| trojamonster | 18.11.2017 17:46 |
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2017 03
durchgeführt von User (Administrator) auf USER-PC (15-11-2017 10:57:43)
Gestartet von C:\Users\User\Downloads
Geladene Profile: User (Verfügbare Profile: User)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Windows\vsnpstd3.exe
(UltimateOutsider) C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Dropbox, Inc.) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [snpstd3] => C:\Windows\vsnpstd3.exe [827392 2006-09-19] ()
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [GwxControlPanelMonitor] => C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe [4559944 2016-02-07] (UltimateOutsider) <==== ACHTUNG
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [*LABAL*] => [X]
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Run: [GalaxyClient] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [5284928 2017-11-15] (GOG.com)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\MountPoints2: {6b9e7571-9314-11e2-a317-002618810f02} - E:\RunGame.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-09-04]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2017-11-02]
ShortcutTarget: Dropbox.lnk -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{DBC0A50C-F994-4579-8DC9-464A072EB067}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.mystartsearch.com/web/?type=ds&ts=1424371748&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&q={searchTerms}
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {780042B5-BA4C-4321-A76F-511211A27969} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {DDD1F70E-8AF5-429F-818F-E369432D2A7A} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {F208F861-48A5-4BA7-9C80-75413C389F68} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=cor&utm_campaign=install_ie&utm_content=ds&from=cor&uid=WDCXWD5000AACS-00G8B0_WD-WCAUK018465984659&ts=1424371832&type=default&q={searchTerms}
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-226341798-1494298974-1954543524-1001 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - Keine Datei
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
FireFox:
========
FF DefaultProfile: pehg2cqu.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default [2017-11-15]
FF Homepage: Mozilla\Firefox\Profiles\pehg2cqu.default ->
FF Keyword.URL: Mozilla\Firefox\Profiles\pehg2cqu.default -> hxxps://es.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=714647&p=
FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-12]
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{05fb5410-b1ee-4bf6-8778-76e284d95c08}.xpi [2012-12-15] [ist nicht signiert]
FF Extension: (Microsoft .NET Framework Assistant) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2015-08-06]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2017-03-02]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-10-21]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-10-05]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi [2017-11-15]
FF Homepage: Mozilla\Firefox\Profiles\b8pypxzl.Kapi ->
FF NetworkProxy: Mozilla\Firefox\Profiles\b8pypxzl.Kapi -> type", 0
FF Extension: (RegnumHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{05fb5410-b1ee-4bf6-8778-76e284d95c08}.xpi [2016-08-29] [ist nicht signiert]
FF Extension: (iMacros for Firefox) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2017-03-10]
FF Extension: (Video DownloadHelper) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-10]
FF Extension: (Greasemonkey) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\b8pypxzl.Kapi\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2017-04-26]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\pehg2cqu.default\extensions\searchengine@gmail.com => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-09-04] [ist nicht signiert]
FF HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-14] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-10-19] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-14] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-226341798-1494298974-1954543524-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox Kapi\firefox.exe
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert] <==== ACHTUNG
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [529984 2017-11-15] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [8330304 2017-11-15] (GOG.com)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-27] (HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-18] (NVIDIA Corporation)
S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [582544 2016-07-13] (RealNetworks, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7248144 2016-08-08] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [14392 2007-12-17] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-30] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKslec84a534; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{FC151D67-2CCB-46BA-9491-46835DA2BD1B}\MpKslec84a534.sys [58120 2017-11-15] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10550272 2007-03-27] (Sonix Co. Ltd.)
