - 2017-07-15 12:06 - 000449840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll

2017-08-09 16:38 - 2017-07-15 12:06 - 000136832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe

2017-08-09 16:38 - 2017-07-14 22:08 - 000037888 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll

2017-08-09 16:38 - 2017-07-14 20:44 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll

2017-08-09 16:38 - 2017-07-14 08:49 - 025733632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2017-08-09 16:38 - 2017-07-14 08:19 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2017-08-09 16:38 - 2017-07-14 07:35 - 005981184 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2017-08-09 16:38 - 2017-07-14 06:40 - 015254016 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2017-08-09 16:38 - 2017-07-14 04:54 - 020270080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2017-08-09 16:38 - 2017-07-14 04:17 - 004546048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2017-08-09 16:38 - 2017-07-08 22:14 - 000376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys

2017-08-09 16:38 - 2017-07-08 21:12 - 004169728 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2017-08-09 16:38 - 2017-07-08 19:45 - 007078912 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll

2017-08-09 16:38 - 2017-07-08 19:05 - 003631616 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2017-08-09 16:38 - 2017-07-08 18:39 - 005274624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll

2017-08-09 16:38 - 2017-07-08 18:37 - 007797248 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll

2017-08-09 16:38 - 2017-07-08 18:23 - 002749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2017-08-09 16:38 - 2017-07-08 17:59 - 005270016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll

2017-08-09 16:38 - 2017-07-08 05:46 - 000377688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys

2017-08-09 16:38 - 2017-07-08 05:16 - 007440728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2017-08-09 16:38 - 2017-07-08 05:16 - 001674520 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2017-08-09 16:38 - 2017-07-08 05:16 - 001534072 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2017-08-09 16:38 - 2017-07-08 05:16 - 001499920 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2017-08-09 16:38 - 2017-07-08 05:16 - 001370328 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2017-08-09 16:38 - 2017-07-08 05:16 - 000086360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys

2017-08-09 16:38 - 2017-07-01 15:47 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll

2017-08-09 16:38 - 2017-07-01 15:47 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll

2017-08-09 16:38 - 2017-06-24 18:46 - 000424448 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll

2017-08-09 16:38 - 2017-06-24 18:16 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mprapi.dll

2017-08-09 16:38 - 2017-06-13 19:51 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2017-08-09 16:38 - 2017-06-13 19:23 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2017-08-09 16:38 - 2017-06-13 19:19 - 000383488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll

2017-08-09 16:38 - 2017-06-13 19:16 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wfdprov.dll

2017-08-09 16:38 - 2017-06-13 19:11 - 000238080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll

2017-08-09 16:38 - 2017-06-13 19:07 - 000304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll

2017-08-09 16:38 - 2017-06-13 16:17 - 000656384 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2017-08-09 16:38 - 2017-06-13 16:16 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2017-08-09 16:38 - 2017-06-13 11:47 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2017-08-09 16:38 - 2017-06-13 11:09 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2017-08-09 16:38 - 2017-06-13 10:22 - 001436160 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2017-08-09 16:38 - 2017-06-13 10:16 - 000445952 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll

2017-08-09 16:38 - 2017-06-13 10:10 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\wfdprov.dll

2017-08-09 16:38 - 2017-06-13 10:07 - 000301568 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll

2017-08-09 16:38 - 2017-06-13 10:03 - 000302080 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll

2017-08-09 16:38 - 2017-06-13 09:54 - 000374272 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll

2017-08-09 16:38 - 2017-06-13 09:50 - 001547264 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll

2017-08-09 16:38 - 2017-06-12 02:14 - 000276320 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2017-08-09 16:38 - 2017-06-11 22:13 - 000301056 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll

2017-08-09 16:38 - 2017-06-11 22:11 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll

2017-08-09 16:38 - 2017-06-11 22:02 - 002778112 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2017-08-09 16:38 - 2017-06-11 22:02 - 000299520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll

2017-08-09 16:38 - 2017-06-11 21:52 - 002463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2017-08-09 16:38 - 2017-06-08 19:01 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2017-08-09 16:38 - 2017-06-08 19:01 - 001502000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2017-08-09 16:38 - 2017-06-08 03:48 - 002457936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2017-08-09 16:38 - 2017-06-07 06:25 - 000428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2017-08-09 16:38 - 2017-06-06 20:38 - 000607232 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll

2017-08-09 16:38 - 2017-06-06 19:44 - 000530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll

2017-08-09 16:38 - 2017-05-27 18:42 - 001115136 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2017-08-09 16:37 - 2017-07-14 08:44 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2017-08-09 16:37 - 2017-07-14 07:26 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2017-08-09 16:37 - 2017-07-14 07:10 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2017-08-09 16:37 - 2017-07-14 06:23 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2017-08-09 16:37 - 2017-07-14 06:07 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2017-08-09 16:37 - 2017-07-14 05:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2017-08-09 16:37 - 2017-07-14 04:48 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2017-08-09 16:37 - 2017-07-14 04:38 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2017-08-09 16:37 - 2017-07-14 04:17 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2017-08-09 16:37 - 2017-07-14 04:12 - 000693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2017-08-09 16:37 - 2017-07-14 04:09 - 013663744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2017-08-09 16:37 - 2017-07-14 03:53 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2017-08-09 16:37 - 2017-07-14 03:50 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2017-08-09 16:37 - 2017-07-14 03:48 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2017-08-09 16:37 - 2017-06-15 16:17 - 002551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2017-08-09 16:37 - 2017-06-15 16:16 - 001920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2017-08-09 16:37 - 2017-06-09 15:47 - 000448629 _____ C:\Windows\system32\ApnDatabase.xml

