| vision0171 | 04.06.2018 16:42 |
FRST Additions Logfile: Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 03.06.2018
durchgeführt von Fedderke (04-06-2018 17:28:49)
Gestartet von D:\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2013-04-22 19:17:06)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2906866106-2643020060-3342964400-500 - Administrator - Disabled)
Fedderke (S-1-5-21-2906866106-2643020060-3342964400-1000 - Administrator - Enabled) => C:\Users\Fedderke
Gast (S-1-5-21-2906866106-2643020060-3342964400-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-2906866106-2643020060-3342964400-1004 - Limited - Enabled)
Internet (S-1-5-21-2906866106-2643020060-3342964400-1015 - Limited - Enabled) => C:\Users\Internet
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
3D-Schach 7.0 (HKLM-x32\...\{3BC4E9D3-E82E-4C08-8E1C-8F6D1EFB5030}) (Version: 11.0 - ChessBase) Hidden
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
ACP Application (HKLM\...\{63CFCE89-11A3-E33E-70D9-D7C04062BF11}) (Version: 2018.0322.1802.34 - Advanced Micro Devices, Inc.) Hidden
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 18.3.4 - Advanced Micro Devices, Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.2.0 - Asmedia Technology)
Avery Wizard 5.0 (HKLM\...\{FC3B3A5D-7058-4627-9F1E-F95CC38B6054}) (Version: 5.0.5 - Avery)
Avery Wizard 5.0 (HKLM-x32\...\{FC3B3A5D-7058-4627-9F1E-F95CC38B6054}) (Version: 5.0.5 - Avery)
Avira (HKLM-x32\...\{B9E9546C-BAD0-43AB-8812-4FC3F8A9547C}) (Version: 1.2.113.25350 - Avira Operations GmbH & Co. KG) Hidden
Avira (HKLM-x32\...\{d2c9315d-82be-4e7a-8d9f-ccbe716c2552}) (Version: 1.2.113.25350 - Avira Operations GmbH & Co. KG)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.36.180 - Avira Operations GmbH & Co. KG)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-250C (HKLM-x32\...\{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
calibre 64bit (HKLM\...\{833153C0-7E32-4708-A0D8-24099CEF8F3E}) (Version: 3.10.0 - Kovid Goyal)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.7.0 - Canon Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon iP7200 series Benutzerregistrierung (HKLM-x32\...\Canon iP7200 series Benutzerregistrierung) (Version: - Canon Inc.)
Canon iP7200 series On-screen Manual (HKLM-x32\...\Canon iP7200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon iP7200 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP7200_series) (Version: - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
Catalyst Control Center Next Localization BR (HKLM\...\{5E8D25CC-639C-FFD9-732C-B9161851BBA5}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{18F68DE8-8503-DAFC-98CE-6DDFCBA4DE5E}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{D5572B9D-21F6-071D-0DE5-705C982571EC}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{8DC3AD1E-45E7-541D-AA0C-CD8010F5EC11}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{1DB9C012-0873-2CF0-DE4A-50B2F5195AB0}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{2714DDF9-768E-FF5B-ECD9-925D170D5F12}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{90844403-1A34-5F0F-DB57-9E9626512B91}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{F9472C53-0C61-7C52-6BA7-C266569E369B}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{56FD572B-9BDD-EC48-E968-0991C5332DBE}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{1F287499-31E1-8AA5-B2A8-DCEC6A5BAF19}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{C48A35F4-E33F-C60E-9F28-54B2943953C9}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{1772D18A-16D3-4107-EEE3-E13A67CC4370}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{E6C8C592-23E2-57F4-C9DE-A53F57F25883}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{D0D2D31E-D0AD-7982-FC2A-7138AF7A02ED}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{4348C233-D55A-17D2-138D-0468A880D60A}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{ABE77D54-4C3C-8902-0A77-C5DE1FFDFC6B}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{7B8968D2-BAD4-719C-0511-811678884826}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{39736404-C5C3-0699-7000-5F11E31A41A3}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{A85DEB81-179A-8623-25C1-26496F27A8A2}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{9BB4CE15-47DC-FC5A-E868-81BC95C93B88}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{8A6E91D8-4D42-3681-AD89-3D3D29CA1196}) (Version: 2017.0606.1509.25443 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.42 - Piriform)