S3 StMp3Recx64; C:\Windows\System32\Drivers\StMp3Recx64.sys [26112 2007-01-12] (Generic)
S1 pfnfd_1_10_0_9; system32\drivers\pfnfd_1_10_0_9.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-11-15 10:57 - 2017-11-15 10:58 - 000018851 _____ C:\Users\User\Downloads\FRST.txt
2017-11-15 10:56 - 2017-11-15 10:57 - 000000000 ____D C:\FRST
2017-11-15 10:56 - 2017-11-15 10:56 - 002392576 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2017-11-14 21:22 - 2017-11-14 21:22 - 000001182 _____ C:\Users\User\Desktop\eset.txt
2017-11-14 17:52 - 2017-11-14 17:52 - 000000000 ____D C:\Users\User\AppData\Local\ESET
2017-11-14 17:51 - 2017-11-14 17:51 - 006974584 _____ (ESET spol. s r.o.) C:\Users\User\Downloads\esetonlinescanner_deu.exe
2017-11-10 08:11 - 2017-11-10 08:11 - 001004024 _____ C:\Windows\Minidump\111017-29484-01.dmp
2017-11-09 15:58 - 2017-11-09 15:59 - 000000000 ____D C:\Users\User\Downloads\Altdeutsch für Word
2017-11-02 19:44 - 2017-11-02 19:44 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-10-30 17:03 - 2017-10-30 17:03 - 000000000 ____D C:\Users\User\AppData\Local\Introversion
2017-10-30 16:52 - 2017-10-30 16:52 - 000000222 _____ C:\Users\User\Desktop\Prison Architect.url
2017-10-29 21:10 - 2017-11-10 08:10 - 757920244 _____ C:\Windows\MEMORY.DMP
2017-10-29 21:10 - 2017-10-29 21:10 - 000719064 _____ C:\Windows\Minidump\102917-17581-01.dmp
2017-10-20 10:05 - 2017-10-20 10:37 - 000000000 ____D C:\Users\User\Documents\Planetbase
2017-10-20 10:05 - 2017-10-20 10:05 - 000001373 _____ C:\Users\Public\Desktop\Planetbase.lnk
2017-10-20 09:59 - 2017-10-20 09:59 - 000000000 ____D C:\Users\User\AppData\Local\GOG.com
2017-10-20 09:58 - 2017-11-15 09:40 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2017-10-20 09:58 - 2017-10-20 10:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-10-20 09:58 - 2017-10-20 10:04 - 000000000 ____D C:\ProgramData\GOG.com
2017-10-20 09:58 - 2017-10-20 09:58 - 000001041 _____ C:\Users\Public\Desktop\GOG Galaxy.lnk
2017-10-20 09:57 - 2017-10-20 09:57 - 166459112 _____ (GOG.com ) C:\Users\User\Downloads\setup_galaxy_1.2.26.8.exe
2017-10-16 09:28 - 2017-10-16 09:28 - 000000000 ____D C:\Users\User\Downloads\Apps_Gamez
2017-10-16 09:23 - 2017-10-16 09:28 - 000000000 ____D C:\Users\User\Downloads\Apps_OS
2017-10-16 09:19 - 2017-10-16 09:23 - 000000000 ____D C:\Users\User\Downloads\Apps_Programme
2017-10-16 09:15 - 2017-10-16 09:16 - 000000000 ____D C:\Users\User\Downloads\Apps_LP+Stream
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-11-15 10:41 - 2015-08-07 08:19 - 000001220 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job
2017-11-15 10:07 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-15 10:07 - 2009-07-14 05:45 - 000022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-15 09:34 - 2017-10-11 07:51 - 000000328 _____ C:\Windows\Tasks\HPCeeScheduleForUser.job
2017-11-15 09:34 - 2016-02-09 17:56 - 000000000 ____D C:\ProgramData\NVIDIA
2017-11-15 09:34 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-14 21:16 - 2017-10-11 07:51 - 000003180 _____ C:\Windows\System32\Tasks\HPCeeScheduleForUser
2017-11-14 20:11 - 2012-12-15 02:26 - 000004366 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-14 20:11 - 2012-12-11 19:39 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-14 20:11 - 2012-12-11 19:39 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-14 20:11 - 2012-12-11 19:39 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-14 14:41 - 2015-08-07 08:19 - 000001168 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job
2017-11-13 18:00 - 2015-08-07 09:57 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-13 10:51 - 2016-01-16 21:52 - 000000000 ____D C:\Program Files (x86)\Steam
2017-11-13 10:48 - 2016-02-07 20:04 - 000000000 ____D C:\Users\User\AppData\Local\Ubisoft Game Launcher
2017-11-13 10:39 - 2017-04-16 16:43 - 000000000 ____D C:\Users\User\Desktop\Bewerben
2017-11-13 07:56 - 2016-02-23 16:53 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2017-11-10 08:11 - 2016-11-22 16:20 - 000000000 ____D C:\Windows\Minidump
2017-11-10 08:11 - 2012-12-12 10:15 - 000066672 _____ C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-10 08:11 - 2009-07-14 05:45 - 000300312 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-09 09:14 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Kapi-Land
2017-11-09 09:02 - 2014-03-01 11:58 - 000000000 ____D C:\Users\User\Documents\GB Einträge
2017-11-09 09:02 - 2012-12-15 16:22 - 000000000 ____D C:\Users\User\Documents\Meine empfangenen Dateien
2017-11-08 16:26 - 2017-02-04 18:29 - 000000000 ____D C:\Users\User\Desktop\Kapi-Regnum
2017-11-02 19:44 - 2013-11-03 14:20 - 000000000 ____D C:\Users\User\AppData\Roaming\Dropbox
2017-11-02 19:21 - 2009-07-14 18:58 - 000699284 _____ C:\Windows\system32\perfh007.dat
2017-11-02 19:21 - 2009-07-14 18:58 - 000149424 _____ C:\Windows\system32\perfc007.dat
2017-11-02 19:21 - 2009-07-14 06:13 - 001620080 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-02 19:21 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-10-27 15:55 - 2016-11-19 16:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-27 15:55 - 2012-12-15 01:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-08-29 22:00 - 2016-08-29 22:00 - 000000000 _____ () C:\Program Files\nsr161D.tmp
2017-03-12 23:02 - 2017-03-12 23:02 - 000009199 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2015-02-19 18:28 - 2015-02-19 18:28 - 000000017 _____ () C:\Users\User\AppData\Local\resmon.resmoncfg