2017-08-09 16:37 - 2017-05-27 18:38 - 000056832 _____ (Microsoft Corporation) C:\Windows\system32\rdsdwmdr.dll

2017-08-09 16:24 - 2017-08-09 16:24 - 003376660 _____ C:\Users\Marlies\Downloads\SpeisekartePlatonWeb.pdf

2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2017-07-27 23:00 - 2017-07-27 23:00 - 000000000 ____D C:\ProgramData\McAfee Security Scan

2017-07-26 10:51 - 2017-07-26 10:51 - 000021308 _____ C:\Users\Marlies\Downloads\..._26-07-2017_1051.pdf

2017-07-21 11:11 - 2017-07-21 11:11 - 000143952 _____ C:\Users\Marlies\Downloads\1500628271864.pdf

2017-07-21 11:05 - 2017-07-21 11:05 - 000117974 _____ C:\Users\Marlies\Downloads\...-2017-07-10.pdf

2017-07-20 23:45 - 2017-07-20 23:45 - 000000992 _____ C:\Users\Marlies\Downloads\...(kasrello) - Verknüpfung.lnk

2017-07-18 19:06 - 2017-07-18 19:06 - 000003176 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-708953619-3332147771-3993505364-1001
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-08-16 20:08 - 2014-05-20 17:06 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\ClassicShell

2017-08-16 16:09 - 2014-05-15 15:48 - 000003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{D79CCDCC-5C13-412F-9EFD-1CDF8B9C287B}

2017-08-16 15:36 - 2017-02-16 19:30 - 000000000 ____D C:\Users\Marlies\AppData\LocalLow\Mozilla

2017-08-16 15:33 - 2017-02-11 18:16 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2017-08-16 15:33 - 2016-03-02 21:07 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2017-08-16 14:53 - 2014-06-04 17:29 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Skype

2017-08-16 14:09 - 2014-06-02 09:25 - 003885568 ___SH C:\Users\Marlies\Desktop\Thumbs.db

2017-08-16 13:35 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2017-08-16 13:35 - 2014-06-01 22:26 - 000000000 ____D C:\ProgramData\Avira

2017-08-16 13:35 - 2014-06-01 22:26 - 000000000 ____D C:\Program Files (x86)\Avira

2017-08-16 13:13 - 2014-05-15 15:43 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-708953619-3332147771-3993505364-1001

2017-08-16 11:11 - 2015-04-21 09:19 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\Telegram Desktop

2017-08-16 10:31 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache

2017-08-16 09:32 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness

2017-08-16 09:27 - 2014-05-15 15:39 - 000000000 ___DO C:\Users\Marlies\SkyDrive

2017-08-16 09:26 - 2014-05-15 15:39 - 000000000 ____D C:\Users\Marlies\Documents\Youcam

2017-08-15 14:40 - 2015-06-01 11:15 - 000000000 ____D C:\Users\Marlies\AppData\Roaming\TeamViewer

2017-08-15 13:33 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2017-08-15 11:24 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI

2017-08-15 11:23 - 2015-09-13 16:46 - 000000000 ____D C:\Program Files (x86)\Yahoo!

2017-08-15 11:21 - 2015-03-06 21:02 - 000000000 ____D C:\AdwCleaner

2017-08-15 06:22 - 2017-05-20 01:28 - 541711296 _____ C:\Windows\MEMORY.DMP

2017-08-15 06:22 - 2017-05-20 01:28 - 000000000 ____D C:\Windows\Minidump

2017-08-14 23:24 - 2014-05-15 15:38 - 000000000 ____D C:\Users\Marlies

2017-08-14 23:20 - 2014-11-03 18:12 - 000883712 ___SH C:\Users\Marlies\Downloads\Thumbs.db

2017-08-14 23:15 - 2013-08-22 16:44 - 000398144 _____ C:\Windows\system32\FNTCACHE.DAT

2017-08-14 17:02 - 2014-06-17 18:46 - 000119808 _____ C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2017-08-13 17:21 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf

2017-08-13 16:35 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp

2017-08-13 15:58 - 2014-05-20 17:27 - 000000000 ____D C:\Windows\system32\MRT

2017-08-13 15:57 - 2014-05-20 19:18 - 000000000 ____D C:\Users\Marlies_2

2017-08-13 15:54 - 2014-05-20 17:27 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2017-08-11 16:34 - 2017-06-01 14:20 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2017-08-10 17:03 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps

2017-08-09 17:32 - 2014-05-21 20:42 - 000000000 ____D C:\ProgramData\CanonIJPLM

2017-08-08 15:30 - 2017-05-10 20:23 - 000002211 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-08-08 15:30 - 2017-05-10 20:23 - 000002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2017-08-08 15:00 - 2014-12-30 11:19 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2017-08-05 15:30 - 2014-06-01 22:26 - 000173784 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2017-08-05 15:30 - 2014-06-01 22:26 - 000167464 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2017-08-02 00:03 - 2015-06-21 15:34 - 000000000 ____D C:\Users\Marlies\AppData\Local\.elfohilfe

2017-07-30 14:46 - 2015-05-04 09:57 - 000000000 ____D C:\Users\Marlies\Downloads\Telegram Desktop

2017-07-29 02:03 - 2013-08-22 17:38 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2017-07-29 02:03 - 2013-08-22 17:38 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2017-07-27 23:00 - 2016-05-10 23:23 - 000000000 ____D C:\Program Files\McAfee Security Scan

2017-07-27 23:00 - 2016-04-30 19:15 - 000001984 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk

2017-07-25 08:50 - 2013-09-05 21:28 - 000767518 _____ C:\Windows\system32\perfh007.dat

2017-07-25 08:50 - 2013-09-05 21:28 - 000160240 _____ C:\Windows\system32\perfc007.dat

2017-07-25 08:50 - 2013-09-05 21:13 - 001783084 _____ C:\Windows\system32\PerfStringBackup.INI

2017-07-21 15:33 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF

2017-07-19 18:16 - 2013-09-07 12:35 - 000000000 ____D C:\ProgramData\Package Cache

2017-07-19 17:57 - 2014-12-11 00:09 - 000000000 ____D C:\Windows\system32\appraiser

2017-07-19 17:56 - 2016-04-30 19:15 - 000000000 ____D C:\Program Files\TrueKey

2017-07-18 19:06 - 2016-04-18 22:43 - 000002366 _____ C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk

2017-07-18 19:06 - 2014-05-20 19:09 - 000003184 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-708953619-3332147771-3993505364-1001
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-12-21 13:17 - 2016-12-21 13:17 - 007680000 _____ () C:\Program Files (x86)\GUTE6BF.tmp

2014-06-17 18:46 - 2017-08-14 17:02 - 000119808 _____ () C:\Users\Marlies\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2013-09-07 12:29 - 2013-09-07 12:29 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

2013-09-12 05:59 - 2013-09-12 05:59 - 000000032 _____ () C:\ProgramData\Temp.log
 

Einige Dateien in TEMP:

====================

2016-11-15 16:20 - 2016-11-15 16:20 - 011127352 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\0BB5CC15-AA68-4718-93A1-822DCC2015E9.exe

2014-06-01 22:26 - 2014-08-07 16:50 - 000000000 ____D () C:\Users\Marlies\AppData\Local\Temp\avgnt.exe

2016-11-28 23:54 - 2016-11-28 23:54 - 012545632 _____ (Albelli                                                     ) C:\Users\Marlies\AppData\Local\Temp\F177397B-C751-4B7D-BE67-6A8FD23C9C48.exe

2016-08-04 23:38 - 2011-02-07 11:09 - 000850320 ____N (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\MSETUP4.EXE

2016-08-04 23:41 - 2011-03-23 06:48 - 000349592 ____R (CANON INC.) C:\Users\Marlies\AppData\Local\Temp\uninstall.exe

2017-04-08 22:12 - 2017-04-08 22:12 - 013705448 _____ (Nero AG                                                     ) C:\Users\Marlies\AppData\Local\Temp\Update_Simplitec_PowerSuite_Auto.exe
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-08-13 16:30
 

==================== Ende von FRST.txt ============================

Hier die neue Addition.txt

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-08-2017

durchgeführt von Marlies (16-08-2017 20:18:48)

Gestartet von C:\Users\Marlies\Desktop

Windows 8.1 (Update) (X64) (2014-05-15 13:38:24)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-708953619-3332147771-3993505364-500 - Administrator - Disabled)

Gast (S-1-5-21-708953619-3332147771-3993505364-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-708953619-3332147771-3993505364-1003 - Limited - Enabled)

Marlies (S-1-5-21-708953619-3332147771-3993505364-1001 - Administrator - Enabled) => C:\Users\Marlies

Marlies_2 (S-1-5-21-708953619-3332147771-3993505364-1004 - Limited - Enabled) => C:\Users\Marlies_2
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}

AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}

AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20095 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)

Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)

Albelli Fotobücher (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{EE20E438-B675-4421-AB07-928F0EC9FB22}_is1) (Version: 11.1.1.1680 - Albelli)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.29.32 - Avira Operations GmbH & Co. KG)

Avira Connect (HKLM-x32\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden

Avira Connect (HKLM-x32\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG)

Avira Software Updater (HKLM-x32\...\{7A2E39A1-265C-4BF8-BE49-DE3248B9792A}) (Version: 2.0.3.40092 - Avira Operations GmbH & Co. KG)

AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 06.20.07 - AVM Berlin)

calibre (HKLM-x32\...\{D47B7229-AC24-4D79-96AB-880649FFC892}) (Version: 2.19.0 - Kovid Goyal)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )

Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )

Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - Canon Inc.)

Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )

Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version:  - )

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon MP490 series Benutzerregistrierung (HKLM-x32\...\Canon MP490 series Benutzerregistrierung) (Version:  - )

Canon MP490 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP490_series) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

Canon Utilities Digital Photo Professional 3.11 (HKLM-x32\...\Digital Photo Professional) (Version: 3.11.10.0 - Canon Inc.)

Canon Utilities EOS Utility (HKLM-x32\...\EOS Utility) (Version: 2.11.0.1 - Canon Inc.)

Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.5.0.6 - Canon Inc.)

Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)

Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.10.0.0 - Canon Inc.)

Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )

Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)

CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.)

CyberLink PowerDirector 11 (HKLM\...\{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.3215 - Ihr Firmenname) Hidden

CyberLink PowerRecover (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.) Hidden

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.0913 - CyberLink Corp.)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

Digital Photo Navigator 1.5 (HKLM-x32\...\{CF9CD37C-E29A-11D5-AE3D-005004B8E30C}) (Version:  - )

Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)

DriverTools 1.0 (HKLM-x32\...\DriverTools) (Version: 1.0 - Huawei Technologies Co.,Ltd)

ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 18.1.22140 - Landesfinanzdirektion Thüringen)

Everio MediaBrowser (HKLM-x32\...\{5CA03ECF-B4A6-464B-9F5D-64D8B61B083F}) (Version: 1.00.013 - PIXELA)

Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software)

FlexPoints 2.0 (HKLM-x32\...\{F460E5B9-E678-484B-A2E8-BFDF93A57A03}) (Version: 1.00.0000 - Weight Watchers)

Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Fotogalerija (HKLM-x32\...\{BE2DE42A-6696-4EE7-9E59-B9385F339DD3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Fotótár (HKLM-x32\...\{8D977EAA-DF3E-4054-A98D-F27AEB0248DD}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)

Galerie de photos (HKLM-x32\...\{F4D99A13-F63A-4FC1-8799-CFFDB78DDFB3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.90 - Google Inc.)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)

Intel Security True Key (HKLM\...\TrueKey) (Version: 4.19.108.1 - Intel Security)

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3282 - Intel Corporation)

Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{252CC716-1EDE-4C7F-8881-15B7AEBF8F5C}) (Version: 16.5.0.0096 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 3.0.1335.5) (HKLM\...\{302600C1-6BDF-4FD1-1307-148929CC1385}) (Version: 3.1.1307.0362 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{72814a2c-2e03-4a50-b30a-43e7884b3934}) (Version: 16.5.1 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)

Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

MAGIX Foto Designer 7 (HKLM\...\{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG) Hidden

MAGIX Foto Designer 7 (HKLM-x32\...\MAGIX_{FEF04BA1-5C1A-4445-8EB7-B2E4D2FFCAC7}) (Version: 7.0.1.1 - MAGIX AG)

Mahjongg - Ancient Mayas (HKLM-x32\...\{18D52937-2121-49FA-B734-EA1EF38AA04F}_is1) (Version:  - cerasus.media GmbH)

Malwarebytes Version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)

McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.587.1 - McAfee, Inc.)

MediaCoder x64 0.8.43.5830 (HKLM\...\MediaCoder x64) (Version: 0.8.43.5830 - Mediatronic)

Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)

Microsoft Office 2000 Premium (HKLM-x32\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)

Movie Maker (HKLM-x32\...\{0FD2B9C6-DB91-48EA-9518-AB5B68CA1E28}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{3C5F91EF-5C0B-4D13-BCBE-0FC6FC3ED7F9}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{5B91D34E-B583-4E08-BB48-4F18086A0DB7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{705C31EB-E0AB-4C1F-A834-993F9E08B085}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{7693587D-5D66-4208-ABEA-C370217D1D9B}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{8E038DF1-B140-46D6-9D82-1BDF8DC56764}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{E169436E-49D8-419B-A5C0-D245EAF99611}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 54.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 de)) (Version: 54.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

Music Recorder (HKLM-x32\...\{E3579DBA-00BA-4E32-AE90-63B6CDA30D56}) (Version: 14.0.62200.0 - Audials AG)

Nero 7 Essentials (HKLM-x32\...\{D34D82E0-4600-407B-9478-8506C1DD1031}) (Version: 7.02.3307 - Nero AG)

OLYMPUS Digital Camera Updater (HKLM-x32\...\{D18925CE-5AF9-4394-8EF7-1081FFE7E98B}) (Version: 1.2.0 - OLYMPUS IMAGING CORP.)