Core Temp 1.10.2 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.10.2 - ALCPU)
CPUID CPU-Z 1.80.2 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.80.2 - ) <==== ACHTUNG
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 50.4.71 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.75.1 - Dropbox, Inc.) Hidden
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 19.1 - Thüringer Landesfinanzdirektion)
EPubsoft Kindle MOBI AZW DRM Removal 7.6.5 (HKLM-x32\...\{61F7C273-C127-49ED-B2D4-D9A421ECEBE4}) (Version: 7.6.5 - EPUBSOFT)
FileHippo App Manager (HKLM-x32\...\FileHippo.com) (Version: - FileHippo.com)
FileZilla Client 3.27.0.1 (HKLM-x32\...\FileZilla Client) (Version: 3.27.0.1 - Tim Kosse)
FormatFactory 3.8.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.8.0.0 - Free Time)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Instagram Download (HKLM-x32\...\Free Instagram Download_is1) (Version: 2.1.31.315 - Digital Wave Ltd)
Free Studio (HKLM-x32\...\Free Studio_is1) (Version: 6.6.37.606 - Digital Wave Ltd)
FVD Downloader Module (HKLM-x32\...\{A3F74A3C-6824-4878-AB46-21280389D09F}) (Version: 1.0.8 - Nimbus)
Google Earth Pro (HKLM-x32\...\{FA1BBF34-E994-4310-95D7-BE93092B8E61}) (Version: 7.3.1.4507 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
K-Lite Mega Codec Pack 14.1.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 14.1.5 - KLCP)
LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - )
Malwarebytes Version 3.4.5.2467 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.5.2467 - Malwarebytes)
MediaInfo 0.7.99 (HKLM\...\MediaInfo) (Version: 0.7.99 - MediaArea.net)
Microsoft .NET Framework 4.7 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02558 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.9330.2087 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24123 (HKLM-x32\...\{2cbcedbb-f38c-48a3-a3e1-6c6fd821a7f4}) (Version: 14.0.24123.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 60.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 60.0.1 (x86 de)) (Version: 60.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.1 - Mozilla)
Mozilla Thunderbird 52.8.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 52.8.0 (x86 de)) (Version: 52.8.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Music Manager (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\MusicManager) (Version: - Google, Inc.)
Music Manager (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\MusicManager) (Version: - Google, Inc.)
Music Manager (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\MusicManager) (Version: - Google, Inc.)
Music Recorder (HKLM-x32\...\{F3949798-3544-433B-B5AB-A61F32F0386F}) (Version: 18.001.2 - Nero AG) Hidden
mydlink services plugin (HKLM-x32\...\{1A9B665A-5F27-4F71-BF90-22FDFE7A1635}) (Version: 1.0.2.7 - D-Link Corporation)
Nero 2018 (HKLM-x32\...\{5637174D-25C6-4815-93CD-AD18561D4E7C}) (Version: 19.0.07300 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 19.0.1003 - Nero AG)
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.1.1 - Vitalwerks Internet Solutions LLC)
oCam Version 430.0 (HKLM-x32\...\oCam_is1) (Version: 430.0 - hxxp://ohsoft.net/)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.9330.2087 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.9330.2087 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.9330.2087 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.9330.2087 - Microsoft Corporation) Hidden
Opera Stable 53.0.2907.68 (HKLM-x32\...\Opera 53.0.2907.68) (Version: 53.0.2907.68 - Opera Software)
paint.net (HKLM\...\{E8FA8815-3817-4128-A814-E2EAC456ADF0}) (Version: 4.0.21 - dotPDN LLC)
PDF24 Creator 8.4.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0010 - Nero AG) Hidden
Prerequisite installer (HKLM-x32\...\{AD240F1A-3102-492E-B657-17969A9D5E9A}) (Version: 19.0.0003 - Nero AG) Hidden
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7450 - Realtek Semiconductor Corp.)
SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital)
SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk)
Tangysoft (HKLM-x32\...\Tangysoft_is1) (Version: - Tangysoft Ltd.)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
UseNeXT by Tangysoft (HKLM-x32\...\UseNeXT by Tangysoft_is1) (Version: - Tangysoft Ltd.)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.5.0.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.1 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0-2) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0-3) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0-2) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{48996CDD-DD81-4197-93FE-0971E73C5CA7}) (Version: 1.3.2.2 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{eab1fb93-61fb-48de-b815-b4e9b68d2ef1}) (Version: 1.3.2.2 - Western Digital Technologies, Inc.)
WhatsApp (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\WhatsApp) (Version: 0.2.9229 - WhatsApp)
WhatsApp (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\WhatsApp) (Version: 0.2.9229 - WhatsApp)
WhatsApp (HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\WhatsApp) (Version: 0.2.9229 - WhatsApp)
WinAVI All-in-One Converter (HKLM-x32\...\WinAVI All-in-One Converter) (Version: 1.7.0.4734 - ZJMedia Digital Technology Ltd.)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Fedderke\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000_Classes\CLSID\{869C14C8-1830-491F-B575-5F9AB40D2B42}\InprocServer32 -> C:\Program Files\MediaInfo\MediaInfo_InfoTip.dll (MediaArea.net)
CustomCLSID: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Fedderke\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Fedderke\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Fedderke\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll (Google Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ContextMenuHandlers1-x32: [DVSShellContextMenu] -> {34CBB076-0260-416C-9FE4-765D66E89C15} => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\DVSShellContextMenuExtension.dll [2013-09-26] (DVDVideoSoft Ltd.)
ContextMenuHandlers1-x32: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers1-x32: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll [2013-08-23] ()
ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2018-05-12] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1-x32: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG)
ContextMenuHandlers1-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers1-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers2-x32: [DVSShellContextMenu] -> {34CBB076-0260-416C-9FE4-765D66E89C15} => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\DVSShellContextMenuExtension.dll [2013-09-26] (DVDVideoSoft Ltd.)
ContextMenuHandlers2-x32: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes)
ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] ()
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ContextMenuHandlers4-x32: [DVSShellContextMenu] -> {34CBB076-0260-416C-9FE4-765D66E89C15} => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\DVSShellContextMenuExtension.dll [2013-09-26] (DVDVideoSoft Ltd.)
ContextMenuHandlers4-x32: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2018-03-22] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.22.0.dll [2018-05-21] (Dropbox, Inc.)
ContextMenuHandlers5-x32: [DVSShellContextMenu] -> {34CBB076-0260-416C-9FE4-765D66E89C15} => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\DVSShellContextMenuExtension.dll [2013-09-26] (DVDVideoSoft Ltd.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6-x32: [DVSShellContextMenu] -> {34CBB076-0260-416C-9FE4-765D66E89C15} => C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\DVSShellContextMenuExtension.dll [2013-09-26] (DVDVideoSoft Ltd.)
ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes)
ContextMenuHandlers6-x32: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll [2013-08-23] ()
ContextMenuHandlers6-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2018-05-12] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6-x32: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] ()
ContextMenuHandlers6-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers6-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {16A31B82-0B1C-47F3-A50E-9676FF188DF6} - System32\Tasks\AdobeGCInvoker-1.0-Fedderke-PC-Fedderke => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-05-11] (Adobe Systems, Incorporated)
Task: {235423AD-914D-4A14-B538-9C027B88D5DB} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2017-08-10] (Nero AG)
Task: {24097D17-0A1B-4591-ABAC-3E691B2A8CF4} - System32\Tasks\AdwCleaner_onReboot => D:\Downloads\adwcleaner_7.1.1.exe [2018-06-04] (Malwarebytes)
Task: {2D54F6A0-86B6-4181-9187-4C7B4FAC4266} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-05-24] (Microsoft Corporation)
Task: {2E114656-B68C-4A61-844E-532D1A7201FD} - System32\Tasks\{6545BA77-E06E-427B-9BC5-3C8D6FDACE11} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.6.0.103/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {3016E430-0159-4379-90F7-4BBA6F50684D} - System32\Tasks\yaafynm => C:\Users\Fedderke\yaafynm\soafw.exe [2016-10-09] (AutoIt Team)
Task: {442FE481-DC1C-4496-A4D6-97408D052F24} - System32\Tasks\Opera scheduled Autoupdate 1393940984 => C:\Program Files (x86)\Opera\launcher.exe [2018-05-23] (Opera Software)
Task: {48989F4F-F7C1-4F22-B3BA-9347A7250685} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2906866106-2643020060-3342964400-1000UA => C:\Users\Fedderke\AppData\Local\Google\Update\GoogleUpdate.exe [2017-10-06] (Google Inc.)
Task: {50B513C1-1B01-4671-B341-7D6A95962421} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {5180BF79-94E6-49C1-AE24-76F829C52BB7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-06-01] (Microsoft Corporation)
Task: {557FE838-1727-495A-B89D-2947E3923BC7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2018-06-01] (Microsoft Corporation)
Task: {773D9948-B448-4E1F-B145-4B36A22E4B52} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-05-10] (Piriform Ltd)
Task: {789F9BCC-9FF5-487F-AC64-FD41A7855E82} - System32\Tasks\Aufgaben der Ereignisanzeige\System_Service Control Manager_7024 => C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
Task: {7AFD7C90-A4C5-4FD6-A64B-F76ED6846B73} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [2018-06-01] (Microsoft Corporation)
Task: {83B812A4-9CD0-4B69-AE26-677D0FEA7CE6} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2018-03-22] (Advanced Micro Devices, Inc.)
Task: {8542276A-0BCA-4117-9998-0F9F1AC60348} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {885779E0-D3A5-4A8A-8A79-BCE5AF9AE530} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\dvrcmd.exe [2018-03-22] (Advanced Micro Devices, Inc.)
Task: {8CE41856-23CF-4D72-BB6C-82BBA4271963} - System32\Tasks\uqnwn => C:\Users\Fedderke\uqnwn\edjgdt.exe [2016-10-09] (AutoIt Team)
Task: {92AC66E1-1CE4-485C-83AD-3E181137A961} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-09] (Dropbox, Inc.)
Task: {9CF8AA3C-A014-4815-9FE3-545539A62314} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\ProgramData\ASUS\AASP\1.02.00\AsLoader.exe [2010-01-13] (ASUSTeK Computer Inc.)
Task: {A64E3618-D3CC-4B53-AAEB-E3D3A3AB3279} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {ACA5BC0F-3FD5-483F-B881-19E7FE5B33F3} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-09] (Dropbox, Inc.)
Task: {AD98BB66-6BE0-4C9A-957B-D9F7AE417BB9} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-06-01] (Microsoft Corporation)
Task: {B0D19989-2D74-43D2-9BC2-79F195C75B8F} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-06-01] (Microsoft Corporation)
Task: {D3C7DB92-D048-4E0B-AF91-5FEF344F9B42} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2906866106-2643020060-3342964400-1000Core => C:\Users\Fedderke\AppData\Local\Google\Update\GoogleUpdate.exe [2017-10-06] (Google Inc.)