2015-09-04 21:32 - 2015-09-05 12:01 - 000001187 _____ () C:\ProgramData\hpzinstall.log
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\User\AppData\Local\Temp\DMR\Downloads\152e221a8bef8d2d13c58f995563a1a1\2a159b5701df8e9d7bfd558a3c761b6e\GWX1720_control_panel.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-11-09 11:47
==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2017 03
durchgeführt von User (15-11-2017 10:58:38)
Gestartet von C:\Users\User\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2012-12-11 18:19:12)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-226341798-1494298974-1954543524-500 - Administrator - Disabled)
Gast (S-1-5-21-226341798-1494298974-1954543524-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-226341798-1494298974-1954543524-1004 - Limited - Enabled)
User (S-1-5-21-226341798-1494298974-1954543524-1001 - Administrator - Enabled) => C:\Users\User
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4500_G510gm_Help (HKLM-x32\...\{DF0B357C-5874-47D0-81E7-79AA890B0CE0}) (Version: 000.0.440.000 - Hewlett-Packard) Hidden
4500G510gm (HKLM-x32\...\{BE0D4271-69C9-4f28-AD9B-BB33D126A30E}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
4500G510gm_Software_Min (HKLM-x32\...\{28379381-B56A-43e1-B505-3098D82B1C30}) (Version: 000.0.423.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Age of Empires III - The Asian Dynasties (HKLM-x32\...\{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The Asian Dynasties (HKLM-x32\...\InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III - The WarChiefs (HKLM-x32\...\{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III - The WarChiefs (HKLM-x32\...\InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (HKLM-x32\...\{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Age of Empires III (HKLM-x32\...\InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}) (Version: 1.00.0000 - Microsoft Game Studios)
Airline Tycoon Evolution (HKLM-x32\...\{16E43D5F-5296-4D53-B303-9D951AFE510F}) (Version: - )
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version: - Ubisoft)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.94 - NVIDIA Corporation) Hidden
ASUSUpdate (HKLM-x32\...\{587178E7-B1DF-494E-9838-FA4DD36E873C}) (Version: - )
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
BufferChm (HKLM-x32\...\{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}) (Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.27 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6623 - CDBurnerXP)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH) <==== ACHTUNG
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CPUID CPU-Z 1.78 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DaVinci Resolve (HKLM\...\{5D6009B3-E646-463A-805A-D5B95D0E36A2}) (Version: 12.5.5026 - Blackmagic Design)
DaVinci Resolve Panels (HKLM\...\{6FC8261F-6046-4ABB-851B-12FC923D0724}) (Version: 1.0.0.0 - Blackmagic Design)
Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (HKLM-x32\...\{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}) (Version: 130.0.372.000 - Hewlett-Packard) Hidden
DocMgr (HKLM-x32\...\{92A51949-EE4C-466D-AAF0-99E74A49A63F}) (Version: 130.0.000.000 - Ihr Firmenname) Hidden
DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
Dropbox (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\Dropbox) (Version: 38.4.27 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Fax (HKLM-x32\...\{440B915A-0C85-45DB-92AE-75AE14704A64}) (Version: 130.0.418.000 - Hewlett-Packard) Hidden
GIMP 2.8.20 (HKLM\...\GIMP-2_is1) (Version: 2.8.20 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
GPBaseService2 (HKLM-x32\...\{63FF21C9-A810-464F-B60A-3111747B1A6D}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Officejet 4500 G510g-m (HKLM\...\{E5083D57-D93F-404C-A91F-1C50D67C2BEB}) (Version: 13.0 - HP)
HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.5.37.19 - Hewlett-Packard Company)
HP Support Solutions Framework (HKLM-x32\...\{8F1A441E-AD6D-4732-BD6A-F38D5F1D1E47}) (Version: 12.8.37.11 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
HPProductAssistant (HKLM-x32\...\{C43326F5-F135-4551-8270-7F7ABA0462E1}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}) (Version: 130.0.371.000 - Hewlett-Packard) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.35 - Irfan Skiljan)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
MarketResearch (HKLM-x32\...\{175F0111-2968-4935-8F70-33108C6A4DE3}) (Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mozilla Firefox 47.0.1 (x64 de) (HKLM\...\Mozilla Firefox 47.0.1 (x64 de)) (Version: 47.0.1 - Mozilla)
Mozilla Firefox 56.0.2 (x64 de) (HKLM\...\Mozilla Firefox 56.0.2 (x64 de)) (Version: 56.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 56.0.2.6506 - Mozilla)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (HKLM\...\{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}) (Version: 130.0.550.000 - Hewlett-Packard) Hidden
Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.221.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.94 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 384.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.94 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Online Games Manager v1.50 (HKLM-x32\...\Online Games Manager) (Version: 1.50.4 - Real Networks, Inc.)