OLYMPUS Viewer 3 (HKLM-x32\...\{F0C70F68-E57F-4D76-A012-E20F8E12946E}) (Version: 1.4.1 - OLYMPUS IMAGING CORP.)

online-foto Bestellsoftware (HKLM-x32\...\online-foto Bestellsoftware) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)

OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)

PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)

PDF Architect 2 Convert Module (HKLM-x32\...\{53434783-F9A7-4D64-B91A-05A3BF925D70}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Forms Module (HKLM-x32\...\{4CB8D214-0400-45FA-B084-AAB0C74AD032}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Insert Module (HKLM-x32\...\{DD7BB68A-7D8A-4F62-806A-3424C2A170E7}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 OCR Module (HKLM-x32\...\{952E5B8F-82C2-46D1-B642-37B2635CE440}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Review Module (HKLM-x32\...\{664D6EE3-9A35-4284-B9D2-80A509DF9295}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 Secure Module (HKLM-x32\...\{99E0C0D4-6746-44EE-A132-5E7E3D6FAAFB}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)

PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)

PriMus Free 1.1 (Build 11020) (HKLM-x32\...\PriMus Free_is1) (Version: 1.1.0.11020 - Columbus Soft)

Raccolta foto (HKLM-x32\...\{FA6BC7A5-85B3-4DC2-825C-D508E386151A}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.30164 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7030 - Realtek Semiconductor Corp.)

simplitec simplicheck (HKLM-x32\...\{183D780B-28F9-41BA-A2CB-605F324A5781}) (Version: 1.3.10.0 - simplitec GmbH)

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)

Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.)

Sony Ericsson PC Companion 1.50.52 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 1.50.52 - Sony Ericsson)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.0 - Synaptics Incorporated)

TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.81460 - TeamViewer)

Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)

Telegram Desktop version 1.1.19 (HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.19 - Telegram Messenger LLP)

WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 6.53 - NCH Software)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)

WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-708953619-3332147771-3993505364-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Marlies\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileCoAuthLib64.dll (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)

ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)

ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers1-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\Windows\SysWOW64\WSCM64.dll [2015-02-27] ()

ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-09-10] (Cyberlink)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-08-26] (Intel Corporation)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-08-05] (Avira Operations GmbH & Co. KG)

ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2014-04-20] (IvoSoft)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-02-16] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-02-16] (Alexander Roshal)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {145D433F-F4F5-4F0B-A64B-8C8291F19A6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-08-01] (Synaptics Incorporated)

Task: {45FD7644-A331-4E36-BCD1-DFC43A0CFAEA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)

Task: {7F880913-CCFC-4B27-B7C3-B781B2E5FFE7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {993A1863-842C-4EAC-8319-9713C2B9D95D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-08-13] (Microsoft Corporation)

Task: {CCB5A282-43DA-4578-B841-CAF077C81C01} - System32\Tasks\{DD49092F-C446-4EEC-BD77-C4F3994ACAFA} => C:\Windows\system32\pcalua.exe -a E:\System\dx80a.exe -d E:\System

Task: {D56949F9-18CC-4B3E-9C54-796189BBE1A0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs

Task: {E5A22EA6-4AC2-487C-8B07-531491916A09} - System32\Tasks\{C7994087-E7AF-4290-9F3C-979444759543} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Einfach Genial\EinfachGenial.exe" -d "C:\Program Files (x86)\Einfach Genial\"

Task: {EA9A4FAB-99BE-473F-A97F-327175694D43} - System32\Tasks\Dolby Selector => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-08-08] (Dolby Laboratories Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 

ShortcutWithArgument: C:\Users\Marlies\Desktop\gesammeltes Desktop\CrossLoop Connect.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrossLoop\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 

ShortcutWithArgument: C:\Users\Marlies\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CrossLoop.lnk -> C:\Users\Marlies\AppData\Local\CrossLoop\CrossLoopConnect.exe (CrossLoop) -> -ap=crossloop -port=5910 -udp=www.CrossLoop.com -webserver=server.crossloop.com -webservice=www.crossloop.com -startup=server 
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-05-21 20:42 - 2011-02-07 09:56 - 000138192 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

2013-09-07 12:40 - 2012-12-26 11:36 - 000114688 _____ () C:\Program Files (x86)\FWdriver_v\POSHXMain.exe

2014-05-20 20:41 - 2013-03-06 14:42 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2017-08-15 12:42 - 2017-06-27 12:06 - 002260432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

2015-11-15 13:32 - 2015-02-27 15:38 - 000721263 _____ () C:\Windows\SysWOW64\WSCM64.dll

2013-09-07 12:40 - 2013-09-03 21:38 - 000647168 _____ () C:\Program Files (x86)\FWdriver_v\POSHX.exe

2016-03-15 10:26 - 2016-03-15 10:26 - 004535192 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\AudialsNotifier.exe

2014-12-21 15:41 - 2014-04-08 10:13 - 000069120 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe

2017-08-08 15:30 - 2017-08-02 09:39 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libglesv2.dll

2017-08-08 15:30 - 2017-08-02 09:39 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.90\libegl.dll

2013-09-07 12:40 - 2013-07-24 10:23 - 000106496 _____ () C:\Program Files (x86)\FWdriver_v\KIPowerDll.dll

2013-09-07 12:10 - 2013-08-08 13:25 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2013-09-07 12:40 - 2013-07-11 12:41 - 000348160 _____ () C:\Program Files (x86)\FWdriver_v\SuperHealthDLL.dll

2013-09-07 12:40 - 2012-06-22 20:32 - 000266240 _____ () C:\Program Files (x86)\FWdriver_v\SuperSpeederDLL.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000049424 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_thread-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000048400 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_date_time-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000068504 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashRpt.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000618256 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_regex-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000544152 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\StreamingClient.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000016144 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\boost_system-vc90-mt-1_39.dll

2016-03-15 10:26 - 2016-03-15 10:26 - 000040856 _____ () C:\Program Files (x86)\Music Recorder\Music Recorder 2016\CrashHandlerNET.dll