Task: {D46FCD92-5D60-4F10-AA0E-B8145332C9F9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-05-10] (Piriform Ltd)
Task: {E15476A5-E7D3-48A1-87FD-C02AEDDCB77C} - System32\Tasks\{A835DED3-0080-40ED-87CE-C758231D8AE5} => C:\Windows\system32\pcalua.exe -a K:\DirectX\dxsetup.exe -d K:\DirectX
Task: {E3A0A2A5-D03C-4FC7-B617-9FECB9B4DFC9} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2018-05-02] ()
Task: {EB450E8E-22B8-41A3-AD39-326A5D56A575} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-05-24] (Microsoft Corporation)
Task: {FCA679CA-A230-47B1-8E07-16EFCE9B5AD2} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2018-05-26] (Avira Operations GmbH & Co. KG)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-11-22 11:32 - 2013-08-23 23:42 - 000559864 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll
2010-07-15 06:44 - 2010-07-15 06:44 - 000020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2018-04-11 12:14 - 2018-03-12 15:09 - 002300192 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2016-10-05 19:17 - 2016-10-05 19:17 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 19:17 - 2016-10-05 19:17 - 001353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Temp:054B9966 [139]
AlternateDataStreams: C:\ProgramData\Temp:3BFCBF1C [366]
AlternateDataStreams: C:\ProgramData\Temp:FB1B13D8 [320]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000343\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000343\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000343\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000343\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006110\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006110\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006110\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006110\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000371\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000371\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000371\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000371\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006144\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006144\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006144\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006144\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\...\sony.com -> sony.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\...\sony.com -> sony.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Fedderke\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172000402\Control Panel\Desktop\\Wallpaper -> C:\Users\Fedderke\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2906866106-2643020060-3342964400-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172006180\Control Panel\Desktop\\Wallpaper -> C:\Users\Fedderke\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2906866106-2643020060-3342964400-1015-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172004811\Control Panel\Desktop\\Wallpaper -> C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2906866106-2643020060-3342964400-1015-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-06042018172013569\Control Panel\Desktop\\Wallpaper -> C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon
MSCONFIG\startupreg: MusicManager => "C:\Users\Fedderke\AppData\Local\Programs\Google\MusicManager\MusicManager.exe"
MSCONFIG\startupreg: Nero BackItUp => "C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\BackItUp.exe" /WinStart
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Windows Mobile-based device management => %WINDIR%\WindowsMobile\wmdcBase.exe
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{F18E6510-AC57-46F0-B3CF-DDDD7A08DC7A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9F879293-D82B-4798-9B96-FD0B7E53C3C4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{60D472FA-4B28-43EB-9025-81B6AAFA8C8C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{CDC946B5-19CD-4667-9BEA-3028A5A4591E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{73130410-7A1B-4E1B-82DE-4B5AA0E49BF1}C:\program files (x86)\filezilla ftp client\filezilla.exe] => (Allow) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [UDP Query User{3DA1EA1F-1325-4EDF-8125-A2802D048F1D}C:\program files (x86)\filezilla ftp client\filezilla.exe] => (Allow) C:\program files (x86)\filezilla ftp client\filezilla.exe