Planetbase (HKLM-x32\...\1351624781_is1) (Version: 1.2.3 - GOG.com)
Scan (HKLM-x32\...\{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SimCity 4 Deluxe (HKLM-x32\...\{3F0D0ABE-CDAF-431A-00BC-CBBE018EA74E}) (Version: - )
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
SmartWebPrinting (HKLM-x32\...\{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
SolutionCenter (HKLM-x32\...\{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Star Wars Galactic Battlegrounds: Clone Campaigns (HKLM-x32\...\{0314ED3D-26A7-4F62-86A2-6B23353445E8}) (Version: - )
Status (HKLM-x32\...\{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}) (Version: 130.0.373.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.64630 - TeamViewer)
Toolbox (HKLM-x32\...\{6BBA26E9-AB03-4FE7-831A-3535584CA002}) (Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (HKLM-x32\...\{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}) (Version: 130.0.376.000 - Hewlett-Packard) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKU\S-1-5-21-226341798-1494298974-1954543524-1001\...\UnityWebPlayer) (Version: 5.2.0f3 - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
VLC media player 2.0.4 (HKLM\...\VLC media player) (Version: 2.0.4 - VideoLAN)
VoipConnect (HKLM-x32\...\VoipConnect_is1) (Version: 4.14 build 760 - Finarea S.A. Switzerland)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WebReg (HKLM-x32\...\{43CDF946-F5D9-4292-B006-BA0D92013021}) (Version: 130.0.132.017 - Hewlett-Packard) Hidden
XSplit Gamecaster (HKLM-x32\...\{A41F3C62-007F-4705-8680-4475B0B602FD}) (Version: 3.0.1705.3131 - SplitmediaLabs)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-226341798-1494298974-1954543524-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers1: [MRAICQCMenu] -> {7C9E7B90-88EC-4852-AC7A-C938268A5D04} => -> Keine Datei
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-07-19] (NVIDIA Corporation)
ContextMenuHandlers1_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-226341798-1494298974-1954543524-1001: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\User\AppData\Roaming\Dropbox\bin\DropboxExt64.19.0.dll [2017-11-01] (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {17708C3A-DDC0-43A2-981D-FE98A890555F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-16] (Google Inc.)
Task: {3C0D7E49-AA5A-43E6-B64B-DF85F5842B6E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-URT -> Keine Datei <==== ACHTUNG
Task: {44ADDDD1-1A02-4588-B902-ADBA582E557D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {4CD7CAF9-B019-4054-8691-1B7D494C90A3} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4F691EFD-E8BE-4E03-A749-C61BE5962428} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {5704B1A2-7A58-4AB3-9082-5B85DB1F4C8D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {57DEA349-D687-45A6-A2DD-C9214A147E69} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-14] (Adobe Systems Incorporated)
Task: {5A3BEDC0-5151-4155-B225-BF744AEB3689} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8DB5D02B-579B-4B2E-9919-7BC483B6549C} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {A17F317D-07D5-46E5-B475-7008F7624A5D} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {A30D37C3-D3F4-4541-96B9-59ECFC00AB1F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {ABF7A751-AEAA-4E27-8861-7C56100DCEEC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {AC8B81DD-3A33-464D-94F0-3B91A28A6519} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-16] (Google Inc.)
Task: {B27F599C-9E7E-4027-8A92-E14A149E7693} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.)