2014-12-21 15:41 - 2014-04-08 10:08 - 000112128 _____ () C:\Program Files (x86)\Canon\ImageBrowser EX\MFMFileSystemWatcher.dll

2014-05-21 20:47 - 2008-07-03 15:18 - 000364544 ____N () C:\Program Files (x86)\PIXELA\Everio MediaBrowser\pxl_m17n_tool.dll

2013-09-12 06:56 - 2013-08-05 09:49 - 000627672 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll

2013-08-05 16:48 - 2013-08-05 16:48 - 000016856 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll

2015-11-15 13:32 - 2015-04-28 16:22 - 001498112 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2015-11-15 13:32 - 2014-05-19 18:19 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [246]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 15:25 - 2013-08-22 15:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-708953619-3332147771-3993505364-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

HKU\S-1-5-21-708953619-3332147771-3993505364-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133429341\Control Panel\Desktop\\Wallpaper -> C:\Users\Marlies\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

HKU\S-1-5-21-708953619-3332147771-3993505364-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-08152017133432028\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\MEDION\wallpaper.jpg

DNS Servers: 80.69.96.12 - 81.210.129.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{8B219A9C-3E95-4887-B558-0A20C3849406}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{55B1AAA0-1495-4582-AA48-9DD5FE0C9324}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe

FirewallRules: [{2B993C4B-B78F-402C-91B3-32B5F826346F}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE

FirewallRules: [{90A06370-CC6A-4993-AE7D-905297E8D278}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

FirewallRules: [{DC152F63-F1D3-4181-AE00-8C232B30FBF9}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe

FirewallRules: [{9F2453BC-E7A0-4197-BB67-11A849EF3BD1}] => (Allow) C:\Users\Marlies\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

FirewallRules: [{9AC8C66D-A4A0-43A9-85FE-DDBE39F6FEFE}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{D7B2403C-AD42-441B-99CC-7F24749CE4FC}] => (Allow) LPort=2869

FirewallRules: [{62642C0A-EAA3-418F-B6FF-4DFABDFCE1DF}] => (Allow) LPort=1900

FirewallRules: [{269BE6C4-2529-4920-BC89-90562EB4559C}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{0EF250F3-BEB1-4580-9B21-0B4920E3D812}] => (Allow) C:\Program Files\CyberLink\PowerDirector11\PDR10.EXE

FirewallRules: [TCP Query User{30D7B601-7145-4279-9DC8-CD63CEEF410B}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{19E2251F-9D9A-4F3F-AF13-CB1F4F6F5B90}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [{674BBF60-83EC-4D49-BC50-4A8D2C0E23AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe

FirewallRules: [{991741BC-B7DE-4AE4-86E4-7C57C27E8CEF}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\vncviewer.exe

FirewallRules: [{587DB821-EE55-4343-A6DB-FC0E0A6E7F28}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe

FirewallRules: [{31BCFED6-4B00-4337-BAC8-082E9ABA39AB}] => (Allow) C:\Users\Marlies\AppData\Local\CrossLoop\tvnserver.exe

FirewallRules: [TCP Query User{79D86FFA-D8C6-4252-83BC-4A5943BB7492}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [UDP Query User{18961C28-5FA2-4BD0-812F-435D307495CE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe

FirewallRules: [TCP Query User{2FDFBC6C-3AAA-420C-A13E-6BCBEFCC5707}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe

FirewallRules: [UDP Query User{80D9ED45-F5AC-4F4F-AD81-E79788EBEE11}C:\program files (x86)\wondershare\vcu\medialibserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\medialibserver.exe

FirewallRules: [TCP Query User{62317F72-4518-4EF9-B0FE-891B8AE34422}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe

FirewallRules: [UDP Query User{15F2D807-18A8-4C16-BE0F-21EE162FF060}C:\program files (x86)\wondershare\vcu\mediaserver.exe] => (Block) C:\program files (x86)\wondershare\vcu\mediaserver.exe

FirewallRules: [{43637725-3109-4A55-944F-2A471CE3684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{259979CB-6D50-420A-AA41-80218EA26266}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [TCP Query User{E944FA45-73CD-49C6-8B91-CF4D30E620F5}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light

FirewallRules: [UDP Query User{ADFF7C71-3FB6-423D-8934-F4397726FF2B}C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Block) C:\users\marlies\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light

FirewallRules: [{CBE23198-7DA5-4CA2-8258-DCC8D46A1F67}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{EDEBD6B2-21BE-4AF3-B12A-5579AE31D8F7}] => (Allow) C:\Program Files (x86)\Nero\Nero TuneItUp\TuneItUp.exe

FirewallRules: [{19E7BCCF-1E7B-4771-AADF-005603F1FC0E}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{3CC1DAF6-7789-4F41-97ED-46D05A46B74D}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe

FirewallRules: [{0114B05C-5AB4-4746-BDEF-285A47D4807C}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{BEB671ED-E6AB-41C5-97E7-AEA42072F475}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll

FirewallRules: [{85210530-AB5A-477F-BC00-390D7967D42A}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe

FirewallRules: [{065D11A9-B330-4118-9C13-63DF353F6630}] => (Allow) C:\Users\Marlies\Downloads\WLAN-Optimierer (1).exe

FirewallRules: [{CA0FC07B-E636-4A4E-8663-046F71034854}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{3305F1AB-D85F-427B-AF97-08BF4F1AEA40}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{E441B1EC-AF32-4A43-AB22-85B910BF6F24}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{8E5D2BAF-65B0-44D0-8F54-4C35840428F3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{36087549-1626-46EA-981E-CCAD684FE34C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
 

==================== Wiederherstellungspunkte =========================
 

06-08-2017 19:22:46 Geplanter Prüfpunkt

13-08-2017 15:52:04 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (08/16/2017 08:00:52 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 

Error: (08/16/2017 07:58:04 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 

Error: (08/16/2017 07:52:21 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 

Error: (08/16/2017 01:37:56 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1780
 

Startzeit: 01d316835ffd4ab5
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: 545c6389-8277-11e7-8366-5c514f28d736
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (08/16/2017 01:08:26 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 874
 

Startzeit: 01d3167f33af6ac7
 

Endzeit: 4294967295
 

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
 

Berichts-ID: 23b9072e-8273-11e7-8366-5c514f28d736
 

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
 

Error: (08/16/2017 01:04:40 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 

Error: (08/16/2017 12:58:22 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 

Error: (08/16/2017 12:57:39 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 

Error: (08/16/2017 12:57:20 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 

Error: (08/16/2017 12:55:40 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Marlies\Desktop\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
 
 

Systemfehler:

=============

Error: (08/16/2017 12:59:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Treiber konnte nicht geladen werden.
 

Error: (08/16/2017 12:59:03 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\Marlies\AppData\Local\Temp\ehdrv.sys
 

Error: (08/16/2017 12:59:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Treiber konnte nicht geladen werden.
 

Error: (08/16/2017 12:59:03 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\Marlies\AppData\Local\Temp\ehdrv.sys
 

Error: (08/16/2017 12:59:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Treiber konnte nicht geladen werden.
 

Error: (08/16/2017 12:59:03 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\Marlies\AppData\Local\Temp\ehdrv.sys
 

Error: (08/16/2017 12:49:32 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung vom Remoteendpunkt empfangen. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 20.
 

Error: (08/16/2017 12:10:02 PM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (08/15/2017 03:33:00 PM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (08/15/2017 01:33:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz

Prozentuale Nutzung des RAM: 68%

Installierter physikalischer RAM: 4004.02 MB

Verfügbarer physikalischer RAM: 1254.95 MB

Summe virtueller Speicher: 8100.02 MB

Verfügbarer virtueller Speicher: 3787.31 MB
 

==================== Laufwerke ================================
 

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:80.58 GB) NTFS

Drive d: (Recover) (Fixed) (Total:60 GB) (Free:45.11 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 465.8 GB) (Disk ID: 3782765E)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

So, nun müßte es das gewesen sein.

Noch einen kurzen Hinweis:

Mein Virenscanner hat während des Scannvorganges von ESET eine Datei blockiert und in Quarantäne verschoben.

Und zwar HEUR/Suspar.gen, eine Datei von Adwcleaner/Quarantine.

Kann/soll ich die wieder herstellen?

Gruß Kasrello

Hi,

gut gemacht! :daumenhoc

Wir schmeißen noch ein paar Reste raus, dann sind wir durch. Die Datei die dein Virenscanner gefunden hat kann es ruhig behalten ;)

Hinweis:
Chip Installer

Zitat:

C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe

Achtung: keine Downloads mehr von Chip.de, ließ dir dazu am besten das hier durch: CHIP-Installer - was ist das? - Anleitungen

Schritt 1:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Downloads\downloads\backups

C:\Downloads\downloads\FreeYouTubeDownload.exe

C:\Eigene Dateien\Downloads\empc_setup.exe

C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe

C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe

C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe

C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe

C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe

C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe

C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe

C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe

C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe

C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe

Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs

C:\Users\Marlies\AppData\Roaming\key-find

EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2:

Aktiviere bitte die automatischen Updates des WIndows Defenders.
Schau dir dazu bitte die Schritte hier an:
https://support.microsoft.com/de-de/...ndows-defender

Macht der PC noch Probleme?

Hallo Tician,

ich habe alles so gemacht, wie angegeben.

Hier die Log.txt nach der Entfernung.

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-08-2017

durchgefÃ¼hrt von Marlies (17-08-2017 23:15:35) Run:1

Gestartet von C:\Users\Marlies\Desktop

Geladene Profile: Marlies &  (VerfÃ¼gbare Profile: Marlies & Marlies_2)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

C:\Downloads\downloads\backups

C:\Downloads\downloads\FreeYouTubeDownload.exe

C:\Eigene Dateien\Downloads\empc_setup.exe

C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe

C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe

C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe

C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe

C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe

C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe

C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe

C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe

C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe

C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe

Task: {D8795768-9D8C-47D4-8E00-6027B7D45D6D} - System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => C:\Windows\system32\pcalua.exe -a C:\Users\Marlies\AppData\Roaming\key-find\UninstallManager.exe -c  -ptid=cvs