FirewallRules: [{84C5D247-E4FA-4C91-A524-B98ED949AAC2}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{F3A8B100-174A-4147-803F-F9D7D64D294A}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{0B840964-9132-46BD-9AEB-8D8197E5C838}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{65F77707-61A6-42DD-881A-681E59099B11}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EF408A47-DCF6-4484-AA60-5734086833CC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D19536C2-3AD1-4BF8-90B5-61121990F079}] => (Allow) LPort=2869
FirewallRules: [{B9E2E18B-1D19-4874-ADA4-EF0FB5FBB908}] => (Allow) LPort=1900
FirewallRules: [{ECD124AB-8AD0-4218-B054-1FCC63B5840D}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{5B6D1BEE-79FD-4A2E-82CD-5319AD3D3C6A}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{413C2951-D6F4-4C0F-BCED-A6AA5E89B178}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9A7BEFC6-7034-4420-AEC0-B375FA294D38}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{C655E2DF-714E-49F0-9AB3-DB48A35C3EB7}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9C84C3E6-A7C2-4D95-8ED1-C226293494D7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7BB90270-EAE2-4E4A-90BA-1CFB18130112}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{041A15F1-EC7B-406F-B6A7-744D38BCC03B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1AA09517-9119-4871-B1F5-264154E1C5A8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DD26CFBD-340D-4E25-A362-2DBF8E316E02}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{DC871B41-BDBA-499C-B9E7-13B64243EDC0}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{B0218C1F-E380-4348-A9A2-2BE3867CE896}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{5CA00F68-91A3-4D30-B5B8-87345B890FFE}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{832A2B33-2A93-4FD7-80A3-8F00BCB55D16}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{E7F48517-5BE2-4167-B989-76646DE93438}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{49350399-8949-41EE-B1B2-206728CBA4DF}] => (Allow) C:\Program Files\SABnzbd\SABnzbd.exe
FirewallRules: [{F5C841FF-3408-4601-940F-D833D96C4CFB}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{4C6C4728-9C5C-4223-898F-D3865A95195B}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{CB1E1063-51CB-44D1-AFF6-69FE43908D5E}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{92F48165-8737-483D-88B5-CAC3C5B70BC8}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{E4B8D577-1F3D-413C-8439-E8C25D867D4F}] => (Allow) LPort=1688
FirewallRules: [{93E186ED-7F0C-43AA-85C6-97DE9C05B372}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{5637FE0A-1919-45BA-8B42-9C404BE2649A}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{F864D260-F2FD-4F55-AAC5-FC4CBA0694C3}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe
FirewallRules: [{34A7F426-B1F8-4CD5-A224-76C5B327B741}] => (Allow) C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{D69E3424-360A-47B1-ABFB-936B8BC1460D}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{B7D6A877-9D5B-4FA8-A256-048A64D05FFD}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{FC985105-EC0F-409C-9EEC-AA326C82A6BC}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{A0DEC61E-FB4C-47B8-8EC2-49D1B565934C}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{67B07B84-B2A6-426D-8FAB-886160263E3A}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{96EEEE91-AEA7-4DAF-9F13-D6BB7CD1198A}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{3485842D-7F06-4896-A1D9-01C2904BADE1}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Package\PTInstOnline.exe
FirewallRules: [{FA8B0B95-E3BC-4852-AC00-7EE81F94D577}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C3ABEE60-1632-42BC-B5D0-308B30440DBE}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{C9D98450-5E1D-44B8-A1C3-59CDDF30892A}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2374459F-B397-4DB4-AAE7-CA346AC913DF}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B04DDD3B-F61B-4FA8-9D2C-0BA642BDA604}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{CE025F01-E223-4E73-A186-4FBEA05E5143}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{2E35E545-E6E3-43EF-8E4C-EAFD7DB7891B}] => (Allow) C:\Users\Fedderke\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E7607D75-BEF3-42DB-9D39-471FD4A7718B}] => (Allow) C:\Program Files (x86)\Nero\Nero 2018\Nero Burning ROM\StartNBR.exe
FirewallRules: [{865AF754-4FB4-4376-B9D8-13A309A85C4B}] => (Allow) C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\NBService.exe