Task: {B738F78A-440A-4791-9583-06B66E6A8201} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {BE3C62C4-A13B-440C-8E4B-EF2BA1B91FFA} - System32\Tasks\{EA293D0F-8058-4073-9A0E-78436C85A867} => C:\Windows\system32\pcalua.exe -a D:\autorun.exe -d D:\
Task: {C0AE8643-9D91-4090-BAAA-E1ECC6BE1F98} - System32\Tasks\{7621CC34-6AA8-449C-B81E-0206C457E8C3} => C:\Program Files (x86)\Monte Cristo\Airline Tycoon Evolution\at.exe [2002-07-22] (Spellbound Entertainment AG)
Task: {C2A83B80-AEF3-49AD-B507-B6AFEC44A3F0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-02-08] (Piriform Ltd)
Task: {C5CC7521-EDE4-47D8-ADA9-FEC7729EC854} - System32\Tasks\{011FBEBA-B072-4150-ADB4-8D6548C6FF6B} => C:\Windows\system32\pcalua.exe -a E:\autorun.exe -d E:\
Task: {C7124BA0-581D-48F2-8BEB-7957395AEA54} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {D06B9396-AB79-4AF1-A7C1-75BC51EDCE90} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2008-12-11] ()
Task: {D8174689-0ACF-4C40-B4DE-16ABDCB4FE68} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-10-11] (HP Inc.)
Task: {D8278204-E088-4C52-AFCD-6AF514C48A30} - System32\Tasks\HPCeeScheduleForUser => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
Task: {E0D482FD-E2D5-4629-BE49-5D404B76CCEC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {E4D86C89-09D5-4B08-B38A-8657C4706273} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {ED94D2FD-B2B1-4275-9EF8-71124E9F0E18} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {F50FB200-165F-431F-9E03-D3403946CCC3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {F604F927-1BD8-4ED3-B8DF-5AF815E4B2F8} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001Core.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-226341798-1494298974-1954543524-1001UA.job => C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForUser.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2006-09-19 10:07 - 2006-09-19 10:07 - 000827392 _____ () C:\Windows\vsnpstd3.exe
2017-02-08 03:52 - 2017-02-08 03:52 - 000065536 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-08-08 00:31 - 2016-06-14 21:03 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-11-02 19:43 - 2017-11-01 12:58 - 000724288 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll
2017-11-02 19:43 - 2017-11-01 12:58 - 002002752 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_crashpad.dll
2017-09-22 07:01 - 2017-11-01 12:57 - 000100296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000018888 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\select.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000020800 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000035792 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000694224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000130512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 001856848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2017-11-02 19:43 - 2017-11-01 12:57 - 000145864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2017-11-02 19:43 - 2017-11-01 12:58 - 000116688 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2017-09-22 07:01 - 2017-11-01 12:57 - 000105928 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32api.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000062784 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000024528 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32event.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000040248 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\fastpath.pyd
2017-11-02 19:43 - 2017-11-01 12:57 - 000020936 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000124880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32file.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000116176 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32security.pyd
2017-11-02 19:43 - 2017-11-01 12:58 - 000392656 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2017-09-22 07:01 - 2017-11-01 13:01 - 000392512 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000175560 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32gui.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000030160 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000043472 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32process.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000026056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32job.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000048592 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32service.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000057808 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000021824 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000023368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winshell.compiled._winshell.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000022856 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\crashpad.compiled._Crashpad.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000066392 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 001796920 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000084424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\sip.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 001956152 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 003859264 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000154440 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000521024 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000050496 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineCore.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000042304 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000131384 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000218944 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000204096 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000025432 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000060880 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32print.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000054608 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000024016 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32profile.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000022864 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000028616 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\win32ts.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000021848 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000022360 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000027488 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-09-22 07:01 - 2017-11-01 12:57 - 000349128 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2017-09-22 07:01 - 2017-11-01 13:01 - 000023896 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000025424 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2017-11-02 19:43 - 2017-11-01 12:58 - 000036296 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\librsync.dll