C:\Users\Marlies\AppData\Roaming\key-find

EmptyTemp:

*****************
 

C:\Downloads\downloads\backups => erfolgreich verschoben

C:\Downloads\downloads\FreeYouTubeDownload.exe => erfolgreich verschoben

C:\Eigene Dateien\Downloads\empc_setup.exe => erfolgreich verschoben

C:\Eigene Dateien\Downloads\FreeYouTube237Download.exe => erfolgreich verschoben

C:\Eigene Dateien\Downloads\SoftonicDownloader_for_windows-live-messenger.exe => erfolgreich verschoben

C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_photo-collage-creator.exe => erfolgreich verschoben

C:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_windows-live-messenger-2012.exe => erfolgreich verschoben

C:\Users\Marlies\Downloads\Free PDF to Word Doc Converter - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Marlies\Downloads\HijackThis - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer(1).exe => erfolgreich verschoben

C:\Users\Marlies\Downloads\Microsoft Silverlight - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Marlies\Downloads\Setup_FileViewPro_2015.exe => erfolgreich verschoben

C:\Users\Marlies\Downloads\Weightwatchers Rechner - CHIP-Installer.exe => erfolgreich verschoben

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D8795768-9D8C-47D4-8E00-6027B7D45D6D} => SchlÃ¼ssel erfolgreich entfernt

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8795768-9D8C-47D4-8E00-6027B7D45D6D} => SchlÃ¼ssel erfolgreich entfernt

C:\Windows\System32\Tasks\{802886A1-E095-435D-AADC-049F9EE278AA} => erfolgreich verschoben

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{802886A1-E095-435D-AADC-049F9EE278AA} => SchlÃ¼ssel erfolgreich entfernt

"C:\Users\Marlies\AppData\Roaming\key-find" => nicht gefunden.
 

=========== EmptyTemp: ==========
 

BITS transfer queue => 8388608 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 37702819 B

Java, Flash, Steam htmlcache => 9834 B

Windows/system/drivers => 855503140 B

Edge => 0 B

Chrome => 556681942 B

Firefox => 377334719 B

Opera => 1525168 B
 

Temp, IE cache, history, cookies, recent:

Default => 0 B

Users => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 9019146 B

systemprofile32 => 49498 B

LocalService => 32791143 B

NetworkService => 43268 B

Marlies => 43069831384 B

Marlies_2 => 983571 B
 

RecycleBin => 0 B

EmptyTemp: => 41.9 GB temporÃ¤re Dateien entfernt.
 

================================
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 23:39:59 ====

Das Problem, weshalb ich mich gemeldet hatte, ist in Google Chrome nach wie vor vorhanden, im Internet Explorer ist es beseitigt. :pfui::kloppen:

Ich füge hier mal ein paar Screenshots als Anlage ein, damit Du Dir anschauen kannst, was ich meine. Ich habe dabei einmal das Suchergebnis vom Internet Explorer und Firefox des betroffenen PC´s dargestellt und einmal das Suchergebnis von Google Chrome des betroffenen PC´s. Außerdem habe ich dann auch noch ein Suchergebnis von Google Chrome eines anderen PC´s dargestellt (die Bilder sind entsprechend beschriftet).

Außerdem habe ich noch eine Frage.
Der Scan mit Eset Onlinescanner hat 22 Bedrohungen erkannt. Diese habe ich nach dem Scan nicht entfernt, ich habe Dir nur die Logdatei gezeigt. Das war so beschrieben, das war auch so richtig, oder?

Außerdem gibt es die Meldung, dass 15 Programme aktualisiert werden sollen, kann ich das unbedenklich durchführen lassen?

Grüße von Kasrello

Hallo Tician,

was vielleicht noch zu erwähnen wäre:

Das Suchergebnis im Google Chrome am betroffenen PC ist direkt nach der Suche auch so wie bei den anderen Browsern, aber innerhalb 1 Sec. springt das Ergebnis dann auf abgebildete Ansicht um. Einige Ergebnisse verrutschen dann einfach nach unten und einige verschwinden ganz.

Hallo Tician,

mir ist zu dem jetzt aufgefallen, dass der PC nach dem Entfernungsvorgang und Neustart, jetzt sehr langsam läuft, ein Arbeiten ohne Ruckeln ist nicht mehr möglich.

Wenn ich einen Text schreibe, erscheint das Wort verzögert zu dem wie ich es eintippe.

:heulen:

Hi,

soweit so gut.

Zitat:

Das war so beschrieben, das war auch so richtig, oder?

Ja, alles richtig, die Funde haben wir mit dem FRST-Fix gelöscht :daumenhoc

Eine Frage: Der persönliche Ordner mit Dateien liegt bei dir unter C:\Eigene Dateien\, das ist sehr unüblich. Normalerweise liegt er unter C:\Benutzer\Marlies (den es bei dir allerdings auch noch gibt). Hast du dir das selbst so eingerichtet oder wurde das evtl. von einer alten Daten-Sicherung eingespielt?

Schritt 1:

Bitte setze deine Brower wie folgt zurück:

CHR:::
Chrome zurücksetzen

Schritt 2:

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Funktioniert es jetzt ohne Werbung?