FirewallRules: [{B8D1EA14-B5A7-4126-A6E0-3FB9EE396791}] => (Allow) C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\BackItUp.exe
FirewallRules: [{09DBFDB0-DB1F-4656-A375-A8E669643066}] => (Allow) C:\Program Files (x86)\Nero\Nero 2018\Nero MediaHome\NMDllHost.exe
FirewallRules: [{A2F6C4F0-FD90-4226-9654-B802C1F115A7}] => (Allow) C:\Program Files (x86)\Nero\Nero 2018\Nero MediaHome\MediaHome.exe
FirewallRules: [{E036B247-8B81-460B-948D-958514CAF37F}] => (Allow) C:\Program Files (x86)\Nero\Nero 2018\Nero Burning ROM\nero.exe
FirewallRules: [{91AA3295-F148-4584-9BB1-F0D0D6AEF29B}] => (Allow) C:\Program Files\SABnzbd\SABnzbd.exe
FirewallRules: [{8FBD0D1B-5015-4062-8FFF-58A60BE0C8E3}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{0E513EA9-FEDE-4B16-A78A-BC45942A87B9}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{FCF53163-A943-456F-9171-25FCFD1ED97E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{CCC3DCBC-F0C3-4865-B9E3-4A81FC1B0B32}] => (Allow) C:\Program Files (x86)\Opera\52.0.2871.99\opera.exe
FirewallRules: [{D2516904-5CF7-4721-9987-BDB3BCDA38D0}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{9C9FEFC5-76D2-4681-9C29-8397D06EE87F}] => (Allow) C:\Program Files (x86)\Opera\53.0.2907.68\opera.exe
FirewallRules: [TCP Query User{01F42141-6645-40FC-AA77-44846CC74DDD}C:\program files\amd\cnext\cnext\radeonsettings.exe] => (Block) C:\program files\amd\cnext\cnext\radeonsettings.exe
FirewallRules: [UDP Query User{4C6FAD31-4833-4128-AE05-3278E26F1D46}C:\program files\amd\cnext\cnext\radeonsettings.exe] => (Block) C:\program files\amd\cnext\cnext\radeonsettings.exe
==================== Wiederherstellungspunkte =========================
02-06-2018 15:00:25 Windows-Sicherung
03-06-2018 17:46:10 Removed Skype™ 7.3
04-06-2018 07:33:43 Removed Adobe Acrobat Reader DC.
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: AODDriver4.2.0
Description: AODDriver4.2.0
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AODDriver4.2.0
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: AppEx Networks Accelerator LWF
Description: AppEx Networks Accelerator LWF
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: APXACC
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (06/04/2018 05:05:49 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile 1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (06/04/2018 05:05:49 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile 1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (06/04/2018 05:05:32 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 6988. Meldungs-ID: [0x2509].
Error: (06/04/2018 04:35:32 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 5116. Meldungs-ID: [0x2509].
Error: (06/04/2018 04:20:33 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 3848. Meldungs-ID: [0x2509].
Error: (06/04/2018 10:55:34 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 6020. Meldungs-ID: [0x2509].
Error: (06/04/2018 10:50:32 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 6984. Meldungs-ID: [0x2509].
Error: (06/04/2018 10:40:34 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 988. Meldungs-ID: [0x2509].
Systemfehler:
=============
Error: (06/04/2018 05:16:57 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: NT-AUTORITÄT)
Description: Fehler beim Lesen der Datei für lokale Hosts.
Error: (06/04/2018 04:34:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "CyberGhost 6 Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/04/2018 04:34:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero BackItUp Background Service 2018" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/04/2018 04:34:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Microsoft Office-Klick-und-Los-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/04/2018 04:34:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/04/2018 04:34:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/04/2018 04:34:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "WD Drive Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/04/2018 04:34:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Windows Defender:
===================================
Date: 2013-08-14 07:58:46.158
Description:
Beim Laden der Signaturen wurde von Windows Defender ein Fehler festgestellt. Es wird versucht, einen als gültig bekannten Signatursatz wiederherzustellen.
Versuchte Signaturen:Aktuell
Fehlercode:0x80070002
Fehlerbeschreibung:Das System kann die angegebene Datei nicht finden.