2017-11-02 19:43 - 2017-11-01 13:01 - 000181056 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2017-09-22 07:01 - 2017-11-01 13:01 - 000030536 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\wind3d11.compiled._wind3d11.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000024368 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libEGL.DLL
2017-11-02 19:43 - 2017-11-01 13:01 - 001638200 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2017-09-22 07:01 - 2017-11-01 13:01 - 000026456 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000545080 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000359224 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2017-11-02 19:43 - 2017-11-01 13:01 - 000038208 _____ () C:\Users\User\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngine.pyd
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-226341798-1494298974-1954543524-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Dropbox Update => "C:\Users\User\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [TCP Query User{38C73ECF-EEAA-4689-8F6E-E596A9AFD63C}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{7CABFE57-E2F4-4804-8340-8B4EF61777CD}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{D4F08B6E-00D4-4D93-8C51-3EA54DDCE158}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{A1B5C363-4D48-434B-ABF1-4CBD28E743C3}F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) F:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{4885EE98-93C0-43CD-A64D-54FF1B5C6D56}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{7A2C65A5-AE95-4536-9174-632482754346}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{3FE381B2-1975-4C81-B880-1B567F1130A4}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{1CD83B4F-5B46-47A1-A92E-75AA41DEECBC}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3x.exe
FirewallRules: [{C8CB8EE3-E21E-48CC-B9FF-F010949966BD}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [{A096DE85-F95F-42F0-9463-B7037530692F}] => (Allow) C:\Program Files (x86)\Microsoft Games\Age of Empires III\age3y.exe
FirewallRules: [TCP Query User{CB929C3C-F7B6-42D1-8747-2716FCBF7577}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{B23DF31A-B7F3-4A73-9810-F1C5E7BEFCB7}H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) H:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{8A16690E-1847-497B-97C7-CEA4FEBD3F40}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{A8F38F22-121F-4AEB-83B2-565615A4A80F}] => (Allow) C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{045401DF-BBD4-4EC3-ACAD-92668CE6057E}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{953F28D7-D6C8-4681-AA90-9453FD215647}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0CBBC1FA-2A7F-4D7F-96C0-21EB1BD8D430}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BB8C7394-3C10-4437-BC39-1810CAC924C0}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{8698A9EF-6000-4B02-8720-2B3C33A5C3D9}] => (Allow) C:\Program Files (x86)\VoipConnect.com\VoipConnect\VoipConnect.exe
FirewallRules: [{D978678F-DDF8-4A1F-BCDD-163EDEE37395}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{0D4DBBE6-92C8-4366-95FB-E6EEB77E99CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3410AFC9-004F-467F-A1F0-85C8D43AA1F6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6177BC3D-0796-46FD-989E-D9ED1A0BE4A1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{218D843F-B0C2-44A9-8436-A02AC0890903}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{9D1EF3DA-4BB0-45DE-8DAC-5D6604B9635A}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{309E308D-CE1E-4694-9192-736FDE5DCEDE}C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\user\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{DE2A0670-F767-4C25-AD57-36257F4C77B5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{9540191E-C19D-448F-95CF-0BBBA5402F9C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{8F5DDD73-069E-4429-A2D0-5F0B69A7E237}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{55E8DCF6-AA14-4F93-AF26-18A701E8B28F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{16E102C1-B93C-4A3D-B61E-80C4A7916331}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{F5AE4738-8ED6-4978-B023-B83CA6CF4D30}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{673FD18B-90C0-4C03-8E8B-896324A1FB23}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{54DE837F-A44E-4606-965D-2A1828764E92}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{005B2836-7074-4043-A94E-AD557B83D09D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{451D2D2A-7448-4572-9A79-1DC22EB937AA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{D4BFBFAB-6A1F-47EE-99B8-B522C1DA6B5A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{CA2B5042-5795-499F-933A-71969FD10822}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{53237DB8-36F8-468F-A07A-CC12C35346BF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{0E84EC79-2897-4D68-B21A-E3B242E4BA36}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{9A310C86-8365-49CE-ACA0-575CB1023294}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{67E68B86-BEAA-41CA-B8C2-0336459EE05B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{EE75CCF1-D530-4B20-920A-C6D7A3856AFB}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{2EA0AA21-5559-4C81-8014-5AC8E2C09DB4}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{C1896BD8-8A8D-4C51-9295-05494A2DF994}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{83DFE077-D21E-4E8B-9988-B5C39E747DBE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{08417A10-4CE7-4CDE-8231-9D3F02D76DBA}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [UDP Query User{A8AC8D4A-DE6D-4661-9B21-F40F933066C7}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds.exe
FirewallRules: [TCP Query User{4DBBCD17-8227-477A-A4F9-21CD82A0C749}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{AE1A6059-9D11-4E21-9F5D-69C324F5AF1C}I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe] => (Allow) I:\gamez\star wars_galactic battlegrounds + clone campaigns\star wars galactic battlegrounds - pc full game\game\battlegrounds_x1.exe
FirewallRules: [{6F9A41C0-770F-48A4-8CF5-210D1A036CF5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FF8033BC-0D0D-41B1-84C0-478BB14C4033}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{29AA8AE5-3674-4295-8449-CF542BAC1835}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{A114A23C-7599-4EF9-BFAD-20A2AD17BDC5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{EFFE880E-FFA9-4BDF-AFFF-517F9EE12D7C}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 2205\Bin\Win64\Anno2205.exe
FirewallRules: [{0494C639-441C-44C7-9AF1-CA2EC7DD8DC6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EE7BD039-DCBF-48BA-8F85-F70E379D726A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A71781DF-CC1A-49E1-AC35-D6E3CC5A3E05}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C7296545-CAF5-4C9B-B9F1-EBF93D69B47B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{88874CF6-667C-48D2-90C8-1C10FC120020}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{F122B669-EA8E-4FF0-B505-A0FEC94C905D}] => (Allow) C:\Program Files\Mozilla Firefox Kapi\firefox.exe
FirewallRules: [{36700C50-E9C9-4C57-87B3-9120C3723ADE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{7C8890CB-8E8C-4151-BBFF-A57A93D379F6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{A2E3B6CF-E313-4BA3-BB73-FB538AD219CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{50E095B0-F8CA-44BF-8C6D-D0D47A7306E1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe
FirewallRules: [{2BD9EF50-C96B-4223-9CB8-D4E11EE8A8D9}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe
FirewallRules: [{997E7E88-35A2-40C3-9FC0-EB91860BF627}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe
FirewallRules: [{EF852EFC-EAF4-4DDF-9ED5-B57E8B567392}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe
FirewallRules: [{9A97B598-9304-47B3-BD8A-7432BB850E6B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe
FirewallRules: [{96CD9007-3BE7-4625-9CD5-120D64FFE525}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe
FirewallRules: [{619C430A-1947-4C57-B8A1-513291EEB5D3}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe
FirewallRules: [{BEDDA18D-D18D-4FC0-B905-60A47D5CA44E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe
FirewallRules: [{AA39EECE-F4F1-4082-8255-3A5C0C00053D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{12A0A37E-45EF-4C6A-B031-0D6486DC09C2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Universim Demo\The Universim.exe
FirewallRules: [{34AD938E-A5B7-4983-BB6A-2B8DFB520240}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{63B6A152-6093-42FC-8F27-DAA389E7C24C}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe
FirewallRules: [{F0FC645E-B43C-42EF-9681-4CC91FB0DC1F}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{252CE295-74D3-423B-A08E-E96A414F954B}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe
FirewallRules: [{2CA3B65B-F27B-4FF0-9915-F74279BBB069}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{1E802BAE-5A68-40C5-A149-BE9EA6416803}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Prison Architect\Prison Architect.exe
==================== Wiederherstellungspunkte =========================
20-10-2017 09:58:35 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212
22-10-2017 09:20:36 Windows Update
25-10-2017 13:00:43 Windows Update
28-10-2017 18:47:01 Windows Update
01-11-2017 12:14:31 Windows Update
05-11-2017 12:16:03 Windows Update
09-11-2017 08:21:27 Windows Update
12-11-2017 19:09:18 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Officejet 4500 G510g-m
Description: Officejet 4500 G510g-m
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: pfnfd_1_10_0_9
Description: pfnfd_1_10_0_9
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: pfnfd_1_10_0_9
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Coprozessor
Description: Coprozessor
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/13/2017 07:55:59 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: GalaxyClient Helper.exe, Version: 1.2.26.8, Zeitstempel: 0x59e72d17
Name des fehlerhaften Moduls: libcef.dll, Version: 3.2704.1434.0, Zeitstempel: 0x57d833c4
Ausnahmecode: 0x80000003
Fehleroffset: 0x000a173d
ID des fehlerhaften Prozesses: 0x149c
Startzeit der fehlerhaften Anwendung: 0x01d35c4c6d9e4860
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\GOG Galaxy\libcef.dll
Berichtskennung: b41d4f20-c83f-11e7-a296-002618810f02
Error: (11/07/2017 08:00:11 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: hpqtra08.exe, Version: 130.0.376.0, Zeitstempel: 0x4a163449
Name des fehlerhaften Moduls: hpqusg.dll, Version: 130.0.374.0, Zeitstempel: 0x4a161738
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00032dab
ID des fehlerhaften Prozesses: 0x838
Startzeit der fehlerhaften Anwendung: 0x01d35795e36e88e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
Berichtskennung: 4b9b6320-c389-11e7-9aed-002618810f02
Error: (11/03/2017 11:40:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 56.0.2.6506 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 15b8
Startzeit: 01d3548b344b7c90
Endzeit: 265
Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Berichts-ID: 6c3e4331-c083-11e7-9a7a-002618810f02
Error: (11/02/2017 09:28:51 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 47.0.1.6018 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 698
Startzeit: 01d35409c40009a0
Endzeit: 201
Anwendungspfad: C:\Program Files\Mozilla Firefox Kapi\firefox.exe
Berichts-ID: 6c27b6a1-c00c-11e7-b997-002618810f02
Error: (10/09/2017 07:48:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HPSupportSolutionsFrameworkService.exe, Version: 8.7.27.15, Zeitstempel: 0x595d9791
Name des fehlerhaften Moduls: clr.dll, Version: 4.7.2114.0, Zeitstempel: 0x59a63e48
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000001c2716
ID des fehlerhaften Prozesses: 0x8f8
Startzeit der fehlerhaften Anwendung: 0x01d340c953af06e0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
Pfad des fehlerhaften Moduls: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Berichtskennung: e698f5f0-acbd-11e7-a22d-002618810f02
Error: (10/09/2017 07:48:45 AM) (Source: .NET Runtime) (EventID: 1023) (User: )
Description: Anwendung: HPSupportSolutionsFrameworkService.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund eines internen Fehlers in der .NET-Laufzeit beendet. bei IP 000007FEF6BB2716 (000007FEF69F0000) mit Exitcode 80131506.
Error: (10/06/2017 07:11:30 AM) (Source: chip 1-click download service) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Der Dienstprozess konnte keine Verbindung mit dem Dienstcontroller herstellen
Error: (09/28/2017 10:53:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 55.0.3.6445, Zeitstempel: 0x599edbef
Name des fehlerhaften Moduls: xul.dll, Version: 55.0.3.6445, Zeitstempel: 0x599edbdd
Ausnahmecode: 0x80000003
Fehleroffset: 0x0076a5cf
ID des fehlerhaften Prozesses: 0x15e8
Startzeit der fehlerhaften Anwendung: 0x01d33892d4376850
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\xul.dll
Berichtskennung: 7bd4fb70-a497-11e7-b141-002618810f02
Error: (09/25/2017 08:55:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 55.0.3.6445, Zeitstempel: 0x599edbef
Name des fehlerhaften Moduls: xul.dll, Version: 55.0.3.6445, Zeitstempel: 0x599edbdd
Ausnahmecode: 0x80000003
Fehleroffset: 0x0076a5cf
ID des fehlerhaften Prozesses: 0x3c4
Startzeit der fehlerhaften Anwendung: 0x01d335ce041a7430
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Mozilla Firefox\xul.dll
Berichtskennung: e47a8a10-a1c6-11e7-baa0-002618810f02
Error: (09/17/2017 06:45:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.23889, Zeitstempel: 0x598d5026
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002654f
ID des fehlerhaften Prozesses: 0x904
Startzeit der fehlerhaften Anwendung: 0x01d32fda96cf6aa0
Pfad der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe
Pfad des fehlerhaften Moduls: C:\Windows\system32\ole32.dll
Berichtskennung: fdc54160-9bcf-11e7-bdba-002618810f02
Systemfehler:
=============
Error: (11/15/2017 09:36:43 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 70.
Error: (11/15/2017 09:35:45 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen (Anwendungsspezifisch) wird der SID (S-1-5-18) für Benutzer NT-AUTORITÄT\SYSTEM von Adresse LocalHost (unter Verwendung von LRPC) keine Berechtigung zum Start (Lokal) für die COM-Serveranwendung mit CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
und APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungsprogramm für Komponentendienste geändert werden.
Error: (11/15/2017 09:34:56 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
pfnfd_1_10_0_9
Error: (11/15/2017 09:34:29 AM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/15/2017 09:34:28 AM) (Source: Service Control Manager) (EventID: 7016) (User: )
Description: Der Dienst "chip 1-click download service" hat einen ungültigen aktuellen Status gemeldet: 0
Error: (11/14/2017 05:56:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/14/2017 05:56:51 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\User\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (11/14/2017 05:56:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/14/2017 05:56:50 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\User\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (11/14/2017 05:56:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
==================== Speicherinformationen ===========================
Prozessor: AMD Phenom(tm) II X4 940 Processor
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 8191.18 MB
Verfügbarer physikalischer RAM: 5922.07 MB
Summe virtueller Speicher: 16380.54 MB
Verfügbarer virtueller Speicher: 14085.08 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:465.66 GB) (Free:178 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 95DD2725)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
FRST 32-Bit | FRST 64-Bit
Lesestoff:
Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
SecurityCheck und:
dann auf 
und dann auf 
.