Signaturversion:0.0.0.0
Modulversion:0.0.0.0
CodeIntegrity:
===================================
Date: 2014-02-19 00:29:50.454
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 00:29:50.347
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 00:29:50.191
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 00:29:50.029
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 00:29:49.885
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 00:29:49.773
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 00:29:49.667
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-02-19 00:29:49.482
Description:
Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Speicherinformationen ===========================
Prozessor: AMD FX(tm)-8350 Eight-Core Processor
Prozentuale Nutzung des RAM: 20%
Installierter physikalischer RAM: 16366.12 MB
Verfügbarer physikalischer RAM: 13005.85 MB
Summe virtueller Speicher: 32730.4 MB
Verfügbarer virtueller Speicher: 28678.43 MB
==================== Laufwerke ================================
Drive c: (System) (Fixed) (Total:111.69 GB) (Free:33.58 GB) NTFS
Drive d: (Volume) (Fixed) (Total:702.43 GB) (Free:646.52 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: (Volume) (Fixed) (Total:694.83 GB) (Free:493.32 GB) NTFS
Drive i: (Volume) (Fixed) (Total:2048 GB) (Free:1202.45 GB) NTFS
Drive j: (Filme) (Fixed) (Total:1397.2 GB) (Free:566.74 GB) NTFS
Drive n: (Musik) (Fixed) (Total:1397.2 GB) (Free:148.18 GB) NTFS
Drive x: () (Network) (Total:1831.82 GB) (Free:385.96 GB)
Drive y: () (Network) (Total:1831.82 GB) (Free:332.99 GB)
\\?\Volume{c95b09f0-abb1-11e2-a778-806e6f6e6963}\ (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Protective MBR) (Size: 2794.5 GB) (Disk ID: 00000000)
Partition: GPT.
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 7686479A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1397.3 GB) (Disk ID: 984551F0)
Partition 1: (Active) - (Size=702.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=694.8 GB) - (Type=0F Extended)
========================================================
Disk: 3 (MBR Code: Windows 7/8/10) (Size: 2328.8 GB) (Disk ID: 695CE2A1)
Partition 1: (Not Active) - (Size=2048 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
--- --- --- Code:
Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 04.06.18
Scan-Zeit: 17:19
Protokolldatei: b5483233-680a-11e8-8134-e03f4915d4a3.json
Administrator: Ja
-Softwaredaten-
Version: 3.4.5.2467
Komponentenversion: 1.0.342
Version des Aktualisierungspakets: 1.0.5356
Lizenz: Kostenlos
-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Fedderke-PC\Fedderke
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 309793
Erkannte Bedrohungen: 13
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 2 Min., 51 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 1
Backdoor.DarkComet.Trace, HKU\S-1-5-21-2906866106-2643020060-3342964400-1000\SOFTWARE\DC3_FEXEC, Keine Aktion durch Benutzer, [6916], [246706],1.0.5356
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 4
Trojan.StolenData, C:\USERS\FEDDERKE\APPDATA\ROAMING\DCLOGS, Keine Aktion durch Benutzer, [3630], [250094],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\Logs\Fedderke, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\Logs, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\USERS\FEDDERKE\APPDATA\ROAMING\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Datei: 8
Trojan.StolenData, C:\USERS\FEDDERKE\APPDATA\ROAMING\DCLOGS\2018-06-04-2.dc, Keine Aktion durch Benutzer, [3630], [250094],1.0.5356
Trojan.Agent.Generic, C:\USERS\FEDDERKE\APPDATA\ROAMING\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\run.dat, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\Logs\Fedderke\KB_1172628.dat, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\Logs\Fedderke\KB_274156.dat, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\Logs\Fedderke\KB_2972489.dat, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\catalog.dat, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\settings.bin, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Trojan.Agent.Generic, C:\Users\Fedderke\AppData\Roaming\A39CCF44-05A9-4343-AFBA-7ADA8B1B1E9D\storage.dat, Keine Aktion durch Benutzer, [3736], [517492],1.0.5356
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
(end)
|
Lesestoff: